6670 matches found
CVE-2026-39632
The CVE-2026-39632 entry concerns the WordPress ThemeGoods Grand Blog (grandblog) theme, affected versions up to 3.1. The vulnerability is a Cross-Site Request Forgery (CSRF) in Grand Blog that allows unauthorized actions initiated by forged requests. The connected Red Hat and EU/NVD records conf...
PHPGurukul Online Course Registration SQL注入漏洞
PHPGurukul Online Course Registration is an online course registration system provided by PHPGurukul Corporation. Version 3.1 of PHPGurukul Online Course Registration contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ‘cid’ in the file...
PT-2026-31197
CVE-2026-39632 Cross-Site Request Forgery CSRF vulnerability in ThemeGoods Grand Blog grandblog allows Cross Site Request Forgery.This issue affects Grand Blog: from n/a through … https://t.co/OW3wZzxUFW...
PT-2026-31552
Name of the Vulnerable Software and Affected Versions PHPGurukul Online Course Registration version 3.1 Description A security issue exists in PHPGurukul Online Course Registration 3.1 related to the processing of the /admin/check availability.php file. Manipulation of the regno argument can lead...
WordPress plugin Grand Blog 跨站请求伪造漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
CVE-2026-5638
The CVE-2026-5638 affects HerikLyma CPPWebFramework up to 3.1. The issue enables path traversal via manipulated input in an unknown processing step, with remote exploitation possible and a public exploit. The project was informed but has not responded. No remediation details are provided in the c...
ignition-2.26.0-3.1 on GA media (moderate)
ignition-2.26.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:10474-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...
python315-3.15.0~a7-3.1 on GA media (moderate)
python315-3.15.0a7-3.1 on GA media Announcement ID: openSUSE-SU-2026:10469-1 Rating: moderate Cross-References: CVE-2025-13462 CVE-2026-3644 CVE-2026-4224 CVE-2026-4519 CVSS scores: CVE-2025-13462 SUSE : 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2025-13462 SUSE : 2...
OPENSUSE-SU-2026:10474-1 ignition-2.26.0-3.1 on GA media
These are all security issues fixed in the ignition-2.26.0-3.1 package on the GA media of openSUSE Tumbleweed...
EUVD-2026-17127
Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of the url parameter. Attackers can craft malicious URLs with javascript: schemes that execute arbitrary JavaScript in victims' browse...
CVE-2026-27508
CVE-2026-27508 affects Smoothwall Express versions prior to 3.1 Update 13. The issue is a reflected XSS in the /redirect.cgi endpoint caused by improper sanitation of the url parameter. Attackers can craft URLs containing javascript: schemes that execute arbitrary JavaScript in a victim’s browser...
EUVD-2018-21700
EChat Server 3.1 contains a buffer overflow vulnerability in the chat.ghp endpoint that allows remote attackers to execute arbitrary code by supplying an oversized username parameter. Attackers can send a GET request to chat.ghp with a malicious username value containing shellcode and ROP gadgets...
EChat Server 缓冲区错误漏洞
EChat Server is a server-side chat system developed by EChat Server Company, which supports instant messaging and message forwarding. Version 3.1 of EChat Server contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the chat.ghp endpoint, which may allow remote...
MAME 缓冲区错误漏洞
MAME is an open-source software simulation platform for running arcade games and historical computer systems. Version 0.154-3.1 of MAME contains a buffer error vulnerability, which stems from a buffer overflow in the handling of the gamma parameter. This vulnerability could allow local attackers ...
CVE-2026-22498
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusion.This issue affects Laurent: from n/a through = 3.1...
CVE-2026-22498 WordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusion.This issue affects Laurent: from n/a through = 3.1...
CVE-2026-22498
CVE-2026-22498 corresponds to a Local File Inclusion in WordPress Laurent theme versions = 3.2 or the vendor-released patch; as a workaround, avoid including untrusted local files via PHP include/require in the affected theme. The vulnerability affects the WordPress Laurent theme’s inclusion mech...
GraphicsMagick-1.3.46-3.1 on GA media (moderate)
GraphicsMagick-1.3.46-3.1 on GA media Announcement ID: openSUSE-SU-2026:10391-1 Rating: moderate Cross-References: CVE-2026-30883 CVSS scores: CVE-2026-30883 SUSE : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2026-30883 SUSE : 8.8...
Apache Livy Input Validation Error Vulnerability
Apache Livy is the United States Apache Apache Foundation, an application server . Provides support for programmatic , fault-tolerant , multi-tenant submission of Spark jobs from Web, mobile applications . Apache Livy suffers from an input validation error vulnerability. The vulnerability stems...