[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110601 | 14 Oct 2026 | CVSS 6.3 | saitoha libsixellibsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() in src/fromgif.c, which never… | |
| CVE-2026-110602 | 14 Oct 2026 | CVSS 6.3 | kyz libmspacklibmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and… | |
| CVE-2026-110603 | 14 Oct 2026 | CVSS 6.3 | rapidlasso LASzipLASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via… | |
| CVE-2026-110604 | 14 Oct 2026 | CVSS 3.6 | Michael R Sweet Mini-XMLMini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point is not '.'. Attackers… | |
| CVE-2026-110592 | 14 Oct 2026 | CVSS 3.5 | MicroPyramid BottleCRMBottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenticated organization members to… | |
| CVE-2026-110593 | 14 Oct 2026 | CVSS 5.4 | MicroPyramid BottleCRMBottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied… | |
| CVE-2026-110594 | 14 Oct 2026 | CVSS 4.9 | MicroPyramid BottleCRMBottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to… | |
| CVE-2026-110595 | 14 Oct 2026 | CVSS 4.3 | MicroPyramid BottleCRMBottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads entire CSV uploads before… | |
| CVE-2026-110596 | 14 Oct 2026 | CVSS 5.5 | dlbeer quircquirc through 1.2 contains an excessive-iteration vulnerability in find_alignment_pattern() in lib/identify.c that allows attackers to hang… | |
| CVE-2026-110597 | 14 Oct 2026 | CVSS 6.1 | syoyo tinyexrTinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond… | |
| CVE-2026-110591 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and… | |
| CVE-2026-110262 | 14 Oct 2026 | CVSS 3.3 | OW2 ASMOW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust… | |
| CVE-2026-110263 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack… | |
| CVE-2026-110270 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET… | |
| CVE-2026-110257 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute() that sizes an int array… | |
| CVE-2026-110258 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the… | |
| CVE-2026-110259 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause… | |
| CVE-2026-110260 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when… | |
| CVE-2026-110261 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed… | |
| CVE-2026-107381 | 14 Oct 2026 | CVSS 6.5 | svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferencessvg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, Resolver::processReferences() in src/ElementReference/Resolver.php builds the SVG <use>… | Fix |
| CVE-2026-104939 | 14 Oct 2026 | CVSS 7.5 | F5 NGINX Ingress ControllerDescription NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle… | |
| CVE-2026-101895 | 14 Oct 2026 | CVSS 8.7 | Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPEAngular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31… | Fix |
| CVE-2026-101019 | 14 Oct 2026 | CVSS 6.5 | F5 NGINX JavaScriptDescription NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2… | |
| CVE-2026-101025 | 14 Oct 2026 | CVSS 5.3 | F5 NGINX JavaScriptDescription NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The… | |
| CVE-2024-58392 | 14 Oct 2026 | CVSS 3.3 | icculus PhysicsFSPhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read past name buffers via… | |
| CVE-2025-71433 | 14 Oct 2026 | CVSS 7.5 | usekaneo kaneoKaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project… | |
| CVE-2017-20286 | 14 Oct 2026 | CVSS 7.8 | DentonW DevILDevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette… | |
| CVE-2020-37281 | 14 Oct 2026 | CVSS 8.1 | Gravitee API ManagementGravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate… | |
| CVE-2020-37282 | 14 Oct 2026 | CVSS 9.8 | vworld4u office-converteroffice-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a crafted… | |
| CVE-2016-20099 | 14 Oct 2026 | CVSS 5.5 | l-smashL-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang… | |
| CVE-2026-98424 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: undo netns switch if renaming the wiphy fails Once all the… | |
| CVE-2026-98425 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't warn when an IBSS has no channel to scan… | |
| CVE-2026-98426 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path… | |
| CVE-2026-98427 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: codel: bound the dropping loop per dequeue call The CoDel control law… | |
| CVE-2026-98428 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire driver uses URBs embedded in… | |
| CVE-2026-98429 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources alive while IRQ is registered The completion IRQ… | |
| CVE-2026-98430 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep admin queues alive while IRQ is registered The management IRQ… | |
| CVE-2026-98431 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency Commit… | |
| CVE-2026-98417 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: xfrm: reject unrepresentable espintcp transport headers ESP-in-TCP can hand… | |
| CVE-2026-98418 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched/core: Avoid false migration warning for proxy donors Proxy execution can… | |
| CVE-2026-98419 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix out-of-bounds write in reset_per_cpu_data() In… | |
| CVE-2026-98420 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: follow SMB2 session expiration semantics ksmbd_session_register() destroys… | |
| CVE-2026-98421 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for… | |
| CVE-2026-98422 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown On ifup, AP_VLAN… | |
| CVE-2026-98423 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping The code… | |
| CVE-2026-98409 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: rtd119x: Avoid division by zero clk_get_rate() could return 0. Avoid a… | |
| CVE-2026-98410 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog… | |
| CVE-2026-98411 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() If… | |
| CVE-2026-98412 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() If memory… | |
| CVE-2026-98413 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avc_has_perm_noaudit()… | |
| CVE-2026-98414 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: memcg: avoid charging the root memcg from obj_cgroup_charge_pages()… | |
| CVE-2026-98415 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node The… | |
| CVE-2026-98416 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in… | |
| CVE-2026-98400 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdump without re-IPL parm block Some IPL types, like… | |
| CVE-2026-98401 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation Syzbot… | |
| CVE-2026-98402 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: icmp: avoid invalid transport header access in icmp_send tracepoint syzbot… | |
| CVE-2026-98403 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid IPL parameter append past command line A command line may occupy… | |
| CVE-2026-98404 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()… | |
| CVE-2026-98405 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In… | |
| CVE-2026-98406 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver… | |
| CVE-2026-98407 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed (data ==… | |
| CVE-2026-98408 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: rzv2h: Avoid division by zero clk_get_rate() could return 0. Avoid a… | |
| CVE-2026-98392 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one Valid indices into… | |
| CVE-2026-98393 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU This commit… | |
| CVE-2026-98394 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer… | |
| CVE-2026-98395 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit When… | |
| CVE-2026-98396 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare() KUAP means… | |
| CVE-2026-98397 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode… | |
| CVE-2026-98398 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Invalidate stale class_cache entries for zapped classes syzbot… | |
| CVE-2026-98399 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Unlike kdump… | |
| CVE-2026-98386 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot For QLAFX00 the… | |
| CVE-2026-98387 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk return code handling in aes_s390 The return codes… | |
| CVE-2026-98388 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before taking exec_update_lock do_close_on_exec()… | |
| CVE-2026-98389 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_power_profile during GPU reset During resume from GPU… | |
| CVE-2026-98390 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by zero on virtualized systems On a virtualized… | |
| CVE-2026-98391 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/xe: Guard page-fault worker with runtime PM check During VM teardown, the… | |
| CVE-2026-94348 | 14 Oct 2026 | CVSS 6.1 | Dell PowerScale InsightIQDell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL… | |
| CVE-2026-110690 | 14 Oct 2026 | CVSS 7.5 | coderaiser cloudcmdCloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET… | |
| CVE-2026-35161 | 14 Oct 2026 | CVSS 5.3 | Dell PowerScale InsightIQDell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated… | |
| CVE-2026-110652 | 14 Oct 2026 | CVSS 4.0 | ONLYOFFICE DocumentServerONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /downloadfile/:docid endpoint… | |
| CVE-2026-107870 | 14 Oct 2026 | CVSS 7.1 | Crocoblock JetEngineImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows… | |
| CVE-2026-108065 | 14 Oct 2026 | CVSS 9.8 | Channel Software WebAlliance eCommerceSQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing]… | |
| CVE-2026-104086 | 14 Oct 2026 | CVSS 5.5 | 7-Zip7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (SquashfsHandler.cpp) that allows… | |
| CVE-2026-101215 | 14 Oct 2026 | CVSS 6.6 | Dell Unisphere for PowerMax vAppDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command… | |
| CVE-2026-101216 | 14 Oct 2026 | CVSS 6.6 | Dell Unisphere for PowerMax vAppDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command… | |
| CVE-2026-101217 | 14 Oct 2026 | CVSS 6.5 | Dell Unisphere for PowerMax vAppDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… | |
| CVE-2026-16741 | 14 Oct 2026 | CVSS 9.8 | TR7 Cyber Defense Inc. TR7 ASPImproper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on… | |
| CVE-2026-82026 | 14 Oct 2026 | CVSS 8.8 | skyhook-io radarRadar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows… | |
| CVE-2026-97278 | 14 Oct 2026 | CVSS 7.2 | WP SYNTEX PolylangDeserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through… | |
| CVE-2026-109968 | 14 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log… | |
| CVE-2026-16740 | 14 Oct 2026 | CVSS 9.8 | TR7 Cyber Defense Inc. TR7 ASPMissing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7… | |
| CVE-2026-107867 | 14 Oct 2026 | CVSS 7.1 | Crocoblock JetProductTablesImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables… | |
| CVE-2026-108291 | 14 Oct 2026 | CVSS 9.8 | itthinx AffiliatesDeserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a… | |
| CVE-2026-107417 | 14 Oct 2026 | CVSS 6.5 | Muralidharan Ramasamy Push Notification for Post and BuddyPressMissing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress… | |
| CVE-2026-107421 | 14 Oct 2026 | CVSS 7.3 | VideoWhisper.com Broadcast Live VideoSession Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue… | |
| CVE-2026-107422 | 14 Oct 2026 | CVSS 6.5 | axew3.com WP w3all phpBBImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in axew3.com WP w3all phpBB… | |
| CVE-2026-107424 | 14 Oct 2026 | CVSS 9.8 | M A Vinoth Kumar Frontend DashboardIncorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects… | |
| CVE-2026-107425 | 14 Oct 2026 | CVSS 6.5 | Magepeople inc. Bus Ticket Booking with Seat ReservationMissing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows… | |
| CVE-2026-107426 | 14 Oct 2026 | CVSS 7.3 | VideoWhisper.com Paid Videochat Turnkey SiteMissing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access… | |
| CVE-2026-107433 | 14 Oct 2026 | CVSS 6.5 | miniOrange WP OAuth ServerMissing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control… |
Page 57 of 168