8193 matches found
CVE-2026-40792 WordPress KiviCare plugin <= 4.2.1 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in KiviCare = 4.2.1 versions...
CVE-2026-40792 WordPress KiviCare plugin <= 4.2.1 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in KiviCare = 4.2.1 versions...
CVE-2026-39518 WordPress EventPrime plugin <= 4.3.0.0 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in EventPrime = 4.3.0.0 versions...
CVE-2026-39518
The CVE pertains to WordPress EventPrime plugin versions
CVE-2025-59133
CVE-2025-59133 describes an insecure direct object reference (IDOR) in the WordPress plugin Projectopia (WordPress Projectopia – projectopia-core) version
VulnAnalyzer
🔍 VulnAnalyzer 2.1 A comprehensive automated vulnerability...
PT-2026-49429
Subscriber Insecure Direct Object References IDOR in KiviCare = 4.2.1 versions...
Oracle Linux 7 : firefox (ELSA-2026-22708)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-22708 advisory. - Update to 140.10.1 ESR Orabug: 39481850CVE-2026-7320CVE-2026-7321 CVE-2026-7322CVE-2026-7323 - Update to 140.10.0 ESR Orabug:...
PT-2026-49522
Unauthenticated Insecure Direct Object References IDOR in VikRentCar = 1.4.5 versions...
PT-2026-49477
Unauthenticated Insecure Direct Object References IDOR in Simple Shopping Cart = 5.2.9 versions...
kiro-cybersecurity-skills
CyberSecurity Skills A collection of 15 security workflows co...
CVE-2026-7787
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references...
CVE-2026-7787
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references...
CVE-2026-7787 Unauthenticated Session History Access via Public Flow Execution
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references...
EUVD-2026-36251
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references...
CVE-2026-40994
creationtimestamp| type| source ---|---|--- 2026-06-11 09:46:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnywye22ia2f 2026-06-11 10:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyxri5dqj2g 2026-06-11 12:40:06+00:00| seen|...
CLEANSTART-2026-AO11810 Netty is an asynchronous, event-driven network application framework
Multiple security vulnerabilities affect the apache-zookeeper package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...
CLEANSTART-2026-YM13650 Netty is an asynchronous, event-driven network application framework
Multiple security vulnerabilities affect the apache-zookeeper package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...