CVE-2026-15662

CVE-2026-15662 affects the WordPress plugin “Advanced Woo Labels – Product Labels & Badges for WooCommerce” up to version 2.48. The vulnerability is a Stored Cross-Site Scripting via the bg_color parameter, caused by insufficient input sanitization and output escaping. An attacker with contributo...

CLEANSTART-2026-OV66054 Security fixes in $pkgname-$CTARGET_ARCH 2.40-r10

Package $pkgname-$CTARGETARCH version 2.40-r10 fixes 1 vulnerabilities: CVE-2023-1972...

CLEANSTART-2026-AG72507 Security fixes in dex 2.45.1-r3

Package dex version 2.45.1-r3 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39834, CVE-2026-39821, CVE-2026-25680...

CVE-2026-55081

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. The DHIS2 OpenAPI HTML endpoint reflected values from the scope query parameter into the generated HTML document without sufficient sanitization. A crafted scope value could be rendered a...

CVE-2022-24045

creationtimestamp| type| source ---|---|--- 2026-07-17 05:00:05+00:00| seen| https://t.me/EchelonEyes/276 2026-07-18 00:00:38+00:00| seen| https://t.me/EchelonEyes/276...

CVE-2026-13595 affecting package util-linux for versions less than 2.40.2-5

CVE-2026-13595 affecting package util-linux for versions less than 2.40.2-5. A patched version of the package is available...

CVE-2026-48918

Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default...

EUVD-2026-32510

Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation...

CVE-2026-8275

A vulnerability was detected in bettercap up to 2.41.5. Affected by this vulnerability is the function ippReadChunkedBody of the file modules/zerogod/zerogodippprimitives.go of the component zerogod IPP Service. Performing a manipulation results in integer coercion error. The attack can be...

GHSA-CWFQ-RFCR-8HMP Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs

Zebra Transparent SIGHASHSINGLE Corresponding-Output Handling Diverges From zcashd Summary For V5+ transparent spends, Zebra and zcashd disagree on the same consensus rule: SIGHASHSINGLE must fail when the input index has no corresponding output. zcashd treats this as consensus-invalid under...

CVE-2026-5928 Potential buffer under-read in ungetwc

Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially...

CVE-2026-5358

REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distributions and as such this makes the API provisional and unused. Secondly it has been discovered that the NIS+ cold start cache...

GNU C Library 安全漏洞

The GNU C Library is an open-source, free C-language compiler program published by the GNU community under the LGPL license. Versions of the GNU C Library 2.43 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the use of the ungetwc function on character sets with...

CVE-2025-69649 affecting package binutils for versions less than 2.41-11

CVE-2025-69649 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-69647 affecting package binutils for versions less than 2.41-11

CVE-2025-69647 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-1147 affecting package binutils for versions less than 2.41-11

CVE-2025-1147 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-69648 affecting package binutils for versions less than 2.41-11

CVE-2025-69648 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-11839 affecting package binutils for versions less than 2.41-11

CVE-2025-11839 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2026-39415

Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to 2.46.0, a vulnerability has been identified in Frappe Learning where quiz scores can be modified by students before submission. The application currently relies on client-side calculated...

EUVD-2026-20603

Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to 2.46.0, a vulnerability has been identified in Frappe Learning where quiz scores can be modified by students before submission. The application currently relies on client-side calculated...