1404113 matches found
Moodle Jmol Filter 6.1 - Local File Inclusion
Moodle Jmol Filter 6.1 is vulnerable to local file inclusion through the jsmol.php file, allowing attackers to read arbitrary files on the server. id: CVE-2025-34031 info: name: Moodle Jmol Filter 6.1 - Local File Inclusion author: madrobot severity: high description: | Moodle Jmol Filter 6.1 is...
WSO2 User Registration - Arbitrary Account Creation
The SOAP admin service in WSO2 products has a security vulnerability that allows the creation of new user accounts regardless of the self-registration configuration settings. id: CVE-2024-7097 info: name: WSO2 User Registration - Arbitrary Account Creation author: iamnoooob,rootxharsh,pdresearch...
InfluxDB <1.7.6 - Authentication Bypass
InfluxDB before 1.7.6 contains an authentication bypass vulnerability via the authenticate function in services/httpd/handler.go. A JWT token may have an empty SharedSecret aka shared secret. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...
Popup by Supsystic < 1.10.9 - Subscriber Email Addresses Disclosure
The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users id: CVE-2022-0424 info: name: Popup by Supsystic 1.10.9 - Subscriber Email...
WordPress JNews Theme <8.0.6 - Cross-Site Scripting
WordPress JNews theme before 8.0.6 contains a reflected cross-site scripting vulnerability. It does not sanitize the catid parameter in the POST request /?ajax-request=jnews with action=jnewsbuildmegacategory. id: CVE-2021-24342 info: name: WordPress JNews Theme =8.0.6 to mitigate the XSS...
GHSA-72GW-FMMR-C4R4 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-8R6M-32JQ-JX6Q vulnerabilities
Vulnerabilities for packages: tileserver-gl...
GHSA-M2W4-8GGF-RJ47 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-4VJ7-5MJ6-JM8M vulnerabilities
Vulnerabilities for packages: tileserver-gl...
GHSA-3PJW-73GF-8QR5 vulnerabilities
Vulnerabilities for packages: flyway...
chromedriver-150.0.7871.181-1.1 on GA media (moderate)
chromedriver-150.0.7871.181-1.1 on GA media Announcement ID: openSUSE-SU-2026:11346-1 Rating: moderate Cross-References: CVE-2026-16413 CVE-2026-16414 CVE-2026-16415 CVE-2026-16416 CVE-2026-16417 CVE-2026-16418 CVE-2026-16419 CVE-2026-16420 CVE-2026-16421 CVE-2026-16422 CVE-2026-16423...
GHSA-6VCH-Q96H-7GC3
creationtimestamp| type| source ---|---|--- 2026-07-24 23:31:23+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4 2026-07-25 00:00:18+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4...
CVE-2025-71408
creationtimestamp| type| source ---|---|--- 2026-07-24 23:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrghf4fvnp2q 2026-07-25 03:29:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrgwgrya5i23...
EUVD-2026-48299
AWS API MCP Server Security Policy Bypass via Startup Initialization Failure...
CVE-2025-71408 NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
CVE-2026-15308 vulnerabilities
Vulnerabilities for packages: python...
GHSA-7QJ2-Q5C8-CXX5 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-64646 vulnerabilities
Vulnerabilities for packages: langfuse...