40917 matches found
CVE-2026-11581
The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.13 does not sanitise a form field's caption before outputting it as a column header on the administrator form-entries screen, allowing users with Contributor-level access or above to store JavaScript that executes i...
CVE-2026-12560
The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
EUVD-2026-40261
The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.13 does not sanitise a form field's caption before outputting it as a column header on the administrator form-entries screen, allowing users with Contributor-level access or above to store JavaScript that executes i...
CVE-2026-57632
creationtimestamp| type| source ---|---|--- 2026-06-30 05:17:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpiartr3yp2j...
EUVD-2026-40251
The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2026-43705
creationtimestamp| type| source ---|---|--- 2026-06-30 04:15:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpi5e4uext26 2026-07-01 02:51:30+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:59+00:00| seen|...
CVE-2026-43731
creationtimestamp| type| source ---|---|--- 2026-06-30 04:10:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpi536glcj26 2026-07-01 02:50:21+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:01:00+00:00| seen|...
CVE-2026-58302
creationtimestamp| type| source ---|---|--- 2026-06-30 02:29:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphxgqfnwi2t 2026-06-30 04:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpi5n3bh7l2o...
Linux Distros Unpatched Vulnerability : CVE-2026-55962
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and...
PostgresSQL JDBC -- Silent channel-binding authentication downgrade via unsupported certificate algorithms
PostgreSQL project reports: channelBinding=require connections can be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256 without it, losing the man-in-the-middle protection the setting is meant to guarantee. An attacker who can intercept the TLS connection...
PT-2026-53811
Name of the Vulnerable Software and Affected Versions Editorial Rating – Product Review & Rating System versions prior to 4.0.6 Description Insufficient input sanitization and output escaping allow authenticated attackers with administrator-level access and above to perform Stored Cross-Site...
CVE-2026-56968
creationtimestamp| type| source ---|---|--- 2026-06-29 23:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphonpawcs27...
CVE-2026-28979
creationtimestamp| type| source ---|---|--- 2026-06-29 23:42:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpho2tuau22d 2026-07-01 02:51:04+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:01:00+00:00| seen|...
CVE-2026-57997
creationtimestamp| type| source ---|---|--- 2026-06-29 23:18:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphmqr4juz24 2026-06-29 23:44:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpho6vbvig2n 2026-06-30 14:43:34+00:00| seen|...
CVE-2025-13502
creationtimestamp| type| source ---|---|--- 2026-06-29 23:10:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphmd5325c2q...
CVE-2026-43746
creationtimestamp| type| source ---|---|--- 2026-06-29 22:36:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkfgu6mp2k 2026-06-29 23:26:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116835979854649291 2026-07-01 02:50:40+00:00| seen|...
CVE-2026-54888
creationtimestamp| type| source ---|---|--- 2026-06-29 22:33:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphka2ti2e27 2026-06-29 23:30:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphnfwlsoh2d...
CVE-2026-43735
creationtimestamp| type| source ---|---|--- 2026-06-29 22:25:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphjsgcsdp2y 2026-07-01 02:50:28+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:01:00+00:00| seen|...
CVE-2026-56018
creationtimestamp| type| source ---|---|--- 2026-06-29 21:56:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphi5jylkh2j 2026-06-29 23:57:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphovl2mtc23...