490166 matches found
CVE-2026-66586
Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...
EUVD-2026-63316
Subscriber Arbitrary File Upload in IT Residence = 3.2.1 versions...
CVE-2026-66601
Subscriber-level authenticated users can inject arbitrary JavaScript into the Media Library Assistant plugin (≤3.39) admin interface, enabling session hijacking or data theft. CVSS 6.5 (MEDIUM). Update to version 3.40 or later; no in-the-wild exploitation reported. See: https://patchstack.com/dat...
CLSA-2026-1787225546 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post11+tuxcare...
WordPress Payment Gateway for Redsys & WooCommerce Lite plugin < 7.0.2 - Unauthenticated Payment Confirmation via Unverified Inespay Callback vulnerability
Unauthenticated Payment Confirmation via Unverified Inespay Callback vulnerability discovered by Shivamani Vastrala in WordPress Plugin Redsys for WooCommerce Light versions 7.0.2...
OESA-2026-3405 kata-containers security update
This is core component of Kata Container, to make it work, you need a isulad/docker engine. Security Fixes: Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. Prior to version 4.0.0, kata-runtime is...
cvelistV5 cve_2026-08-20_0000Z
Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...
ECHO-2861-D781-30A1
Bulletin has no description...
WordPress Flatastic theme <= 2.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Flatastic versions = 2.0...
MINI-VG5H-4H2V-M4P4
Bulletin has no description...
MINI-JC8X-2QGG-R2PM
Bulletin has no description...
MINI-V26V-XQRR-RJ53
Bulletin has no description...
CVE-2026-76795 AeternaLabsHQ PullMD REST API Endpoint api server-side request forgery
A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the component REST API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to th...
EUVD-2026-63190
A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the component REST API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to th...
CVE-2026-53793 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53793 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-46600 affecting package golang for versions less than 1.26.6-1
CVE-2026-46600 affecting package golang for versions less than 1.26.6-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-15308 affecting package python3 for versions less than 3.12.14-1
CVE-2026-15308 affecting package python3 for versions less than 3.12.14-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-69249 affecting package python-cryptography for versions less than 42.0.5-5
CVE-2026-69249 affecting package python-cryptography for versions less than 42.0.5-5. A patched version of the package is available...