5193 matches found
WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting
WordPress eCommerce Product Catalog plugin before 3.0.39 contains a cross-site scripting vulnerability. The plugin does not escape the ic-settings-search parameter before outputting it back in the page in an attribute. This can allow an attacker to steal cookie-based authentication credentials an...
MINI-99X9-2VH5-6W79
Bulletin has no description...
MINI-PVQQ-Q354-3R42
Bulletin has no description...
MINI-MW8M-RV98-FJ9R
Bulletin has no description...
Important: Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release.
Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release. Red Hat Developer Hub RHDH is extensible by the plugins included herein...
MINI-V87M-5FXJ-QH84
Bulletin has no description...
CVE-2026-43738
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory...
CVE-2026-43738
CVE-2026-43738 affects macOS where processing a maliciously crafted asset catalog could disclose process memory. The connected sources specify the issue is resolved in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. Root cause described as memory handling improvements; the CVE entry is tied to memo...
CVE-2026-43738
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory...
CVE-2026-16812
creationtimestamp| type| source ---|---|--- 2026-07-27 15:26:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrn7h6zcl32w 2026-07-27 17:00:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ab0b145-d51f-447c-8ca9-a77176d7904b...
ROS-20260724-73-0041
A vulnerability in ImageMagick 7 is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
ROS-20260724-73-0040
The vulnerability in ImageMagick relates to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
MINI-W996-C978-35X3
Bulletin has no description...
MINI-R7XW-M2C8-JGHP
Bulletin has no description...
PYSEC-2026-3463 DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval
Summary The FileCatalog DatasetManager runs a query on the database and passes the result to eval. The SQL query contains an injection vulnerability which allows an authenticated user to control the parameter returned to the eval resulting in remote code execution. Details The FileCatalog...
MINI-24X5-3XMM-QXHH
Bulletin has no description...
MINI-6WV5-Q456-C4H3
Bulletin has no description...
MINI-HR4M-4CH7-C4FR
Bulletin has no description...