1493904 matches found
ROOT-OS-DEBIAN-13-CVE-2026-59995 CVE-2026-59995 in openssh - Patched by Root
Root has patched CVE-2026-59995 in the openssh package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-59997 CVE-2026-59997 in openssh - Patched by Root
Root has patched CVE-2026-59997 in the openssh package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-60001 CVE-2026-60001 in openssh - Patched by Root
Root has patched CVE-2026-60001 in the openssh package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-59998 CVE-2026-59998 in openssh - Patched by Root
Root has patched CVE-2026-59998 in the openssh package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-60000 CVE-2026-60000 in openssh - Patched by Root
Root has patched CVE-2026-60000 in the openssh package for Root:Debian:13. Multiple fixed versions available...
CLSA-2026-1792156382 TuxCare security update for dompurify (9 CVEs)
TuxCare rebuilt dompurify to address 9 CVEs. Fixed in 3.0.2-tuxcare.2...
CLSA-2026-1792156267 TuxCare security update for dompurify (9 CVEs)
TuxCare rebuilt dompurify to address 9 CVEs. Fixed in 3.1.2-tuxcare.2...
CVE-2026-110896
The WP Chill Passster plugin (specifically the content-protector component) is vulnerable to a Missing Authorization (CWE-862) issue in versions through 4.3.18 . The flaw allows an unauthenticated network visitor to exploit incorrectly configured access control security levels. While the vulnerab...
CVE-2026-111396 WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Post Manager: from n/a through 4.5.6...
CVE-2026-111396
The Advanced Post Manager plugin for WordPress (versions
CVE-2026-111409 WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.61.0...
CVE-2026-110900
The Liquid Web / StellarWP BookIt WordPress plugin is vulnerable to a Broken Access Control issue (CWE-862) in versions up to and including 2.6.0.5 . The root cause is Incorrectly Configured Access Control Security Levels , specifically a Missing Authorization vulnerability. This allows an attack...
CVE-2026-110900 WordPress BookIt plugin <= 2.6.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.5...
CVE-2026-110380
The WP Event Solution plugin for WordPress (versions
CVE-2026-110380 WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.26...
ROOT-APP-MAVEN-CVE-2025-67030 CVE-2025-67030 in org.codehaus.plexus:plexus-utils - Patched by Root
Root has patched CVE-2025-67030 in the org.codehaus.plexus:plexus-utils package for Root:Maven. Multiple fixed versions available...
advisory
Security Advisories — bl4dsc4n Public repository containing security advisories, technical analyses, and Proof-of-Concepts PoCs for vulnerabilities independently discovered in open-source software. All vulnerabilities were identified through manual source code review, secure code analysis, and...
CLSA-2026-1792150209 TuxCare security update for dompurify (9 CVEs)
TuxCare rebuilt dompurify to address 9 CVEs. Fixed in 3.4.5-tuxcare.2...
InfraPulse-Core
InfraPulse-Core InfraPulse-Core is a unified, dual-platform security auditing architecture implementing single-file, zero-dependency engines for Linux POSIX and Windows Win32. Unlike traditional vulnerability scanners that rely on subjective risk metrics, InfraPulse-Core enforces an unyielding...