900 matches found
CVE-2026-58487
HedgeDoc before version 1.11.0 is vulnerable to stored HTML injection via the local-part of registered email addresses. An attacker could register a specially crafted email, reuse the local-part as the display name, and inject HTML into pages viewed by others (publish, slide views, and collaborat...
CVE-2026-58487
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...
PT-2026-57912
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...
PT-2026-59696
The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The parse op part function in query.py uses the unsafe eval function to dynamically evaluate user-supplied query operands without proper sanitization or restriction. Althoug...
MINI-74V3-XMX8-G7JX
Bulletin has no description...
MINI-8C49-8MMF-XMCF
Bulletin has no description...
MINI-482W-65MF-4R7V
Bulletin has no description...
MINI-67V5-CG2P-74RX
Bulletin has no description...
MINI-RH8P-M8W5-628Q
Bulletin has no description...
MINI-32V8-R28H-V55G
Bulletin has no description...
MINI-FX5C-595C-P8XF
Bulletin has no description...
MINI-QMFF-M6X3-4HW3
Bulletin has no description...
MINI-35VJ-MH4C-5F7H
Bulletin has no description...
MINI-XRWR-PX6R-V53C
Bulletin has no description...
MINI-3JPJ-26FW-J4J4
Bulletin has no description...
MINI-784X-9PWM-6MF2
Bulletin has no description...
CGA-H685-483C-M8W4
Bulletin has no description...
MINI-32PW-Q36C-9JX2
Bulletin has no description...
CVE-2025-61019
A flaw was found in virtuoso-opensource. An attacker could send specially crafted SQL Structured Query Language statements to the sqlokeypartbest component, leading to a Denial of Service DoS. This vulnerability allows an attacker to disrupt the availability of the service...