419259 matches found
PT-2026-126714
TuxCare rebuilt braces to address 1 CVE. Fixed in 3.0.3-tuxcare.3...
PT-2026-126716
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 3.8.1-tuxcare.4...
PT-2026-126715
TuxCare rebuilt devalue to address 1 CVE. Fixed in 4.3.2-tuxcare.5...
PT-2026-126718
TuxCare rebuilt devalue to address 1 CVE. Fixed in 5.9.0-tuxcare.5...
PT-2026-126868
TuxCare rebuilt @angular/compiler to address 4 CVEs. Fixed in 16.2.7-tuxcare.5...
PT-2026-126869
TuxCare rebuilt @angular/compiler to address 4 CVEs. Fixed in 16.2.11-tuxcare.4...
PT-2026-126871
TuxCare rebuilt @angular/compiler to address 4 CVEs. Fixed in 16.2.12-tuxcare.14...
PT-2026-126870
TuxCare rebuilt @angular/compiler to address 4 CVEs. Fixed in 18.1.2-tuxcare.6...
PT-2026-116356
Name of the Vulnerable Software and Affected Versions WP Booking System – Booking Calendar versions prior to 2.1.0.4 Description Authenticated users with subscriber-level access and above can extract private per-event booking descriptions and booking IDs from any calendar managed by the site. Thi...
PT-2026-116377
Name of the Vulnerable Software and Affected Versions ThirstyAffiliates versions prior to 3.12.1 Description An issue exists in the link redirect tracking handler that fails to verify the status or type of the requested object. This allows unauthenticated attackers to disclose destination URLs of...
PT-2026-116498
Name of the Vulnerable Software and Affected Versions Coder versions 2.26.0 through 2.34.7 Description An incorrect authorization flaw exists where the system only verifies workspace read access before fetching group members using an elevated system context. Authenticated users with workspace use...
PT-2026-116496
Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl allow rule of coderd/rbac/policy.rego, which does not verify organization membership for per-user ACL entries, and organization member removal does not scrub those entries. Authenticated users removed from...
PT-2026-117681
CVE ID :CVE-2026-108117 Published : Oct. 17, 2026, 10:19 p.m. | 1 hour, 1 minute ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2026-116362
Name of the Vulnerable Software and Affected Versions Tutor LMS versions prior to 4.1.1 Description The Tutor LMS plugin for WordPress contains an Insecure Direct Object Reference IDOR flaw. This occurs because the Input::sanitize array function fails to strip attacker-supplied POST keys, allowin...
PT-2026-116371
Name of the Vulnerable Software and Affected Versions ACF Frontend Admin by DynamiApps versions prior to 3.29.14 Description The plugin fails to perform a capability check on a form-submission action before writing submitted values into the global ACF options store. This allows unauthenticated...
PT-2026-116453
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE MAX - 3 to Stream Zero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboard synthesize image format to bm...
PT-2026-116372
Name of the Vulnerable Software and Affected Versions ACF Frontend Admin by DynamiApps versions prior to 3.29.14 Description The plugin fails to restrict the PHP classes that can be instantiated during the deserialization of stored post content rendered on public pages. This allows high-privilege...
PT-2026-116368
Name of the Vulnerable Software and Affected Versions Contact Form 7 Signature Addon versions prior to 4.2.3 Description An issue exists where the plugin fails to sanitize a signature field value used to build an email attachment path. This allows unauthenticated users to perform path traversal—a...
PT-2026-126328
A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application...
PT-2026-126282
TuxCare rebuilt @vitejs/plugin-react to address 11 CVEs. Fixed in 2.9.18-tuxcare.1...
PT-2026-126262
TuxCare rebuilt @angular/upgrade to address 15 CVEs. Fixed in 15.2.9-tuxcare.2...
PT-2026-126183
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 10.2.5-tuxcare.7...
PT-2026-126233
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 18.1.2-tuxcare.1...
PT-2026-126189
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 13.4.0-tuxcare.8...
PT-2026-126284
TuxCare rebuilt @vitejs/plugin-react to address 6 CVEs. Fixed in 3.2.11-tuxcare.1...
PT-2026-126246
TuxCare rebuilt @angular/upgrade to address 3 CVEs. Fixed in 19.2.21-tuxcare.5...
PT-2026-126244
TuxCare rebuilt @angular/upgrade to address 2 CVEs. Fixed in 9.1.13-tuxcare.12...
PT-2026-126214
TuxCare rebuilt @angular/upgrade to address 2 CVEs. Fixed in 15.2.9-tuxcare.3...
PT-2026-125638
TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 15.5.23-tuxcare.4...
PT-2026-116394
Name of the Vulnerable Software and Affected Versions Gantry 5 Framework versions prior to 5.6.4 Description The Gantry 5 Framework allows the retrieval of embedded sensitive data through the generation of error messages that contain sensitive information. Recommendations Update Gantry 5 Framewor...
PT-2026-125626
TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 14.2.35-tuxcare.11...
PT-2026-126855
TuxCare rebuilt @angular/compiler to address 3 CVEs. Fixed in 5.1.0-tuxcare.6...
PT-2026-126728
TuxCare rebuilt nanoid to address 1 CVE. Fixed in 3.3.4-tuxcare.3...
PT-2026-126777
TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 15.2.9-tuxcare.1...
PT-2026-126934
TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 12.2.17-tuxcare.2...
PT-2026-126937
TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 18.2.14-tuxcare.7...
PT-2026-126303
TuxCare rebuilt @react-native-community/cli-tools to address 1 CVE. Fixed in 13.6.9-tuxcare.3...
PT-2026-126732
TuxCare rebuilt piscina to address 1 CVE. Fixed in 4.4.0-tuxcare.2...
PT-2026-126108
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 8.0.3-tuxcare.9...
PT-2026-126774
TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 16.2.7-tuxcare.1...
PT-2026-126853
TuxCare rebuilt @angular/compiler to address 3 CVEs. Fixed in 14.3.0-tuxcare.12...
PT-2026-126841
TuxCare rebuilt @angular/compiler to address 3 CVEs. Fixed in 12.0.0-tuxcare.6...
PT-2026-126797
TuxCare rebuilt @angular/compiler to address 7 CVEs. Fixed in 4.3.5-tuxcare.3...
PT-2026-126790
TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 12.0.0-tuxcare.2...
PT-2026-126840
TuxCare rebuilt @angular/compiler to address 4 CVEs. Fixed in 12.2.17-tuxcare.11...
PT-2026-126858
TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 5.2.7-tuxcare.7...
PT-2026-126954
TuxCare rebuilt @angular/compiler to address 1 CVE. Fixed in 14.3.0-tuxcare.13...
PT-2026-127009
TuxCare rebuilt @angular/compiler to address 2 CVEs. Fixed in 8.0.3-tuxcare.4...