EUVD-2026-66820

Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...

GHSA-87X5-VMC3-756J vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...

CVE-2026-47850

Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...

EUVD-2026-66813

The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...

PT-2026-82443

Name of the Vulnerable Software and Affected Versions Kadence Shop Kit versions prior to 3.0.7 Description An issue exists that allows a user with subscriber privileges to perform a SQL Injection. This occurs when the application fails to properly sanitize input used in database queries, allowing...

PT-2026-82668

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=...

PT-2026-82452

Name of the Vulnerable Software and Affected Versions Epayco versions prior to 8.4.7 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database,...

PT-2026-82463

Unauthenticated SQL Injection in Beautiful Taxonomy Filters = 2.4.6 versions...

CVE-2026-37072

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php...

CVE-2026-37065

Veno File Manager Project version 4.4.9 is vulnerable to Arbitrary File Deletion . An authenticated attacker with superadmin privileges can execute a specially crafted POST request to the /vfm-admin/index.php?section=translations&action=update&remove= endpoint. By manipulating the remove URL para...

PT-2026-82442

Name of the Vulnerable Software and Affected Versions Visitor Traffic Real Time Statistics Pro versions prior to 11.18 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an...

PT-2026-82466

Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...

PT-2026-82462

Unauthenticated PHP Object Injection in Geo Controller = 8.9.8 versions...

PT-2026-82455

Name of the Vulnerable Software and Affected Versions Fluent Boards Pro versions prior to 2.0.12 Description Cross Site Scripting XSS exists in the software, allowing users with Subscriber privileges to execute malicious scripts in the browser of other users. Recommendations Update to version...

CVE-2026-37072

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php...

PT-2026-82454

Name of the Vulnerable Software and Affected Versions FluentCRM Pro versions prior to 3.1.13 Description A privilege escalation issue exists that allows a user with Editor permissions to elevate their privileges. Recommendations Update to a version newer than 3.1.12...

CVE-2026-37072

The Veno File Manager Project version 4.4.9 is vulnerable to Incorrect Access Control in the admin-head-updates.php file. An unauthenticated attacker can exploit a Local File Inclusion (LFI) vulnerability via the lang GET parameter. By sending a specially crafted POST request with the correct fil...

PT-2026-82460

Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...

CVE-2026-37065

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=...

PT-2026-82393

Spring Data REST does not guard identifier @Id and version @Version properties against mutation via RFC 6902 JSON Patch application/json-patch+json requests. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7....