23740 matches found
CLEANSTART-2026-QT21347 Security fixes in go-discover-fips 0_git20250325-r1
Package go-discover-fips version 0git20250325-r1 fixes 3 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...
CLEANSTART-2026-WI97391 Security fixes in opensearch-k8s-operator-fips 2.7.0-r8
Package opensearch-k8s-operator-fips version 2.7.0-r8 fixes 23 vulnerabilities: CVE-2026-25679, CVE-2025-61726, CVE-2025-61725, CVE-2025-61723, CVE-2026-27142...
CLEANSTART-2026-FH57002 Security fixes in opentofu-fips 1.7.10-r2
Package opentofu-fips version 1.7.10-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...
CLEANSTART-2026-YF39699 Security fixes in prometheus-operator 0.69.1-r3
Package prometheus-operator version 0.69.1-r3 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...
CLEANSTART-2026-ZU41550 Security fixes in elastic-beats 9.3.7-r0
Package elastic-beats version 9.3.7-r0 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...
WordPress WP Password Policy plugin <= 3.7.1 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by zickzick2 in WordPress Plugin WP Password Policy versions = 3.7.1...
CVE-2026-58066
creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtujmg3ak2a 2026-07-30 07:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtukzihe22w 2026-07-30 07:10:21+00:00| seen|...
CVE-2026-58046
creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtujl5bc42j 2026-07-30 07:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtukscvpt22 2026-07-30 07:08:22+00:00| seen|...
WordPress BookingPress Pro plugin < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering vulnerability
Unauthenticated Customer PII Disclosure and Booking Tampering vulnerability discovered by Kolja Zuelsdorf in WordPress Plugin BookingPress Appointment Booking Pro versions 5.7.3...
CVE-2026-14318 GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings
The GiveWP WordPress plugin before 4.16.3 does not escape a donation-form template setting before outputting it in an HTML attribute, allowing users with the GiveWP Worker role and above to inject arbitrary web scripts that execute on the public donation form viewed by any visitor...
CVE-2026-15153 WP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List Search
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
CVE-2026-67247
A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...
EUVD-2026-50965
A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...
EUVD-2026-50964
A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...
CVE-2026-67245 A path traversal vulnerability was found in the VPN Clients on the ADM
A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...
CVE-2026-67244
A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration input may be processed through an unsafe format string operation. An authenticated administrator can exploit this issue to disclose memory...
CVE-2026-67244
A format string vulnerability in ADM’s Notification OAuth settings is triggered by user-controlled notification configuration input that is processed via an unsafe format-string operation. Exploitation requires authenticated administrator privileges and can disclose memory information or cause de...
EUVD-2026-50954
A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an error response and processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory...
EUVD-2026-50957
A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...
