CLEANSTART-2024-ML93442 Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89

Security vulnerability affects the chromium package. Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89...

CLEANSTART-2025-IL34570 arbitrary file deletion vulnerability in Gitea v1

Security vulnerability affects the gitea package. An arbitrary file deletion vulnerability in Gitea v1...

CLEANSTART-2024-PX18765 Use after free in File System API in Google Chrome prior to 92

Security vulnerability affects the chromium package. Use after free in File System API in Google Chrome prior to 92...

CVE-2026-15983

The Super Forms – Drag & Drop Form Builder plugin for WordPress (all versions up to and including 6.3.316 ) is vulnerable to Arbitrary File/Directory Deletion . The root cause stems from a lack of capability checks in the super_save_form AJAX handler, allowing Subscriber-level authenticated users...

CVE-2026-15983 Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' Parameter

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including, 6.3.316. This is due to the supersaveform AJAX handler performing no capability check — allowing Subscriber-level authenticated users to create ...

EUVD-2026-90563

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including, 6.3.316. This is due to the supersaveform AJAX handler performing no capability check — allowing Subscriber-level authenticated users to create ...

CVE-2026-15983 Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' Parameter

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including, 6.3.316. This is due to the supersaveform AJAX handler performing no capability check — allowing Subscriber-level authenticated users to create ...

CVE-2026-15983 Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' Parameter

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including, 6.3.316. This is due to the supersaveform AJAX handler performing no capability check — allowing Subscriber-level authenticated users to create ...

CLEANSTART-2024-EO25868 Use after free in File Manager in Google Chrome on Chrome OS prior to 98

Security vulnerability affects the chromium package. Use after free in File Manager in Google Chrome on Chrome OS prior to 98...

CLEANSTART-2024-FQ58069 Use after free in File Manager in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in File Manager in Google Chrome prior to 101...

CLEANSTART-2024-AM48749 Use after free in File System API in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in File System API in Google Chrome prior to 101...

CLEANSTART-2024-MV82108 Insufficient policy enforcement in File System API in Google Chrome prior to 102

Security vulnerability affects the chromium package. Insufficient policy enforcement in File System API in Google Chrome prior to 102...

CLEANSTART-2024-SW99198 Insufficient policy enforcement in File System API in Google Chrome prior to 102

Security vulnerability affects the chromium package. Insufficient policy enforcement in File System API in Google Chrome prior to 102...

CLEANSTART-2024-DN54132 Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103

Security vulnerability affects the chromium package. Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103...

CLEANSTART-2024-WS76335 Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103

Security vulnerability affects the chromium package. Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103...

WordPress Zella Theme theme < 2.6.3 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Mike Gozdiskowski in WordPress Theme Zella Theme versions 2.6.3...

Unauthenticated Arbitrary File Disclosure

org.apache.wicket, wicket-core is vulnerable to an unauthenticated arbitrary file disclosure. The vulnerability is due to improper validation of attacker-controlled locale, style, and variation URL attributes before they are appended to the resource path, which allows an attacker to use path...

CVE-2025-41753

The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the...

Security update for gimp

This update for gimp fixes the following issues: CVE-2026-18301: Vulnerability Report at readchanneldata bsc1276230. CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow bsc1276231. CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow bsc1276232. CVE-2026-18304: TIF File Parsing...

SUSE-SU-2026:4409-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2026-18301: Vulnerability Report at readchanneldata bsc1276230. - CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow bsc1276231. - CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow bsc1276232. - CVE-2026-18304: TIF File...