264167 matches found
PT-2026-49633
Name of the Vulnerable Software and Affected Versions WooCommerce Stripe Payment Gateway versions prior to 10.7.1 Description The plugin is subject to unauthorized data modification because the ajax pay for order function lacks a capability check. Specifically, the wc stripe pay for order WC-AJAX...
PT-2026-49801
In lwis device external event emit of lwis event.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
python311-zeroconf-0.149.16-1.1 on GA media (moderate)
python311-zeroconf-0.149.16-1.1 on GA media Announcement ID: openSUSE-SU-2026:11036-1 Rating: moderate Cross-References: CVE-2026-48487 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
PT-2026-49817
In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models allows a hacker to execute arbitrary code by allowing the operation to escape out of the buffer in memory.
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2026-39949
This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...
CVE-2026-48713
creationtimestamp| type| source ---|---|--- 2026-06-15 23:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moef7r5k4a24 2026-06-16 00:01:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeimat47y2n 2026-06-16 03:00:27+00:00| seen|...
CVE-2026-52700
creationtimestamp| type| source ---|---|--- 2026-06-15 22:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebwj2hkn26 2026-06-15 22:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moebymanjo2b...
CVE-2026-49769
creationtimestamp| type| source ---|---|--- 2026-06-15 21:43:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeaw2yext2a 2026-06-15 22:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moecq7qnpw26 2026-06-16 06:00:43+00:00| seen|...
EUVD-2026-36992
Unauthenticated Sensitive Data Exposure in Amelia = 2.2 versions...
EUVD-2026-36953
Unauthenticated Cross Site Scripting XSS in Paid Member Subscriptions = 2.17.3 versions...
EUVD-2026-36958
Unauthenticated Broken Access Control in Booking Activities = 1.16.48.1 versions...
EUVD-2026-36776
An issue in the attachment handling component of Feuerhamster MailForm v1.1.0 allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2026-47825
Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux Gateway Servers. Affected versions: Spring Cloud Gateway 3.1.x fix 3.1.13. Spring Cloud Gateway 4.1.x fix 4.1.13. Spri...
CVE-2026-42650
Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.6.7 versions...
CVE-2026-39434
Shop manager PHP Object Injection in CTX Feed = 6.6.26 versions...
CVE-2026-53705
creationtimestamp| type| source ---|---|--- 2026-06-15 20:23:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe4gpjlgt2w...
CVE-2026-42668 WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.18.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend = 1.18.0 versions...
