261721 matches found
WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by HieuPenguinnn in WordPress Plugin Events Made Easy versions = 3.1.3...
EUVD-2026-48531
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...
GHSA-G7HG-VRCF-MVMR vulnerabilities
Vulnerabilities for packages: apache-hop-fips, seata, pinot, tez, apache-hop, cassandra, thingsboard, management-api-for-apache-cassandra-5.0, pinot-fips, cassandra-fips, hadoop-fips...
GHSA-WC96-39FC-566F vulnerabilities
Vulnerabilities for packages: apache-hop-fips, seata, pinot, tez, apache-hop, cassandra, thingsboard, management-api-for-apache-cassandra-5.0, pinot-fips, cassandra-fips, hadoop-fips...
GHSA-272M-GCWP-MPWG vulnerabilities
Vulnerabilities for packages: apache-hop-fips, seata, pinot, tez, apache-hop, cassandra, thingsboard, management-api-for-apache-cassandra-5.0, pinot-fips, cassandra-fips, hadoop-fips...
GHSA-JPPX-W49H-X2QQ vulnerabilities
Vulnerabilities for packages: knative-kafka-broker-fips, apache-activemq-artemis, keycloak, logstash, kafbat-ui, cloudwatch-exporter, airbyte-server-fips, flyway-fips, apache-pulsar, grpc-java-fips, pinot-fips, request-9047-keycloak-fips, druid, kayenta, elasticsearch, akhq, neo4j, conductor-fips...
CVE-2026-56820 vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, tez, cassandra...
CVE-2026-55833 vulnerabilities
Vulnerabilities for packages: apicurio-registry, tez, spark, flyway, neo4j, apache-nifi, infinispan, druid, cloudwatch-exporter, akhq, apache-activemq-artemis, keycloak, logstash, management-api-for-apache-cassandra-5.0, celeborn, wavefront-proxy, apache-pulsar, thingsboard, strimzi-kafka-operato...
CVE-2026-56745 vulnerabilities
Vulnerabilities for packages: apicurio-registry, tez, spark, flyway, neo4j, apache-nifi, infinispan, druid, cloudwatch-exporter, akhq, apache-activemq-artemis, keycloak, logstash, management-api-for-apache-cassandra-5.0, celeborn, wavefront-proxy, apache-pulsar, thingsboard, strimzi-kafka-operato...
CVE-2026-56392
GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...
CVE-2026-11922
The CVE-2026-11922 entry describes a rate-limit bypass in zenml-io/zenml (versions 0.57.0–0.94.2). The issue arises because the rate limiter uses request.client.host (derived from the X-Forwarded-For header when Uvicorn is run with --proxy-headers --forwarded-allow-ips *), allowing an attacker to...
CVE-2026-15616
creationtimestamp| type| source ---|---|--- 2026-07-24 02:21:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrec5kav6v2p...
CVE-2026-61666 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, pghero, pghero-fips, ruby4.0-rails...
CVE-2026-54133 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
SUSE CVE-2026-56684
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...
CVE-2026-58275
creationtimestamp| type| source ---|---|--- 2026-07-24 00:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3t3nspm23 2026-07-24 01:30:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116972364326396269 2026-07-24 01:30:36+00:00| seen|...
CVE-2026-50517
creationtimestamp| type| source ---|---|--- 2026-07-24 00:24:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3lxvk4l2q 2026-07-24 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116973425505418571 2026-07-24 06:00:28+00:00| seen|...
CVE-2026-14899
creationtimestamp| type| source ---|---|--- 2026-07-24 00:01:16+00:00| seen| https://bsky.app/profile/slackers.it/post/3mre2d6b3mi2p 2026-07-29 00:45:04+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722...
CVE-2026-35425
CVE-2026-35425 concerns Azure API Management (APIM) with an “Improper access control” condition that enables a network-exposed remote code execution by an authorized attacker. Affected software is APIM; the root cause is access-control weaknesses that allow code execution over the network. The pr...
