472071 matches found
CVE-2026-14465
Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs aka Session Replay. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
EUVD-2026-52653
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Stored XSS. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
CVE-2026-14219
URL redirection to untrusted site 'open redirect' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phishing. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
EUVD-2026-52649
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
CVE-2026-14194
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
EUVD-2026-52648
Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
CVE-2026-16547
CVE-2026-16547 affects the WordPress REST API Log plugin prior to 1.7.1. The log download endpoint does not bind the token to the requested log entry nor verify requester capabilities, allowing unauthenticated users possessing a valid token to download REST API request/response logs that may incl...
CVE-2026-16293
CVE-2026-16293 affects the Blubrry PowerPress WordPress plugin prior to version 11.16.11. The issue is a Stored XSS in Podcast Episode settings due to insufficient sanitisation/escaping, allowing low-privilege users (Contributor) to inject scripts even when unfiltered_html is disallowed. Vulnerab...
CVE-2026-16070
Brizy WordPress plugin prior to 2.8.19 is affected by an authorization issue (IDOR) in template-type updates. The plugin does not properly verify authorization on the object being modified, validating a request parameter different from the one used in the write operation, enabling users with Cont...
CVE-2026-14848
The CVE-2026-14848 entry concerns the Paid Memberships Subscriptions WordPress plugin (versions prior to 3.0.8). The vulnerability arises in the change-subscription checkout: an authenticated user with Subscriber-level access (or higher) cannot reliably verify that the subscription being modified...
CVE-2026-14939
CVE-2026-14939 affects the Visualizer: Tables and Charts Manager WordPress plugin, vulnerable before version 4.0.6. The issue arises because a user-supplied URL is not restricted to safe address ranges when fetched server-side, enabling a Contributor+ user to perform a server-side request forgery...
CVE-2026-14872
CVE-2026-14872 affects the WordPress plugin family “Database for Contact Form 7, WPforms, Elementor forms” (pre-1.5.5). The issue arises because the plugin does not properly sanitize or escape the id parameter before using it in an SQL statement, enabling an SQL Injection. Exploitation is possibl...
EUVD-2026-52586
The Paid Membership Subscriptions WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user with Subscriber-level access and above to take over another member's...
ROOT-OS-UBUNTU-2204-CVE-2026-64268 CVE-2026-64268 in linux - Patched by Root
Root has patched CVE-2026-64268 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-46320 CVE-2026-46320 in linux - Patched by Root
Root has patched CVE-2026-46320 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-38340 CVE-2025-38340 in linux - Patched by Root
Root has patched CVE-2025-38340 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2024-49905 CVE-2024-49905 in linux - Patched by Root
Root has patched CVE-2024-49905 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-23119 CVE-2026-23119 in linux - Patched by Root
Root has patched CVE-2026-23119 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...