3274 matches found
CVE-2026-44548
ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php causes a logged-in ChurchCRM user with the relevant role to silently delete records,...
CVE-2026-35574
ChurchCRM is an open-source church management system. Prior to 6.5.3, a stored Cross-Site Scripting XSS vulnerability in ChurchCRM's Note Editor allows authenticated users with note-adding permissions to execute arbitrary JavaScript code in the context of other users' browsers, including...
MINI-527F-3MG2-J88F
Bulletin has no description...
MINI-XC3X-R5QM-H5F8
Bulletin has no description...
MINI-292P-8QF5-2F62
Bulletin has no description...
MINI-FVCQ-HR46-P52Q
Bulletin has no description...
MINI-XG74-8R85-HMGM
Bulletin has no description...
Chromium: CVE-2026-11296 Inappropriate implementation in ImageCapture
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
MINI-RM3F-QV9Q-M666
Bulletin has no description...
libexif security update
An update is available for libexif. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libexif packages provide a library for extracting extra information from...
libexif security update
An update is available for libexif. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libexif packages provide a library for extracting extra information from...
MINI-2JCM-3H92-73VX
Bulletin has no description...
MINI-755W-PFX9-3XFH
Bulletin has no description...
MINI-RC62-GW96-QH2M
Bulletin has no description...
MINI-HXJ6-22F2-GGG4
Bulletin has no description...
MINI-867R-R238-HQRP
Bulletin has no description...
MINI-855W-4XGP-HMCG
Bulletin has no description...
MINI-5P5V-C9X7-HCRX
Bulletin has no description...
WordPress Frontend User Notes plugin <= 2.1.1 - Cross-Site Request Forgery to Note Content Modification vulnerability
Cross-Site Request Forgery to Note Content Modification vulnerability discovered by Mohamed Wajih Hichri Assaults - TEK-UP in WordPress Plugin Frontend User Notes versions = 2.1.1...