xlsx

SheetJS SheetJS Community Editionは、実戦で検証されたオープンソースソリューションを提供し、ほぼすべての複雑なスプレッドシートから有用なデータを抽出し、レガシーおよび最新のソフトウェアの両方で動作する新しいスプレッドシートを生成します。 SheetJS Proは、データ処理を超えたソリューションを提供します。複雑なテンプレートを簡単に編集。スタイリングで内なるピカソを解き放ちましょう。画像/グラフ/ピボットテーブルを使ったカスタムシートの作成。数式の評価と計算のWebアプリへの移植。一般的なスプレッドシートタスクの自動化など、さらに多くの機能があります。...

CVE-2025-69690-CVE-2025-69691

🔐 CVE-2025-69690 および CVE-2025-69691 Netgate pfSense Community Edition における認証済みリモートコード実行 📋 概要...

CVE-2026-18386

The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...

EUVD-2026-75237

The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...

ROOT-APP-COMPOSER-AIKIDO-2026-248927 AIKIDO-2026-248927 in magento/product-community-edition - Patched by Root

Root has patched AIKIDO-2026-248927 in the magento/product-community-edition package for Root:Composer. Multiple fixed versions available...

openvas-scanner v23.50.24

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

CVE-2026-79483

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

RustHound-CE v2.5.2

RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It therefore generates all the JSON files that can be analyzed by BloodHound Community Edition. This version is only compatible with BloodHound...

CVE-2026-79483

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

EUVD-2026-68876

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

CVE-2026-65931 LimeSurvey Community Edition 7.0.5 - Improper authorization in survey menu entry creation endpoint

LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only the global settings:read permission can directly invoke POST /index.php/admin/menuentries/sa/create and create new survey...

CVE-2026-65930

LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5...

CVE-2026-63360 LimeSurvey Community Edition 7.0.5 - Reflected XSS in user activation confirmation endpoint

LimeSurvey Community Edition 7.0.5+260623 contains an authenticated reflected Cross-Site Scripting vulnerability in the user activation confirmation endpoint. The action query parameter is copied into the response and inserted into a hidden input attribute without HTML attribute encoding. This...

CVE-2026-16809

CVE-2026-16809 affects LimeSurvey Community Edition 7.0.5 and is a stored cross-site scripting (XSS) vulnerability in the survey quota creation workflow. An authenticated low-privileged user with the ability to create and manage their own survey can store malicious JavaScript in a quota message ,...

CVE-2026-16809 LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5...

CVE-2026-16809 LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5...

CVE-2026-65930 LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields

LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5...

CVE-2026-65930

LimeSurvey Community Edition 7.0.5 is affected by an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog within the administrative question editor. An attacker with low privileges can inject a persistent script that executes in the context of other users who i...

CVE-2026-65930 LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields

LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5...

CVE-2026-15973

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the Survey Menu Entries administration page. An authenticated user with the global settings:read permission can create a survey menu entry containing attacker-controlled data. The value is stored in the...