MINI-4387-RVQ3-54J2

Bulletin has no description...

MINI-2V95-Q4CM-F46Q

Bulletin has no description...

MINI-2P68-PRC5-7GJF

Bulletin has no description...

MINI-85Q7-W6HC-4FH3

Bulletin has no description...

ECHO-14AC-0604-D20B

Bulletin has no description...

ECHO-2753-20C7-ABAA

Bulletin has no description...

ECHO-850E-176A-B4A4

Bulletin has no description...

MINI-H4V7-VGM5-FR8H

Bulletin has no description...

MINI-7WRW-W3J8-53GV

Bulletin has no description...

MINI-CJ62-72W7-98HM

Bulletin has no description...

MINI-CVW7-JQF8-P2PG

Bulletin has no description...

MINI-WJP9-W83C-W2V9

Bulletin has no description...

MINI-R9HC-G5HQ-PGX3

Bulletin has no description...

CVE-2026-7728

A vulnerability was identified in ryanjoachim mcp-rtfm 0.1.0. This vulnerability affects the function getdoccontent/readdoc/updatedoc of the component MCP Interface. Such manipulation of the argument docFile leads to path traversal. The attack can be launched remotely. The exploit is publicly...

CVE-2026-48191

An incorrect handling of permissions in STORM powered by OTRS and in OTRS 2026.x and above Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them. This issue affects OTRS with STORM modules: 7.0.X 8.0.X...

CVE-2026-8948

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Networking component...

CVE-2026-8965

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Security component...

CVE-2025-62127

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WEN Themes WEN Logo Slider allows DOM-Based XSS. This issue affects WEN Logo Slider: from n/a through 3.4.0...

CVE-2026-43889

Outline is a service that allows for collaborative documentation. Prior to 1.7.0, the shares.create API accepts both collectionId and documentId simultaneously and, when published=false, only verifies read access for each—skipping the "share" permission check. A subsequent shares.update authorize...

CVE-2026-7217

A security vulnerability has been detected in Deepractice PromptX up to 2.4.0. The affected element is the function readdocx/readxlsx/readpptx/listxlsxsheets/readpdf of the file packages/mcp-office/src/index.ts of the component Document File Handler. Such manipulation of the argument path leads t...