785 matches found
CLEANSTART-2026-HZ27786 Security fixes in rekor-backfill-index 1.2.2-r0
Package rekor-backfill-index version 1.2.2-r0 fixes 7 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2024-6104, ghsa-pmwq-pjrm-6p5r, CVE-2026-2303...
CVE-2026-82820
A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amfstringnew of the file src/amf.c of the component AMF String Processing. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. The exploit has been made publi...
CVE-2026-82227
Contributor SQL Injection in WPBulky = 1.2.2 versions...
WordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by JunHee CHO in WordPress Plugin WPBulky versions = 1.2.2...
PT-2026-83157
Contributor SQL Injection in WPBulky = 1.2.2 versions...
CVE-2026-19358 3CORESec Trapdoor DefaultFunction access control
A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure...
CVE-2026-19358
The CVE-2026-19358 entry concerns a weakness in 3CORESec Trapdoor, affecting the DefaultFunction up to version 1.2.2. The manipulation leads to improper access controls, with the attack described as remotely initiable over the network. Connected documents corroborate the affected component and th...
CVE-2026-19358
A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure...
CVE-2026-65543 WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...
CLSA-2025-1766019429 TuxCare security update for dompdf/dompdf (7 CVEs)
TuxCare rebuilt dompdf/dompdf to address 7 CVEs. Fixed in 1.2.2-p1+tuxcare...
CLSA-2026-1779324465 TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.2.2-tuxcare.3...
CLSA-2026-1779410887 TuxCare security update for commons-fileupload:commons-fileupload (1 CVE)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.2.2-tuxcare.4...
CLSA-2026-1777509603 TuxCare security update for commons-fileupload:commons-fileupload (1 CVE)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.2.2-tuxcare.2...
CLSA-2026-1771459792 TuxCare security update for qs (3 CVEs)
TuxCare rebuilt qs to address 3 CVEs. Fixed in 1.2.2-tuxcare.1...
CLEANSTART-2026-ZL91163 Security fixes in kubernetes-dashboard-metrics-scraper 1.2.2-r1
Package kubernetes-dashboard-metrics-scraper version 1.2.2-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139...
CLEANSTART-2026-FT78287 Security fixes in apko 1.2.2-r0
Package apko version 1.2.2-r0 fixes 1 vulnerabilities: ghsa-3xc5-wrhm-f963...
EUVD-2026-49722
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to generic SQL Injection via the 'alldatatruebookeruser' parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparatio...
CVE-2026-13161
CVE-2026-13161 affects the WordPress plugin TrueBooker – Appointment Booking and Scheduler System up to version 1.2.2. The vulnerability is a generic SQL Injection via the parameter alldata[truebooker_user], caused by insufficient escaping and inadequate preparation of the underlying SQL query. I...
PT-2026-65413
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to generic SQL Injection via the 'alldatatruebooker user' parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...