298748 matches found
EUVD-2026-93405
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...
ROOT-APP-NPM-CVE-2020-7754 CVE-2020-7754 in npm-user-validate - Patched by Root
Root has patched CVE-2020-7754 in the npm-user-validate package for Root:npm. Multiple fixed versions available...
UBUNTU-CVE-2026-98184
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...
CVE-2026-32572
Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...
CVE-2026-105058
Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...
CVE-2026-98215
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...
EUVD-2026-93084
Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...
CVE-2026-105058
The WordPress WP User Profiles plugin versions
CVE-2026-105058 WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...
CVE-2026-105058 WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...
CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...
CVE-2026-41555
The Newsletter Subscription Form – User Subscriptions Form, Capture Email WordPress plugin (versions
CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...
CVE-2026-32572
The WP User Frontend Pro plugin for WordPress (versions
EUVD-2026-93235
Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...
CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...
CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...
github.com/moby/sys/user: moby/sys/user: Denial of Service via crafted user or group database files
A flaw was found in the moby/sys/user package. The package does not properly limit memory allocation when parsing Unix-style user and group database files, such as /etc/passwd or /etc/group. An attacker who can supply a specially crafted file can cause excessive memory consumption, leading to a...