4033 matches found
CVE-2026-59531 WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerability
Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks = 2.10.0 versions...
CVE-2026-63319
QEMU USB Redirect Infinite Loop / Divide-by-Zero via maxpacketsize=0...
CVE-2026-15705
usbredir: fix use-after-free on buffered bulk packet overflow...
WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerability
Unknown vulnerability discovered by dodoh4t in WordPress Plugin Falcon – WordPress Optimizations & Tweaks versions = 2.10.0...
UBUNTU-CVE-2026-35336
Unknown description...
CVE-2026-60651
CVE-2026-60651 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise WebCenter Content; exploitation requires user in...
CVE-2026-60248
...
BELL-CVE-2026-38754
Bulletin has no description...
CVE-2026-62319
Unknown description...
SUSE CVE-2026-50274
Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or...
SUSE CVE-2026-54463
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft versions of the WebSocket protocol in websocket-driver include a length header that allows an arbitrarily large integer to be encoded as bytes with the high bit set, and a server or client can send an...
CVE-2026-57825
Unknown description...
CVE-2026-45094
Unknown description...
SUSE CVE-2026-54904
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReferenceupdate can enter a permanent busy retry loop when the current value is Float::NAN. The issue is caused by the interaction between AtomicReferenceupdate, which retries until compareandsetoldvalue,...
SUSE CVE-2026-54282
Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating scheme://hostpath and re-parsing the result, a path that does not begin with / for example...
CVE-2026-39043
Heap buffer overflow in Matroska demuxer...
BELL-CVE-2026-48914
Bulletin has no description...
SUSE CVE-2026-11791
A flaw was found in 389 Directory Server. During schema reload, the attrsyntaxswapht function unconditionally frees attribute syntax information nodes, bypassing the refcount-based deferred deletion used elsewhere in the attribute syntax subsystem. If an administrator triggers schema reload while...
CVE-2026-47165
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, the distributed pixel cache was originally designed to operate without a challenge–response authentication model. This has been changed in versions 6.9.13-48 an...