24297 matches found
MINI-65J7-XH93-36G3
Bulletin has no description...
CVE-2026-23302
creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhbbzjc72d...
CVE-2026-12654 Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret
The Payment Plugins for Stripe WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers ...
CVE-2026-12654
CVE-2026-12654 affects Payment Plugins for Stripe WooCommerce (WordPress)
CVE-2026-12689
ProfileGrid WordPress plugin before 5.9.9.7 lacks authorization/ownership checks for certain private-message thread actions, allowing Subscriber+ authenticated users to soft-delete, tamper with metadata, or mark as read other users’ threads. Affected: ProfileGrid plugin; root cause: missing acces...
OESA-2026-3120 gnutls security update
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...
OESA-2026-3119 gnutls security update
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...
OESA-2026-3118 gnutls security update
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...
CVE-2026-16807
creationtimestamp| type| source ---|---|--- 2026-07-23 22:42:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116971701809054544 2026-07-24 02:05:03+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrebai6xxb2l 2026-07-24 12:45:38+00:00| seen|...
CVE-2026-16806
creationtimestamp| type| source ---|---|--- 2026-07-23 22:28:24+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116971648043364212 2026-07-24 11:00:58+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116974607274777234 2026-07-24 12:45:41+00:00| seen|...
CVE-2026-16805
creationtimestamp| type| source ---|---|--- 2026-07-23 22:15:23+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116971596854729313 2026-07-24 12:45:43+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-64 2026-07-24 13:30:23+00:00| seen|...
CVE-2026-62493
creationtimestamp| type| source ---|---|--- 2026-07-23 18:20:13+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61162
creationtimestamp| type| source ---|---|--- 2026-07-23 18:16:24+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60778
creationtimestamp| type| source ---|---|--- 2026-07-23 17:46:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60175
creationtimestamp| type| source ---|---|--- 2026-07-23 16:47:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-65916
CyberPanel up to version 1.9.1 contains a missing authorization vulnerability in the cancelBackupCreation handler. An authenticated user can send crafted POST requests with arbitrary backupCancellationDomain and fileName parameters to terminate backup processes, delete backup archives, corrupt ba...
MINI-2CVG-2PFM-G4CR
Bulletin has no description...