14567 matches found
CVE-2026-17435
File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent since the existence check is...
CVE-2026-17435 File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files
File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent since the existence check is...
CVE-2026-17435
Versions of the Perl module File::Rotate::Simple before 0.4.0 are vulnerable to a flaw where the software creates the target of dangling symlinks during file rotation. When the rotation target is a symlink to a non-existent file and the touch option is enabled, the module incorrectly assumes the ...
CVE-2026-19231
A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=deleteappointment. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit...
CVE-2026-15239
The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin before 1.42.0 does not bind its Turnstile validation cache to the single-use challenge token in its Forminator integration, instead keying it to an attacker-controlled, reusable request value, allowing unauthenticated attackers to solv...
EUVD-2026-54182
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...
EUVD-2026-54193
The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the site's own configured merchant account before activating a membership, allowing unauthenticated users to activate or extend a membership using a payment made to an arbitrary PayP...
CVE-2026-17435: Improper Link Resolution Before File Access
File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent since the existence check is...
CVE-2026-19231: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=deleteappointment. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit...
The vulnerability of the Simple Network Management Protocol (SNMP) subsystem in Cisco IOS XE allows a attacker to trigger a service failure.
The vulnerability of the Simple Network Management Protocol SNMP subsystem in Cisco IOS XE lies in the fact that resources are not released after their useful period has expired. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
CVE-2026-15239: Insufficient Verification of Data Authenticity
The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin before 1.42.0 does not bind its Turnstile validation cache to the single-use challenge token in its Forminator integration, instead keying it to an attacker-controlled, reusable request value, allowing unauthenticated attackers to solv...
WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by luc in WordPress Plugin Simple Link Directory Pro versions = 15.0.8...
CVE-2026-14936 Simple Membership < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification
The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the site's own configured merchant account before activating a membership, allowing unauthenticated users to activate or extend a membership using a payment made to an arbitrary PayP...
CVE-2026-14936
The CVE concerns the Simple Membership WordPress plugin prior to version 4.7.7, where PayPal IPN verification is not performed against the site’s configured merchant account before activating a membership. This allows unauthenticated users to activate or extend memberships using PayPal payments t...
CVE-2026-66712
Unauthenticated Broken Access Control in Simple Membership = 4.7.8 versions...
CVE-2026-66712 WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simple Membership = 4.7.8 versions...
EUVD-2026-53937
Unauthenticated Broken Access Control in Simple Membership = 4.7.8 versions...
CVE-2026-66712
Unauthenticated Broken Access Control in Simple Membership = 4.7.8 versions...
