7342293 matches found
CVE-2026-106139 Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue
In Progress® Kendo UI for Vue @progress/kendo-vue-charts starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker with low privileges who can influence a...
CVE-2026-106139 Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue
In Progress® Kendo UI for Vue @progress/kendo-vue-charts starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker with low privileges who can influence a...
CVE-2026-106138 Cross-Site Scripting via Chart Tooltip in KendoReact
In Progress® KendoReact @progress/kendo-react-charts starting with version 1.1.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker with low privileges who can influence a stri...
CVE-2026-106138 Cross-Site Scripting via Chart Tooltip in KendoReact
In Progress® KendoReact @progress/kendo-react-charts starting with version 1.1.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker with low privileges who can influence a stri...
CVE-2026-108505
ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-related information...
CVE-2026-91136
The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svgimage' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback SVGAnimatorController::indexpermission...
CVE-2026-4791
The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the logout-url shortcode's 'button' attribute in all versions up to, and including, 8.2.36 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...
CVE-2026-107657
The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-104722
The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSDMenusIXCSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticate...
CVE-2026-108506 Unauthorized access vulnerability in ZTE Z80 Ultra product
ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information...
CVE-2026-108506 Unauthorized access vulnerability in ZTE Z80 Ultra product
ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information...
CVE-2026-108505
creationtimestamp| type| source ---|---|--- 2026-10-10 08:59:31+00:00| seen| https://infosec.exchange/users/cve/statuses/117415789915358766...
CVE-2012-3542 vulnerabilities
Vulnerabilities for packages: openstack-keystone-fips-2026.2, openstack-keystone-2026.2...
CVE-2012-4413 vulnerabilities
Vulnerabilities for packages: openstack-keystone-fips-2026.2, openstack-keystone-2026.2...
CVE-2026-58058 vulnerabilities
Vulnerabilities for packages: nmap...
CVE-2026-106445 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse, rancher-api-ui...
CVE-2026-106444 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse, rancher-api-ui...
CVE-2026-106446 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse, rancher-api-ui...