136876 matches found
PT-2026-118678
Name of the Vulnerable Software and Affected Versions ChurcHope theme for WordPress versions prior to 2.2 Description A path traversal issue allows unauthenticated attackers to download arbitrary files. This is achieved by supplying directory traversal sequences to the file parameter of the...
PT-2026-118685
Name of the Vulnerable Software and Affected Versions JavaMelody versions prior to 1.60.0 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject scripts into victims' browsers. This occurs when crafted values are supplied to the graph parameter of the...
PT-2026-118680
Name of the Vulnerable Software and Affected Versions Aspose Importer & Exporter plugin for WordPress versions prior to 3.0 Description A path traversal issue allows unauthenticated attackers to download arbitrary files. This occurs because the file parameter is not properly sanitized. Attackers...
PT-2026-118679
Name of the Vulnerable Software and Affected Versions Aspose Doc Exporter plugin for WordPress versions prior to 2.0 Description An issue allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to the readfile function. This is achieved by sending GET requests to...
PT-2026-118241
Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.6.20 Roundcube Webmail versions 1.7.x prior to 1.7.5 Description Remote authenticated attackers can perform IMAP command injection by injecting CRLF sequences into the uid parameter of the 'mail/headers' a...
PT-2026-118686
Name of the Vulnerable Software and Affected Versions Cherry Plugin for WordPress versions prior to 1.2.7 Description An issue allows unauthenticated attackers to download arbitrary files. This occurs because the script passes input directly to the readfile function without proper validation...
PT-2026-118687
Name of the Vulnerable Software and Affected Versions EyeLock nano NXT version 3.05.1193 EyeLock nano NXT version 3.04.1108 EyeLock nano NXT version 3.03.944 EyeLock nano NXT version 3.01.646 Description Unauthenticated attackers can read arbitrary local system files due to a path traversal issue...
VulnCheck KEV: CVE-2023-34545
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...
PT-2026-118672
Name of the Vulnerable Software and Affected Versions Custom Tables plugin for WordPress versions prior to 3.4.6 Description A reflected cross-site scripting issue exists that allows unauthenticated attackers to inject scripts into victims' browsers to steal cookies. This occurs via the unsanitiz...
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery SSRF vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and...
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery SSRF vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with...
GO-2026-6726 Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts) in code.vikunja.io/api
Vikunja: API token scopes bypassed via task expand parameter comments, reactions, time entry counts in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...
EUVD-2025-26366
A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely...
CVE-2026-112027
A flaw was found in the Uploadify component of light0011 cms. A remote attacker can exploit an improper input handling vulnerability by manipulating the filename parameter in the check-exists script. This issue leads to information disclosure, allowing the attacker to verify the existence of...
BlackBelt Technology PI Dashboard: Input validation error vulnerability
The BlackBelt Technology PI Dashboard versions prior to 0.8.0 have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the cwd parameter by the unknown function in the WebSocket Gateway component, resulting in source validation errors that can be...
CVE-2026-98722 mtd: block2mtd: Fix divide error when erase_size is zero
In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erasesize is zero The erase size is parsed from the "block2mtd" module parameter and can be set to zero. adddevice then evaluates if size % erasesize with a zero divisor, which triggers a...
CVE-2026-98722 mtd: block2mtd: Fix divide error when erase_size is zero
In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erasesize is zero The erase size is parsed from the "block2mtd" module parameter and can be set to zero. adddevice then evaluates if size % erasesize with a zero divisor, which triggers a...
CVE-2026-98569 ip_gre: Reject enabling collect metadata through changelink
In the Linux kernel, the following vulnerability has been resolved: ipgre: Reject enabling collect metadata through changelink ipgrenetlinkparms can enable collectmd on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a...
VulnCheck KEV: CVE-2026-96652
Plex Media Server contains a server-side request forgery SSRF vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with...
CVE-2024-58398
Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is improperly sanitized. Attackers can craft a Coder login URL that, when clicked by a logged-in user, redirects the victim to a...