CVE-2026-47682

CVAT contains a path-containment validation flaw in versions 1.6.0–2.64.0. An attacker with write access to a cloud storage added to a CVAT instance, or the ability to add new cloud storages, can overwrite arbitrary files on the server filesystem. The issue enables arbitrary path writes at multip...

CVE-2025-31414

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder allows Stored XSS.This issue affects Cost Calculator Builder: from n/a through = 3.2.65...

KMPlayer 安全漏洞

KMPlayer is a video player from the Kmplayer team for the Linux and UNIX operating systems. The player uses Mplayer, Xine and GStreamer as decoding backends, and is one of the components of KDE. A security vulnerability exists in KMPlayer version v4.2.2.65, which stems from a segmentation error...