209846 matches found
PT-2026-83151
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...
PT-2026-83136
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...
CVE-2026-38638
The relibc library, specifically commit 61f42d , contains a vulnerability in the with_argv function located at /unistd/mod.rs. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted input . While specific exploit links are not provided in the documents, a proof-o...
EUVD-2026-67769
An issue in the withargv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-37751
The 23blocks-OS ai-maestro version v0.24.17 is affected by an OS command injection vulnerability within the killSessionSync function located in lib/agent-runtime.ts . This flaw allows an attacker to execute arbitrary commands by providing a crafted input . While the vulnerability is confirmed, th...
PT-2026-83265
Name of the Vulnerable Software and Affected Versions Microsoft Edge for iOS affected versions not specified Description Improper neutralization of input used for Large Language Model LLM prompting allows an unauthorized attacker to perform spoofing over a network. LLM prompting refers to the...
MiracleLinux 9 : python-pyasn1-0.4.8-7.el9_8.1 (AXSA:2026-1688:05)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1688:05 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: ibus (UTSA-2026-031617)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031617 advisory. A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a...
PT-2026-83130
An issue in the with argv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-82866
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'a' above fold images parameter in all versions up to, and including, 4.2.10 due to insufficient input sanitization and output...
PT-2026-82859
The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attribute in all versions up to, and including, 3.15.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2026-82858
The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Block Attribute in all versions up to, and including, 3.5.1.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...
CVE-2026-37736: Allocation of Resources Without Limits or Throttling
An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-37736
An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38636
The relibc library, specifically in commit 61f42d , contains a vulnerability in the seekdir() function located at /dirent/mod.rs. An attacker can exploit this issue by providing a crafted input to trigger a Denial of Service (DoS) . While the specific technical mechanism of the resource consumpti...
PT-2026-83129
An issue in the seekdir function /dirent/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38636
An issue in the seekdir function /dirent/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-83141
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregated review form submission in versions up to and including 5.106.0. This is due to insufficient input sanitization and output escaping on user-supplied review comment text. The...