1010 matches found
CVE-2026-31014
CVE-2026-31014 affects Dovestones Softwares AD Self Update
CVE-2026-31843
The goodoneuz/pay-uz Laravel package = 2.2.24 contains a critical vulnerability in the /payment/api/editable/update endpoint that allows unauthenticated attackers to overwrite existing PHP payment hook files. The endpoint is exposed via Route::any without authentication middleware, enabling remot...
CVE-2026-33056 affecting package rust for versions less than 1.90.0-7
CVE-2026-33056 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...
WordPress e-shot plugin <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Form Settings Modification via AJAX vulnerability
Missing Authorization to Authenticated Subscriber+ Form Settings Modification via AJAX vulnerability discovered by Poli - CMC Global in WordPress Plugin e-shot versions = 1.0.2...
CVE-2024-8354 affecting package qemu for versions less than 6.2.0-27
CVE-2024-8354 affecting package qemu for versions less than 6.2.0-27. A patched version of the package is available...
CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-4
CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-4. A patched version of the package is available...
CVE-2026-25727 affecting package rust for versions less than 1.72.0-15
CVE-2026-25727 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...
CVE-2025-71236 affecting package kernel for versions less than 5.15.202.1-1
CVE-2025-71236 affecting package kernel for versions less than 5.15.202.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-13822
MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges...
CVE-2025-13822 Authentication bypass in MCPHub
MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges...
CVE-2026-21715 affecting package nodejs24 for versions less than 24.14.1-1
CVE-2026-21715 affecting package nodejs24 for versions less than 24.14.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-40026 affecting package sleuthkit for versions less than 4.12.1-2
CVE-2026-40026 affecting package sleuthkit for versions less than 4.12.1-2. A patched version of the package is available...
CVE-2026-21714 affecting package nodejs24 for versions less than 24.14.1-1
CVE-2026-21714 affecting package nodejs24 for versions less than 24.14.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-33810 affecting package golang for versions less than 1.26.2-1
CVE-2026-33810 affecting package golang for versions less than 1.26.2-1. An upgraded version of the package is available that resolves this issue...
Amazon Linux 2 : runfinch-finch, --advisory ALAS2DOCKER-2026-106 (ALASDOCKER-2026-106)
"The version of runfinch-finch installed on the remote host is prior to 1.15.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-106 advisory. gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting fr...
Linux Distros Unpatched Vulnerability : CVE-2026-40169
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an ou...
PT-2026-32617
Name of the Vulnerable Software and Affected Versions MCPHub versions prior to 0.11.0 Description An authentication bypass exists because some endpoints are not protected by authentication middleware. This allows an unauthenticated attacker to perform actions on behalf of other users using their...
CVE-2026-33905
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an specific offset is set through the sample:offset define that could lead to an out of bounds read...