15 matches found
EUVD-2026-32920
TinyMCE Cross-Site Scripting XSS vulnerability using sanitization bypass through nested SVGs...
CVE-2026-31826
The CVE-2026-31826 vulnerability affects the pypdf library prior to 6.8.0. When parsing a content stream with a very large /Length value (independent of the data length), an attacker can trigger excessive memory usage, impacting availability. The issue is resolved in version 6.8.0. Exploit detail...
CVE-2026-31826
pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...
CVE-2026-31826
pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...
[R2] Security Center Version 6.8.0 Fixes Multiple Vulnerabilities
R2 Security Center Version 6.8.0 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 02/18/2026 - 08:32 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components libssh, postgresql were found to contain vulnerabilities, and updated...
CVE-2017-18812
NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS...
PT-2025-51882
Name of the Vulnerable Software and Affected Versions AWS SDK for PHP versions prior to 3.368.0 Description A missing cryptographic key commitment in the AWS SDK for PHP could allow a user with write access to an S3 bucket to introduce a new Encryption Data Key EDK that decrypts to different...
Linux Distros Unpatched Vulnerability : CVE-2025-64775
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.0...
PT-2025-39042
Name of the Vulnerable Software and Affected Versions RelyWP Coupon Affiliates versions through 6.8.0 Description A missing authorization issue exists in Elliot Sowersby / RelyWP Coupon Affiliates, allowing exploitation of incorrectly configured access control security levels. Recommendations...
WordPress Uncanny Automator Plugin <= 6.7.0.1 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Que Thanh Tuan - Blue Rock in WordPress Plugin Uncanny Automator versions = 6.7.0.1...
Qt 安全漏洞
Qt is a cross-platform application development framework from the Qt open source. A security vulnerability exists in Qt versions 6.8.0 through 6.8.4, which originates from a heap buffer overflow and could lead to arbitrary code execution...
Imou Life Code Injection Vulnerability
Imou Life is a software application. A security vulnerability exists in the Imou Life com.mm.android.smartlifeiot application version 6.8.0 and earlier versions. An attacker can exploit the vulnerability to remotely execute code...
CVE-2021-33615
RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type...
Cedar Gate EZ-NET 跨站脚本漏洞
Cedar Gate EZ-NET is an Internet portal application from Cedar UK. A cross-site scripting vulnerability exists in The Cedar Gate EZ-NET 6.5.5, 6.6.3, 6.7.0, and 6.8.0 that stems from The Cedar Gate EZ-NET 6.5.5, and 6.8.0 having a call to display messages to the user that do not correctly clean u...
CVE-2020-5847
Unraid through 6.8.0 allows Remote Code Execution...