30393 matches found
CVE-2026-66442
Subscriber Broken Access Control in YayPricing = 3.5.6 versions...
CVE-2026-17514
A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes path traversal. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The...
CVE-2026-66475
CVE-2026-66475 affects the WordPress plugin “Checkout Field Editor for WooCommerce – Checkout Manager” up to version ≤ 3.0.5. The connected documents describe a Cross Site Scripting (XSS) vulnerability impacting shop manager workflows, but do not provide technical details about the root cause, af...
CVE-2026-59539 WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in Paid Member Subscriptions = 3.0.7 versions...
CVE-2026-59531
CVE-2026-59531 applies to the WordPress Falcon – WordPress Optimizations & Tweaks plugin, version
CVE-2026-48145
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
CVE-2026-57917
creationtimestamp| type| source ---|---|--- 2026-07-27 12:15:08+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-57916...
CVE-2026-57916
creationtimestamp| type| source ---|---|--- 2026-07-27 12:15:06+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-57916...
RLSA-2026:44308 Important: libpq security update
The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 For more details about the security issues,...
RLSA-2026:44438 Important: compat-openssl11 security update
The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fixes: openssl: Heap Use-After-Free in OpenSSL PKCS7verify...
ROOT-APP-MAVEN-CVE-2026-54512 CVE-2026-54512 in io.root.com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-54512 in the io.root.com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-54513 CVE-2026-54513 in io.root.com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-54513 in the io.root.com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-59871 CVE-2026-59871 in @rootio/tar - Patched by Root
Root has patched CVE-2026-59871 in the @rootio/tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-26960 CVE-2026-26960 in @rootio/tar - Patched by Root
Root has patched CVE-2026-26960 in the @rootio/tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-23950 CVE-2026-23950 in @rootio/tar - Patched by Root
Root has patched CVE-2026-23950 in the @rootio/tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-24842 CVE-2026-24842 in @rootio/tar - Patched by Root
Root has patched CVE-2026-24842 in the @rootio/tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-31802 CVE-2026-31802 in @rootio/tar - Patched by Root
Root has patched CVE-2026-31802 in the @rootio/tar package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-7210 CVE-2026-7210 in rootio-python3.9 - Patched by Root
Root has patched CVE-2026-7210 in the rootio-python3.9 package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-48144
Apache Thrift c_glib bindings are affected by an improper validation of certificate hostnames (host mismatch) leading to a potential TLS trust issue. The issue affects Thrift before 0.24.0 and is rated CRITICAL (CVSS 4.0: AV:N/AC:H/PR:N/UI:N/S:S/VC:H/VI:H/VA:N) with high impact on confidentiality...