EUVD-2026-84811

Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder pH7 Social Dating CMS through 19.2.0. The CAPTCHA escalation flag is stored in the PHP session as captchaadminenabled and the CAPTCHA form element is only built when that flag is presen...

CVE-2026-37603

The pH7Builder (pH7 Social Dating CMS) software, versions through 19.2.0 , is vulnerable to an improper restriction of excessive authentication attempts in the administration login. The root cause is that the CAPTCHA escalation flag is stored in the PHP session as captcha_admin_enabled, and the C...

CVE-2026-37603

Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder pH7 Social Dating CMS through 19.2.0. The CAPTCHA escalation flag is stored in the PHP session as captchaadminenabled and the CAPTCHA form element is only built when that flag is presen...

CVE-2026-88756

Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...

PT-2026-96305

Name of the Vulnerable Software and Affected Versions Pagekit CMS versions prior to 1.0.19 Description An unauthenticated attacker can perform SQL injection, a technique used to manipulate database queries, by submitting a malicious credentials array to the public login endpoint 'POST...

CVE-2026-88756

Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...

CVE-2026-88756: Improper Neutralization of Special Elements used in an SQL Command

Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...

CVE-2026-88756

Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...

CVE-2026-88756

Pagekit CMS versions

VulnCheck KEV: CVE-2018-13980

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is installed, because of assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:4042-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4042-1 advisory. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - HollowByte: DoS vector against OpenSSL TLS ClientHello via remot...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4040-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4040-1 advisory. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:4034-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4034-1 advisory. This update for openssl-11-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788...

SUSE SLES12: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2026:4043-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4043-1 advisory. August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072:...

SUSE SLES15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2026:4033-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4033-1 advisory. August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072:...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:4037-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4037-1 advisory. This update for openssl-11-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:4036-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4036-1 advisory. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - HollowByte: DoS vector against OpenSSL TLS ClientHello via remot...

SUSE SLED15: libopenssl-1_1-devel / libopenssl1_1 / libopenssl1_1-32bit / etc (SUSE-SU-2026:4041-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4041-1 advisory. August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4038-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4038-1 advisory. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap...

PT-2026-95908

Name of the Vulnerable Software and Affected Versions Dromara UJCMS versions prior to 12.3.2 Description An improper authorization issue exists in the UserController component. A remote attacker can manipulate the Username variable within the usernameExist function of the...