299903 matches found
CVE-2026-86530
BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command...
CVE-2026-82375 Apache Roller: Server-side request forgery via entry trackback and enclosure URLs
Server-Side Request Forgery SSRF in Apache Roller 6.1.5 allows an authenticated user with entry-editing rights on a weblog to cause outbound HTTP requests to attacker-chosen destinations through legacy outbound Trackback and entry enclosure handling. The Trackback control is hidden in the standar...
CVE-2026-82348 Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups
Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belonging to another weblog through unscoped identifier-based lookups. This affects multi-user installations where users ar...
CVE-2026-82348 Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups
Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belonging to another weblog through unscoped identifier-based lookups. This affects multi-user installations where users ar...
EUVD-2026-88094
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...
USN-8826-1 lxc vulnerabilities
Maher Azzouzi discovered that LXC did not correctly handle logging certain failure messages. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2022-4795...
USN-8826-1: LXC vulnerabilities
Maher Azzouzi discovered that LXC did not correctly handle logging certain failure messages. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2022-4795...
PT-2026-102389
Name of the Vulnerable Software and Affected Versions Cotonti version 1.0.0 Description A cross-site request forgery CSRF issue exists in the 'admin.users.php' endpoint. This occurs because the system fails to perform token verification, allowing an attacker to trick an authenticated administrato...
PT-2026-99775
Name of the Vulnerable Software and Affected Versions Blacklist Manager for WooCommerce WordPress plugin versions 1.3.0 through 2.3.1 Description The plugin fails to enforce user blocking across all authentication paths. This allows users who have been blocked by the site owner to continue...
CVE-2026-55157: Improper Neutralization of Special Elements used in an OS Command
Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smartuser tool. Any MCP client that can call the smartuser too...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates CVE-2026-64098 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialize...
PT-2026-99875
Name of the Vulnerable Software and Affected Versions Enocta Platform versions prior to 2026-09-28 Description An authorization bypass exists due to the use of user-controlled keys, which allows for the exploitation of trusted identifiers. Recommendations Update Enocta Platform to a version...
PT-2026-99958
FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel UCP are able to execute arbitrary commands on the PBX as the webserver user typically asterisk using specially crafted HTTP strings. Authenticated access to UCP is required. Note tha...
PT-2026-99908
A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is configured to include the idp tag. An unauthenticated attacker can send requests to the identity broker login endpoint using...
PT-2026-102408
Name of the Vulnerable Software and Affected Versions mall4j versions prior to 4.1 Description The software fails to enforce authorization checks on GET endpoints within the UserAddrController used to retrieve customer address data. Authenticated attackers can access the '/user/addr/page' and...
CVE-2026-101333: Allocation of Resources Without Limits or Throttling
A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is configured to include the idp tag. An unauthenticated attacker can send requests to the identity broker login endpoint using...
CVE-2026-101093: Cross-Site Request Forgery (CSRF)
Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers can craft malicious links or pages that trick authenticated administrators into deleting custom groups and their associate...
CVE-2026-54674: Improper Neutralization of Special Elements used in an OS Command
FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel UCP are able to execute arbitrary commands on the PBX as the webserver user typically asterisk using specially crafted HTTP strings. Authenticated access to UCP is required. Note tha...
PT-2026-102404
Name of the Vulnerable Software and Affected Versions mall4j versions prior to 4.0 Description A missing authentication flaw exists in the 'PUT /user/updatePwd' endpoint. This allows unauthenticated attackers to reset the password of any storefront account by providing a target username in the...
PT-2026-99788
Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description An authorization bypass exists that allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belonging to another weblog. This occurs through unscoped...