3623 matches found
CVE-2026-81385
Microsoft Office Publisher is affected by a deserialization of untrusted data vulnerability that allows an unauthorized, remote attacker to achieve remote code execution over a network with low complexity and no required privileges, though user interaction is required. The CVSS 3.1 score is 8.8 (...
EUVD-2026-73852
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
CVE-2026-69742
CVE-2026-69742 is an integer overflow or wraparound vulnerability in Microsoft Office Publisher that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a low-complexity n...
EUVD-2026-73154
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
WordPress Podlove Podcast Publisher plugin <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Podlove Podcast Publisher versions = 4.5.5...
Microsoft Office Publisher Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
Microsoft Office Publisher Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
CVE-2026-81385: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
PT-2026-87695
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
PT-2026-88067
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
CVE-2026-69742: Integer Overflow or Wraparound
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
CVE-2026-85453
MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to inject malicious scripts. Any MOOS publisher can set variable values containing script payloads that execute in the browser of operators viewing the web interface...
CVE-2026-13001
CVE-2026-13001 — Podlove Podcast Publisher Unauthenticated File Upload RCE isimage vs extractfileextension Mismatch → PHP Polyglot Upload Overview CVE-2026-13001 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Podlove Podcast Publisher WordPress plugin...
Malicious code in @crysnovax/baileys (npm)
@crysnovax/baileys is a renamed fork of the Baileys WhatsApp Web library. On every successful connection connection.update with connection === 'open', wired in lib/Socket/socket.js it silently makes the user's own authenticated WhatsApp account follow two channels controlled by the publisher,...
CVE-2026-3416
The API Publisher component previously used a non-cryptographic pseudorandom number generator PRNG to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficient entropy for security-sensitive operations, allowing a sophisticated attacker to predict future secrets. This enables...
CVE-2026-3416 Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event Payloads
The API Publisher component previously used a non-cryptographic pseudorandom number generator PRNG to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficient entropy for security-sensitive operations, allowing a sophisticated attacker to predict future secrets. This enables...
EUVD-2026-70453
The API Publisher component previously used a non-cryptographic pseudorandom number generator PRNG to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficient entropy for security-sensitive operations, allowing a sophisticated attacker to predict future secrets. This enables...
CVE-2026-3416
WSO2 products' API Publisher component used a non-cryptographic pseudorandom number generator (PRNG) to generate shared secrets for Webhook HMAC validation. Because the PRNG lacks sufficient entropy, a sophisticated attacker can predict future secrets and forge event payloads with valid HMAC sign...
CVE-2026-3416 Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event Payloads
The API Publisher component previously used a non-cryptographic pseudorandom number generator PRNG to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficient entropy for security-sensitive operations, allowing a sophisticated attacker to predict future secrets. This enables...
