419259 matches found
PT-2026-116501
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration vulnerability because userpassword.Compare substitutes a placeholder hash derived from the string "hunter2" when a stored password hash is empty. Unauthenticated attackers can...
PT-2026-127513
TuxCare rebuilt @angular/common to address 2 CVEs. Fixed in 8.0.0-tuxcare.4...
PT-2026-127518
TuxCare rebuilt @angular/common to address 2 CVEs. Fixed in 11.2.11-tuxcare.4...
PT-2026-127517
TuxCare rebuilt @angular/common to address 2 CVEs. Fixed in 9.1.13-tuxcare.12...
PT-2026-127519
TuxCare rebuilt @angular/common to address 2 CVEs. Fixed in 11.2.14-tuxcare.9...
PT-2026-127521
TuxCare rebuilt @angular/common to address 2 CVEs. Fixed in 12.2.0-tuxcare.4...
PT-2026-127406
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 17.3.12-tuxcare.9...
PT-2026-127416
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 14.2.12-tuxcare.1...
PT-2026-127410
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 15.2.9-tuxcare.1...
PT-2026-127398
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 7.2.16-tuxcare.6...
PT-2026-127404
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 14.3.0-tuxcare.6...
PT-2026-127400
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 9.1.13-tuxcare.7...
PT-2026-127402
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 11.2.14-tuxcare.4...
PT-2026-127412
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 12.2.0-tuxcare.1...
PT-2026-127415
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 14.2.8-tuxcare.1...
PT-2026-127409
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 13.3.0-tuxcare.1...
PT-2026-127411
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 18.1.2-tuxcare.1...
PT-2026-127414
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 13.3.12-tuxcare.1...
PT-2026-127408
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 15.2.6-tuxcare.1...
PT-2026-127407
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 16.2.7-tuxcare.1...
PT-2026-125642
TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 14.2.35-tuxcare.7...
PT-2026-127394
TuxCare rebuilt @angular/common to address 2 CVEs. Fixed in 17.3.12-tuxcare.5...
PT-2026-127395
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 18.2.14-tuxcare.3...
PT-2026-127393
TuxCare rebuilt @angular/common to address 2 CVEs. Fixed in 16.2.12-tuxcare.2...
PT-2026-127397
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 18.2.14-tuxcare.5...
PT-2026-127401
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 12.2.17-tuxcare.4...
PT-2026-127403
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 13.4.0-tuxcare.4...
PT-2026-127417
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 18.2.12-tuxcare.1...
PT-2026-127413
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 12.2.16-tuxcare.1...
PT-2026-127405
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 16.2.12-tuxcare.8...
PT-2026-127396
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 5.2.11-tuxcare.6...
PT-2026-127399
TuxCare rebuilt @angular/common to address 1 CVE. Fixed in 8.2.14-tuxcare.6...
PT-2026-116380
The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CF-IPCountry Header in all versions up to, and including, 1.36.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
PT-2026-116355
Name of the Vulnerable Software and Affected Versions WP Booking System – Booking Calendar versions prior to 2.1.0.4 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Unauthenticated attackers or users with...
PT-2026-116196
Name of the Vulnerable Software and Affected Versions Kirki – Freeform Page Builder, Website Builder & Customizer versions prior to 6.3.3 Description The plugin is susceptible to PHP Object Injection through the deserialization of untrusted input during the ZIP template import process. This allow...
PT-2026-116396
Name of the Vulnerable Software and Affected Versions Claude Desktop versions prior to 1.8089.0 Description Opening a software project in the application could trigger the execution of malicious code. The issue occurs because the application invokes git.exe by name rather than specifying the full...
PT-2026-117323
CVE ID :CVE-2026-106549 Published : Oct. 16, 2026, 10:19 p.m. | 56 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2026-116485
Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.16 Description An information disclosure issue exists where unauthenticated attackers can view role-restricted weblinks. This occurs because the 'rss/links.php' endpoint omits the category view role-visibility...
PT-2026-125649
TuxCare rebuilt libp2p to address 1 CVE. Fixed in 0.30.13-tuxcare.1...
PT-2026-125648
TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 15.5.25-tuxcare.3...
PT-2026-125652
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=573787443 Crash type: UNKNOWN READ Crash state: hobbes::castexp::apply hobbes::compileExpF::with llvm::Value hobbes::switchOfF co...
PT-2026-116454
Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 3.2.0-alpha through 4.1.8 phpMyFAQ versions 4.2.0-alpha through 4.2.0-alpha Description An authentication bypass exists that allows users authenticated via an Identity Provider IdP to skip Time-based One-Time Password TOTP...
PT-2026-117132
These are all security issues fixed in the putty-0.85-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-117128
These are all security issues fixed in the hugo-0.168.0-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-117131
These are all security issues fixed in the pocketbase-0.40.5-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-117126
These are all security issues fixed in the crun-1.30.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-117125
These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.5.2git0.1c496ed-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-116395
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description A Server-Side Request Forgery SSRF issue exists in the AS2 component. The component accepts a destination address for the asynchronous Message...