51764 matches found
CVE-2026-65503 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-65463
CVE-2026-65463 affects the WordPress Masteriyo LMS plugin, versioned up to 2.3.1, with an Insecure Direct Object References (IDOR) vulnerability in Subscriber scope. The entry provides a CVSS 3.1 base score of 5.4 (Medium) with network attack vector, low attack complexity, and requires low privil...
CVE-2026-59514
The CVE-2026-59514 entry concerns the WordPress Buddyboss Platform plugin, affected versions
EUVD-2026-48187
Unauthenticated SQL Injection in Buddyboss Platform = 3.0.5 versions...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in extensions in Google Chrome on Linux prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome extension. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in Dawn in Google Chrome on macOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in the WebUI of Google Chrome on Linux, Mac, Windows, and ChromeOS prior to version 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted inputs in the WebUI of Google Chrome before version 150.0.7871.47 allowed a remote attacker to leak cross-origin data through malicious network traffic. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
In Google Chrome on Linux, before version 148.0.7778.168, unauthorized access was possible when reading data from the GPU. A remote attacker who had compromised the renderer process could leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Fenced Frames in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...
RHSA-2026:42079 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
Bulletin has no description...
RHSA-2026:42080 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
Bulletin has no description...
RHSA-2026:42078 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Bulletin has no description...
GHSA-9WJQ-CP2P-HRGF vulnerabilities
Vulnerabilities for packages: pghero, ruby3.2-rails, pghero-fips, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails...
GHSA-8WHX-365G-H9VV vulnerabilities
Vulnerabilities for packages: pghero, ruby3.2-rails, pghero-fips, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails...
GHSA-XVCM-6775-5M9R vulnerabilities
Vulnerabilities for packages: arangodb, nextcloud-server, vitess, keep-fips, keep, rancher-api-ui, authentik, authentik-fips...
GHSA-HM4W-WWCW-MR6R vulnerabilities
Vulnerabilities for packages: azureml-inference-server-http-fips, gitlab-cng, lmcache-cuda-12.8, kubeflow-jupyter-web-app, apache-beam-python-3.12-sdk, request-1276, mlflow, kubeflow-pipelines-visualization-server, openstack-keystone-2025.2-fips, superset-fips, datahub-ingestion-fips, authentik,...