295296 matches found
PT-2026-133972
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-118684
Name of the Vulnerable Software and Affected Versions Issuu Panel plugin for WordPress versions prior to 1.6.6 Description An unauthenticated attacker can include remote or local files through the abspath parameter. This is achieved by sending GET requests to the...
PT-2026-134352
TuxCare rebuilt @babel/plugin-transform-async-generator-functions to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-133874
TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
PT-2026-133915
TuxCare rebuilt @babel/plugin-transform-modules-commonjs to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-118673
Name of the Vulnerable Software and Affected Versions K-news plugin for WordPress versions prior to 1.1.1 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject scripts by providing unsanitized input. Attackers can send GET requests to the endpoint...
PT-2026-133409
TuxCare rebuilt @babel/plugin-transform-optional-chaining to address 2 CVEs. Fixed in 7.24.5-tuxcare.1...
PT-2026-133934
TuxCare rebuilt @babel/plugin-proposal-async-generator-functions to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
PT-2026-133880
TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.23.9-tuxcare.3...
OpenShift KMS Plugin for Key Vault server request forgery vulnerability
Version 3 of the OpenShift KMS Plugin for Key Vault contains a server-side request forgery vulnerability. This vulnerability arises because the Kroxylicious Azure Key Vault KMS provider fails to validate the format of vaultName values extracted from network-reassembled EDEK bytes. As a result,...
PT-2026-133974
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133325
TuxCare rebuilt @babel/plugin-transform-computed-properties to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
CVE-2016-20101: Improper Control of Filename for Include/Require Statement in PHP Program
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value...
PT-2026-120006
Vulnerability in Oracle Java SE component: Java plugin. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Whi...
PT-2026-133857
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133884
TuxCare rebuilt @babel/helper-create-class-features-plugin to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-133909
TuxCare rebuilt @babel/plugin-transform-modules-commonjs to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-134062
TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.21.0-tuxcare.4...