10729 matches found
CGA-9749-9JGP-2P25
Bulletin has no description...
CGA-F534-WV53-2GP6
Bulletin has no description...
CGA-P7M3-RMX3-8524
Bulletin has no description...
CGA-22R7-92JJ-CGCM
Bulletin has no description...
CGA-PQ75-G4QQ-54X8
Bulletin has no description...
CGA-PCXQ-7WJQ-H99H
Bulletin has no description...
CGA-H5Q2-WF27-84CW
Bulletin has no description...
CGA-F3RJ-JQ52-9FWC
Bulletin has no description...
MINI-72W3-4X3P-CPM7
Bulletin has no description...
VulnCheck KEV: CVE-2026-57624
Unauthenticated Remote Code Execution RCE in Blocksy Companion Pro = 2.1.46 versions...
PT-2026-55084
The Colorbox module integrates with the Colorbox JavaScript library to display content in an overlay above the page. The module doesn't sufficiently protect against injection of malicious JavaScript under certain scenarios. This vulnerability is mitigated by the fact that an attacker must have a...
PT-2026-54778
Name of the Vulnerable Software and Affected Versions Craft CMS versions 5.0.0-RC1 through 5.9.20 Description An authorship spoofing issue exists in the content management system. The theEntriesController::actionSaveEntry function performs entry-edit permission checks before request-controlled...
CVE-2026-55793: Improper Neutralization of Input During Web Page Generation
Craft CMS is a content management system CMS. In versions 5.0.0-RC1 through 5.9.22, an author-level control panel user can store a malicious JavaScript payload in an entry title. When an admin, or any control panel user with saveEntries for the same Structure section, drags another entry under th...
PT-2026-54861
Name of the Vulnerable Software and Affected Versions Craft CMS versions 5.0.0-RC1 through 5.9.22 Description A stored cross-site scripting issue exists where a user with author-level control panel permissions can embed a malicious JavaScript payload within an entry title. The execution occurs wh...
PT-2026-54894
Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.46.0 MediaWiki versions prior to 1.45.4 MediaWiki versions prior to 1.44.6 MediaWiki versions prior to 1.43.9 Description An unsafe deserialization of untrusted data exists in the LogItem import process. This issu...
MINI-G8JP-8X2R-7CF8
Bulletin has no description...
Sigstore Java has a vulnerability with bundle verification of integratedTime
Summary Regression: Verification of integratedTime from Rekor V1 Log Entry against Fuclio Certificate validity was missing Details - PR 1008 erroneously removed verification of the integrated Rekor entry time against the Fulcio certificate. - PR 1185 re-added this verification with enhancements...
CGA-FMGV-5WWQ-C8MC
Bulletin has no description...