68908 matches found
CVE-2026-18197
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...
CVE-2026-18197
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...
CVE-2026-18197
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...
CVE-2026-63227
creationtimestamp| type| source ---|---|--- 2026-07-29 06:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrdis7ver2v...
GHSA-WG2Q-39H6-66X9
creationtimestamp| type| source ---|---|--- 2026-07-29 06:32:35+00:00| seen| https://gist.github.com/alon710/9b6eb86646df2d26df9c07ebf0051d99...
CVE-2026-17161
creationtimestamp| type| source ---|---|--- 2026-07-29 03:24:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxzvrrpn2q...
CVE-2026-12939
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...
CVE-2026-12939 Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...
CVE-2026-12939 Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...
EUVD-2026-50096
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...
GHSA-2XMW-F8J8-WFXC
creationtimestamp| type| source ---|---|--- 2026-07-29 00:31:42+00:00| seen| https://gist.github.com/alon710/3def853e2525c617d6890d62679fbc37...
PT-2026-65835
AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...
PT-2026-65678
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the post thumbnail and newsletters post thumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the post...
(Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware update process. By creating a symbolic link, an...
CVE-2026-60113: Missing Authentication for Critical Function
AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...
The vulnerability of the dp_retrain_link_dp_test() function in the drivers/gpu/drm/amd/display/dc/link/accessories/link_dp_cts.c driver for AMD graphics cards’ Direct Rendering Infrastructure (DRI) in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the dpretrainlinkdptest function in the drivers/gpu/drm/amd/display/dc/link/accessories/linkdpcts.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to state management errors. Exploiting this vulnerability...
PT-2026-65692
The PhotoSwipe WordPress plugin through 4.1.1.1 uses the title attribute of author-supplied link markup as a lightbox caption that is written into the page DOM without escaping. Because the title attribute survives the post-content sanitization applied to users who lack the unfiltered html...
Fedora 43 : kronosnet (2026-56568b6fe8)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-56568b6fe8 advisory. CVE-2026-15811 LOW: encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicitbzero before...
PT-2026-65716
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...
CVE-2026-18197: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...