CVE-2026-88792

The Dictionary WordPress plugin through version 1.0 is vulnerable to unauthenticated stored cross-site scripting (XSS) . The root cause is the absence of authorisation, sanitisation, or escaping when adding or updating dictionary entries, allowing any unauthenticated user to inject arbitrary web ...

PT-2024-35424

Name of the Vulnerable Software and Affected Versions FileCatalyst Direct versions 3.8.10 Build 138 and earlier FileCatalyst Workflow versions 5.1.6 Build 130 and earlier Description A hard-coded password in the FileCatalyst TransferAgent can be used to unlock the keystore, allowing access to its...

MGASA-2014-0435 Updated MythTV packages to harden against SSDP reflection attacks

Updated MythTV packages to harden against SSDP reflection attacks MythTV's UPNP component was suseptable to SSDP reflection attacks and has been hardened to disallow SSDP device discovery from non-local addresses as mitigation. Additionally, a popular schedules retrieval service, Schedules Direct...