CVE-2026-59281

A flaw in Spring MVC and WebFlux applications allows for arbitrary HTML/JavaScript code injection when data-binding Errors instances with HTML escaping enabled are rendered using the no-argument Errors.getFieldErrors() or Errors.getFieldError() accessors. This can lead to reflected cross-site scr...

EUVD-2026-67170

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors or Errors.getFieldError accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in...

CVE-2026-59281

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors or Errors.getFieldError accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in...

CVE-2026-81692

opensslencrypt pip: openssl-encrypt versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO totalsamples field of FLAC files before using it to size an allocation np.random.randintsize=totalsamples, channels. A 50-byte crafted FLAC file declaring 100 million samples causes a...

CVE-2026-80210

FrontAccounting through 2.4.20 generates a CSRF token in endform in includes/ui/uicontrols.inc and embeds it as the token hidden field in every form it renders, but only admin/users.php and admin/changecurrentuserpassword.php call checkcsrftoken to validate it. No financial transaction handler...

CVE-2026-54721 Silverstripe UserForms: Remote code execution via userforms email subject

Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted as executable server-side code. An authenticated CMS user wit...

CVE-2026-54721

Silverstripe UserForms (a visual form builder module for Silverstripe CMS) contains a remote code execution vulnerability in the email recipient subject field. Between versions 6.0.0 and the fixed releases, a specially crafted payload in the subject field is interpreted as executable server-side ...

CVE-2026-54721 Silverstripe UserForms: Remote code execution via userforms email subject

Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted as executable server-side code. An authenticated CMS user wit...

CVE-2026-54721 Silverstripe UserForms: Remote code execution via userforms email subject

Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted as executable server-side code. An authenticated CMS user wit...

EEF-CVE-2026-66353 Doggo vulnerable to cross-site scripting via unescaped date field values

Summary Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woylie doggo allows Reflected XSS. Doggo.normalizevalue/2 in lib/doggo.ex returned date field values wrapped in :safe, ..., the Phoenix.HTML marker meaning "already escaped, emit verbatim",...

CVE-2026-66353 Doggo vulnerable to cross-site scripting via unescaped date field values

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woylie doggo allows Reflected XSS. Doggo.normalizevalue/2 in lib/doggo.ex returned date field values wrapped in :safe, ..., the Phoenix.HTML marker meaning "already escaped, emit verbatim", without...

EUVD-2026-67237

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woylie doggo allows Reflected XSS. Doggo.normalizevalue/2 in lib/doggo.ex returned date field values wrapped in :safe, ..., the Phoenix.HTML marker meaning "already escaped, emit verbatim", without...

CVE-2026-81692

openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_samples field of FLAC files before using it to size a memory allocation via np.random.randint(size=(total_samples, channels)). A roughly 50-byte crafted FLAC file declaring ~100 million ...

CVE-2026-81692 openssl_encrypt before 1.4.9 Denial of Service via STREAMINFO

opensslencrypt pip: openssl-encrypt versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO totalsamples field of FLAC files before using it to size an allocation np.random.randintsize=totalsamples, channels. A 50-byte crafted FLAC file declaring 100 million samples causes a...

CVE-2026-81692 openssl_encrypt before 1.4.9 Denial of Service via STREAMINFO

opensslencrypt pip: openssl-encrypt versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO totalsamples field of FLAC files before using it to size an allocation np.random.randintsize=totalsamples, channels. A 50-byte crafted FLAC file declaring 100 million samples causes a...

WordPress Advanced Classifieds & Directory Pro plugin < 3.4.3 - Unauthenticated Non-Public Listing Custom Field Disclosure vulnerability

Unauthenticated Non-Public Listing Custom Field Disclosure vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Advanced Classifieds & Directory Pro versions 3.4.3...

EUVD-2026-66577

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...

CVE-2026-47849

Spring Data REST does not guard identifier @Id and version @Version properties against mutation via RFC 6902 JSON Patch application/json-patch+json requests. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7....

SUSE CVE-2026-65979

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...

SUSE CVE-2026-80522

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx-cryptlen calculation in tegragcmdoonereq Perform rctx-cryptlen calculation in tegragcmdoonereq the same way it is done in tegraccmcryptinit. The current formulae may lead to a crash if a caller does not...