55 matches found
CVE-2026-14857: Authorization Bypass Through User-Controlled Key
The WP Crowdfunding WordPress plugin before 2.2.1 does not verify ownership of a campaign before allowing its update history to be modified and a notification email sent to its backers, allowing any authenticated users such as Subscribers to alter other users' campaigns...
May 12, 2026âKB5087545 (OS Build 20348.5139)
None None...
March 10, 2026âKB5078734 (OS Build 25398.2207)
None None...
February 10, 2026âKB5075899 (OS Build 26100.32370)
None None...
January 13, 2026âKB5074109 (OS Builds 26200.7623 and 26100.7623)
None None...
October 28, 2025âKB5067036 (OS Builds 26200.7019 and 26100.7019) Preview
None None...
EUVD-2024-35430
Malicious code in bioql PyPI...
EUVD-2024-30345
Malicious code in bioql PyPI...
June 10, 2025âKB5060531 (OS Build 17763.7434)
None None...
Fedora: Security Advisory (FEDORA-2024-d6726b5d75)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-35671
Missing Authorization vulnerability in Minoji MJ Update History.This issue affects MJ Update History: from n/a through 1.0.4...
April 8, 2025âKB5055519 (OS Build 17763.7136) - EXPIRED
None None...
March 11, 2025âKB5053602 (OS Builds 22621.5039 and 22631.5039)
None None...
March 11, 2025âKB5053606 (OS Builds 19044.5608 and 19045.5608) - EXPIRED
None None...
CVE-2022-49138
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Ignore multiple conn complete events When one of the three connection complete events is received multiple times for the same handle, the device is registered multiple times which leads to memory corruptions...
CVE-2024-32543
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Minoji MJ Update History allows Reflected XSS.This issue affects MJ Update History: from n/a through 1.0.4...
January 14, 2025âKB5050013 (OS Build 10240.20890) - EXPIRED
None None...
Solar-Log Base 15
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Solar-Log Equipment : Base 15 Vulnerability : Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' 2. RISK EVALUATION Successful...
Alisonic Sibylla
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Alisonic Equipment: Sibylla Vulnerability: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' 2. RISK EVALUATION Successful exploitation of this vulnerability...