6538 matches found
CVE-2026-25490 Craft Commerce has Stored XSS in Inventory Location Address Leading to Potential Privilege Escalation
Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the 'Address Line 1' field in...
Apple’s new iOS setting addresses a hidden layer of location tracking
Most iPhone owners have hopefully learned to manage app permissions by now, including allowing location access. But there's another layer of location tracking that operates outside these controls. Your cellular carrier has been collecting your location data all along, and until now, there was...
Craft Commerce 跨站脚本漏洞
Craft Commerce is an e-commerce platform derived from the open-source Craft CMS. Versions of Craft Commerce from 4.0.0-RC1 to 4.10.0, as well as from 5.0.0 to 5.5.1, have a cross-site scripting vulnerability. This vulnerability stems from the address line 1 field in the inventory location not bei...
AZL-77910 CVE-2026-1703 affecting package python-virtualenv 20.36.1-1
When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...
MINI-2R3F-3VXV-6P2R
Bulletin has no description...
MINI-XMH7-8P49-F694
Bulletin has no description...
MINI-FF4Q-GHFC-5RC6
Bulletin has no description...
MINI-FMMP-5W43-XFWG
Bulletin has no description...
MINI-WM6J-GFJC-HQJ5
Bulletin has no description...
MINI-4MWR-WV3G-HPQW
Bulletin has no description...
Security Bulletin: Location Service for ESRI Component uses urllib3-2.5.0 and werkzeug-3.1.3 library which were vulnerable to CVE-2025-66418, CVE-2025-66471 and CVE-2025-66221 respectively
Summary Location Service for ESRI Component uses urllib3-2.5.0 and werkzeug-3.1.3 library which were vulnerable to CVE-2025-66418, CVE-2025-66471 and CVE-2025-66221 respectively. Vulnerability Details CVEID:CVE-2025-66418 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python...
ECHO-E857-6D70-7368
Bulletin has no description...
CGA-H825-7C23-W8Q3
Bulletin has no description...
CGA-PP48-MXXW-7J3P
Bulletin has no description...
CGA-JVW3-VQ6Q-H2Q7
Bulletin has no description...
CGA-GGHQ-XFVV-GGVQ
Bulletin has no description...
CGA-G5CH-4CHW-56V5
Bulletin has no description...
CGA-73MP-JJFM-5663
Bulletin has no description...