PT-2026-77339

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology Outside In PDF Export SDK version 8.5.8 Description An issue in the Outside In PDF Export SDK allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the syste...

python313-tablib-3.10.0-1.1 on GA media (moderate)

python313-tablib-3.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11533-1 Rating: moderate Cross-References: CVE-2026-9318 CVSS scores: CVE-2026-9318 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2026-9318 SUSE : 5.3...

CVE-2026-71044: Improper Access Control

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Export. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...

PT-2026-77285

Name of the Vulnerable Software and Affected Versions Lemur versions prior to 1.9.3 Description An issue exists in the CertificateExport process where the ownership check for CertificatePermission was incorrectly placed within the plugin.requires key branch for the 'POST...

ALSA-2026:56130 Important: sg3_utils security, bug fix, and enhancement update

The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes: sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output...

CVE-2026-63667

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...

CVE-2026-63667 ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...

CVE-2026-63667

ApostropheCMS versions before 3.6.2 are vulnerable to arbitrary file read via path traversal in the import-export module. The file packages/import-export/lib/formats/gzip.js builds an attachment source path using attacker-controlled _id, name, and extension fields from aposAttachments.json withou...

CVE-2026-63667 ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...

CVE-2026-63667 ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...

NPM: Etherpad has stored XSS in HTML export via unescaped attribute-pool values

NPM: Etherpad has stored XSS in HTML export via unescaped attribute-pool values vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 1.8.14...

GHSA-2JP7-WWPG-3P9W Etherpad has stored XSS in HTML export via unescaped attribute-pool values

Fix: PR 7905 ether/etherpad. getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data-="" without HTML-attribute escaping. The value comes verbatim from the pad attribute pool, which a pad editor controls via a craft...

Etherpad has stored XSS in HTML export via unescaped attribute-pool values

Fix: PR 7905 ether/etherpad. getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data-="" without HTML-attribute escaping. The value comes verbatim from the pad attribute pool, which a pad editor controls via a craft...

CVE-2026-75056

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...

EUVD-2026-60255

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...

CVE-2026-75056

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...

CVE-2026-75056

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...

CVE-2026-75056

JetBrains IntelliJ IDEA before 2026.2.1 is vulnerable to remote code execution via the Markdown export tool; a malicious Markdown document can trigger code execution during export. CVSS 7.8 (HIGH) — local attack vector, low complexity, no privileges required, user interaction needed. Upgrade to 2...

CVE-2026-75056

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...

EUVD-2026-60119

A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/exportpingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTPCOOKIE can lead to...