190 matches found
WordPress Defender Security plugin < 6.2.0 - Admin+ Network-Wide RCE vulnerability
Admin+ Network-Wide RCE vulnerability discovered by Jakub Herman in WordPress Plugin Defender Security versions 6.2.0...
CVE-2026-18702
An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...
EUVD-2026-56918
An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...
CVE-2026-18702
An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...
MAL-2026-11882 Malicious code in @servicetitan/kendo-theme (npm)
npm/@servicetitan/kendo-theme is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in native-frontend-orb (npm)
npm/native-frontend-orb is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...
PT-2026-33248
Name of the Vulnerable Software and Affected Versions WinMatrix agent affected versions not specified Description A missing authentication flaw allows authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine. This issue can lead to privilege escalation...
CVE-2025-68153
Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From versions 2.9 to before 2.9.56 and 3.6 to before 3.6.19, any authenticated user, machine or controller under a Juju...
Multi-Vendor BIOS Security Vulnerabilities (April 2025) - Lenovo Support US
No description provided...
NetApp SnapCenter Privilege Escalation Vulnerability - Lenovo Support US
No description provided...
AMI MegaRAC SPx Redfish Authentication Bypass - Lenovo Support US
No description provided...
MediaTek wLAN AP Firmware Vulnerability - Lenovo Support US
No description provided...
AMD GPU Cross-Process Memory Disclosure - Lenovo Support US
No description provided...
Multi-Vendor BIOS Security Vulnerabilities (February 2025) - Lenovo Support US
No description provided...
Intel Graphics Software Advisory - Lenovo Support US
No description provided...
AMD Graphics Driver Vulnerabilities – February 2025 - Lenovo Support US
No description provided...
AMD GPU Security Vulnerabilities - Lenovo Support US
No description provided...
RealTek SD Card Reader Vulnerabilities - Lenovo Support US
No description provided...