OPENSUSE-SU-2026:11177-1 krb5-1.22.2-4.1 on GA media

These are all security issues fixed in the krb5-1.22.2-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11178-1 openQA-5.1782995932.ffeb09be-1.1 on GA media

These are all security issues fixed in the openQA-5.1782995932.ffeb09be-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55554

These are all security issues fixed in the gzip-1.14-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55557

These are all security issues fixed in the krb5-1.22.2-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11174-1 gzip-1.14-2.1 on GA media

These are all security issues fixed in the gzip-1.14-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-14067

creationtimestamp| type| source ---|---|--- 2026-07-01 23:41:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmoyeg24d2d 2026-07-02 03:40:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn4d3bn6e2t 2026-07-02 07:51:16+00:00| seen|...

CVE-2026-36911

A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2026-54720

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/...

CVE-2026-54720 Silverstripe Framework: Possible XSS attack through media embed

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/...

CVE-2026-54720

Silverstripe Framework (PHP) contains an XSS vulnerability in the CMS “Insert media from web” feature, exploitable via a specially crafted embed. The issue affects versions prior to 6.2.2 and is mitigated by upgrading to 6.2.2 or later. The vulnerability stems from the media embed handling and co...

CVE-2026-54720

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/...

CVE-2026-54720 Silverstripe Framework: Possible XSS attack through media embed

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/...

CVE-2026-57722

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShortPixel Enable Media Replace allows Stored XSS. This issue affects Enable Media Replace: from n/a through 4.2.1...

CVE-2026-58138

creationtimestamp| type| source ---|---|--- 2026-07-01 17:59:24+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpm3tty4fp25 2026-07-13 22:00:16+00:00| seen| https://t.me/GithubRedTeam/91343 2026-07-14 00:00:32+00:00| seen| https://t.me/GithubRedTeam/91343 2026-07-15...

CVE-2026-34098

Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php lines 119, 129. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...

CVE-2026-57722

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShortPixel Enable Media Replace allows Stored XSS. This issue affects Enable Media Replace: from n/a through 4.2.1...

CVE-2026-57722

The CVE-2026-57722 entry concerns the WordPress plugin Enable Media Replace (versions up to and including 4.2.1). The vulnerability is described as a Stored Cross-Site Scripting (XSS) caused by improper neutralization of input during web page generation. Affected component: the Enable Media Repla...

CVE-2026-57722 WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShortPixel Enable Media Replace allows Stored XSS. This issue affects Enable Media Replace: from n/a through 4.2.1...

EUVD-2026-41096

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShortPixel Enable Media Replace allows Stored XSS. This issue affects Enable Media Replace: from n/a through 4.2.1...

WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Enable Media Replace versions = 4.2.1...