CVE-2026-27257

Adobe Experience Manager 6.5.23 and earlier is affected by a stored XSS vulnerability in form input that can be exploited by a low-privilege attacker to inject JavaScript into pages containing vulnerable fields. Exploitation could cause the injected script to run in a victim’s browser when viewin...

EUVD-2026-10999

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2026-27250

Adobe Experience Manager (AEM) 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in form fields. The issue allows a low-privilege attacker to inject malicious scripts, which may execute in a victim’s browser when the page containing the vulnerable field is loade...

Hewlett Packard Enterprise AOS（HPE AOS） 安全漏洞

Hewlett Packard Enterprise AOS is a network operating system developed by Hewlett Packard Enterprise in the United States. It is used for data centers, campus networks, and edge computing environments. Hewlett Packard Enterprise AOS HPE AOS contains a security vulnerability. This vulnerability...

PT-2026-24526

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

Epross AVCON6 安全漏洞

Epross AVCON6 is a monitoring video management server developed by Epross Corporation. Epross AVCON6 has a security vulnerability, which stems from OGNL injection. This vulnerability could allow unverified attackers to execute arbitrary commands...

PT-2026-24531

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

R 安全漏洞

R is a statistical computing software developed by The R Foundation. Version 3.4.4 of R contains a security vulnerability. This vulnerability stems from a buffer overflow in the GUI preference language menu field, which could allow local attackers to bypass DEP and ASLR protections and execute...

WinMPG iPod Convert 缓冲区错误漏洞

WinMPG iPod Convert is a video format conversion tool developed by WinMPG Corporation in the United States. Version 3.0 of WinMPG iPod Convert contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the registration dialog box, which could allow local attackers t...

WellChoose IFTOP 安全漏洞

WellChoose IFTOP is a command-line network traffic monitoring tool for collecting network traffic statistics from WellChoose, a company based in Taiwan, China. WellChoose IFTOP has a security vulnerability caused by reflective cross-site scripting. This vulnerability could allow authenticated...

Varient SQL注入漏洞

Varient is a news magazine software developed by Varient Corporation. Version 1.6.1 of Varient contains an SQL injection vulnerability. This vulnerability stems from the userid parameter, which allows for SQL injections. It may allow unverified attackers to manipulate database queries and extract...

CVE-2025-66956

Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL...

PT-2026-24518

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

PT-2026-24762

InputMapper 1.6.10 contains a buffer overflow vulnerability in the username field that allows local attackers to crash the application by entering an excessively long string. Attackers can trigger a denial of service by copying a large payload into the username field and double-clicking to proces...

WellChoose IFTOP 输入验证错误漏洞

WellChoose IFTOP is a command-line network traffic monitoring tool for network traffic statistics provided by WellChoose, a company based in Taiwan, China. WellChoose IFTOP has a vulnerability related to input validation. This vulnerability stems from an open redirection vulnerability, which may...

PT-2026-24535

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

Information Disclosure Vulnerability in Multiple Mozilla Products (CNVD-2026-13443)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An information disclosure vulnerability exists in several Mozilla produc...

HPE AOS-CX 安全漏洞

HPE AOS-CX is a network operating system developed by Hewlett-Packard Enterprise HPE for data centers, campuses, and edge locations. It is designed to provide flexible and innovative network services while enhancing network performance. HPE AOS-CX contains a security vulnerability, which stems fr...

PT-2026-24779

R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler cha...

PT-2026-24547

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.7. This is due to missing or incorrect nonce validation on the reload preview function. This makes it possible for...