The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On June 25, 2025, Cloud Software Group published a security bulletin for CVE-2025-6543, a new ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On September 11, 2026, CVE-2026-85706 was added to the U.S. Cybersecurity and Infrastructure Security ...
CVE-2026-110070: Unknown Modern Events Calendar Lite: The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the…. View severity, references, ...
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, ...
In keeping with standard industry practices around Coordinated Vulnerability Disclosure (CVD) (such as CERT/CC's, Google's, ZDI's), as well as the standards promulgated in ISO 29147 and ISO 30111, ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report Patch management is the process of distributing and applying updates to software. These patches are often ...
This module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project's site. Unknown ...
The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles may edit through the customers management screen, allowing users with the Salon ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report The predictive window has collapsed. In 2025, high-impact vulnerabilities weren’t quietly accumulating ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report According to the advisory, the vulnerability affects WordPress versions 6.9.0 through 6.9.4 and versions ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On September 22, 2026, F5 published a security advisory for CVE-2026-94127, a critical heap-based buffer ...
IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results