6638 matches found
CVE-2026-15450
The CVE-2026-15450 entry concerns Nex Forms – Ultimate Form Builder – Lite for WordPress (versions ≤ 9.2.3). Affected component is the delete_file() AJAX handler which takes a file path from the database and passes it to unlink() without validation (no realpath/basename/allowlist). Combined with ...
CVE-2026-12696
CVE-2026-12696 affects the wpForo Forum WordPress plugin prior to 3.1.2. The vulnerability is a Stored XSS in the public participant profile page: a profile field is not sanitized/escaped before being output inside an HTML attribute, permitting a subscriber-level user to inject JavaScript that ru...
CVE-2026-12696 wpForo Forum < 3.1.2 - Subscriber+ Stored XSS via Profile Location Field
The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant profile page, allowing users with a subscriber-level account to inject JavaScript that executes in the browser of any visitor wh...
CVE-2026-12696 wpForo Forum < 3.1.2 - Subscriber+ Stored XSS via Profile Location Field
The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant profile page, allowing users with a subscriber-level account to inject JavaScript that executes in the browser of any visitor wh...
EUVD-2026-51627
Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect and exposes a plaintext-TCP listener, an unauthenticated remote client can send a single ordinary HTTP GET request and receive a 301 response whose Location...
CVE-2026-62959 Coturn: Pre-authentication heap memory disclosure in ACME redirect (`try_acme_redirect`)
Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect and exposes a plaintext-TCP listener, an unauthenticated remote client can send a single ordinary HTTP GET request and receive a 301 response whose Location...
Path Traversal
datamodel-code-generator is vulnerable to Path Traversal. The vulnerability is due to improper validation of schemaLocation values in XML Schema parsing xs:include, xs:import, xs:redefine, and xs:override, which allows an attacker to reference files outside the intended input base path, resulting...
MINI-43RQ-R8M9-C9WX
Bulletin has no description...
ECHO-0696-5586-B35C
Bulletin has no description...
CGA-QW47-R7M9-C2XP
Bulletin has no description...
CVE-2026-67347
Vendure through 3.7.1, fixed in commit f67ef5f, contains a cross-channel authorization bypass vulnerability in stock-location.service.ts and asset.service.ts update methods that allows channel-scoped administrators to modify other tenants' data. Attackers can supply global IDs of StockLocation or...
CVE-2026-67347
Vendure 3.7.1 contains a cross-channel authorization bypass. In stock-location.service.ts and asset.service.ts update methods, channel-scoped administrators can supply global IDs from different channels to overwrite inventory locations or catalog assets belonging to other tenants, bypassing chann...
EUVD-2026-51150
Vendure through 3.7.1, fixed in commit f67ef5f, contains a cross-channel authorization bypass vulnerability in stock-location.service.ts and asset.service.ts update methods that allows channel-scoped administrators to modify other tenants' data. Attackers can supply global IDs of StockLocation or...
CVE-2026-67347 Vendure 3.7.1 Cross-Channel Authorization Bypass via StockLocation and Asset Update
Vendure through 3.7.1, fixed in commit f67ef5f, contains a cross-channel authorization bypass vulnerability in stock-location.service.ts and asset.service.ts update methods that allows channel-scoped administrators to modify other tenants' data. Attackers can supply global IDs of StockLocation or...
MINI-29W3-39WJ-2PPH
Bulletin has no description...
MINI-25Q9-3GCQ-MP9W
Bulletin has no description...
MINI-5C4R-JJM4-R3F5
Bulletin has no description...
SUSE-SU-2026:3415-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...