16984 matches found
EUVD-2026-64792
Unauthenticated Broken Access Control in Notification Master Real-Time WordPress Notifications With Email, SMS, Webhooks & More = 1.7.1 versions...
Astra Linux – Vulnerability in Linux 5.10
Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches that may include a vulnerability involving NULL pointer dereferencing in the handling of AppArmor notifications. This bug can be triggered by an unprivileged local user, and it can lead to a kernel oops...
Astra Linux – Vulnerability in Chromium
Before version 90.0.4430.212, using “after free” in notifications in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Linux 5.10
Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches that include a memory leak issue in the handling of large responses to AppArmor notifications. This bug can be triggered by a non-privileged local user. The memory leak could lead to resource exhaustion...
Astra Linux – Vulnerability in Linux 5.10
Ubuntu Linux 6.8 contains SAUCE patches that include a potential NULL pointer dereferencing issue in the handling of AppArmor notifications. This bug can be triggered by an unprivileged local user, and it can lead to a kernel panic...
Astra Linux – Vulnerability in Xen
Inappropriate x86 IOMMU timeout detection/handling: IOMMU processes commands that are issued in parallel with the operation of the CPUs that issue those commands. In the current implementation in Xen, asynchronous notifications of the completion of such commands are not used. Instead, the issuing...
CVE-2026-35163 OctoPrint: XSS in Suppressed Command Notifications
OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popups use PNotify rendering for printer-controlled payload.command and payload.message values in src/octoprint/static/js/app/viewmodels/terminal.js without HTML...
CVE-2026-77264
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...
PT-2026-79312
Name of the Vulnerable Software and Affected Versions Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress versions prior to 4.8.7 Description An authentication bypass exists because the handle email otp return function returns a secret magic...
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
A now-patched security flaw impacting Zimbra Collaboration ZCS has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team CERT Polska. The vulnerability in question is CVE-2026-73570 CVSS score: 8.9, which refers to a case of command injection that ca...
CVE-2026-76347
Splunk Secure Gateway's Report Notifications REST API fails to validate notification path values before sending system-authenticated internal requests, allowing non-admin users to trigger SSRF, alter Search Head Cluster state, and cause denial of service. Affected versions: Splunk Enterprise belo...
PT-2026-78774
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Splunk Secure Gateway versions prior to 3.10.9 Splunk Secure Gateway...
VulnCheck KEV: CVE-2026-73570
A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...
CVE-2026-74356 vhost: fix vhost_get_avail_idx for a non empty ring
In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhostgetavailidx for a non empty ring vhostgetavailidx is supposed to report whether it has updated vq-availidx. Instead, it returns whether all entries have been consumed, which is usually the same. But not always - i...
CVE-2026-74356 vhost: fix vhost_get_avail_idx for a non empty ring
In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhostgetavailidx for a non empty ring vhostgetavailidx is supposed to report whether it has updated vq-availidx. Instead, it returns whether all entries have been consumed, which is usually the same. But not always - i...
PT-2026-72792
In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhost get avail idx for a non empty ring vhost get avail idx is supposed to report whether it has updated vq-avail idx. Instead, it returns whether all entries have been consumed, which is usually the same. But not...
CVE-2026-66424
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...
CVE-2026-66424 WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...