74 matches found
WordPress MLS Import plugin < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_item vulnerability
Subscriber+ Sensitive Information Disclosure via mlsimportloggerperitem vulnerability discovered by Shikhali Jamalzade in WordPress Plugin MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings versions 7.0.4...
CVE-2026-12852
A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this by providing a specially crafted message to the MLS wire decoder. The decoder allocates an attacker-declared opaque length without first performing a bounds check. This can lead to excessive memory allocation,...
CVE-2026-17515 MLS Import < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_item
The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before 7.0.4 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read the contents of the MLSImport: IDX Plugin & MLS Plugin for Real Esta...
CVE-2026-17515
The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before 7.0.4 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read the contents of the MLSImport: IDX Plugin & MLS Plugin for Real Esta...
CVE-2026-17515 MLS Import < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_item
The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before 7.0.4 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read the contents of the MLSImport: IDX Plugin & MLS Plugin for Real Esta...
CVE-2026-17515: Exposure of Sensitive Information to an Unauthorized Actor
The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before 7.0.4 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read the contents of the MLSImport: IDX Plugin & MLS Plugin for Real Esta...
CVE-2026-12852
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...
CVE-2026-12852
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...
UBUNTU-CVE-2026-12852
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...
CVE-2026-12852 MLS wire decoder allocates attacker-declared opaque length before bounds check
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...
CVE-2026-12852
CVE-2026-12852 affects Bouncy Castle for Java prior to 1.85, where the MLS wire decoder allocates an attacker-declared opaque length before performing bounds checks. This is a vulnerability in the decoder component that could impact availability (per CVSS 4.0: AV:N/AC:L/AT:N/PR:N/UI:N/VI:N/SC:N/S...
CVE-2026-12852
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...
DEBIAN-CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
UBUNTU-CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
CVE-2026-59644 affects Bouncy Castle for Java up to version 1.84, where the MLS hash-ratchet may honor an arbitrary 32-bit generation counter from the sender. This can impact availability (per CVSS: HIGH) with no confidentiality or integrity impact reported, and no exploitation details are provid...
CVE-2026-12852: Memory Allocation with Excessive Size Value
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...
