14080 matches found
EUVD-2026-90014
In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations...
CVE-2026-100260
In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...
CVE-2026-100260
In JetBrains YouTrack versions prior to 2026.2.18991 , a vulnerability exists in the mailbox integration that allowed authentication to persist or occur after a password reset . The vulnerability carries a CVSS 3.1 score of 5.3 (Medium) , indicating a network-based attack vector with low complexi...
EUVD-2026-90004
In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...
CVE-2026-96816
Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...
EUVD-2026-89869
Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...
CVE-2026-96816 WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...
CVE-2026-96816 WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...
CVE-2026-96816
The Trusted Shops Easy Integration for WooCommerce WordPress plugin (versions
PT-2026-103201
Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...
Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.6:CLSA-2026:1772622920)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772622920 advisory. - Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans...
PT-2026-103326
šØ CVE-2026-100279 In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials š@cveNotify...
CVE-2026-100279: Server-Side Request Forgery (SSRF)
In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials...
CVE-2026-100270: Incorrect Authorization
In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations...
CVE-2026-96816: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...
PT-2026-103307
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Mailbox integration allows authentication to persist or be performed after a password reset has occurred. Recommendations Update to version 2026.2.18991...
CVE-2026-100260: Initialization of a Resource with an Insecure Default
In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...
GHSA-9QH4-3JW8-366W Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
Impact A could enable Node.js integration in its Web Workers even when its embedder had Node.js integration disabled, giving guest content more privilege than the embedder allowed. Apps are only affected if they enable the tag and the embedder is unsandboxed. Apps that do not use , or that keep t...
NPM: Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
NPM: Electron: can enable Node.js integration in Web Workers despite embedder restrictions vulnerability discovered by ? in WordPress Npm electron versions 41.10.6...
Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
Impact A could enable Node.js integration in its Web Workers even when its embedder had Node.js integration disabled, giving guest content more privilege than the embedder allowed. Apps are only affected if they enable the tag and the embedder is unsandboxed. Apps that do not use , or that keep t...