Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0
CVE-2026-100748
Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0
2026-09-28 归档
今日共收录 884 条安全情报，包含 147 个 CVE，402 篇安全通告，以及 73 篇研究论文。
← 返回归档列表Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6...
CVE-2026-97165
Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” par
Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6...
CVE-2026-100749
Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned fi
wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where...
CVE-2026-89133
wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly e
In all builds that make use of (D)TLS, including default builds, there is a series of conditional...
CVE-2026-15442
In all builds that make use of (D)TLS, including default builds, there is a series of conditional states during the TLS
When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could...
CVE-2026-89136
When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an unsolicited s
A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress)...
CVE-2026-89134
A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN
A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared...
CVE-2026-89135
A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certifi
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961,...
CVE-2026-89102
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response s
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification....
CVE-2026-93302
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any
Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check...
CVE-2026-94418
Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check separately from the parse t
Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a session object but a...
CVE-2026-94419
Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a session object but a ClientSession reference of th
The Optima Express IDX WordPress plugin before 8.7.6 does not properly neutralise a script value...
CVE-2026-96899
The Optima Express IDX WordPress plugin before 8.7.6 does not properly neutralise a script value submitted through one o
The WP YouTube Lyte WordPress plugin before 1.7.31 does not escape some attributes of YouTube...
CVE-2026-96895
The WP YouTube Lyte WordPress plugin before 1.7.31 does not escape some attributes of YouTube embed blocks before output
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not perform...
CVE-2026-97227
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not perform capability or ownership chec
The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on...
CVE-2026-96897
The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on one of its AJAX actions
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and...
CVE-2026-97319
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribu
The Malcure Malware Shield — Removal, Repair, Monitor WordPress plugin before 19.9.7 does not...
CVE-2026-96896
The Malcure Malware Shield — Removal, Repair, Monitor WordPress plugin before 19.9.7 does not perform an authorisation c
The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not...
CVE-2026-86841
The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not prevent deserialization of u
The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication or...
CVE-2026-92436
The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication or verify ownership before loa