90769 matches found
CVE-2026-79625: Concurrent Execution using Shared Resource with Improper Synchronization
Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...
CVE-2026-97065: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Happyforms = 1.26.15 versions...
Karma Pro 0.12
Karma Pro is an open source code review tool written in Swift that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner AST base and Heuristics that statically analyses projects in multiple languages. It's backed by an ML classifier trained...
CVE-2026-97247: Missing Authorization
Unauthenticated Broken Access Control in Blocksy Companion = 2.1.55 versions...
CVE-2026-102137: Unrestricted Upload of File with Dangerous Type
An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance. This did not by itself result in code execution, which would require a separate vulnerability to run the stored file...
CVE-2026-97240: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...
CVE-2026-95587: Missing Authorization
Unauthenticated Broken Access Control in Hostinger Migrator = 1.0 versions...
CVE-2026-100256: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects...
CVE-2026-100267: Inefficient Regular Expression Complexity
In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters...
CVE-2026-97077: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Ad Inserter = 2.8.18 versions...
CVE-2026-97267: Missing Authorization
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
CVE-2026-94077: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...
CVE-2026-94171: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme CURCY woo-multi-currency allows DOM-Based XSS.This issue affects CURCY: 2.2.18...
CVE-2026-100279: Server-Side Request Forgery (SSRF)
In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials...
CVE-2026-100274: Allocation of Resources Without Limits or Throttling
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...
CVE-2026-100268: Authorization Bypass Through User-Controlled Key
In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates...
CVE-2026-97301: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Cool Formkit Lite = 2.7.8 versions...
CVE-2026-97271: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...