428285 matches found
CVE-2026-87747
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
CVE-2026-57825
A flaw was found in the opam package manager for OCaml. This vulnerability allows a malicious package to bypass the sandbox protection mechanism. By mishandling symlinks during the processing of .install files, an attacker can write arbitrary files to unintended locations on the system, potential...
Multiple vulnerabilities in baserCMS plugin "BurgerEditor"
Overview baserCMS plugin "BurgerEditor" provided by D-ZERO CO.,LTD. contains multiple vulnerabilities listed below: Authorization Bypass Through User-Controlled Key CWE-639 - CVE-2026-84062 Unrestricted Upload of File with Dangerous Type CWE-434 - CVE-2026-84063 Kuniyoshi Noguchi @KuniNogu report...
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
The security researcher known as Chaotic Eclipse has dropped a proof-of-concept PoC for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash , is assessed to be a patch bypass for CVE-2026-69414 CVSS score: 7.8, also called ShieldBreak, which the researcher reporte...
CVE-2026-87747
Ragic Enterprise Cloud Database is affected by an Arbitrary File Read vulnerability caused by Relative Path Traversal . Privileged remote attackers can exploit this flaw to download arbitrary system files, resulting in high confidentiality impact with no integrity or availability impact. The CVSS...
EUVD-2026-74725
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
CVE-2026-87747 Ragic｜Enterprise Cloud Database - Arbitrary File Read
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
CVE-2026-87747 Ragic｜Enterprise Cloud Database - Arbitrary File Read
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
CVE-2026-76009
The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the NCWMKitconnect::run function. This is due to the plugin registering the /wp-json/nextcart/v1/migration REST route with permissioncallback se...
CVE-2025-7062 Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education
A stored cross-site scripting XSS vulnerability has been identified in the H5P module h5p-nodejs-library by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malicious JavaScript. This code is then executed in the browsers of...
CVE-2025-7062 Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education
A stored cross-site scripting XSS vulnerability has been identified in the H5P module h5p-nodejs-library by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malicious JavaScript. This code is then executed in the browsers of...
CVE-2025-7062
CVE-2025-7062 is a stored cross-site scripting (XSS) vulnerability in the H5P module h5p-nodejs-library by Lumi Education UG , affecting versions up to and including 10.0.4 . The library allows users to upload H5P content containing malicious JavaScript, which is then executed in the browsers of ...
CVE-2026-76009
The Next-Cart Store to WooCommerce Migration WordPress plugin (versions ≤ 3.9.8) is vulnerable to unauthenticated authentication bypass via the NCWM_Kitconnect::run() function. The REST route /wp-json/next_cart/v1/migration is registered with permission_callback set to __return_true and relies on...
EUVD-2026-74689
The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the NCWMKitconnect::run function. This is due to the plugin registering the /wp-json/nextcart/v1/migration REST route with permissioncallback se...
CVE-2026-76009 Next-Cart Store to WooCommerce Migration <= 3.9.8 - Unauthenticated Authentication Bypass via Default '__token__' Fallback in REST Migration Endpoint
The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the NCWMKitconnect::run function. This is due to the plugin registering the /wp-json/nextcart/v1/migration REST route with permissioncallback se...
CVE-2026-21103
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege...
CVE-2026-21092
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege...
CVE-2026-21103
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege...