CVE-2026-12493

The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved external payment record actually belongs to the WooCommerce order being completed, nor that the paid amount matches the order total, allowing unauthenticated users to mark arbitrar...

EUVD-2026-44908

HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and perform unauthorized actions without...

EUVD-2025-23711

Malicious code in bioql PyPI...

CVE-2025-54606

Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2025-54606

Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2025-54606

Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2025-54606

Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2025-54606: Undefined Security Weakness

Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

PT-2025-32013 · Unknown · Lock Screen Module

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A status verification vulnerability exists in the lock screen module. Successful exploitation of this issue may affect availability and confidentiality. Recommendations: At the moment, there is no...

Zimbra Collaboration Suite Privilege Bypass

The vulnerability of the Zimbra Collaboration Suite email management system lies in the lack of verification of account status when sending emails using 2FA two-factor authentication. Exploiting this vulnerability can allow unauthorized users to increase their privileges remotely...

DRUPAL-CONTRIB-2021-047

This modules enables users to login via email address. This module does not sufficiently check user status when authenticating...

DEBIAN-CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

UBUNTU-CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

PT-2016-6318

Name of the Vulnerable Software and Affected Versions Huawei Mate 8 smartphones with software NXT-AL10 before NXT-AL10C00B182 Huawei Mate 8 smartphones with software NXT-CL00 before NXT-CL00C92B182 Huawei Mate 8 smartphones with software NXT-DL00 before NXT-DL00C17B182 Huawei Mate 8 smartphones...

Low: Red Hat Security Advisory: fence security, bug fix, and enhancement update

An updated fence package that fixes multiple security issues, several bugs, and adds two enhancements is now available for Red Hat Cluster Suite 4. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which...