2521 matches found
PT-2026-27885
Name of the Vulnerable Software and Affected Versions stmcan NaturaLife Extensions versions n/a through 2.1 Description The software contains a flaw due to improper handling of user-supplied data during web page creation, which can lead to reflected cross-site scripting XSS. This allows an attack...
OPENSUSE-SU-2026:10400-1 chromedriver-146.0.7680.153-2.1 on GA media
These are all security issues fixed in the chromedriver-146.0.7680.153-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-1392
CVE-2026-1392 : The SR WP Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 2.1 due to missing nonce validation on the sr_minify_html_theme() function. This allows unauthenticated attackers to update plugin settings by convincing a si...
CVE-2026-1889 Outgrow <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'outgrow' Shortcode 'id' Attribute
The Outgrow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the 'outgrow' shortcode in all versions up to, and including, 2.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
PT-2026-26821
The Outgrow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the 'outgrow' shortcode in all versions up to, and including, 2.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
Lyric Video Creator 安全漏洞
Lyric Video Creator is a video lyrics production tool provided by Lyric Video Creator Inc. Version 2.1 of Lyric Video Creator has a security vulnerability. This vulnerability arises from handling malformed MP3 files, and it could allow attackers to trigger the application crash by opening special...
OPENSUSE-SU-2026:10394-1 python313-3.13.12-2.1 on GA media
These are all security issues fixed in the python313-3.13.12-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10388-1 mumble-1.5.857-2.1 on GA media
These are all security issues fixed in the mumble-1.5.857-2.1 package on the GA media of openSUSE Tumbleweed...
Jenkins LoadNinja Plugin 安全漏洞
The Jenkins LoadNinja Plugin is an open-source plugin developed by Jenkins. The Jenkins LoadNinja Plugin versions 2.1 and earlier contain security vulnerabilities. These vulnerabilities stem from the insecure storage of API keys, which may lead to credential leaks...
OPENSUSE-SU-2026:10385-1 traefik-3.6.10-2.1 on GA media
These are all security issues fixed in the traefik-3.6.10-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10330-1 mingw32-binutils-2.45.1-2.1 on GA media
These are all security issues fixed in the mingw32-binutils-2.45.1-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-24922
A security flaw has been discovered in Campcodes Division Regional Athletic Meet Game Result Matrix System 2.1. This affects an unknown part of the file save-games.php. The manipulation of the argument game name results in cross site scripting. The attack may be performed from remote. The exploit...
OPENSUSE-SU-2026:10319-1 helm3-3.20.0-2.1 on GA media
These are all security issues fixed in the helm3-3.20.0-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-22387 WordPress Aviana theme <= 2.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Aviana aviana allows PHP Local File Inclusion.This issue affects Aviana: from n/a through = 2.1...
PT-2026-23175
Name of the Vulnerable Software and Affected Versions Mikado-Themes GoTravel versions through 2.1 Description The GoTravel software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion ...
OPENSUSE-SU-2026:10276-1 libsoup-3_0-0-3.6.6-2.1 on GA media
These are all security issues fixed in the libsoup-30-0-3.6.6-2.1 package on the GA media of openSUSE Tumbleweed...
cockpit-356-2.1 on GA media (moderate)
cockpit-356-2.1 on GA media Announcement ID: openSUSE-SU-2026:10268-1 Rating: moderate Cross-References: CVE-2026-25547 CVSS scores: CVE-2026-25547 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25547 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
OPENSUSE-SU-2026:10268-1 cockpit-356-2.1 on GA media
These are all security issues fixed in the cockpit-356-2.1 package on the GA media of openSUSE Tumbleweed...