CVE-2026-3139

The CVE-2026-3139 vulnerability affects the WordPress plugin “User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor” up to version 3.15.5. The issue is insecure direct object reference via wppb_save_avatar_value(), caused by missing validation on a user-contro...

PT-2022-12019 · Apache +2 · Apache Http Server +2

Name of the Vulnerable Software and Affected Versions: Northern.tech CFEngine Enterprise versions prior to 3.15.5 Northern.tech CFEngine Enterprise versions 3.18.x prior to 3.18.1 Description: The issue is related to insecure permissions, which may allow unauthorized local users to access log...

Cross site scripting

LimeSurvey version 3.15.5 contains a Cross-site scripting XSS vulnerability in Survey Resource zip upload, resulting in Javascript code execution against LimeSurvey administrators. Fixed in version 3.15.6...

MozillaFirefox: Update to version 28.0 (important)

Mozilla Firefox was updated to version 28.0, receiving enhancements, bug and security fixes. Mozilla NSPR was updated to 4.10.4 receiving enhancements, bug and security fixes. Mozilla NSS was updated to 3.15.5 receiving enhancements, bug and security fixes. Changes in MozillaFirefox: - update to...