54185 matches found
ROOT-OS-DEBIAN-11-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root
Root has patched CVE-2026-11856 in the curl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-49337 CVE-2026-49337 in libde265 - Patched by Root
Root has patched CVE-2026-49337 in the libde265 package for Root:Debian:13. Multiple fixed versions available...
Wordpress Email Subscribers by Icegram Express - SQL Injection
The Email Subscribers by Icegram Express - Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'run' function of the 'IGESSubscribersQuery' class in all versions up to, and including, 5.7.14 due to insufficient escaping ...
eyoucms v.1.6.5 - Cross-Site Scripting
Cross Site Scripting XSS vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL. id: CVE-2024-22927 info: name: eyoucms v.1.6.5 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross Site Scripting XSS...
Relevanssi <= 4.24.4 (Free) - Unauthenticated SQL Injection
The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 Free and = 2.27.4 Premium due to insufficient escaping on the user supplied parameter and lack of sufficient...
Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover
The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to chan...
Mage AI - Insecure Default Authentication Setup
A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...
GiveWP - PHP Object Injection
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'givetitle' parameter. id: CVE-2024-5932 info: name: GiveWP - PHP Object Injection author:...
CVE-2026-76850
creationtimestamp| type| source ---|---|--- 2026-08-19 22:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx 2026-08-19 23:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r 2026-08-20 00:10:12+00:00| seen|...
DRUPAL-CONTRIB-2026-102
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons...
ROOT-OS-UBUNTU-2404-CVE-2025-38500 CVE-2025-38500 in linux - Patched by Root
Root has patched CVE-2025-38500 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-39826 CVE-2025-39826 in linux - Patched by Root
Root has patched CVE-2025-39826 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-23148 CVE-2025-23148 in linux - Patched by Root
Root has patched CVE-2025-23148 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
CGA-8RR9-62HV-H636
Bulletin has no description...
MINI-RP2G-VW58-26FP
Bulletin has no description...
MINI-J8G7-4JWW-V9QX
Bulletin has no description...
