CVE-2026-57215 affecting package rabbitmq-server for versions less than 3.13.7-7

CVE-2026-57215 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...

CVE-2026-8927 affecting package cmake for versions less than 3.30.3-15

CVE-2026-8927 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

CVE-2026-10536 affecting package cmake for versions less than 3.30.3-15

CVE-2026-10536 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

NPM: n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login

NPM: n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login vulnerability discovered by ? in WordPress Npm n8n versions 2.31.5...

NPM: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs

NPM: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...

NPM: n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool

NPM: n8n: AI Agents Project Viewer Privilege Escalation via runnodetool vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...

WordPress License Manager for WooCommerce plugin <= 3.0.17 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by WiniS in WordPress Plugin License Manager for WooCommerce versions = 3.0.17...

NPM: Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

NPM: Immutable.js List 32-bit trie overflow → unrecoverable DoS vulnerability discovered by ? in WordPress Npm immutable versions 4.3.9...

NPM: Directus: SSRF Protection Bypass via 0.0.0.0 in File Import

NPM: Directus: SSRF Protection Bypass via 0.0.0.0 in File Import vulnerability discovered by ? in WordPress Npm directus versions 12.0.0...

CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2026-53151 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53151 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46135 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46135 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 / Liberty 17.0.0.3 < 26.0.0.8 (7280131)

The version of IBM WebSphere Application Server running on the remote host is affected by a vulnerability as referenced in the 7280131 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

NPM: websocket-driver: Resource limit bypass via message compression

NPM: websocket-driver: Resource limit bypass via message compression vulnerability discovered by ? in WordPress Npm websocket-driver versions 0.7.5...

CVE-2026-50183 WWBN AVideo: Stored XSS via Hostile YouTube Video Title in AVideo YouTubeAPI Gallery Section

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerability in the YouTubeAPI plugin. The plugin renders the snippet.title field returned by the YouTube Data API into the homepage gallery markup with no HTML encoding. The title is set ...

Splunk Enterprise 9.3.0 < 9.3.14, 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4.0 < 10.4.1 (SVD-2026-0703)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0703 advisory. - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below...

CVE-2025-11698

A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...

Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

PT-2026-59218

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parse sitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

CVE-2026-14740 affecting package perl-DBI for versions less than 1.650-1

CVE-2026-14740 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...