CLEANSTART-2024-RL76221 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the libgit2 package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

Drupal Gin Admin Theme cross-site scripting vulnerability

Drupal Gin Admin Theme versions prior to 0.0.0 and 4.1.4, as well as versions prior to 5.0.0 and 5.0.16, contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and makes them susceptible to cross-site scripting attacks...

Crocoblock JetElements For Elementor cross-site scripting vulnerability

Crocoblock JetElements for Elementor versions 2.9.2.6 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...

WordPress Advanced Post Block cross-site scripting vulnerability

WordPress Advanced Post Block versions 2.5.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...

Cross-site scripting vulnerability in WordPress Better Post & Filter Widgets for Elementor

WordPress Better Post & Filter Widgets for Elementor versions 1.9.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation, potentially leading to stored cross-site scripting attacks...

WordPress VikRentCar Car Rental Management System cross-site scripting vulnerability

WordPress VikRentCar Car Rental Management System versions 1.4.8 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to reflected cross-site scripting attacks...

WordPress VikRentCar Car Rental Management System cross-site scripting vulnerability

WordPress VikRentCar Car Rental Management System versions 1.4.8 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...

AivahThemes Hostme v2 cross-site scripting vulnerability

AivahThemes Hostme v2 versions 7.0 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation, potentially leading to DOM-based cross-site scripting attacks...

WordPress Addon Elements for Elementor cross-site scripting vulnerability

WordPress Addon Elements for Elementor versions 1.14.4 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...

WordPress ThemeHunk Customizer cross-site scripting vulnerability

WordPress ThemeHunk Customizer versions 2.8.7 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to reflected cross-site scripting attacks...

Cross-site scripting vulnerability in WordPress Live Summary for Gravity Forms

WordPress Live Summary for Gravity Forms versions 1.2.10 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to reflected cross-site scripting attacks...

Multiple Samba Remote Code Execution Vulnerabilities (CVE-2026-4480, CVE-2026-4408)

Brocade has released a security advisory addressing two Remote Code Execution RCE vulnerabilities in upstream Samba software: CVE-2026-4480 and CVE-2026-4408. Both vulnerabilities result from improper input sanitization CWE-78, which allows unescaped data to be passed into system commands or...

CLEANSTART-2026-ZD06133 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CLEANSTART-2025-CH00091 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CLEANSTART-2026-NS24278 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CLEANSTART-2025-OK96384 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CVE-2026-78545

The Okta Access Gateway is vulnerable to improper input sanitization within the application label field . Because the software fails to sanitize this field before including it in the generated nginx configuration file , an unsanitized value can be interpolated into an nginx server block directive...

PT-2026-80453

Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands in github.com/kubev2v/migration-planner...

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

Caucho Resin - Information Disclosure Detection

Caucho Resin contains an information disclosure vulnerability. The application does not properly sanitize user-supplied input. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site...