112620 matches found
MINI-WW3C-HC4R-PC8M
Bulletin has no description...
BIT-DISCOURSE-2026-72729 Discourse: Stored XSS in discourse-local-dates plugin
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the discourse-local-dates plugin rendered crafted local-date format data as HTML on sites with a modified or disabled default Content Security Policy. This issue is fixed in versions 2026.1.6,...
MINI-F5CF-HQVJ-JVVF
Bulletin has no description...
MINI-GPF9-WPXG-XJW8
Bulletin has no description...
MINI-GRG5-8HGP-47CV
Bulletin has no description...
EUVD-2026-59866
The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injection via 'randoncategory' Quiz Option in all versions up to, and including, 11.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
CVE-2026-19927 OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgery
A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload of the file grails-app/controllers/org/pih/warehouse/product/ProductController.groovy of the component Product Upload Endpoint. Performing a manipulation of the argument params.url results in server-si...
MINI-QCQR-36WV-88H7
Bulletin has no description...
MINI-762H-G653-93FM
Bulletin has no description...
MINI-F9R4-WJM6-VFJG
Bulletin has no description...
DEBIAN-CVE-2026-74537
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in isoconnready sk deref in isoconnready must be done either under conn-lock, or holding a refcount, to avoid concurrent close. conn-sk is currently accessed without either: Task 1 Task 2...
CVE-2026-16586
CVE-2026-16586 affects the WordPress plugin “Contest Gallery” (all versions up to 30.0.7). It describes a Second-Order SQL Injection via the parameter cgRealId in the function path cg_multiple_files_for_post , caused by insufficient escaping of user input and lack of proper SQL query preparation....
CVE-2014-9495
creationtimestamp| type| source ---|---|--- 2026-08-14 16:00:10+00:00| seen| https://t.me/purpsec/869 2026-08-15 00:00:12+00:00| published-proof-of-concept| https://t.me/purpsec/869...
Denial Of Service (DoS)
Micrometer is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of specially crafted HTTP requests, which allows an attacker to send malicious requests that consume excessive resources and cause the affected application to become unavailable...
WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Steven Julian in WordPress Plugin Theme Test Drive versions = 2.9.1...
GO-2024-2653 vulnerabilities
Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...
GO-2025-3774 vulnerabilities
Vulnerabilities for packages: node-feature-discovery, calico, rancher-agent, azuredisk-csi, cloud-provider-gcp-cloud-controller-manager-fips, rancher-fleet-fips, rancher, blob-csi, argo-cd, longhorn-share-manager-fips, longhorn-share-manager, kubernetes-csi-driver-hostpath, blob-csi-fips,...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: fulcio, flux-kustomize-controller, spire-server, gitsign, kots, dex, cosign-fips, spire-server-fips, slsa-verifier, flux-source-controller, timestamp-authority-fips, argo-workflows, rekor, kubescape, tkn, bank-vaults-fips, falcoctl-fips, cosign, vexctl, tekton-chains...
WordPress Prevent Direct Access - Protect WordPress Files plugin <= 2.8.8.8 - Unauthenticated Protected File Access vulnerability
WordPress Prevent Direct Access - Protect WordPress Files plugin = 2.8.8.8 - Unauthenticated Protected File Access vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Prevent Direct Access versions = 2.8.8.8...