Fixed in Apache Tomcat 10.1.53

Moderate: The fix forCVE-2025-66614 was incomplete CVE-2026-32990 The validation of SNI name and host name did not take account of possible differences in case allowing the strict SNI checks to be bypassed. This was fixed with commit 4d0615a5. This issue was reported to the Tomcat security team o...

CVE-2026-4567

creationtimestamp| type| source ---|---|--- 2026-03-22 09:05:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116272025234810629 2026-03-23 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhp2yfkb7o2m 2026-03-23 05:00:15+00:00| seen|...

CVE-2026-4558

creationtimestamp| type| source ---|---|--- 2026-03-22 08:11:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116271813198950896 2026-03-22 18:04:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mho52thwyc2o 2026-03-22 19:18:35+00:00| seen|...

CVE-2026-4533

A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the attack remotely. The exploit is now publi...

CVE-2026-4533

CVE-2026-4533 affects code-projects Simple Food Ordering System 1.0. The vulnerability is in the all-tickets.php file where manipulating the Status parameter results in an SQL injection, with remote exploitation possible. Exploitation details are reported across multiple sources (NVD, Red Hat, CI...

Code-Projects Simple Food Ordering System SQL注入漏洞

Code-Projects Simple Food Ordering System is a simple food ordering system developed by Code-Projects as open source. Version 1.0 of the code-projects Simple Food Ordering System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the Status parameter in the fi...

Linux Distros Unpatched Vulnerability : CVE-2026-33306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt password hashing algorithm. Prior to version 3.1.22, an integer overflow in the Java BCrypt implementation...

PT-2026-26963

A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the attack remotely. The exploit is now publi...

CVE-2026-32048

creationtimestamp| type| source ---|---|--- 2026-03-21 22:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlzrs2naa2s 2026-03-22 03:00:05+00:00| seen| https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j...

CVE-2026-4553

creationtimestamp| type| source ---|---|--- 2026-03-21 17:07:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116268258506979437 2026-03-22 15:16:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4553 2026-03-22 18:28:08+00:00| seen|...

CVE-2019-25568

creationtimestamp| type| source ---|---|--- 2026-03-21 15:22:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhldjoeowo2x 2026-03-23 07:56:56+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mhplki664t2j...

CVE-2026-4535

creationtimestamp| type| source ---|---|--- 2026-03-21 08:47:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116266293950470223 2026-03-22 04:16:19+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4535 2026-03-22 06:00:31+00:00| seen|...

CVE-2026-4529

creationtimestamp| type| source ---|---|--- 2026-03-21 07:53:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116266081669772514 2026-03-21 23:18:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhm64a6a4q2n 2026-03-22 00:09:23+00:00| seen|...

GHSA-86JJ-29WC-7Q2W Duplicate Advisory: OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-792q-qw95-f446. This link is maintained to preserve external references. Original Description OpenClaw versions prior to 2026.2.25 contain an access control vulnerability in signal reaction notification handling...

Duplicate Advisory: OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-792q-qw95-f446. This link is maintained to preserve external references. Original Description OpenClaw versions prior to 2026.2.25 contain an access control vulnerability in signal reaction notification handling...

CVE-2026-2720 Hr Press Lite <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure

The Hr Press Lite plugin for WordPress is vulnerable to unauthorized access of sensitive employee data due to a missing capability check on the hrp-fetch-employees AJAX action in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level...

CVE-2026-3641 Appmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint

The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3. This is due to the plugin registering a public REST API webhook endpoint at /webhook-system without implementing webhook signature validation, secret verification, or any...

CVE-2026-3641 Appmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint

The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3. This is due to the plugin registering a public REST API webhook endpoint at /webhook-system without implementing webhook signature validation, secret verification, or any...

CVE-2026-32050

OpenClaw versions prior to 2026.2.25 contain an access control vulnerability in signal reaction notification handling that allows unauthorized senders to enqueue status events before authorization checks are applied. Attackers can exploit the reaction-only event path in event-handler.ts to queue...

CVE-2026-32050 OpenClaw < 2026.2.25 - Unauthorized Reaction Status Event Enqueue via Access Check Bypass

OpenClaw versions prior to 2026.2.25 contain an access control vulnerability in signal reaction notification handling that allows unauthorized senders to enqueue status events before authorization checks are applied. Attackers can exploit the reaction-only event path in event-handler.ts to queue...