1962 matches found
Cockpit Web Console < 360 - Remote Code Execution
Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH...
EUVD-2026-51529
Missing authorization in Checkmk 2.5.0p10, 2.4.0p35, 2.3.0p49, and 2.2.0 EOL allows an authenticated user lacking the "Edit foreign Reports" permission to modify reports owned by other users...
CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5
CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5. A patched version of the package is available...
CVE-2026-11622 affecting package bind for versions less than 9.20.26-1
CVE-2026-11622 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56852 affecting package multus for versions less than 4.0.2-10
CVE-2026-56852 affecting package multus for versions less than 4.0.2-10. A patched version of the package is available...
CVE-2026-56852 affecting package keda for versions less than 2.14.1-16
CVE-2026-56852 affecting package keda for versions less than 2.14.1-16. A patched version of the package is available...
CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6
CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6. A patched version of the package is available...
CVE-2026-56852 affecting package opa for versions less than 0.63.0-5
CVE-2026-56852 affecting package opa for versions less than 0.63.0-5. A patched version of the package is available...
CVE-2026-10723 affecting package bind for versions less than 9.20.26-1
CVE-2026-10723 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-66489
Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox 2.20.2...
CVE-2026-65884
Joomla Extension - balbooa.com - Privilege Escalation in Gridbox 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions...
CVE-2026-65946
CVE-2026-65946 : Joomla extension rolandd.com RO CSVI is vulnerable to XSS in AJAX endpoint handlers in versions
WordPress security-ninja-premium plugin < 5.290 - Two-Factor Authentication Bypass vulnerability
Two-Factor Authentication Bypass vulnerability discovered by Adam Clinch in WordPress Plugin security-ninja-premium versions 5.290...
CVE-2026-57219 affecting package rabbitmq-server for versions less than 3.13.7-7
CVE-2026-57219 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...
NPM: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
NPM: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...
NPM: n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
NPM: n8n: AI Agents Project Viewer Privilege Escalation via runnodetool vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...
NPM: Directus: SSRF Protection Bypass via 0.0.0.0 in File Import
NPM: Directus: SSRF Protection Bypass via 0.0.0.0 in File Import vulnerability discovered by ? in WordPress Npm directus versions 12.0.0...
CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24
CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...
CVE-2026-53151 affecting package kernel for versions less than 6.6.144.1-1
CVE-2026-53151 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...