CVE-2026-63115 | TryGhost ActivityPub up to 1.2.5 Undo privileges management
A vulnerability, which was classified as problematic, has been found in TryGhost ActivityPub up to 1.2.5. Impacted is the function
Read MoreSecurity
03
CVE-2026-55147 | ACES Loris up to 27.0.3/28.0.1 Imaging Browser privileges management
A vulnerability, which was classified as problematic, was found in ACES Loris up to 27.0.3/28.0.1. The affected element is an
Read MoreCVE-2026-111578 | WooCommerce PDF Invoices & Packing Slips for WooCommerce Plugin cross site scripting
A vulnerability has been found in WooCommerce PDF Invoices & Packing Slips for WooCommerce Plugin 5.16.2/5.16.3/5.16.4 on WordPress and classified
Read MoreCVE-2026-63182 | LightSAML up to 4.7.0/5.0.0 Signature Validation validateReference improper authentication
A vulnerability was found in LightSAML up to 4.7.0/5.0.0 and classified as critical. This affects the function XMLSecurityDSig::validateReference of the
Read MoreCVE-2026-55613 | OpenWrt uhttpd ubus handler ubus.c uh_ubus_data_send expected behavior violation
A vulnerability was found in OpenWrt uhttpd. It has been classified as critical. This impacts the function uh_ubus_data_send of the
Read MoreCVE-2026-63184 | Christian Helle Refitter up to 2.1.0 Ref Resolution server-side request forgery
A vulnerability was found in Christian Helle Refitter up to 2.1.0. It has been declared as critical. Affected is an
Read More
Debian Thunderbird Fixes Code Execution and Data Exposure
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure For
Read MoreCVE-2026-55493 | Kohler HotCRP up to 3.2 Search access control
A vulnerability categorized as problematic has been discovered in Kohler HotCRP up to 3.2. Impacted is an unknown function of
Read MoreCVE-2026-62301 | franklioxygen MyTube up to 1.10.2 storageService/videos.ts getVideos privileges management
A vulnerability identified as problematic has been detected in franklioxygen MyTube up to 1.10.2. The affected element is the function
Read MoreCVE-2026-62284 | osac-project osac-operator Console Proxy clientcmd.RESTConfigFromKubeConfig users/clusters server-side request forgery (7e4222b)
A vulnerability labeled as critical has been found in osac-project osac-operator. The impacted element is the function clientcmd.RESTConfigFromKubeConfig of the
Read More