CVE-2026-3284

The CVE concerns libvips 8.19.0 where the function vips_extract_area_build in libvips/conversion/extract.c is vulnerable to an integer overflow when manipulating the extract_area argument. This vulnerability can be triggered via a local attack, and public exploits have been reported. A patch is i...

PT-2026-22288

A vulnerability was found in libvips 8.19.0. Impacted is the function vips extract area build of the file libvips/conversion/extract.c. The manipulation of the argument extract area results in integer overflow. The attack requires a local approach. The exploit has been made public and could be...

libvips 输入验证错误漏洞

libvips is an open-source fast image processing library with low memory requirements. Version 8.19.0 of libvips contains a vulnerability related to input validation errors. This vulnerability stems from incorrect handling of the extractarea parameter in the function vipsextractareabuild located i...

SUSE-SU-2026:20525-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2024-52615: Resolve fixed source ports for wide-area DNS queries cause DNS responses be injected. bsc1233421 - CVE-2025-68468: Fixed DoS bug by removing incorrect assertion. bsc1256499 - CVE-2025-68471: Fixed DoS bug by changing assert to...

CVE-2026-27850 Improper verification in Linksys MR9600, Linksys MX4200

Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only accessible through the local network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200...

CVE-2026-27850

The CVE-2026-27850 issue is a misconfigured firewall rule on Linksys MR9600 and MX4200 routers that causes the WAN port to accept connections from source port 5222, exposing services normally restricted to the LAN. Affected versions are MR9600 1.0.4.205530 and MX4200 1.0.13.210200. The exposure c...

CVE-2026-20122

Cisco Catalyst SD-WAN Manager API vulnerability (CVE-2026-20122) affects the Cisco Catalyst SD-WAN Manager, including the Data Collection Agent service. The root cause is improper file handling and privileged API usage on the API interface, enabling an authenticated, remote attacker with valid re...

CVE-2026-20126

Cisco Catalyst SD-WAN Manager exposes an insufficient authentication mechanism in its REST API, enabling an authenticated, low-privilege attacker to gain root on the underlying OS. Affected vector is NETWORK with LOW privileges required, no user interaction, resulting in HIGH confidentiality, int...

CVE-2026-20127

creationtimestamp| type| source ---|---|--- 2026-02-25 13:28:27+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-166 2026-02-25 15:07:47+00:00| seen|...

EUVD-2026-8628

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed...

CVE-2026-3171

A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /queue.php. This manipulation of the argument firstname/lastname causes cross site scripting. The attack is possible to b...

CVE-2026-3171

CVE-2026-3171 affects SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown functionality in the file /queue.php where manipulation of the firstname/lastname argument enables cross-site scripting. The flaw can be exploited remotely; the exploit has...

CVE-2026-3171 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting

A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /queue.php. This manipulation of the argument firstname/lastname causes cross site scripting. The attack is possible to b...

CVE-2026-3170

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed...

CVE-2026-3170

CVE-2026-3170 affects SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0; vulnerability located in an unknown function of /patient-search.php. Manipulation of First Name/Last Name can trigger cross-site scripting, with remote attack capability and a public exploit refe...

CVE-2026-3170 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scripting

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed...

Patrick Mvuma Patients Waiting Area Queue 代码注入漏洞

Patrick Mvuma Patients Waiting Area Queue is a queue management system for waiting areas in hospitals/clinics developed by Patrick Mvuma himself. Version 1.0 of Patrick Mvuma Patients Waiting Area Queue contains a code injection vulnerability. This vulnerability arises from incorrect handling of...

📄 SPIP Blind Server-Side Request Forgery

SPIP versions prior to 4.4.9 suffers from a blind server-side request forgery vulnerability within the private administration interface. ============================================================================================================================================= | Title : SPIP 4.4...

PT-2026-21807

Name of the Vulnerable Software and Affected Versions GetSimpleCMS Community Edition version 3.3.16 Description GetSimpleCMS Community Edition version 3.3.16 has a stored cross-site scripting issue in the Theme to Components functionality within the components.php file. Input to the “slug” field ...

CVE-2026-26345

SPIP before 4.4.8 contains a stored cross-site scripting XSS vulnerability in the public area triggered in certain edge-case usage patterns. The echapperhtmlsuspect function does not adequately sanitize user-controlled content, allowing authenticated users with content-editing privileges e.g.,...