24120 matches found
MINI-R58Q-675C-FHG9
Bulletin has no description...
MINI-Q3MM-J367-6J2C
Bulletin has no description...
MINI-P8RH-5XX7-X2PJ
Bulletin has no description...
EUVD-2026-42847
The FlowForms – Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.1 via the updateform due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
CVE-2026-12400 FlowForms <= 1.1.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Form Modification via REST API '/flowforms/v1/forms/{id}' Endpoints
The FlowForms – Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.1 via the updateform due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
CVE-2026-12400
FlowForms (WordPress plugin)
SUSE CVE-2026-59928
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct reference-link definitions causes quadratic work in src/mistune/blockparser.py and the reflinks environment dictionary handling, allowing denial of service...
MINI-GMWG-F3Q4-H362
Bulletin has no description...
Langflow < 1.9.1 Multiple Vulnerabilities
The version of Langflow installed on the remote host is prior to 1.9.1. It is, therefore, affected by multiple vulnerabilities: - An Insecure Direct Object Reference IDOR vulnerability in the /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another user...
PT-2026-57321
Name of the Vulnerable Software and Affected Versions h2o versions prior to commit edd7a120bfc4af11ac0cbebce2a43cc1f93f9af1 Description When processing a QPACK instruction sent from a peer over HTTP/3, the server may allocate an on-stack buffer of approximately 800 KB using the alloca function in...
MINI-RC4P-PX27-2QWR
Bulletin has no description...
Security Bulletin: Multiple vulnerabilities in IBM Software Support App
Summary Multiple vulnerabilities were addressed in IBM Software Support App Version 4.1.1 Vulnerability Details CVEID:CVE-2026-53550 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml...
MINI-552R-9VRX-525M
Bulletin has no description...
MINI-PPRQ-WV74-X92R
Bulletin has no description...
MINI-Q59C-MVH6-5F2F
Bulletin has no description...
MINI-Q2G6-Q2PV-WP8F
Bulletin has no description...
MINI-HX23-4R29-4HCQ
Bulletin has no description...
MINI-XJF2-PJ45-28V2
Bulletin has no description...