239 matches found
EUVD-2026-76689
Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...
CVE-2026-81917
Concrete CMS versions below 9.5.3 contain a Stored XSS vulnerability in the Document Library block . The block controller returned the file description and tags values without applying the h() HTML-escaping function (already used for the title column), and the block view template wrote those valu...
CVE-2026-81917 Concrete CMS below 9.5.3 is vulnerable to Stored XSS in the Document Library block file description and tags
Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...
PT-2026-90498
Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...
CVE-2025-11174
CVE-2025-11174: Неавторизованное раскрытие информации в плагине Document Library Lite для WordPress Ключевые слова: CVE-2025-11174, уязвимость Document Library Lite, раскрытие информации, безопасность WordPress, неавторизованный AJAX эксплойт, уязвимость плагина WordPress, CWE-862, безопасность...
Astra Linux – Vulnerability in pypdf2
PyPDF2 is an open-source Python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5, an attacker who exploited this vulnerability could create a PDF that would cause an infinite loop if the PyPDF2 code attempted to access the...
MINI-24FR-2CJW-RFV9
Bulletin has no description...
MINI-7X66-5895-R2CF
Bulletin has no description...
The vulnerability of the Python library for working with PDF files, PyPDF, arises from improper processing of highly compressed input data. This vulnerability allows attackers to cause service failures.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Python library for working with PDF files, PyPDF, related to unlimited resource distribution, allows a hacker to cause a service failure.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
MINI-VJ43-76JW-23WX
Bulletin has no description...
MINI-5R3H-V7V6-V8FQ
Bulletin has no description...
ECHO-C17A-46AB-75A9
Bulletin has no description...
MINI-QCC6-H659-QHMF
Bulletin has no description...
MINI-PWHV-33M6-GH3C
Bulletin has no description...
MINI-73F5-JC3M-XVJC
Bulletin has no description...
EUVD-2026-26973
Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5...
ECHO-586E-C143-D1AA
Bulletin has no description...