1111 matches found
CVE-2026-23499 Saleor vulnerable to stored XSS via Unrestricted File Upload
Saleor is an e-commerce platform. Starting in version 3.0.0 and prior to versions 3.20.108, 3.21.43, and 3.22.27, Saleor allowed authenticated staff users or Apps to upload arbitrary files, including malicious HTML and SVG files containing Javascript. Depending on the deployment strategy, these...
CVE-2026-23499 Saleor vulnerable to stored XSS via Unrestricted File Upload
Saleor is an e-commerce platform. Starting in version 3.0.0 and prior to versions 3.20.108, 3.21.43, and 3.22.27, Saleor allowed authenticated staff users or Apps to upload arbitrary files, including malicious HTML and SVG files containing Javascript. Depending on the deployment strategy, these...
BELL-CVE-2025-71076
Bulletin has no description...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002573)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002573 advisory. A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall instructio...
Astra Linux – Vulnerability in OpenSSL
Issue summary: If an application using the SSLCIPHERfind function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL pointer dereference occurs. Impact summary: A NULL pointer dereference leads to abnormal termination of the running process, causing a Denia...
CVE-2026-0511
The CVE-2026-0511 issue affects SAP Fiori App Intercompany Balance Reconciliation. The vulnerability is due to missing authorization checks for an authenticated user, enabling privilege escalation. Impact is high on confidentiality and integrity; availability is not affected. The issue is corrobo...
K000159014: Intel UEFI vulnerability CVE-2025-30185
Security Advisory Description Active debug code for some Intel UEFI reference platforms within Ring 0: Kernel may allow a denial of service and escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data alteration. This result m...
BELL-CVE-2025-68752
Bulletin has no description...
BELL-CVE-2025-66866 CVE-2025-66866 does not affect BellSoft software
Bulletin has no description...
PT-2026-27773
Name of the Vulnerable Software and Affected Versions BIND versions 9.20.0 through 9.20.20 BIND versions 9.21.0 through 9.21.19 BIND versions 9.20.9-S1 through 9.20.20-S1 Description BIND may terminate unexpectedly when processing a correctly signed query containing a TKEY record. This issue occu...
K000158955: Intel QAT vulnerability CVE-2025-33000
Security Advisory Description Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalatio...
BELL-CVE-2025-66864 CVE-2025-66864 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2025-68737
Bulletin has no description...
BELL-CVE-2025-68738
Bulletin has no description...
BELL-CVE-2025-68375
Bulletin has no description...
EUVD-2025-204604
There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to 2.30 that allows a remote, unauthenticated attacker to potentially entice a user to click a link that causes arbitrary HTML to render in a victim's browser. There is no evidence of JavaScript...
BELL-CVE-2025-68225
Bulletin has no description...
Debian dsa-6086 : dropbear - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6086 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6086-1 [email protected] https://www.debian.org/security/ Moritz...