490250 matches found
EUVD-2026-42984
Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update...
EUVD-2026-42986
Snipe-IT has missing object-level authorization in Kits API...
EUVD-2026-42989
Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancelbyadmin Parameter...
EUVD-2026-42983
Snipe-IT vulnerable to directory traversal in displaySig...
SUSE CVE-2026-80641
In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...
CVE-2026-55569 aqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory
aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...
CVE-2026-82227
Contributor SQL Injection in WPBulky = 1.2.2 versions...
CVE-2026-82220
Unauthenticated Other Vulnerability Type in Forminator = 1.57.1 versions...
CVE-2026-81767
Unauthenticated Broken Access Control in Simple Payment = 2.5.2 versions...
CVE-2026-81284
Contributor Broken Access Control in ACF Extended = 0.9.2.6 versions...
EUVD-2026-43098
Phalcon: Catastrophic backtracking ReDoS in the default Phalcon Router route lead to remote unauthenticated DoS...
cve-2019-9053
versione aggiornata dello script...
WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin LeadConnector versions = 4.0.5...
EUVD-2026-67735
Unauthenticated Other Vulnerability Type in Forminator = 1.57.1 versions...
EUVD-2026-67734
Unauthenticated Broken Access Control in Simple Payment = 2.5.2 versions...
EUVD-2026-67733
Subscriber Broken Access Control in WpEvently = 5.5.0 versions...
CVE-2026-81761 WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in WpEvently = 5.5.0 versions...
EUVD-2026-67730
Author Remote Code Execution RCE in Rank Math SEO = 1.0.276 versions...