22819 matches found
EUVD-2026-4116
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tagDiv tagDiv Composer td-composer allows DOM-Based XSS.This issue affects tagDiv Composer: from n/a through = 5.4.2...
EUVD-2026-4090
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Amuli amuli allows PHP Local File Inclusion.This issue affects Amuli: from n/a through = 2.3.0...
EUVD-2026-4143
SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...
EUVD-2026-4158
Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers.This issue affects Teknoera: through 01102025...
RHSA-2026:0935
creationtimestamp| type| source ---|---|--- 2026-01-22 08:58:18+00:00| seen| https://gist.github.com/Darkcrai86/c86d37dd69863dff2516741f9c8f1210...
EUVD-2026-4171
pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-user name pattern, which allows local users to cause a denial of service or possibly gain privileges...
CVE-2026-23526
creationtimestamp| type| source ---|---|--- 2026-01-22 01:12:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxyy5gbk52t...
WordPress plugin: Registration & Login using mobile phone number for WooCommerce – security vulnerabilities
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...
PT-2026-4625
CVE-2024-45743 - Apache HTTP Server Cross-Site Scripting CVE ID : CVE-2024-45743 Published : Jan. 22, 2026, 10:16 a.m. | 50 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. Severity: 0.0 | NA Visit the link for more details, such as CVSS...
Azure Linux 3.0 Security Update: kernel (CVE-2024-58007)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58007 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: socinfo: Avoid out of bounds...
PT-2026-4626
CVE-2024-53248 - Apache Struts Command Injection CVE ID : CVE-2024-53248 Published : Jan. 22, 2026, 10:16 a.m. | 50 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. Severity: 0.0 | NA Visit the link for more details, such as CVSS details,...
PT-2026-4630
CVE-2024-53252 - Apache HTTP Server Remote Code Execution CVE ID : CVE-2024-53252 Published : Jan. 22, 2026, 10:16 a.m. | 50 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. Severity: 0.0 | NA Visit the link for more details, such as CVSS...
Azure Linux 3.0 Security Update: kernel (CVE-2025-22038)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22038 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero numsubauth before...
CVE-2025-41024
Stored Cross-Site Scripting XSS in Poultry Farm Management System v1.0 due to the lack of proper validation of user input by sending a POST request. The relationship between parameters and assigned identifiers is as follows: 'companyaddress', 'companyemail', 'companyname', 'country', 'mobilenumbe...
RHSA-2026:0924
creationtimestamp| type| source ---|---|--- 2026-01-21 12:18:18+00:00| seen| https://gist.github.com/Darkcrai86/72a1ea510779574affd676079a7cc6ee...
RHSA-2026:0908
creationtimestamp| type| source ---|---|--- 2026-01-21 10:51:10+00:00| seen| https://gist.github.com/Darkcrai86/bd1bd474c2a7bee86ae9d2588651e7b3...
RHSA-2026:0906
creationtimestamp| type| source ---|---|--- 2026-01-21 07:53:18+00:00| seen| https://gist.github.com/Darkcrai86/d22625358278aa9543ecc488050096ec...
RHSA-2026:0905
creationtimestamp| type| source ---|---|--- 2026-01-21 07:52:54+00:00| seen| https://gist.github.com/Darkcrai86/255298d5dcfb1953fdea37366b890c55...
Konica Bizhub Multifunction Printers Insertion of Sensitive Information into Externally-Accessible File or Directory (CVE-2024-51977)
An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...
