Lucene search
+L

44390 matches found

Cvelist
Cvelist
added 2026/07/09 6:44 p.m.40 views

CVE-2026-50188 Kirby: Request header injection in `Http\Remote`

Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites and plugins using the Kirby Http Remote class, including Remote::request, Remote::get, and Remote::post, to send outgoing HTTP requests with untrusted data in the headers option could allow newline characters...

6.9CVSS0.0029EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/09 6:42 p.m.39 views

CVE-2026-54004

CVE-2026-54004 affects Kirby CMS. Prior to version 4.9.4 and 5.4.4, when content.fileRedirects is enabled, clean file URLs for files stored in top-level draft pages could be redirected to physical media URLs without verifying draft page permissions or preview tokens, potentially disclosing draft ...

6.3CVSS5.9AI score0.00312EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/09 6:38 p.m.8 views

CVE-2026-49274 Kirby: `pages.access` permission is not checked in the pages picker for parent pages

Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites using the pages field with roles that have the pages.access permission disabled allowed authenticated users to provide an inaccessible parent page or site to the page picker backend and confirm arbitrary page...

5.3CVSS6.1AI score
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/07/09 6:38 p.m.9 views

CVE-2026-49274

Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites using the pages field with roles that have the pages.access permission disabled allowed authenticated users to provide an inaccessible parent page or site to the page picker backend and confirm arbitrary page...

5.3CVSS5.9AI score0.00275EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2026/07/09 6:38 p.m.38 views

CVE-2026-49274 Kirby: `pages.access` permission is not checked in the pages picker for parent pages

Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites using the pages field with roles that have the pages.access permission disabled allowed authenticated users to provide an inaccessible parent page or site to the page picker backend and confirm arbitrary page...

5.3CVSS0.00275EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/09 6:34 p.m.38 views

CVE-2026-54002

Kirby CMS is affected by an XSS issue (CVE-2026-54002) in earlier releases. The vulnerability arises when untrusted input is processed by Dom::sanitize() and related sanitization helpers (Sane::sanitize, SaneHtml/SaneSvg/SaneXml, Sane::sanitizeFile, and file sanitizeContents), or when writer/list...

8.5CVSS5.5AI score0.00409EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/07/09 6:34 p.m.37 views

CVE-2026-54002 Kirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in `Dom::sanitize()`

Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites and plugins that use the writer or list fields or call Dom::sanitize, Sane::sanitize, Sane::Html::sanitize, Sane::Svg::sanitize, Sane::Xml::sanitize, Sane::sanitizeFile, or file sanitizeContents with untruste...

8.5CVSS0.00409EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/09 5:40 p.m.12 views

CVE-2026-59817

Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation checkout flow allowed an unauthenticated attacker to control donation checkout metadata and obtain full paid gift memberships for a minimal payment without exposing customer or member data or stealing...

5.3CVSS5.8AI score0.00257EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/09 5:40 p.m.41 views

CVE-2026-59817 Ghost: Paid gift memberships obtainable at minimal cost via the donations feature

Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation checkout flow allowed an unauthenticated attacker to control donation checkout metadata and obtain full paid gift memberships for a minimal payment without exposing customer or member data or stealing...

5.3CVSS0.00257EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/09 5:40 p.m.8 views

CVE-2026-59817 Ghost: Paid gift memberships obtainable at minimal cost via the donations feature

Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation checkout flow allowed an unauthenticated attacker to control donation checkout metadata and obtain full paid gift memberships for a minimal payment without exposing customer or member data or stealing...

5.3CVSS6AI score
SaveExploits0References7
CVE
CVE
added 2026/07/09 5:40 p.m.36 views

CVE-2026-59817

Ghost is a Node.js content management system. Affects versions from 6.27.0 up to but not including 6.44.0; the public donation checkout flow allowed an unauthenticated attacker to control donation checkout metadata and obtain full paid gift memberships for a minimal payment, without exposing cust...

5.3CVSS5.8AI score0.00257EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/09 1:44 p.m.8 views

GHSA-86VW-X4WW-X467 Craft CMS: RCE via missing cleanseConfig in FieldsController::actionRenderCardPreview

The actionRenderCardPreview method in FieldsController passes the fieldLayoutConfig POST parameter directly to Fields::createLayout without calling Component::cleanseConfig. This allows Yii2 event handler injection via on eventName keys in the config array, leading to arbitrary code execution. Th...

8.6CVSS6.4AI score0.00493EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/09 12:0 a.m.11 views

TencentOS Server 4: openssl (TSSA-2026:0503)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0503 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

9.1CVSS6.7AI score0.05236EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/09 12:0 a.m.15 views

PT-2026-56900

Name of the Vulnerable Software and Affected Versions Ghost versions 6.27.0 through 6.43.x Description The public donation checkout flow in this Node.js content management system allows an unauthenticated attacker to manipulate donation checkout metadata. This can lead to the acquisition of full...

5.3CVSS6AI score0.00257EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2026/07/09 12:0 a.m.16 views

TencentOS Server 4: edk2 (TSSA-2026:0501)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0501 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

9.1CVSS6.7AI score0.05236EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/08 2:17 p.m.14 views

CVE-2026-58657

Grav before 2.0.0 affected through 2.0.0-rc.9 and the 2.0 branch contains a stored CSS injection vulnerability in the Markdown image resize media action. Prior media hardening rejects direct ?style= payloads and unsafe attribute fallbacks, but the resize action in Excerpts::processMediaActions...

4.8CVSS0.00217EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/08 1:49 p.m.9 views

CVE-2026-58657 Grav - Stored CSS Injection via Markdown Image resize() Action

Grav before 2.0.0 affected through 2.0.0-rc.9 and the 2.0 branch contains a stored CSS injection vulnerability in the Markdown image resize media action. Prior media hardening rejects direct ?style= payloads and unsafe attribute fallbacks, but the resize action in Excerpts::processMediaActions...

4.8CVSS6.2AI score
SaveExploits0References6
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.8 views

Astra Linux – Vulnerability in LCMS2

In Little CMS lcms2 version 2.18, there is an integer overflow in the CubeSize function in cmslut.c, as the overflow check is performed after the multiplication operation...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/08 6:43 a.m.12 views

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2026-34182 DESCRIPTION: Issue Summary: Cryptographic Message Services CMS processing fails to perform sufficient input validation on the cipher and tag length fiel...

9.1CVSS8AI score0.01025EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2026/07/07 2:34 p.m.8 views

PYSEC-2026-1298 Django Filer Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type, Improper Input Validation, Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS.This issue affects django Filer: from 3 before 3....

5.5CVSS5.9AI score0.00343EPSS
SaveExploits0References10
Rows per page
Query Builder