23196 matches found
CVE-2026-2476
Mattermost Plugins versions =2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original plugin settings via exported configuration data. Mattermost Advisory ID: MMSA-2026-00606...
CVE-2026-4815
A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete database via 'calls0messageids' parameter in '/supportboard/include/ajax.php' endpoint...
Moderate: Red Hat Security Advisory: opencryptoki security update
An update for opencryptoki is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
As the US Midterms Approach, AI Is Going to Emerge as a Key Issue Concerning Voters
In December, the Trump administration signed an executive order that neutered states' ability to regulate AI by ordering his administration to both sue and withhold funds from states that try to do so. This action pointedly supported industry lobbyists keen to avoid any constraints and consequenc...
Moderate: Red Hat Security Advisory: opencryptoki security update
An update for opencryptoki is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
CVE-2026-1430
The WP Lightbox 2 WordPress plugin in versions prior to 3.0.7 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain settings, which allows high-privilege users, such as administrators, to execute malicious scripts. This vulnerab...
CVE-2026-20637
creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:12+00:00| seen| https://support.apple.com/en-us/126795 2026-03-26 03:00:13+00:00| seen| https://support.apple.com/en-us/126796 2026-04-22 21:00:04+00:00| published-proof-of-concept| Telegram/vKt1e4azT5T7C0rLcqmSzR1-eYk4psQyeIQOy05R--Qw2...
CVE-2026-28834
creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:12+00:00| seen| https://support.apple.com/en-us/126795 2026-03-26 03:00:13+00:00| seen| https://support.apple.com/en-us/126796...
CVE-2026-20697
creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:12+00:00| seen| https://support.apple.com/en-us/126795 2026-03-26 03:00:13+00:00| seen| https://support.apple.com/en-us/126796...
CVE-2026-20684
creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:11+00:00| seen| https://support.apple.com/en-us/126794...
CVE-2026-33526 Squid vulnerable to Denial of Service in ICP Request handling
Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP...
CVE-2026-33515 Squid has issues in ICP message handling
Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding...
The vulnerability of the create_log_context() function in the drivers/md/dm-log.c file of the support for multiple device types (RAID and LVM) in the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the createlogcontext function in the drivers/md/dm-log.c file of the support for multiple device types RAID and LVM in the Linux kernel is related to insufficient data authentication checks. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the amd_pmu_handleirq() function in the arch/x86/events/amd/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.
The vulnerability of the amdpmuhandleirq function in the arch/x86/events/amd/core.c module of the Linux operating system’s x86 kernel support module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Important: Red Hat Security Advisory: DevWorkspace Operator 0.40.0 release.
DevWorkspace Operator 0.40.0 has been released. The DevWorkspace Operator extends OpenShift to provide DevWorkspace support...
EUVD-2026-15886
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in vanquish WooCommerce Support Ticket System woocommerce-support-ticket-system allows Path Traversal.This issue affects WooCommerce Support Ticket System: from n/a through 18.5...
CVE-2026-32534
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through = 3.0.3...
CVE-2026-32522
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in vanquish WooCommerce Support Ticket System woocommerce-support-ticket-system allows Path Traversal.This issue affects WooCommerce Support Ticket System: from n/a through 18.5...
SUSE CVE-2026-33515
Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding...
