22667 matches found
WordPress plugin WooCommerce Support Ticket System 路径遍历漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
Linux Distros Unpatched Vulnerability : CVE-2026-33169
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. NumberToDelimitedConverter uses a lookahead-based...
PT-2026-27777
Name of the Vulnerable Software and Affected Versions Support Board version 3.7.7 Description A Reflected Cross Site Scripting XSS issue exists in Support Board. This allows an attacker to execute JavaScript code in a user's browser. The attack vector involves sending a malicious URL to a victim,...
PT-2026-28048
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through = 3.0.3...
Support Board 跨站脚本漏洞
Support Board is a sales chat software developed by the British company Support Board. Version 3.7.7 of Support Board contains a cross-site scripting vulnerability, which stems from incorrect handling of the parameter 'search' in the file /supportboard/include/articles.php. This vulnerability may...
The vulnerability of the bpf_prog_attach_check_attach_type() function in the kernel/bpf/syscall.c module, which is part of the Linux operating system’s BPF interpreter support, allows a malicious actor to cause a service failure.
The vulnerability of the bpfprogattachcheckattachtype function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux operating systems, is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a servic...
Linux Distros Unpatched Vulnerability : CVE-2026-33176
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1,...
GHSA-VPRV-35VV-Q339 NATS has pre-auth server panic via leafnode handling
Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The nats-server allows hub/spoke topologies using "leafnode" connections by other nats-servers. Problem Description A client which can conne...
EUVD-2026-14855
Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox...
EUVD-2026-14813
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9...
EUVD-2026-14817
Mitigation bypass in the Networking: HTTP component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...
EUVD-2026-14825
Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...
EUVD-2026-14831
Incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...
EUVD-2026-14819
Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...
EUVD-2026-14849
Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...
EUVD-2026-14839
Information disclosure in the Widget: Cocoa component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...
EUVD-2026-14835
Incorrect boundary conditions in the Audio/Video component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...
EUVD-2026-14827
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9...