32667 matches found
PT-2026-103694
Name of the Vulnerable Software and Affected Versions BackupSheep WordPress Backup Plugin versions prior to 1.9 Description The plugin fails to properly validate its integration key, treating a blank or unset key as valid. This allows unauthenticated attackers to access backup and export endpoint...
AlmaLinux 9.6 [TuxCare] Security Update: coreutils / coreutils-common / coreutils-single (ALMALINUX9.6:CLSA-2026:1783532249)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783532249 advisory. - A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access...
AlmaLinux 9.2 [TuxCare] Security Update: coreutils / coreutils-common / coreutils-single (ALMALINUX9.2:CLSA-2026:1783530353)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783530353 advisory. - A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access...
AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ALMALINUX9.2:CLSA-2026:1778072039)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778072039 advisory. - Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memor...
Rocky Linux 9 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_36879)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202636879 advisory. Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor CVE-2026-29146 Apache Tomcat: Apache Tomcat:...
webkitgtk: Visiting a maliciously crafted website may leak sensitive data
A flaw was found in WebKitGTK. Visiting a malicious website may lead to a sensitive data leak due to improper validation checks...
webkitgtk: webkitgtk: Visiting a website may leak sensitive data
A flaw was found in WebKitGTK. Visiting a website can leak sensitive data due to a permissions issue that was addressed with additional restrictions...
CVE-2026-102098 Kiteworks Core SQL Injection
Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...
CVE-2026-102098
Kiteworks Core versions prior to 9.5.0 are vulnerable to a stored SQL injection within an administrative reporting feature. This vulnerability allows an authenticated administrator with access to the affected reporting function to read sensitive data from the underlying database and potentially a...
EUVD-2026-90370
Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...
CVE-2026-102098 Kiteworks Core SQL Injection
Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...
CLEANSTART-2024-WH54891 Sensitive data could be exposed in world readable logs of cloud-init before version 22
Security vulnerability affects the cloud-init package. Sensitive data could be exposed in world readable logs of cloud-init before version 22...
CVE-2026-47594
A flaw was found in the NVIDIA GPU display driver. A local unprivileged user can trigger a use-after-free condition—where memory is accessed after it has been released—by submitting a specific sequence of driver commands. Successful exploitation could allow an attacker to execute arbitrary code,...
CVE-2026-103475
yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...
CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure
yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...
CVE-2026-97302
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
CVE-2026-97261
Unauthenticated Sensitive Data Exposure in Notivo = 1.4.2 versions...
CVE-2026-97240
Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...