3281 matches found
CVE-2026-42839
An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the itemname, description, or image fields of an Item and trigger unescaped rendering in the Point of Sale POS cart interface for every operator who adds that item to a transaction.This issue...
CVE-2026-40098
Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to version 20.17.0, the shared wishlist add-to-cart endpoint authorizes access with a public...
CVE-2026-3599
The Riaxe Product Customizer plugin for WordPress is vulnerable to SQL Injection via the 'options' parameter keys within 'productdata' of the /wp-json/InkXEProductDesignerLite/add-item-to-cart REST API endpoint in all versions up to, and including, 2.1.2. This is due to insufficient escaping on t...
CVE-2026-5712
This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing...
MINI-RRXF-QX95-C24G
Bulletin has no description...
MINI-FXHC-28GG-74CG
Bulletin has no description...
MINI-3P87-CP7J-HM65
Bulletin has no description...
MINI-M5X8-C5X3-PF22
Bulletin has no description...
MINI-76JR-Q7J2-678J
Bulletin has no description...
MINI-G34F-X6V8-3J22
Bulletin has no description...
MINI-29JR-5RGH-PVR3
Bulletin has no description...
MINI-22CM-C275-7GW3
Bulletin has no description...
MINI-GMHC-CGM4-Q3CH
Bulletin has no description...
MINI-WG3W-5J5P-RVF6
Bulletin has no description...
MINI-X336-9WRH-WV57
Bulletin has no description...
MINI-H4JJ-J33V-JVVP
Bulletin has no description...
MINI-4H84-MRFM-93MW
Bulletin has no description...
MINI-JJ4W-6R77-GF58
Bulletin has no description...