6416 matches found
CVE-2026-57833
The CVE affects the Joomla extension 4Analytics for weeblr.com, with an unauthenticated stored XSS vulnerability in the AI analysis feature present in versions prior to 5.0.2. The underlying issue is a stored XSS in the AI analysis workflow, leading to high impact on confidentiality, integrity, a...
CVE-2026-57833 Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2
Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS in relation to the AI analysis feature...
Splunk Enterprise 9.3.0 < 9.3.14, 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4.0 < 10.4.1 (SVD-2026-0703)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0703 advisory. - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below...
📄 xxl-job Cross Site Request Forgery
xxl-job versions prior to 3.4.0 suffer from a cross site request forgery vulnerability. Description Summary A Cross-Site Request Forgery CSRF vulnerability exists in the xxl-job-admin web application that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The...
CVE-2025-11698
The CVE-2025-11698 vulnerability affects 5380/5480/5580 controllers with boot firmware versions below 1.072. It enables a denial-of-service by allowing a malicious actor to write invalid file data to the controller, potentially causing a major non-recoverable fault (MNRF). The documents do not pr...
Microsoft PC Manager < 3.22.1.0 Elevation of Privilege (CVE-2026-50438) (July 2026)
The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.22.1.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to escalate privileges beyond the vulnerable component's...
CVE-2026-49971 Laravel-Mediable < 7.0.0 Stored XSS via SVG File Upload
Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows authenticated or anonymous users to execute arbitrary JavaScript by uploading unsanitized SVG files containing embedded scripts in onload event handlers, script tags, or foreignObject elements. Attacker...
CVE-2026-14380 affecting package perl-DBI for versions less than 1.650-1
CVE-2026-14380 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1
CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-10536 affecting package curl for versions less than 8.11.1-10
CVE-2026-10536 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-8458 affecting package curl for versions less than 8.11.1-10
CVE-2026-8458 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1
CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-59999 affecting package openssh for versions less than 9.8p1-9
CVE-2026-59999 affecting package openssh for versions less than 9.8p1-9. A patched version of the package is available...
CVE-2026-60001 affecting package openssh for versions less than 9.8p1-9
CVE-2026-60001 affecting package openssh for versions less than 9.8p1-9. A patched version of the package is available...
CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1
CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-59995 affecting package openssh for versions less than 9.8p1-9
CVE-2026-59995 affecting package openssh for versions less than 9.8p1-9. A patched version of the package is available...
CVE-2026-42505 affecting package golang for versions less than 1.25.12-1
CVE-2026-42505 affecting package golang for versions less than 1.25.12-1. A patched version of the package is available...