65273 matches found
CVE-2026-11402
The CVE-2026-11402 entry concerns the WordPress plugin “Services Section Block – Showcase Service Details in Grid or Columns.” Affected component is the ‘link’ Block Attribute, with stored XSS in all versions up to 1.4.4 due to insufficient input sanitization and output escaping. The vulnerabilit...
CVE-2026-11402 Services Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block Attribute
The Services Section Block – Showcase Service Details in Grid or Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'link' Block Attribute in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for...
MAL-2026-6095 Malicious code in oem-agentic-shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f612eb2fa947323c936a0bb1becc602f0f837f9023edac22a945470566386a8c [email protected] is a hollow stub: index.js exports an empty object and package.json has empty author, empty description, and no real...
CVE-2026-48764
creationtimestamp| type| source ---|---|--- 2026-06-18 01:58:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojq3sxmct2k...
PT-2026-50682
swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-parser/base-schema-parsers/enum.ts passes components.schemas..enumi values to Ts.StringValue in src/configuration.ts without escaping before...
PT-2026-50721
Name of the Vulnerable Software and Affected Versions Kirby versions prior to 4.9.4 Kirby versions prior to 5.4.4 Description Kirby sites using the writer field in any blueprint are susceptible to cross-site scripting XSS. The link and email marks within the writer components fail to prevent the...
Mattermost Server 10.11.x < 10.11.16 / 11.5.x < 11.5.5 / 11.6.x < 11.6.2 Multiple Vulnerabilities (MMSA-2026-00616 / MMSA-2026-00649 / MMSA-2026-00655 / MMSA-2026-00656 / MMSA-2026-00661 / MMSA-2026-00662 / MMSA-2026-00665)
The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities: - Mattermost fails to require role-management authorization when setting the schemeadmin flag on group syncable link and patch endpoints, which allows a user with group-link permissions to...
PT-2026-50737
Name of the Vulnerable Software and Affected Versions @tinacms/mdx versions prior to 2.1.7 tinacms versions prior to 3.9.3 Description Rich-text parsing and the default link/image renderers fail to sanitize the url field on Slate link/image nodes. This allows content containing javascript: or...
CVE-2026-54387
creationtimestamp| type| source ---|---|--- 2026-06-17 23:23:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojhftygey2v 2026-08-02 15:23:25+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c 2026-08-02 15:48:02+00:00| seen|...
CVE-2026-48817
creationtimestamp| type| source ---|---|--- 2026-06-17 23:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojh4tpt4r27...
CVE-2026-39560
creationtimestamp| type| source ---|---|--- 2026-06-17 23:13:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mojgufnwu72s...
CVE-2026-54388
creationtimestamp| type| source ---|---|--- 2026-06-17 23:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojgffzrlv2c 2026-08-02 15:23:25+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c...
CVE-2026-55201
creationtimestamp| type| source ---|---|--- 2026-06-17 22:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojfv5xdlv2k...
CVE-2026-55199
creationtimestamp| type| source ---|---|--- 2026-06-17 22:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojfeyatqp2x 2026-06-23 20:49:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moybmlrqgb2f 2026-06-24 17:29:11+00:00| seen|...
CVE-2026-12529
creationtimestamp| type| source ---|---|--- 2026-06-17 22:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojf3ha6tj2k...
CVE-2026-53805
creationtimestamp| type| source ---|---|--- 2026-06-17 21:57:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojcnac43b2v 2026-06-18 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mokcncgamb2g 2026-07-16 19:00:08+00:00| seen|...
CVE-2026-30803
creationtimestamp| type| source ---|---|--- 2026-06-17 21:37:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojbjfq3ut2o...
CVE-2026-55196
creationtimestamp| type| source ---|---|--- 2026-06-17 21:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojbah6mma2f 2026-06-22 00:31:36+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motn3xbtzo2m...