26740 matches found
CVE-2026-11370
The WP Meta SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.5.18 via the 'newlink' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations...
Malicious code in monty-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d234eb20e94a8d34b23f4aed0a562eb1c038ce5bd603856546c970152a70ac5 On npm install, the package's postinstall hook package.json declares "postinstall": "node bin/cli.js" automatically runs a data-collection CLI withou...
SUSE CVE-2026-12549
The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. When a client sends a Range request with a suffix length exceeding the content size, the resulting negative start value is not properly clamped, leading t...
SUSE CVE-2026-46607
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity chec...
Linux Distros Unpatched Vulnerability : CVE-2026-9546
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in libcurl caused the HTTP Referer: header to persist even when explicitly cleared. While the documentation states that passing NULL to...
Linux Distros Unpatched Vulnerability : CVE-2025-61023
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the stcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
PT-2026-52177
Name of the Vulnerable Software and Affected Versions Tealium iQ Tag Management versions 0.0.0 through 2.4.0 Description Improperly controlled modification of dynamically-determined object attributes in the Tealium iQ Tag Management module allows for Object Injection. This occurs because the...
MINI-MFMC-W52H-CQM6
Bulletin has no description...
MINI-MWVM-G4C4-55VR
Bulletin has no description...
MINI-74QF-JCVV-234F
Bulletin has no description...
CVE-2026-56120
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-56784...
CVE-2026-54321
creationtimestamp| type| source ---|---|--- 2026-06-23 20:28:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moyagoino72a...
CVE-2026-44274
creationtimestamp| type| source ---|---|--- 2026-06-23 16:26:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116800356044077803...
CVE-2024-32739
creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:10+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3b5fb329-f71a-41fd-86fd-5593b79c7726 2026-06-30 09:23:06+00:00| exploited|...
CVE-2026-56422
creationtimestamp| type| source ---|---|--- 2026-06-23 10:47:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116799021524959296...
CVE-2026-12602
creationtimestamp| type| source ---|---|--- 2026-06-23 09:50:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116798796957751949...
GHSA-4Q6H-8P4V-67VQ
creationtimestamp| type| source ---|---|--- 2026-06-23 09:41:50+00:00| seen| https://gist.github.com/alon710/ca5754f7e7e7aeff3ad1cd262378f58b...
CVE-2013-6786
creationtimestamp| type| source ---|---|--- 2026-06-23 07:37:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116798275755976502 2026-06-23 07:37:37+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mowvekv7fx72...
K000161848: PHP vulnerability CVE-2025-1220
Security Advisory Description In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 some functions like fsockopen lack validation that the hostname supplied does not contain null characters. This may lead to other functions like parseurl treat the hostname...