296 matches found
OpenEMR < 7.0.1 - Cross-Site Scripting
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1. id: CVE-2023-2948 info: name: OpenEMR 7.0.1 - Cross-Site Scripting author: ritikchaddha,princechaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr...
Astra Linux – Vulnerability in ffmpeg5
Buffer overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...
CVE-2026-18465
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...
CVE-2026-18464
CVE-2026-18464 affects the WP MAPS PRO WordPress plugin before version 6.1.3. Affected: an AJAX action does not perform a capability check and is accessible to unauthenticated users, allowing them to trigger an operation that can recurse indefinitely, exhausting server resources and causing a Den...
CLSA-2026-1783904631 TuxCare security update for tar (3 CVEs)
TuxCare rebuilt tar to address 3 CVEs. Fixed in 6.1.15-tuxcare.1...
UBUNTU-CVE-2026-61372
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...
EUVD-2026-52338
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...
CVE-2026-15258 Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock CVE-2026-43499 – Redmi K70 Ultra rothko A data-...
CVE-2026-57828
The CVE-2026-57828 entry concerns the Joomla extension Phoca Downloads (Phoca.cz) with an authenticated arbitrary file upload vulnerability in the RSFiles component prior to 6.1.3. The issue allows registered users to upload executable files, enabling full remote code execution (RCE). The provide...
[SECURITY] [DLA 4671-1] linux-6.1 security update
Debian LTS Advisory DLA-4671-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings July 05, 2026 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.176-1deb11u1 CVE ID : CVE-2023-53292 CVE-2023-53989 CVE-2023-54125 CVE-2023-54271 CVE-2023-54322 CVE-2024-27012...
PT-2026-53938
Name of the Vulnerable Software and Affected Versions python313-lxml html clean versions prior to 0.4.5-1.1 python-lxml-doc versions prior to 6.1.1-1.1 Description Security issues were identified in the python313-lxml html clean and python-lxml-doc packages. Recommendations Update python313-lxml...
CVE-2026-27366
Unauthenticated Broken Access Control in MainWP Child = 6.1.1 versions...
EUVD-2026-39362
Unauthenticated Broken Access Control in MainWP Child = 6.1.1 versions...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: dmaengine: stm32: dmamux: fix device leak on route allocation Make sure to release the reference taken when looking up the DMA mux platform device during route allocation...
CVE-2026-46186 affecting package kernel for versions less than 6.6.141.1-1
CVE-2026-46186 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...
NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation
Impact A denial-of-service DoS vulnerability exists in the factorial operator implementation of NCalc. Specially crafted expressions containing extremely large factorial operands can trigger excessive CPU consumption or cause evaluation to enter a non-terminating loop due to integer overflow in t...
PT-2026-50503
Name of the Vulnerable Software and Affected Versions Connext Professional versions 7.4.0 through 7.6.x Connext Professional versions 7.0.0 through 7.3.1.2 Connext Professional versions 6.1.0 through 6.1.x Connext Professional versions 6.0.0 through 6.0.x Connext Professional versions 5.3.0 throu...
EUVD-2026-36732
Mattermost Desktop App versions =6.1 5.5.13.0 fail to account for attempting to open extremely long URLs in the Mattermost Desktop App which allows a malicious server owner to crash the application via including a script to call window.open on a very large URL. Mattermost Advisory ID:...