424766 matches found
PT-2026-117301
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affects Tutor LMS: from n/a through 4.1.2...
PT-2026-118017
Panic via unchecked pivot-cache field index in github.com/xuri/excelize/v2...
PT-2026-117377
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.4...
PT-2026-117558
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-117554
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-117390
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...
PT-2026-117419
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr load image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md...
PT-2026-117240
Name of the Vulnerable Software and Affected Versions Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin versions prior to 1.4.2 Description The plugin fails to verify the authenticity of incoming payment webhook notifications. This occurs because the shared secret used to validat...
PT-2026-117247
Name of the Vulnerable Software and Affected Versions Document Gallery WordPress plugin versions prior to 5.1.2 Description Insufficient sanitization and escaping of several gallery shortcode attributes occur before they are embedded in a single-quoted HTML attribute within the rendered gallery...
PT-2026-117420
Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent...
PT-2026-117228
Name of the Vulnerable Software and Affected Versions Gateway for Vantiv on WC WordPress plugin versions prior to 1.0.2 Description The plugin fails to verify the authenticity of payment notifications received by its hosted-payment return handler. This allows unauthenticated attackers to manipula...
PT-2026-117248
Name of the Vulnerable Software and Affected Versions Document Gallery WordPress plugin versions prior to 5.1.2 Description The plugin fails to verify the signature on an unauthenticated webhook endpoint when no shared secret is configured, which is the default setting. This allows unauthenticate...
PT-2026-117238
Name of the Vulnerable Software and Affected Versions ElementsReady Addons for Elementor WordPress versions prior to 6.7.3 Description The plugin fails to properly restrict access to protected WooCommerce product downloads. This allows unauthenticated users to bypass payment requirements and...
PT-2026-117474
Name of the Vulnerable Software and Affected Versions Netskope Client versions prior to R142 Description A gap in the NSClient agent occurs when a system connects to an access point with a Captive Portal and then switches to a network that already has internet connectivity, causing the Captive...
PT-2026-117237
Name of the Vulnerable Software and Affected Versions ElementsReady Addons for Elementor WordPress versions prior to 6.7.3 Description Insufficient authorization checks in several settings-save handlers allow users with subscriber-level access and above to overwrite stored settings. This includes...
PT-2026-132678
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.8.8-tuxcare.1...
PT-2026-132654
TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-132675
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.7.9-tuxcare.1...
PT-2026-132696
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.18.3-tuxcare.1...
PT-2026-132680
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.9.6-tuxcare.1...
PT-2026-132699
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 3.3.12-tuxcare.3...
PT-2026-132518
TuxCare rebuilt @babel/plugin-transform-typescript to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-132537
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
PT-2026-132525
TuxCare rebuilt 3 org.springframework.kafka packages to address 2 CVEs. Fixed in 2.8.11-tuxcare.2...
PT-2026-132527
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-132523
TuxCare rebuilt 3 org.springframework.kafka packages to address 2 CVEs. Fixed in 2.9.13-tuxcare.2...
PT-2026-132760
Root has patched GHSA-vm5r-23w9-m8hx in the nodemailer package for Root:npm. Multiple fixed versions available...
PT-2026-132766
This update for kubernetes rebuilds it against the current go security release...
PT-2026-132650
TuxCare rebuilt @react-router/fs-routes to address 3 CVEs. Fixed in 7.5.1-tuxcare.10...
PT-2026-132677
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.7.8-tuxcare.1...
PT-2026-132651
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.12-tuxcare.3...
PT-2026-132653
TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-132664
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.7.0-tuxcare.1...
PT-2026-132644
TuxCare rebuilt @react-router/fs-routes to address 3 CVEs. Fixed in 7.5.1-tuxcare.5...
PT-2026-132712
TuxCare rebuilt create-react-router to address 3 CVEs. Fixed in 7.5.1-tuxcare.10...
PT-2026-132557
TuxCare rebuilt @react-router/express to address 2 CVEs. Fixed in 7.5.1-tuxcare.1...
PT-2026-132645
TuxCare rebuilt @react-router/fs-routes to address 1 CVE. Fixed in 7.5.1-tuxcare.6...
PT-2026-132646
TuxCare rebuilt @react-router/fs-routes to address 1 CVE. Fixed in 7.5.1-tuxcare.7...
PT-2026-132586
TuxCare rebuilt @babel/runtime-corejs3 to address 2 CVEs. Fixed in 7.12.13-tuxcare.3...
PT-2026-132627
TuxCare rebuilt @babel/runtime-corejs2 to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-132617
TuxCare rebuilt @babel/runtime-corejs2 to address 2 CVEs. Fixed in 7.24.5-tuxcare.1...
PT-2026-132640
TuxCare rebuilt @react-router/dev to address 1 CVE. Fixed in 7.18.1-tuxcare.1...
PT-2026-132513
TuxCare rebuilt @babel/plugin-transform-typescript to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-132625
TuxCare rebuilt @babel/runtime-corejs2 to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-132630
TuxCare rebuilt dompurify to address 13 CVEs. Fixed in 2.3.3-tuxcare.3...
PT-2026-132628
TuxCare rebuilt @storybook/addon-toolbars to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
PT-2026-132515
TuxCare rebuilt @babel/plugin-transform-typescript to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-132717
Summary Multiple cases were found where aiohttp could use excessive or unbounded memory, or excessive CPU consumption on attacker controlled requests. Impact An attacker could cause resource exhaustion through specially crafted requests...
PT-2026-132757
Root has patched GHSA-2x7j-588g-ccc2 in the nodemailer package for Root:npm. Multiple fixed versions available...
PT-2026-132718
Summary The MCP proxy's client-facing session ID embeds the authenticated caller's subject JWT sub claim specifically as an anti-hijacking discriminator — matching the Model Context Protocol specification's documented session-hijacking guidance...