266444 matches found
CVE-2026-1127: Improper Neutralization of Input During Web Page Generation
The Timeline Event History plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the id parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
WordPress Plugin: Timeline Event History – Cross-Site Script Vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...
PT-2026-4602
The Timeline Event History plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the id parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2026-24037
creationtimestamp| type| source ---|---|--- 2026-01-22 07:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcynbvdfph2t...
CVE-2026-23516
creationtimestamp| type| source ---|---|--- 2026-01-22 02:17:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcy4mpi75j2m...
CVE-2026-23961
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under...
CVE-2026-23961 Mastodon may allow a remote suspension bypass
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under...
CVE-2026-23961 Mastodon may allow a remote suspension bypass
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under...
CVE-2026-23961
Summary of CVE-2026-23961 (Mastodon): A logic flaw in how suspended remote users are handled allows old posts from those users to appear in timelines, and under some circumstances, newly created posts from suspended users can be processed and surfaced. Affected releases span multiple lines: v4.5....
CVE-2026-23961
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under...
EUVD-2026-4207
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under...
CVE-2026-23961: Incorrect Authorization
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under...
MiracleLinux 9 : firefox-128.3.1-2.el9_4.ML.1 (AXSA:2024-8908:34)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8908:34 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the...
MiracleLinux 8 : firefox-128.3.1-2.el8_10.ML.1 (AXSA:2024-8909:35)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8909:35 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the...
MiracleLinux 8 : thunderbird-128.3.1-1.el8_10.ML.1 (AXSA:2024-8910:25)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8910:25 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the...
kernel: drm/xe: Make dma-fences compliant with the safe access rules
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At t...
CVE-2026-1139
creationtimestamp| type| source ---|---|--- 2026-01-19 06:03:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcqxtl5vjg2i 2026-01-19 07:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcr3ixplwd27...
CVE-2026-1122
creationtimestamp| type| source ---|---|--- 2026-01-18 17:41:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcpoeojkxp27 2026-09-07 04:00:04+00:00| published-proof-of-concept| Telegram/PZ4h1bEYzQUZNpz5jejfcfkAUPMGmF2SrshkVKYlc3YG-0E 2026-09-08 00:01:01+00:00|...
CVE-2026-21913
creationtimestamp| type| source ---|---|--- 2026-01-15 21:38:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcik775ncy2r 2026-01-15 21:54:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcil4m2oe427 2026-01-15 22:04:35+00:00| seen|...