212983 matches found
CVE-2026-38636
An issue in the seekdir function /dirent/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-37736
The OWASP json-sanitizer version v1.2.3 is affected by a vulnerability in the JsonSanitizer.sanitize() component. An attacker can provide a crafted input to trigger a Denial of Service (DoS) . The vulnerability is characterized as an Allocation of Resources Without Limits or Throttling . No speci...
PT-2026-83079
Joomla Extension - mrvinoth.com - Reflected XSS in All Video Share 1.0.0-4.5.0 - Various user supplied inputs lacked escaping, leading to reflected XSS vectors...
CVE-2026-18324: Improper Neutralization of Input During Web Page Generation
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.0.1 due to insufficient input sanitization and output escaping. This makes it possible...
PT-2026-82858
The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Block Attribute in all versions up to, and including, 3.5.1.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...
VulnCheck KEV: CVE-2026-78003
The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery SSRF via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the addlist function, which accepts user-controlled array keys from $POST'addresses', passes...
PT-2026-83130
An issue in the with argv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38638
An issue in the withargv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-82887
The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...
CVE-2026-38636
The relibc library, specifically in commit 61f42d , contains a vulnerability in the seekdir() function located at /dirent/mod.rs. An attacker can exploit this issue by providing a crafted input to trigger a Denial of Service (DoS) . While the specific technical mechanism of the resource consumpti...
Adobe Campaign Classic Code Execution
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
HPLIP Printer Driver DoS
The vulnerability in the HPLIP printer driver is related to improper input sanitization. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Firefox Thunderbird Confidential Data Access
The vulnerability of the Engine component in web browsers such as Firefox and Firefox ESR, as well as in the Thunderbird email client, is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...
CVE-2026-13761: Unchecked Input for Loop Condition
Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: ibus (UTSA-2026-031617)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031617 advisory. A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a...
MiracleLinux 9 : python-pyasn1-0.4.8-7.el9_8.1 (AXSA:2026-1688:05)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1688:05 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the...
PT-2026-83139
The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0.1. This is due to insufficient input sanitization and output escaping of user-supplied data via the rocket beacon AJAX endpoint. This makes it possible for unauthenticated...
PT-2026-83132
Name of the Vulnerable Software and Affected Versions Akilli Ticaret Software Technologies Ltd. E-Commerce Pack versions 4.5.001 through 28082026 Description Improper neutralization of input during web page generation allows for Stored Cross-Site Scripting XSS, a condition where malicious scripts...
PT-2026-83119
Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping...