586 matches found
EUVD-2026-60793
Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...
CVE-2026-68315 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68315 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56289 affecting package patch for versions less than 2.7.6-10
CVE-2026-56289 affecting package patch for versions less than 2.7.6-10. A patched version of the package is available...
CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
NPM: Mermaid configuration APIs allow prototype pollution
NPM: Mermaid configuration APIs allow prototype pollution vulnerability discovered by ? in WordPress Npm mermaid versions 10.9.8...
CVE-2026-54365 CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll
CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded XML string to exposed API endpoints. Attackers can send a malicious...
CVE-2026-42770 affecting package openssl for versions less than 3.3.7-4
CVE-2026-42770 affecting package openssl for versions less than 3.3.7-4. A patched version of the package is available...
PYSEC-2026-3383 FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess
Impact An input poolingratio that is smaller than 1 will trigger a heap OOB in tf.rawops.FractionalMaxPool and tf.rawops.FractionalAvgPool. Patches We have patched the issue in GitHub commit 216525144ee7c910296f5b05d214ca1327c9ce48. The fix will be included in TensorFlow 2.11.0. We will also cher...
Foxit PDF Editor for Mac < 13.2.5 Multiple Vulnerabilities
According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 13.2.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on...
NPM: repomix Vulnerable to Command Injection (RCE) via `--remote-branch` Argument Injection
NPM: repomix Vulnerable to Command Injection RCE via --remote-branch Argument Injection vulnerability discovered by ? in WordPress Npm repomix versions 1.14.1...
NPM: hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice
NPM: hono: AWS Lambda adapter merges multiple Set-Cookie headers into one value, dropping cookies on ALB single-header and Lattice vulnerability discovered by ? in WordPress Npm hono versions 4.12.25...
CVE-2026-5222 affecting package rust for versions less than 1.75.0-30
CVE-2026-5222 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...
CVE-2026-39834 affecting package nvidia-container-toolkit for versions less than 1.17.8-3
CVE-2026-39834 affecting package nvidia-container-toolkit for versions less than 1.17.8-3. A patched version of the package is available...
EUVD-2026-31913
Chatwoot is a customer engagement suite. From 2.2.0 to before 4.11.2, a SQL injection vulnerability exists in the conversation and contact filter APIs. When filtering by a custom attribute of type date or number using the isgreaterthan or islessthan operators, user-supplied values in the values...
Astra Linux – Vulnerability in Firefox and Thunderbird
When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...
CVE-2026-6474 affecting package postgresql for versions less than 16.14-1
CVE-2026-6474 affecting package postgresql for versions less than 16.14-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-35469 affecting package keda for versions less than 2.14.1-12
CVE-2026-35469 affecting package keda for versions less than 2.14.1-12. A patched version of the package is available...
Vim 操作系统命令注入漏洞
Vim is an open-source, cross-platform text editor developed by Vim developers. Versions of Vim prior to 9.2.0383 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the netrw standard plugin, which allowed for OS command injection. This could...
CVE-2026-40890 github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer
The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...