988993 matches found
CVE-2026-39600
The Mehul Gohil Aculect AI Companion WordPress plugin (versions
armadito-av
Armadito コア Armadito はオープンソースのアンチウイルスです。 このリポジトリには、Armadito コアライブラリ、デーモン、サービスが含まれています。 Copyright C Teclib', 2015, 2016 プロジェクトホーム : http://www.teclib-edition.com/teclib-products/armadito-antivirus オンラインドキュメントはこちら : http://armadito-av.readthedocs.io/en/latest/ ライセンス : LGPLv3...
CVE-2026-104446 YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler
YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...
CVE-2026-104446 YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler
YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...
CVE-2026-104446 YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler
YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...
CVE-2026-68770 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-JHR6-GM9C-RQJV vulnerabilities
Vulnerabilities for packages: open-webui...
[SECURITY] [DLA 4813-1] open-iscsi security update
Debian LTS Advisory DLA-4813-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 02, 2026 https://wiki.debian.org/LTS Package : open-iscsi Version : 2.1.8-1+deb12u1 CVE ID : CVE-2026-18724 CVE-2026-18725 CVE-2026-18726 CVE-2026-18727 CVE-2026-18728...
CVE-2026-97318
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...
CVE-2026-97318 Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...
CVE-2026-97318 Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...
WordPress Giveaways and Contests by RafflePress plugin < 1.12.27 - Unauthenticated Stored Open Redirect vulnerability
Unauthenticated Stored Open Redirect vulnerability discovered by Dick Snel in WordPress Plugin Giveaways and Contests by RafflePress versions 1.12.27...
EUVD-2026-91197
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...
PT-2026-104352
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-companion allows Phishing.This issue affects Aculect AI Companion: from n/a through 0.8.1...
PT-2026-104094
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...
Debian dla-4813 : iscsiuio - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4813 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4813-1 [email protected]...
The vulnerability of the Open() function in the modules/uri/uri.go file of the Git repository management system Gitea, which allows a hacker to disclose protected information
The vulnerability of the Open function in the modules/uri/uri.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...
CVE-2026-104002
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...
CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...
CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...