26204 matches found
CVE-2026-82215: Insufficient Verification of Data Authenticity
The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel...
CVE-2026-89629: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...
CVE-2026-75742
creationtimestamp| type| source ---|---|--- 2026-09-10 21:18:58+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y42nfdx2z...
CVE-2026-88937
creationtimestamp| type| source ---|---|--- 2026-09-10 17:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/achufej3w2s5g 2026-09-11 05:30:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7tkel43c2y...
CVE-2026-57967
creationtimestamp| type| source ---|---|--- 2026-09-10 16:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6ijiaeeq25 2026-09-10 17:27:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117247918870489818 2026-09-17 05:37:06+00:00| seen|...
CVE-2026-38058
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:24+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01...
CVE-2026-73788
creationtimestamp| type| source ---|---|--- 2026-09-10 16:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gu7okxp2f...
CVE-2026-36433
creationtimestamp| type| source ---|---|--- 2026-09-10 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6fpy6fdq2y...
GO-2026-6414 SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers in github.com/siyuan-note/siyuan/kernel
SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers in github.com/siyuan-note/siyuan/kernel...
PYSEC-2026-3941 Private Weblate projects vulnerable to observable object existence disclosure via globally scoped object lookups
Impact The several endpoints could leak object existence information to users who had no access to it by HTTP status code 403 instead of 404. Patches https://github.com/WeblateOrg/weblate/pull/19971 References Thanks to Yaohui Wang for reporting this via GitHub...
WsgiDAV MySQL provider has a blind SQL injection
SummaryThe sample MySQLBrowserProvider builds its SQL queries by concatenating strings, and the record key from the request URL goes straight into the WHERE clause with no escaping. Any user who can reach a share backed by this provider can inject SQL through the URL. Since these read shares are...
CVE-2026-82782
creationtimestamp| type| source ---|---|--- 2026-09-10 08:46:14+00:00| seen| https://jvn.jp/en/vu/JVNVU96551518...
CVE-2026-82777
creationtimestamp| type| source ---|---|--- 2026-09-10 08:46:01+00:00| seen| https://jvn.jp/en/vu/JVNVU96551518...
CVE-2026-82773
creationtimestamp| type| source ---|---|--- 2026-09-10 08:45:47+00:00| seen| https://jvn.jp/en/vu/JVNVU96551518...
CVE-2026-82789
creationtimestamp| type| source ---|---|--- 2026-09-10 08:45:43+00:00| seen| https://jvn.jp/en/vu/JVNVU96551518...
CVE-2026-82772
creationtimestamp| type| source ---|---|--- 2026-09-10 08:45:36+00:00| seen| https://jvn.jp/en/vu/JVNVU99009004...
CVE-2026-15019
creationtimestamp| type| source ---|---|--- 2026-09-10 06:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv5etlagw22m...
CVE-2026-87820
creationtimestamp| type| source ---|---|--- 2026-09-10 06:00:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-87820.yaml 2026-09-11 00:00:04+00:00| confirmed|...