148538 matches found
CVE-2026-44106 Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file
A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...
CVE-2026-8791
The Booking System Trafft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bookingWebsiteUrl setting in all versions up to, and including, 1.0.17 due to a missing capability check on the setoptions AJAX action when the plugin is operating in agency mode. The...
EUVD-2026-50273
The Booking System Trafft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bookingWebsiteUrl setting in all versions up to, and including, 1.0.17 due to a missing capability check on the setoptions AJAX action when the plugin is operating in agency mode. The...
CVE-2026-8791
The Booking System Trafft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bookingWebsiteUrl setting in all versions up to, and including, 1.0.17 due to a missing capability check on the setoptions AJAX action when the plugin is operating in agency mode. The...
CVE-2026-14059
An insufficient policy enforcement flaw was found in the Related-Website-Sets component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502363986...
CVE-2026-43804
CVE-2026-43804 affects Apple WebKit/Safari on macOS, iOS, iPadOS, visionOS, and macOS Tahoe. The issue is a state-management vulnerability that could allow visiting a malicious website to trigger an app denial-of-service. Apple patched this in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6,...
CVE-2026-65568
Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...
CVE-2026-65568 WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability
Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...
CVE-2026-65568
Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...
CVE-2026-65568
The CVE-2026-65568 entry concerns the WordPress Visual Composer Website Builder plugin (versions
PT-2026-65196
Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6 iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 visionOS versions prior to 26.6 Description Visiting a website may lead to an app denial-of-service, which is a condition...
CVE-2026-8308
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Polen Media Software and Information Services Website Template allows Reflected XSS. This issue affects Website Template: before v2...
EUVD-2026-48599
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Polen Media Software and Information Services Website Template allows Reflected XSS. This issue affects Website Template: before v2...
CVE-2026-8308 Reflected XSS Polen Media's Website Template
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Polen Media Software and Information Services Website Template allows Reflected XSS. This issue affects Website Template: before v2...
CVE-2026-8308
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Polen Media Software and Information Services Website Template allows Reflected XSS. This issue affects Website Template: before v2...
CVE-2026-8308
Polen Media Website Template (before v2) contains a Reflected XSS due to improper neutralization of input during web page generation. Affects the Website Template component; root cause is insufficient input sanitization. CVSSv3.1 base score 6.1 (Medium) with Network attack vector, Low attack comp...
PYSEC-2026-3447
creationtimestamp| type| source ---|---|--- 2026-07-24 09:40:25+00:00| seen| https://gist.github.com/sw1pp3r/00f32e3393b6c6123cc7aeaff3ed9f18...
WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Visual Composer Website Builder versions = 45.15.0...
PT-2026-64306
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Polen Media Software and Information Services Website Template allows Reflected XSS. This issue affects Website Template: before v2...