490243 matches found
CVE-2026-62114
Unauthenticated Broken Access Control in Passster = 4.3.13 versions...
CVE-2026-62111
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-62105
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
[SECURITY] Fedora 45 Update: dokuwiki-20260714c-1.fc45
DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...
[SECURITY] Fedora 45 Update: firefox-155.0-1.fc45
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 45 Update: rclone-1.75.0-2.fc45
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...
EUVD-2026-76202
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
CVE-2026-62114
Unauthenticated Broken Access Control in the WordPress Passster plugin, affecting versions ≤ 4.3.13 . Discovered by Salúa Es-sair (via Patchstack), the flaw allows an unauthenticated attacker over the network with low complexity to achieve low confidentiality impact (CVSS 5.3 / MEDIUM). No integr...
EUVD-2026-76209
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
EUVD-2026-76208
Editor SQL Injection in Amelia = 2.4.9 versions...
EUVD-2026-76213
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
EUVD-2026-76214
Unauthenticated PHP Object Injection in Everest Forms = 3.6.0 versions...
EUVD-2026-76197
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
EUVD-2026-76196
Subscriber Privilege Escalation in Gato GraphQL = 19.2.3 versions...
CVE-2026-87984
Mistral Vibe , introduced in version 1.3.4 , contains an arbitrary file write vulnerability. The root cause is that shell redirection destinations are omitted from permission checks , allowing otherwise allowlisted commands to create or overwrite files at arbitrary paths accessible to the Vibe pr...
EUVD-2026-76118
An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted shell commands. Improper handling of quotation marks during path validation enables files outside the active workspace ...
CVE-2026-89212 XML External Entity in Akana API Platform
A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...
EUVD-2026-76103
A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...
