CVE Vulnerabilities - 10 July 2026

A security issue in older RabbitMQ versions allowed a guest user to connect from outside the local network through a proxy. This could be a risk if your RabbitMQ server is exposed to the internet. To ...

Old versions of RabbitMQ allowed a certain type of user to connect to the system from outside the network when certain conditions were met. This is a security risk because it could allow unauthorized ...

A bug in the RabbitMQ management plugin on Windows versions prior to 4.1.11 and 4.2.6 can allow an attacker to trick the system into accessing malicious shared files. This could lead to unauthorized a...

RabbitMQ, a messaging service, had a security weakness in older versions. This weakness could allow a user with limited access to connect to the service from outside the local network. To fix this, up...

An attacker with a valid login can upload a malicious file to OpenPLC v3, potentially allowing them to execute arbitrary code on the system. This can happen if the attacker uploads a malicious file to...

SiYuan, a personal knowledge management system, contains a security flaw that can allow an attacker to execute malicious code on users' computers. This vulnerability affects users who use the Electron...

An attacker with write access to a synced workspace can inject malicious code into SiYuan, potentially allowing them to execute commands on a user's computer. This vulnerability has been fixed in vers...

An attacker with access to your SiYuan workspace can inject malicious code that runs on all devices syncing the workspace. This happens even if you've disabled running untrusted JavaScript. To fix thi...

The 9routers software exposes sensitive data and allows unauthorized access to its database. This can lead to complete credential theft and database takeover. To protect against this, ensure that you ...

The charging station's websocket endpoint doesn't require authentication, allowing unauthorized users to potentially gain higher access levels. This could lead to unauthorized access to sensitive char...

An attacker with permission to edit certain content in Drupal can inject malicious data into the Formatter Field. This can happen when the core JSON:API module is misconfigured. To stay safe, ensure o...

A security issue in Drupal LocalGov Workflows allows unauthorized access to certain features. This affects versions 0.0.0 to 1.6.0 of the software. To stay secure, update to a fixed version of LocalGo...

A known security issue in Drupal remains unfixed by the project's maintainer, leaving users vulnerable. To maintain the project and fix the issue, you'll need to take over ownership and follow Drupal'...

LocalGov Workflows, a Drupal module, has a security issue that lets unauthorized users access sensitive information. This affects versions 0.0.0 to 1.6.0. Update to the latest version to fix this issu...

The Drupal Basket module is used for e-commerce and checkout on Drupal sites. If an attacker injects malicious data, they may be able to execute arbitrary code on the site, potentially leading to unau...

The miniOrange Social Login plugin for WordPress, used for social media login and registration, has a security issue that lets attackers gain full access to admin accounts. This happens when an attack...

A security issue in miniOrange's OAuth Single Sign On (SSO) software allows attackers to bypass authentication using an alternative method. This affects all versions of the OAuth SSO client up to 38.5...

A security issue in Debian Linux's package manager allows an attacker to execute malicious code without needing permission. This could happen if a user installs a malicious package from an untrusted s...

FreeRDP clients are affected. An attacker can exploit this vulnerability to cause memory corruption, potentially leading to crashes or other security issues. Update to version 3.28.0 or later to fix t...

MCP Server Kubernetes versions before 3.9.0 have a security risk in certain tools (kubectl_get, kubectl_describe, kubectl_delete). This means an attacker could trick the system into sending sensitive ...

A security issue in SEM-PMP allows hackers to execute malicious commands. This affects SEM-PMP versions up to April 23, 2023. To stay safe, update SEM-PMP to the latest version or consider replacing i...

The MobilMen 20T software from Adam Retail Automation Ltd. has a security weakness that allows an attacker to manipulate database commands. This can lead to unauthorized access to sensitive data or di...

Old versions of IntelliJ IDEA allow an attacker to execute code on your computer by manipulating project file paths. This is a security risk because it could allow unauthorized access to your system. ...

Vikunja, a task management software, has a security flaw that lets unauthorized users access sensitive share links and attachments. This could lead to unauthorized access to confidential files and dat...

A vulnerability in the Linux kernel's fragment merging feature has been fixed. This issue could allow hackers to manipulate encrypted data, potentially leading to unauthorized access. Affected systems...