26725 matches found
CVE-2026-51233
creationtimestamp| type| source ---|---|--- 2026-07-30 03:53:15+00:00| seen| https://gist.github.com/programmervuln/698a3ca54a49126a23a60092240d933a...
CVE-2026-15929
creationtimestamp| type| source ---|---|--- 2026-07-30 03:50:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4ndasz267zue5...
[SECURITY] Fedora 43 Update: nginx-mod-vts-0.2.4-13.fc43
Nginx virtual host traffic status module...
EUVD-2025-210532
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /saveuser.php via the parameter status...
PT-2026-66373
Name of the Vulnerable Software and Affected Versions Eventin versions prior to 4.1.16 Description An authorization flaw allows unauthenticated users to create orders and specify an attacker-supplied order status. This enables the bypass of payment processes by marking orders as paid without...
PT-2026-66462
Name of the Vulnerable Software and Affected Versions FuseWP versions prior to 1.1.24.3 Description The FuseWP plugin for WordPress contains a Cross-Site Request Forgery CSRF flaw, which occurs when a web application fails to verify that a request was intentionally initiated by the user. This iss...
Linux Distros Unpatched Vulnerability : CVE-2026-17686
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce...
Linux Distros Unpatched Vulnerability : CVE-2026-17956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a...
Linux Distros Unpatched Vulnerability : CVE-2026-18011
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive informati...
Linux Distros Unpatched Vulnerability : CVE-2026-17773
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTM...
Linux Distros Unpatched Vulnerability : CVE-2026-17680
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to...
Linux Distros Unpatched Vulnerability : CVE-2026-18013
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTM...
CVE-2026-15250: Improper Access Control
The Appointment Booking Plugin WordPress plugin before 5.6.8 does not restrict which booking fields an unauthenticated visitor can set through its public booking funnel, allowing an unauthenticated user to assign a privileged booking field such as the approval status and thereby bypass the site's...
Linux Distros Unpatched Vulnerability : CVE-2026-17762
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-17734
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafte...
GHSA-XVG2-CGV6-6H7V
creationtimestamp| type| source ---|---|--- 2026-07-29 22:32:10+00:00| seen| https://gist.github.com/alon710/4f3175144e6d12e46b24b49c3b567546 2026-07-30 00:01:11+00:00| seen| https://gist.github.com/alon710/4f3175144e6d12e46b24b49c3b567546...
CVE-2025-67408
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /saveuser.php via the parameter status...
MINI-HV54-V5W6-XQ6J
Bulletin has no description...
