ROOT-OS-UBUNTU-2204-CVE-2026-64523 CVE-2026-64523 in linux - Patched by Root

Root has patched CVE-2026-64523 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-37945 CVE-2025-37945 in linux - Patched by Root

Root has patched CVE-2025-37945 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

SUSE CVE-2026-80816

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a device...

CVE-2026-53602

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula certificate, because nebula-mgmt does not re-evaluate revocation/authorization state at certificate...

CVE-2026-85663

creationtimestamp| type| source ---|---|--- 2026-09-04 16:08:03+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mupdwlh55522 2026-09-04 16:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mupe274p6g22...

EUVD-2026-71251

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a device...

CVE-2026-78328

creationtimestamp| type| source ---|---|--- 2026-09-04 12:40:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoycvzfvn26 2026-09-04 20:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mupsl3nf4r2l 2026-09-04 22:00:51+00:00| seen|...

CVE-2026-75431

creationtimestamp| type| source ---|---|--- 2026-09-04 09:45:00+00:00| seen| https://gist.github.com/unpredictable21/39e6ce22e4bc45b0e553d0fa6a6e4d1c 2026-09-04 18:08:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mupko5ze6u2w 2026-09-05 07:02:26+00:00| seen|...

CVE-2026-84146

CVE-2026-84146 affects the Xpro Addons — 140+ Widgets for Elementor WordPress plugin in versions prior to 1.7.8 . The plugin fails to perform a capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier. This allows unauthenticated visitors t...

CVE-2026-84146 Xpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.8 does not perform any capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier, allowing unauthenticated visitors to retrieve the title, price, SKU, description and...

EUVD-2026-70913

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.8 does not perform any capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier, allowing unauthenticated visitors to retrieve the title, price, SKU, description and...

CVE-2026-17517

The Content Views WordPress plugin before 4.5.1.2 fails to verify whether the requesting user is authorized to read the posts returned by a view. This allows unauthenticated attackers to retrieve the title and content of non-public posts—draft, pending, private, and scheduled —whenever a view is ...

CVE-2026-17517 Content Views < 4.5.1.2 - Unauthenticated Non-Public Post Content Disclosure via Views Status Filter

The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns, allowing unauthenticated attackers to obtain the title and content of non-public posts, such as draft, pending, private and scheduled posts, when a view has...

CVE-2026-85402

creationtimestamp| type| source ---|---|--- 2026-09-04 03:49:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4mhm6vtln7xxe...

CVE-2026-67398

creationtimestamp| type| source ---|---|--- 2026-09-04 01:47:14+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muntrgu2232e 2026-09-06 11:05:07+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3muttwqaf6n2u...

CVE-2026-85049

creationtimestamp| type| source ---|---|--- 2026-09-04 00:03:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117209839276217417 2026-09-04 04:46:19+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260904 2026-09-04 12:40:32+00:00| seen|...

CVE-2026-85433

creationtimestamp| type| source ---|---|--- 2026-09-03 23:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3munm643azs2p 2026-09-04 00:09:02+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3munodpif7422...

CVE-2026-85048

creationtimestamp| type| source ---|---|--- 2026-09-03 20:00:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117208884349943959 2026-09-04 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260904 2026-09-04 12:40:32+00:00| seen|...

CVE-2026-85187

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

CVE-2026-85187

itsourcecode Online Medicine Delivery System 1.0 is affected by an SQL injection vulnerability in the Order::pupdate function within the file /rider/orders/controller.php?action=edit&actions=confirm (component: Order Status Update). The vulnerability is triggered by manipulating the ID argument, ...