262332 matches found
EUVD-2026-42246
Capgo before 12.128.2 contains a policy bypass vulnerability in appversions update enforcement that allows app-scoped API keys to downgrade encrypted bundles to non-encrypted state. Attackers with app-scoped all API keys can directly update the appversions table via PostgREST to clear sessionkey...
CVE-2026-56217
Capgo before 12.128.2 contains a policy bypass vulnerability in appversions update enforcement that allows app-scoped API keys to downgrade encrypted bundles to non-encrypted state. Attackers with app-scoped all API keys can directly update the appversions table via PostgREST to clear sessionkey...
CVE-2019-10660
creationtimestamp| type| source ---|---|--- 2026-07-08 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5ahbcwux2s...
CVE-2026-58480
creationtimestamp| type| source ---|---|--- 2026-07-08 13:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116884598388668562 2026-07-08 13:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq5a3kmqpd2j 2026-07-08 14:12:06+00:00| seen|...
WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dodoh4t in WordPress Plugin Cart Lift versions = 3.1.57...
ROOT-APP-PYPI-CVE-2024-21520 CVE-2024-21520 in rootio-djangorestframework - Patched by Root
Root has patched CVE-2024-21520 in the rootio-djangorestframework package for Root:PyPI. Multiple fixed versions available...
buildah security update
An update is available for buildah. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The buildah package provides a tool for facilitating building OCI container...
Important: Red Hat Security Advisory: nginx:1.26 security, bug fix, and enhancement update
An update for the nginx:1.26 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-57248
creationtimestamp| type| source ---|---|--- 2026-07-08 11:55:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq52rcsigj2i...
CVE-2026-6371
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Limatek System Inc. LimRAD NAC allows Stored XSS. This issue affects LimRAD NAC: before 5.5.7.3.9...
CVE-2026-3688
creationtimestamp| type| source ---|---|--- 2026-07-08 11:17:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq4ymwaqem2p 2026-07-08 13:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq57mtvw3v2z 2026-09-09 10:00:48+00:00| seen|...
CVE-2026-9700
creationtimestamp| type| source ---|---|--- 2026-07-08 07:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4nh7jd4v2i 2026-07-13 06:48:53+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mqj3xwbu5s2j...
CVE-2026-57244
CVE-2026-57244 affects Foxit PDF Editor/Reader Form Control. The root cause is a missing re-entry protection and object lifecycle verification during form synchronization after JavaScript resets, causing a control pointer dereference after a failure and resulting in a crash. The CVSSv3.1 vector i...
CVE-2026-14482
creationtimestamp| type| source ---|---|--- 2026-07-08 07:27:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4lrjxew42l 2026-07-09 00:00:40+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq6dcbzxg52n...
ROOT-OS-DEBIAN-12-CVE-2026-55597 CVE-2026-55597 in rootio-imagemagick - Patched by Root
Root has patched CVE-2026-55597 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-14495
The DoLogin Security plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Randomness in all versions up to, and including, 4.3. The vulnerability exists because dologin\s::rrand seeds the Mersenne Twister with mtsranddouble microtime 1000000 — discarding the integer-second...
EUVD-2026-42175
The Bulk Order Update for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 1.6. This is due to the bouwfetchcsvdata AJAX handler being registered on the wpajaxnopriv hook with no capability or nonce check, and passing the attacker-supplied...
GHSA-Q6H5-Q3Q6-F87X vulnerabilities
Vulnerabilities for packages: kubescape, kubescape-operator, hubble-ui...
