26223 matches found
CVE-2026-10627 Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parameters
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.4.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
SUSE CVE-2026-74408
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx status queue ID athtxedmatasklet accesses sc-tx.txqts.qid where ts.qid is a 4-bit hardware field 0-15, but the txq array only has ATH9KNUMTXQUEUES 10 entries. A qid = 10 causes an OOB...
PT-2026-81507
NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...
CVE-2026-78268
creationtimestamp| type| source ---|---|--- 2026-08-24 22:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5gsq2vvzuxa7p...
CVE-2026-63039
creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:03+00:00| seen| Telegram/8ioC0-GS3hqaK0vZF92ZaP06wwac1xjhQxJkXlFfEhMVG4 2026-08-25 00:00:10+00:00| published-proof-of-concept| Telegram/8ioC0-GS3hqaK0vZF92ZaP06wwac1xjhQxJkXlFfEhMVG4...
CVE-2025-26237
creationtimestamp| type| source ---|---|--- 2026-08-24 19:07:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117152050771764762...
CVE-2026-71509
Dolibarr versions before 24.0.0 contain an improper authorization vulnerability in the expense report REST API update endpoint. Authenticated users holding only expense-creation rights can directly set approval status and approver identity fields via the API, effectively bypassing the approval wo...
EUVD-2026-65082
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...
CVE-2026-28151
creationtimestamp| type| source ---|---|--- 2026-08-24 12:47:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hnqujzctqb3wg...
WordPress Charitable plugin < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass vulnerability
Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Charitable versions 1.8.12...
WordPress Tamara Checkout plugin <= 1.9.9.20 - Unauthenticated Order Status Manipulation vulnerability
Unauthenticated Order Status Manipulation vulnerability discovered by Ezekiel Victor in WordPress Plugin Tamara Checkout versions = 1.9.9.20...
The vulnerability of the drivers/md/dm-zone.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/md/dm-zone.c component in the Linux operating system is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROOT-OS-DEBIAN-13-CVE-2026-54371 CVE-2026-54371 in attr - Patched by Root
Root has patched CVE-2026-54371 in the attr package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-27415 CVE-2024-27415 in linux - Patched by Root
Root has patched CVE-2024-27415 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2022-49967 CVE-2022-49967 in linux - Patched by Root
Root has patched CVE-2022-49967 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-56592 CVE-2024-56592 in linux - Patched by Root
Root has patched CVE-2024-56592 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2022-49034 CVE-2022-49034 in linux - Patched by Root
Root has patched CVE-2022-49034 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-38685 CVE-2025-38685 in linux - Patched by Root
Root has patched CVE-2025-38685 in the linux package for Root:Debian:11. Multiple fixed versions available...