262226 matches found
BELL-CVE-2026-64451 CVE-2026-64451 does not affect BellSoft software
Bulletin has no description...
CVE-2026-14821
The Quiz and Survey Master QSM WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level access and above to delete arbitrary templates...
CVE-2026-17524
Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the extraction process. An attacker can bypass security checks designed to prevent directory traversal. The intended security function, isOutsideTargetFolder, on...
CVE-2026-64737
creationtimestamp| type| source ---|---|--- 2026-07-28 04:53:26+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:48:35+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 17:15:52+00:00| seen|...
CVE-2026-64730
creationtimestamp| type| source ---|---|--- 2026-07-28 04:53:10+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:16:07+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-30 16:01:20+00:00|...
CVE-2026-64727
creationtimestamp| type| source ---|---|--- 2026-07-28 04:53:02+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:16:14+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-28 19:02:05+00:00|...
CVE-2026-64711
creationtimestamp| type| source ---|---|--- 2026-07-28 04:52:34+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:48:23+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 17:16:43+00:00| seen|...
CVE-2026-64698
creationtimestamp| type| source ---|---|--- 2026-07-28 04:52:02+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:17:08+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-28 21:58:04+00:00|...
CVE-2026-43812
creationtimestamp| type| source ---|---|--- 2026-07-28 04:51:23+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 16:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrptdgzuim2v 2026-07-28 17:17:49+00:00| seen|...
CVE-2026-43802
creationtimestamp| type| source ---|---|--- 2026-07-28 04:51:01+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:18:11+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-30 16:00:57+00:00|...
CVE-2026-43759
creationtimestamp| type| source ---|---|--- 2026-07-28 04:49:50+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:19:25+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-30 16:00:57+00:00|...
sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass
A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL...
CVE-2026-16461 affecting package rpcbind for versions less than 1.2.9-1
CVE-2026-16461 affecting package rpcbind for versions less than 1.2.9-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-61953
creationtimestamp| type| source ---|---|--- 2026-07-28 00:14:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4wpqsah2i 2026-07-28 18:07:27+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpyv4ejcd27...
Security Bulletin: NVIDIA DCGM Exporter - July 2026
NVIDIA has released a software update for NVIDIA® DCGM Exporter. To protect your system, clone or update this software from the NVIDIA/dcgm-exporter GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses...
PT-2026-65608
Name of the Vulnerable Software and Affected Versions datamodel-code-generator versions 0.25.0 through 0.60.0 Description Code injection occurs when generating Python models from an attacker-controlled GraphQL schema. The issue stems from how GraphQL Union description values are rendered into...
PT-2026-65412
The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter of the POST /wp-json/wpdmpp/v1/cart/coupon REST API endpoint in versions up to, and including, 6.2.0. This is due to insufficient escaping on the user-supplied...
python313-CherryPy-18.10.0-4.1 on GA media (moderate)
python313-CherryPy-18.10.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:11378-1 Rating: moderate Cross-References: CVE-2019-9740 CVSS scores: CVE-2019-9740 SUSE : 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability c...
PT-2026-65468
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore domain. Some of these operations may not be executed in paralle...