16766 matches found
CVE-2021-47818
DupTerminator 1.4.5639.37199 contains a denial of service vulnerability that allows attackers to crash the application by inputting a long character string in the Excluded text box. Attackers can generate a payload of 8000 repeated characters to trigger the application to stop working on Windows ...
CVE-2021-47818 DupTerminator 1.4.5639.37199 - Denial of Service
DupTerminator 1.4.5639.37199 contains a denial of service vulnerability that allows attackers to crash the application by inputting a long character string in the Excluded text box. Attackers can generate a payload of 8000 repeated characters to trigger the application to stop working on Windows ...
CVE-2026-21624
Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla...
CVE-2026-21624
Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla...
CVE-2026-21624 Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla
Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla...
CVE-2026-21624
CVE-2026-21624 affects the Easy Discuss Joomla extension (versions 1.0.0–5.0.15) and is due to a lack of input filtering in the user avatar text handling, enabling persistent XSS. Multiple feeds (NVD, Red Hat, CVE lists, EUVD, CIRCL, etc.) corroborate the same description without detailing exploi...
CVE-2026-21624 Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla
Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla...
OESA-2026-1081 assimp security update
Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A weakness has been identified in Op...
CVE-2025-12957 All-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypass
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 4.5.7. This is due to insufficient file type validation detecting VTT files, allowing double extension files to bypass sanitization while being accepted as a valid VTT...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004216)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004216 advisory. In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalati...
PT-2026-3275
DupTerminator 1.4.5639.37199 contains a denial of service vulnerability that allows attackers to crash the application by inputting a long character string in the Excluded text box. Attackers can generate a payload of 8000 repeated characters to trigger the application to stop working on Windows ...
PT-2026-3255
Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004032)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004032 advisory. In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalati...
DupTerminator security vulnerability
DupTerminator is a file cleanup tool developed by Dmitry Borisov. Version 1.4.5639.37199 of DupTerminator contains a security vulnerability, which stems from a buffer overflow in the Excluded text box, potentially leading to a denial-of-service attack...
MiracleLinux 3 : xorg-x11-server-1.1.1-48.101.1.0.1.AXS3 (AXSA:2013-665:02)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-665:02 advisory. X.Org X11 X server Security issues fixed with this release: CVE-2013-4396 Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the...
MiracleLinux 4 : grep-2.20-3.AXS4 (AXSA:2015-422:01)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2015-422:01 advisory. The GNU versions of commonly used grep utilities. Grep searches through textual input for lines which contain a match to a specified pattern and then...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001143)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001143 advisory. In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalati...
CVE-2021-47779 Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation
Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation module that allows low-privilege users to inject malicious scripts. Attackers can craft a specially designed ticket message with embedded JavaScript that triggers when an administrator copies the...
@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), positron-components (>=1.12.2, <=1.12.3) potentially affected by CVE-2026-22803 via @sveltejs/kit (>=2.49.0, <=2.49.3)
@sveltejs/kit NPM version =2.49.0, =0.0.137, =1.12.2, =1.12.3 Source cves: CVE-2026-22803 Source advisory: OSV:GHSA-J2F3-WQ62-6Q46...
@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), positron-components (>=1.12.2, <=1.12.3) potentially affected by CVE-2026-22803 via @sveltejs/kit (>=2.49.0, <=2.49.3)
@sveltejs/kit NPM version =2.49.0, =0.0.137, =1.12.2, =1.12.3 Source cves: CVE-2026-22803 Source advisory: SNYK:JS-SVELTEJSKIT-14996726...