1328 matches found
CVE-2026-63727
Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capable of modifying user permissions to gain access to...
CVE-2026-63727
Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capable of modifying user permissions to gain access to...
Exploit for CVE-2026-8206
CVE-2026-8206 Vulnerability: Unauthenticated Account Takeo...
CVE-2026-65436 WordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerability
Editor Arbitrary File Deletion in Kirki = 6.0.13 versions...
Linux Distros Unpatched Vulnerability : CVE-2026-44228
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3, contain a stored Cross-Site Scripting XSS...
CVE-2026-15011
The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in all versions up to, and including, 6.0.5 due to the use of dynamic function invocation on an attacker-controlled value with insufficient validation. This makes it possibl...
PT-2026-63907
Unauthenticated Broken Access Control in Event post = 6.0.1 versions...
SUSE-SU-2026:22903-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 bsc1243603. - CVE-2026-31503: udp: Fix wildcard bind...
Plone 5.2.x < 5.2.14 / 6.0.x < 6.0.7 Multiple Vulnerabilities (HF 20230921)
The version of Plone installed on the remote host is 5.2.x prior to 5.2.14 or 6.0.x prior to 6.0.7. It is, therefore, affected by the following vulnerabilities: - plone.namedfile has a stored cross-site scripting vulnerability for SVG images. CVE-2023-41048 - When the ++api++ traverser in...
CVE-2026-60602
The CVE affects Oracle PeopleSoft Enterprise CS Student Financials Billing (component: Billing), specifically version 9.2.38. It describes a vulnerability that lets a low-privileged user with network access via HTTP compromise the system and potentially takeover PeopleSoft CS Student Financials. ...
CVE-2026-60575
...
CVE-2026-60565
...
CVE-2026-60558
...
CVE-2026-60557
CVE-2026-60557 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Sites, with human interaction required for exploitation. Impact per sources: potential...
CVE-2026-60457
...
CVE-2026-60429
...
CVE-2026-60345
...
CVE-2026-60331
...
CVE-2026-60304
CVE-2026-60304 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low-privileged, network-accessible attacker (TCP) to cause a hang or repeatable crash (complete denial of service) in Or...