CVE-2026-55793

Craft CMS is a content management system CMS. In versions 5.0.0-RC1 through 5.9.22, an author-level control panel user can store a malicious JavaScript payload in an entry title. When an admin, or any control panel user with saveEntries for the same Structure section, drags another entry under th...

CVE-2026-55793 Craft CMS: Stored XSS via Structure entry title in table view

Craft CMS is a content management system CMS. In versions 5.0.0-RC1 through 5.9.22, an author-level control panel user can store a malicious JavaScript payload in an entry title. When an admin, or any control panel user with saveEntries for the same Structure section, drags another entry under th...

CVE-2026-55793

Craft CMS is a content management system CMS. In versions 5.0.0-RC1 through 5.9.22, an author-level control panel user can store a malicious JavaScript payload in an entry title. When an admin, or any control panel user with saveEntries for the same Structure section, drags another entry under th...

CVE-2026-55793

Craft CMS versions 5.0.0-RC1–5.9.22 are affected by a stored XSS in a Structure entry title. An author-level control panel user can insert malicious JavaScript into an entry title. When a victim with saveEntries permission drags another entry under the poisoned one in table view, the payload exec...

MAL-2026-6717 Malicious code in test-pkg-x0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0014944456f668a25fa484bf7cb5f36a7128d6a585b86d9294d8d49b23049a Package declares scripts.postinstall pointing at shim.js, a script that runs unconditionally on npm install. shim.js branches on uname -s...

MINI-7FHW-VHQX-MHXH

Bulletin has no description...

MINI-PMVC-37XG-WM2C

Bulletin has no description...

MINI-W89F-CRMP-RMMG

Bulletin has no description...

MINI-2WW9-7XRQ-PWFJ

Bulletin has no description...

MINI-885X-4PPG-V6R2

Bulletin has no description...

MINI-C754-J8JG-WMJ3

Bulletin has no description...

MINI-WH36-C9XP-25J5

Bulletin has no description...

MINI-X63G-CXV8-P4JM

Bulletin has no description...

MINI-P4FQ-P4XW-9CVF

Bulletin has no description...

MINI-PJ88-PMPV-89F5

Bulletin has no description...

MINI-5R58-XR8Q-48RV

Bulletin has no description...

MINI-W65G-6HP4-C933

Bulletin has no description...

MINI-QC54-J793-QQH3

Bulletin has no description...

CVE-2026-53336

A flaw was found in the Linux kernel's nvmem driver. This vulnerability allows a local attacker to trigger a denial of service DoS by providing a specially crafted EEPROM Electrically Erasable Programmable Read-Only Memory entry with an unknown type. This can cause the driver to enter an endless...

CVE-2026-58025

Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php. This issue affects MediaWiki: from before 1.46.0, 1.45.4,...