417921 matches found
CVE-2026-62049
The Crocoblock JetBlocks For Elementor WordPress plugin (versions
CVE-2026-78025
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to a Missing Authentication for Critical Function vulnerability (CWE-306). An unauthenticated attacker with remote access can exploit this flaw to achieve Information disclosure , Protection mechanism byp...
CVE-2026-78024
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , contains a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). A high privileged attacker with remote access could exploit this flaw to cause information disclosure , protection mechanism bypass , server-side...
CVE-2026-78023
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Authorization Bypass Through User-Controlled Key vulnerability (CWE-639). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . No specific exploi...
CVE-2026-107935
A path traversal vulnerability exists in gvproxy , the network forwarder component of the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint fails to validate caller-supplied socket paths, which could allow an attacker to delete arbitrary files on the host system. E...
CVE-2026-78022
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to a Not Failing Securely ('Failing Open') condition. This flaw occurs when a security control fails in a manner that permits access rather than denying it. A low privileged attacker with remote access co...
CVE-2026-107655
A vulnerability exists in CUPS where improper handling of specific IPP attributes while processing embedded job ticket comments leads to an unhandled null pointer dereference . An unauthenticated attacker capable of submitting jobs to a shared printer queue can exploit this by sending a crafted I...
CVE-2026-78021
Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to a Generation of Error Message Containing Sensitive Information (CWE-209). An unauthenticated attacker with remote access can exploit this flaw to cause information disclosure and information exposur...
CVE-2026-78020
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , contains an Improper Certificate Validation vulnerability (CWE-295). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Remote execution , Information disclosure , and Denia...
CVE-2026-78019
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Inclusion of Functionality from Untrusted Control Sphere (CWE-829). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges , Filesystem access , and ...
CVE-2026-78018
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , is vulnerable to an Initialization of a Resource with an Insecure Default (CWE-1188). This flaw could allow a low privileged attacker with local access to cause information disclosure . To remediate this vulnerabilit...
CVE-2026-78017
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are susceptible to an Improper Check for Unusual or Exceptional Conditions vulnerability (CWE-754). A high privileged attacker with remote access could exploit this flaw to achieve Information tampering and a Protection...
CVE-2026-78016
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could exploit this flaw to cause Information exposure and Information tampering . No specific...
CVE-2026-78015
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , is affected by a Use of Less Trusted Source vulnerability (CWE-348). An unauthenticated attacker with remote access could potentially exploit this flaw to cause information tampering . No specific exploit details or ...
CVE-2026-78013
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Initialization of a Resource with an Insecure Default (CWE-1188). A high privileged attacker with local access could exploit this flaw to cause a Denial of service , Information disclosure , and Pro...
CVE-2026-76779
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Improper Restriction of Excessive Authentication Attempts (CWE-307). An unauthenticated attacker with remote access can exploit this flaw to bypass protection mechanisms, achieve Elevation of privil...
CVE-2026-104635
The elixir-protobuf library (version 0.8.0 and onward) is vulnerable to uncontrolled recursion during JSON decoding. Specifically, the Protobuf.JSON.decode/3, Protobuf.JSON.decode!/3, and Protobuf.JSON.from_decoded/3 functions fail to increment or check the depth counter when processing user-defi...
CVE-2026-76769
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are susceptible to a Missing Authorization vulnerability. A low-privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . To mitigate this risk, it is recommended to update the ...
CVE-2026-84220
The Kirki WordPress plugin prior to version 6.3.2 is vulnerable to unauthenticated arbitrary shortcode execution . The issue occurs because the plugin fails to prevent the execution of shortcodes contained within comments when they are rendered, and it displays these comments regardless of their ...
CVE-2026-84224
The Kirki WordPress plugin versions prior to 6.3.2 is vulnerable to a Blind SSRF flaw. The issue exists because the plugin fails to validate the host of a URL provided via a Remote Template URL before fetching it. This allows users with editor-level access or higher to force the site to issue req...