152 matches found
CVE-2026-59082
A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...
CVE-2026-59082
A vulnerability exists in SIMATIC WinCC V7.5 (All versions) , SIMATIC WinCC V8.0 (All versions) , and SIMATIC WinCC V8.1 (All versions) . The issue is caused by the software implicitly executing active content when opening files, which could allow an attacker to trick a user into executing arbitr...
CVE-2026-59082
A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...
EUVD-2026-120887
A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...
PT-2026-141599
A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...
CVE-2026-59082: Siemens: A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC…
A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...
CVE-2026-114432
The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a form file field, and a flaw in its temporary-file cleanup leaves the uploaded file on disk, allowing unauthenticated users to upload arbitrary files to the site. On a stock Debian ...
EUVD-2026-119468
The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a form file field, and a flaw in its temporary-file cleanup leaves the uploaded file on disk, allowing unauthenticated users to upload arbitrary files to the site. On a stock Debian ...
VulnCheck KEV: CVE-2026-114432
The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a form file field, and a flaw in its temporary-file cleanup leaves the uploaded file on disk, allowing unauthenticated users to upload arbitrary files to the site. On a stock Debian ...
CVE-2026-63197
traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, instances configured with TRAQSTORAGETYPE=local can return user-uploaded SVG or HTML content from the /files/fileId retrieval endpoint for direct browser rendering. An attacker with file-upload capability can...
CVE-2026-63197
traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, instances configured with TRAQSTORAGETYPE=local can return user-uploaded SVG or HTML content from the /files/fileId retrieval endpoint for direct browser rendering. An attacker with file-upload capability can...
CVE-2026-63197: traPtitech traQ: traQ is a messenger application built for Digital Creators Club traP
traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, instances configured with TRAQSTORAGETYPE=local can return user-uploaded SVG or HTML content from the /files/fileId retrieval endpoint for direct browser rendering. An attacker with file-upload capability can...
CVE-2026-44977
countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, plugins/star-rating/api/api.js allows a non-global application administrator to use uploadFeedbackFile to store attacker-controlled active content while trusting the supplied MIME type...
CVE-2026-44977
countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, plugins/star-rating/api/api.js allows a non-global application administrator to use uploadFeedbackFile to store attacker-controlled active content while trusting the supplied MIME type...
EUVD-2026-102918
countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, plugins/star-rating/api/api.js allows a non-global application administrator to use uploadFeedbackFile to store attacker-controlled active content while trusting the supplied MIME type...
PT-2026-115655
Name of the Vulnerable Software and Affected Versions countly-server versions prior to 24.05.50 countly-server versions prior to 25.03.44 Description A flaw in the star-rating plugin allows a non-global application administrator to upload active content via the uploadFeedbackFile function in the...
CVE-2026-55876
Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, the POST /planner/attachments/ endpoint allows authenticated users to upload SVG and HTML attachments because conf/configs/common.py omits those formats from BLOCKEDATTACHMENTEXTENSIONS and...
CVE-2026-55876
Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, the POST /planner/attachments/ endpoint allows authenticated users to upload SVG and HTML attachments because conf/configs/common.py omits those formats from BLOCKEDATTACHMENTEXTENSIONS and...
CVE-2026-55876 Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts
Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, the POST /planner/attachments/ endpoint allows authenticated users to upload SVG and HTML attachments because conf/configs/common.py omits those formats from BLOCKEDATTACHMENTEXTENSIONS and...
CVE-2026-55876 Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts
Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, the POST /planner/attachments/ endpoint allows authenticated users to upload SVG and HTML attachments because conf/configs/common.py omits those formats from BLOCKEDATTACHMENTEXTENSIONS and...