WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting

WordPress eCommerce Product Catalog plugin before 3.0.39 contains a cross-site scripting vulnerability. The plugin does not escape the ic-settings-search parameter before outputting it back in the page in an attribute. This can allow an attacker to steal cookie-based authentication credentials an...

MINI-HP9H-H8C5-8GQ5

Bulletin has no description...

CGA-7234-5HJ8-J5Q9

Bulletin has no description...

CVE-2026-10032

The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary...

CVE-2026-10032

The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary...

EUVD-2026-52744

The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary...

CVE-2026-10032

The CVE-2026-10032 issue involves the openUrl function in @a2ui/web_core, which passes an agent-controlled URL directly to window.open() without URI scheme validation. A malicious actor can supply a javascript: URI as the url argument for a Button component’s functionCall action, allowing arbitra...

CVE-2026-10032 Arbitrary JavaScript Execution via openUrl in @a2ui/web_core

The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary...

CVE-2023-54359

creationtimestamp| type| source ---|---|--- 2026-08-03 11:01:24+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a34d52da-21b0-44bb-93d8-c723648a24f2 2026-08-04 01:00:19+00:00| exploited|...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 release.

Red Hat Developer Hub 1.10.3 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

CVE-2026-3836

creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:32+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfa22a55-3ac8-46bc-bb9d-e1411808358a...

CVE-2024-37014

creationtimestamp| type| source ---|---|--- 2026-08-01 11:00:22+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/49b08f6f-9f5e-4e73-9c20-98471e002f42 2026-08-04 18:00:08+00:00| confirmed|...

MINI-99X9-2VH5-6W79

Bulletin has no description...

MINI-PVQQ-Q354-3R42

Bulletin has no description...

MINI-MW8M-RV98-FJ9R

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release.

Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release. Red Hat Developer Hub RHDH is extensible by the plugins included herein...

MINI-V87M-5FXJ-QH84

Bulletin has no description...

CVE-2026-43738

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory...

CVE-2026-43738

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory...

CVE-2026-43738

CVE-2026-43738 affects macOS where processing a maliciously crafted asset catalog could disclose process memory. The connected sources specify the issue is resolved in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. Root cause described as memory handling improvements; the CVE entry is tied to memo...