6701 matches found
CVE-2026-57833
The CVE affects the Joomla extension 4Analytics for weeblr.com, with an unauthenticated stored XSS vulnerability in the AI analysis feature present in versions prior to 5.0.2. The underlying issue is a stored XSS in the AI analysis workflow, leading to high impact on confidentiality, integrity, a...
CVE-2026-57833 Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2
Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS in relation to the AI analysis feature...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
CVE-2025-27591-PoC CVE-2025-27591 PoC — Below Local Privileg...
📄 xxl-job Cross Site Request Forgery
xxl-job versions prior to 3.4.0 suffer from a cross site request forgery vulnerability. Description Summary A Cross-Site Request Forgery CSRF vulnerability exists in the xxl-job-admin web application that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The...
Splunk Enterprise 9.3.0 < 9.3.14, 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4.0 < 10.4.1 (SVD-2026-0703)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0703 advisory. - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below...
CVE-2025-11698
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...
CVE-2025-11698
The CVE-2025-11698 vulnerability affects 5380/5480/5580 controllers with boot firmware versions below 1.072. It enables a denial-of-service by allowing a malicious actor to write invalid file data to the controller, potentially causing a major non-recoverable fault (MNRF). The documents do not pr...
Microsoft PC Manager < 3.22.1.0 Elevation of Privilege (CVE-2026-50438) (July 2026)
The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.22.1.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to escalate privileges beyond the vulnerable component's...
CVE-2026-49971 Laravel-Mediable < 7.0.0 Stored XSS via SVG File Upload
Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows authenticated or anonymous users to execute arbitrary JavaScript by uploading unsanitized SVG files containing embedded scripts in onload event handlers, script tags, or foreignObject elements. Attacker...
Denial of service in langchain-community
Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...
CVE-2026-12271 Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Quiz Attempt Modification via IDOR
The Tutor LMS WordPress plugin before 3.9.13 does not verify ownership of the targeted quiz attempt before writing to it, allowing authenticated users with subscriber-level access and above to modify and force-complete other students' quiz attempts, overwriting their recorded marks and pass/fail...
PT-2026-59218
Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parse sitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...
CVE-2026-14380 affecting package perl-DBI for versions less than 1.650-1
CVE-2026-14380 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-14740 affecting package perl-DBI for versions less than 1.650-1
CVE-2026-14740 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1
CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-10536 affecting package curl for versions less than 8.11.1-10
CVE-2026-10536 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-8458 affecting package curl for versions less than 8.11.1-10
CVE-2026-8458 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1
CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...