1414715 matches found
CVE-2026-16590
WP Directory Kit prior to version 1.5.5 has an authorization/nonce check flaw in an authenticated AJAX action, enabling any authenticated user (e.g., Subscriber) to retrieve other users’ stored contact messages and related user data. Root cause: missing access control on the AJAX endpoint. Impact...
GHSA-79QM-7RJ5-M7R9
creationtimestamp| type| source ---|---|--- 2026-08-07 23:35:49+00:00| seen| https://gist.github.com/alon710/5988f40586bcc25ff4d614f1ea49845f 2026-08-08 00:01:19+00:00| seen| https://gist.github.com/alon710/5988f40586bcc25ff4d614f1ea49845f...
CVE-2026-57858
creationtimestamp| type| source ---|---|--- 2026-08-07 23:09:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97085 2026-08-08 00:02:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97085...
EUVD-2026-54719
Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, autorestore.kak script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround, a...
GHSA-F23P-VX2J-J53R
creationtimestamp| type| source ---|---|--- 2026-08-07 22:31:14+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378 2026-08-08 00:01:19+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378...
CVE-2026-11907
creationtimestamp| type| source ---|---|--- 2026-08-07 22:17:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msjlf7akvi25...
CVE-2026-67422
creationtimestamp| type| source ---|---|--- 2026-08-07 21:05:02+00:00| published-proof-of-concept| https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-gm37-52c6-37mw 2026-08-08 02:32:35+00:00| seen| https://gist.github.com/alon710/6f3e0768fc0386f4c965af62333fef78...
EUVD-2026-54654
Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.3, the Companion app treats tag links NFC or QR delivered through an OS-level routing mechanism as if they were physically scanned, without validating the calling app or prompting the user...
CVE-2026-71381 Adobe Genuine Software Integrity Service | CWE-863 Incorrect Authorization
Adobe Genuine Software Integrity Service was affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could have leveraged this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue...
CVE-2026-71381
The CVE-2026-71381 entry concerns the Adobe Genuine Software Integrity Service and an Incorrect Authorization flaw that could bypass security features, enabling an attacker with local access to obtain unauthorized limited write capabilities. The advisory notes no user interaction is required, whi...
EUVD-2026-54650
Adobe Genuine Software Integrity Service was affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could have leveraged this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue...
EUVD-2026-54649
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operation authorities to act on...
EUVD-2026-54648
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operation authorities to act on...
GHSA-C4C3-PG64-4M4V vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-2V8P-3F2J-5MP7 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-6X64-9X62-F2GX vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-3RRR-JR9J-H3Q3 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-RHH3-JPG6-66XH vulnerabilities
Vulnerabilities for packages: langfuse...
