CVE-2026-23625

OpenProject is an open-source, web-based project management software. Versions 16.3.0 through 16.6.4 are affected by a stored cross-site scripting vulnerability in the Roadmap view. OpenProject’s roadmap view renders the “Related work packages” list for each version. When a version contains work...

CVE-2022-40264

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user import a project package...

Mitsubishi Electric GENESIS64 路径遍历漏洞

Mitsubishi Electric GENESIS64 is a SCADA package from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric GENESIS64 versions 10.96 through 10.97.2, which exploits a vulnerability that could allow an unauthenticated attacker to create, tamper with, or corrupt an...