167 matches found
Dify User Enumeration via Observable Response Discrepancy
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue. id: CVE-2026-28288 info: name: Dify User Enumeratio...
ROOT-OS-UBUNTU-2404-CVE-2025-71192 CVE-2025-71192 in linux - Patched by Root
Root has patched CVE-2025-71192 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
CVE-2026-65578
Unauthenticated PHP Object Injection in Agora = 1.9 versions...
CLSA-2026-1785030424 TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2...
CLSA-2025-1754352705 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.9.post1+tuxcare...
CLEANSTART-2026-PX32512 Security fixes in tekton-pipelines 1.9.2-r0
Package tekton-pipelines version 1.9.2-r0 fixes 10 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186, ghsa-mh2q-q3fh-2475, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...
CLEANSTART-2026-AM31926 Security fixes in cassandra 4.1.9-r0
Package cassandra version 4.1.9-r0 fixes 2 vulnerabilities: CVE-2025-23015, CVE-2024-27137...
[SECURITY] Fedora 44 Update: libgit2-1.9.6-1.fc44
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
CVE-2026-47670 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection
DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...
CVE-2026-65481
Contributor Local File Inclusion in Vino = 1.9 versions...
EUVD-2026-48092
Contributor Local File Inclusion in Vino = 1.9 versions...
WordPress Vino theme <= 1.9 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Vino versions = 1.9...
CVE-2026-58229
Allocation of resources without limits vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cause a denial of service. The Mint.HTTP1.decodeheaders/5 and Mint.HTTP1.decodetrailerheaders/4 functions in lib/mint/http1.ex accumulate every parsed...
CVE-2026-56026 WordPress utm.codes plugin <= 1.9.0 - Server Side Request Forgery (SSRF) vulnerability
Subscriber Server Side Request Forgery SSRF in utm.codes = 1.9.0 versions...
PT-2026-52768
Name of the Vulnerable Software and Affected Versions Subscriptions for WooCommerce versions prior to 1.9.6 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. Recommendations Update to a version newer than 1.9.5...
PT-2026-52805
Contributor Insecure Direct Object References IDOR in PPWP = 1.9.19 versions...
PT-2026-51074
Name of the Vulnerable Software and Affected Versions CoreWCF versions prior to 1.8.1 CoreWCF versions prior to 1.9.1 Description The NetNamedPipe transport in CoreWCF allows local interception of traffic. This occurs because the transport accepts attachments to pre-existing named pipe instances...
CVE-2025-60230
The CVE-2025-60230 entry details a PHP Object Injection in WordPress The Barber Shop theme (Themeton)
