109128 matches found
PT-2026-97728
Name of the Vulnerable Software and Affected Versions eesy ID2WP – Publish InDesign HTML5 versions prior to 1.0.4 Description The plugin is subject to Path Traversal, a condition where an attacker can access files and directories that are stored outside the web root folder. Unauthenticated...
PT-2026-97701
Name of the Vulnerable Software and Affected Versions Fabasoft Folio Client versions prior to 2026 Description A locally installed component that communicates with the browser extension via web messaging does not restrict which web origins may invoke its functions by default. The registry value...
CVE-2026-77293: Authorization Bypass Through User-Controlled Key
TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an authenticated user against the attacker-controlled tripId but deleteNoteFile in server/src/services/collabService.ts resolves the target only by note and...
CVE-2026-88372: Integer Overflow or Wraparound
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files...
CVE-2026-97226: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initia...
CVE-2026-88372
The libsndfile 1.2.2 library contains an integer overflow vulnerability within the mat4_read_header() function. This flaw can be triggered when the software attempts to parse crafted MAT4 (MATLAB v4) files . The provided documents do not specify the practical consequences of this overflow, the sp...
PT-2026-97928
Name of the Vulnerable Software and Affected Versions libsndfile version 1.2.2 Description An integer overflow occurs in the mat4 read header function when the software parses specially crafted MAT4 MATLAB v4 files. Recommendations At the moment, there is no information about a newer version that...
PT-2026-97698
Name of the Vulnerable Software and Affected Versions mammoth versions prior to 1.12.2 Description The software is susceptible to prototype pollution when reading styles defined in a document. An attacker can add arbitrary properties to Object.prototype by converting a specially crafted .docx fil...
PT-2026-97798
Name of the Vulnerable Software and Affected Versions rpm affected versions not specified Description A flaw exists where the software processes crafted manifest files during operations such as rpm -q -p or similar manifest-processing flows. The issue occurs because manifest entries undergo...
CVE-2026-93290: Use of Hard-coded Credentials
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...
PT-2026-98269
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...
CVE-2026-97062: Improper Neutralization of Input During Web Page Generation
Aureus ERP through 1.6.0, fixed in commit 53ad76d, stores uploaded SVG files on its public disk and serves them from the application origin, allowing authenticated users to upload malicious SVG files containing JavaScript. Attackers can craft SVG files with script elements that execute in the...
PT-2026-97834
Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description Recursive copying of directories is permitted without proper controls, which may result in the unintentional inclusion of unnecessary or sensitive files and an increased attack surface...
PT-2026-97804
Name of the Vulnerable Software and Affected Versions Aureus ERP versions prior to 1.6.1 Description The application stores uploaded SVG files on its public disk and serves them from the application origin. This allows authenticated users to upload malicious SVG files containing JavaScript...
PT-2026-98145
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description An authenticated user with file-management access can upload malicious XML and XSLT Extensible Stylesheet Language Transformations attachments. The API endpoint 'GET /api/v1/object type/id/files/fil...
PT-2026-97712
Name of the Vulnerable Software and Affected Versions MasterStudy LMS WordPress Plugin versions prior to 3.7.50 Description Insufficient validation of a display-style setting allows users with the Contributor role and above to perform Local File Inclusion LFI, which is a technique used to trick a...
Ubuntu 20.04 LTS / 26.04 LTS : ImageMagick vulnerabilities (USN-8810-1)
The remote Ubuntu 20.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8810-1 advisory. It was discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a...
CVE-2026-88372
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files...
PT-2026-97915
Name of the Vulnerable Software and Affected Versions DbGate versions prior to 7.2.6 DbGate versions prior to 7.3.2-premium-beta.1 Description A path traversal issue exists in the files-style endpoint. Remote attackers can manipulate the filePath/uri argument used by the fs.readFile function with...
