29255 matches found
CLEANSTART-2026-UC24162 Security fixes for CVE-2026-42504 applied in versions: 2.17.0-r3
Security vulnerability affects the kube-state-metrics package. This issue is resolved in later releases. See references for vulnerability details...
Malicious Package
Overview @gt-test-exp/profiler-exp-00000004 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
CVE-2026-12397 WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR
The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level self-registerable account to read other employers' private account email addresses by enumerating job...
CVE-2026-12274 Tutor LMS < 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDOR
The Tutor LMS WordPress plugin before 3.9.13 does not verify that the requesting user is allowed to edit a target post before overwriting it in one of its content-builder save handlers, authorizing the request only against an unrelated identifier, allowing authenticated users with instructor-leve...
CVE-2026-12274
The Tutor LMS WordPress plugin, in versions prior to 3.9.13 , is vulnerable to an Insecure Direct Object Reference (IDOR) . The flaw exists because one of its content-builder save handlers fails to verify if a requesting user has permission to edit a target post before overwriting it. Instead, th...
CVE-2026-12271
The Tutor LMS WordPress plugin, in versions prior to 3.9.13 , is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The application fails to verify ownership of targeted quiz attempts before performing write operations. This allows authenticated users with subscriber-level access or h...
MINI-942G-8V78-8H95
Bulletin has no description...
MINI-PPH2-V5HC-CQX8
Bulletin has no description...
MINI-36F3-HR43-VRXQ
Bulletin has no description...
MINI-53JX-P9PJ-2M68
Bulletin has no description...
MINI-V33V-384C-VPXC
Bulletin has no description...
MINI-CMRP-G767-QRGH
Bulletin has no description...
MINI-WFCW-5XCW-XH5W
Bulletin has no description...
MINI-GQQQ-5483-952X
Bulletin has no description...
MINI-7CPR-4RRJ-XG8J
Bulletin has no description...
MINI-HM6R-5353-X3F2
Bulletin has no description...
MINI-X7C3-9J46-8V68
Bulletin has no description...
MINI-XGFM-74CH-HQR7
Bulletin has no description...