CVE-2026-12493

The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved external payment record actually belongs to the WooCommerce order being completed, nor that the paid amount matches the order total, allowing unauthenticated users to mark arbitrar...

EUVD-2025-23711

Malicious code in bioql PyPI...

CVE-2025-54606

Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2025-54606

Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2025-54606

Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2025-54606

Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

PT-2025-32013 · Unknown · Lock Screen Module

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A status verification vulnerability exists in the lock screen module. Successful exploitation of this issue may affect availability and confidentiality. Recommendations: At the moment, there is no...

The vulnerability of the Zimbra Collaboration Suite’s corporate email management system lies in the lack of verification of account status when sending emails using 2FA authentication. This allows attackers to increase their privileges.

The vulnerability of the Zimbra Collaboration Suite email management system lies in the lack of verification of account status when sending emails using 2FA two-factor authentication. Exploiting this vulnerability can allow unauthorized users to increase their privileges remotely...

DRUPAL-CONTRIB-2021-047

This modules enables users to login via email address. This module does not sufficiently check user status when authenticating...

DEBIAN-CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

UBUNTU-CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

Low: Red Hat Security Advisory: fence security, bug fix, and enhancement update

An updated fence package that fixes multiple security issues, several bugs, and adds two enhancements is now available for Red Hat Cluster Suite 4. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which...