245 matches found
SUSE SLES15 : Recommended update for initial livepatch (SUSE-SU-2026:4120-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4120-1 advisory. This update provides the initial livepatch for this kernel update. This update does not contain any fixes and will be updated with livepatches later...
SUSE SLES15 : Recommended update for initial livepatch (SUSE-SU-2026:3810-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3810-1 advisory. This update provides the initial livepatch for this kernel update. This update does not contain any fixes and will be updated with livepatches later...
`rustybuzz` is unmaintained
The current maintainer of rustybuzz has stated that the crate is unmaintained and will not receive further fixes or updates see the referenced issue. Alternatives - harfrust, an actively maintained and updated alternative which is part of the Harfbuzz project...
PT-2026-56950
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Brook brook allows PHP Local File Inclusion.This issue affects Brook: from n/a through = 2.9.0...
PT-2026-56949
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Billey billey allows PHP Local File Inclusion.This issue affects Billey: from n/a through = 2.1.8...
PT-2026-56945
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in merkulove Speaker speaker allows Stored XSS.This issue affects Speaker: from n/a through = 4.1.13...
CVE-2026-11475 Kushan2k student-management-system Certificate Verification Endpoint GradeController.php getStatus sql injection
A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of the file controllers/GradeController.php of the component Certificate Verification Endpoint. Executing a manipulation of...
PT-2026-46357
Unauthenticated Local File Inclusion in Quirky = 1.23 versions...
PT-2026-46355
Unauthenticated Local File Inclusion in Dom = 1.24 versions...
PT-2026-46344
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3...
PT-2026-46359
Unauthenticated Local File Inclusion in Medeus = 1.14 versions...
PT-2026-46332
Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme = 1.2.2 versions...
PT-2026-46366
Unauthenticated Local File Inclusion in Grecko = 5.17 versions...
PT-2026-46378
Unauthenticated Local File Inclusion in Line Agency = 1.3.1 versions...
PT-2026-46350
Unauthenticated Local File Inclusion in Kelly Young = 1.1.0 versions...
PT-2026-46373
Unauthenticated Local File Inclusion in Eventicity = 1.5 versions...
PT-2026-46339
Unauthenticated Local File Inclusion in Snow Club = 1.1 versions...
PT-2026-46362
Unauthenticated Local File Inclusion in Granola = 1.13 versions...
PT-2026-46326
Name of the Vulnerable Software and Affected Versions Raider Spirit versions prior to 1.1.3 Description An unauthenticated Local File Inclusion LFI exists, which allows an attacker to include and read local files on the server without requiring authentication. Recommendations Update to a version...