490206 matches found
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: NFSv4: Fixed an error in pnfsmarkrequestcommit, when performing ODIRECT operations. Fixed an error-prone condition in pnfsmarkrequestcommit, when adding a set of write operations to the commit list in order to reschedule them...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-pf: Fixed the use of GFPKERNEL in atomic contexts for rt. The commit 4af1b64f80fb “octeontx2-pf: Fixed the lmtst ID used in aurafree” uses get/putcpu to protect the usage of percpu pointers in the -aurafreeptr...
WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by sungbyeongchan in WordPress Plugin Magazine Blocks versions = 1.8.6...
WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Booking and Rental Manager versions = 2.7.5...
CVE-2026-78317
A SQL Injection vulnerability in Delta DIAEnergie v1.11.00.002 allows a network-based attacker with low privileges to achieve remote code execution , resulting in high impact to confidentiality, integrity, and availability. The NVD-assigned CVSS 3.1 score is 8.8 (High) . No specific remediation v...
EUVD-2026-64760
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78315
Delta DIAEnergie v1.11.00.002 is affected by a SQL Injection vulnerability that allows an attacker to achieve remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with a network attack vector, low attack complexity, and low privileges required. CISA's SSVC assessment indicates no known...
CVE-2026-78314 DIAEnergie - SQL Injection
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
BIT-COSIGN-2026-22703 Cosign verification accepts any valid Rekor entry under certain conditions
Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...
WordPress Woo Essential plugin <= 4.3.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by qdtad in WordPress Plugin Woo Essential versions = 4.3.0...
WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Brave Conversion Engine PRO versions = 0.8.6...
ROOT-OS-DEBIAN-13-CVE-2025-58189 CVE-2025-58189 in golang-1.24 - Patched by Root
Root has patched CVE-2025-58189 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-61732 CVE-2025-61732 in golang-1.24 - Patched by Root
Root has patched CVE-2025-61732 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-61728 CVE-2025-61728 in golang-1.24 - Patched by Root
Root has patched CVE-2025-61728 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...
WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Jamaal ahmed in WordPress Plugin ProLancer Element versions = 1.4.8...
WordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by Jamaal ahmed in WordPress Plugin WooCommerce File Approval versions = 10.7...
CVE-2026-78187 Piwigo Public Authentication cross site scripting
A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...
PT-2026-80841
Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...