RICOH Streamline NX 安全漏洞

RICOH Streamline NX is a document and print management software from RICOH Japan. A security vulnerability exists in RICOH Streamline NX versions 3.5.1 through 24R3 that stems from improper authorization and could result in the retrieval of user registration information and or OIDC tokens...

Tenda N300 安全漏洞

The Tenda N300 is a router from China-based Tenda. A security vulnerability exists in the Tenda N300 that stems from the lack of the HTTPOnly flag in the session cookie associated with the web-based management interface, which could allow a remote attacker to gain unauthorized access by capturing...

The vulnerability of the Red Hat Ansible Automation Platform lies in the lack of proper input sanitization when requesting an external authentication server. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Red Hat Ansible Automation Platform lies in the lack of proper input sanitization when requesting an external authentication server. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

GitLab Enterprise Edition（EE） 安全漏洞

GitLab Enterprise Edition EE is a content management system from the U.S.-based GitLab, Inc. A security vulnerability exists in GitLab Enterprise Edition EE versions prior to 18.5.5, prior to 18.6.3, and prior to 18.7.1, which stems from manipulating namespace identifiers in API requests, and cou...

CVE-2025-66744

In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system...

PT-2026-2147

Name of the Vulnerable Software and Affected Versions Tenda 300Mbps Wireless Router F3 Tenda N300 Easy Setup Router Description The routers transmit login credentials in plaintext during the initial login or after a factory reset through the web-based administrative interface. An attacker on the...

The vulnerability of the product suite for facilitating the reception of fax messages, the MICI Network NetFax Server, arises from the disclosure of information during data transmission. This vulnerability allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the product suite for facilitating the reception of fax messages related to MICI Network NetFax Server lies in the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access ...

CVE-2025-66744

Yonyou YonBIP v3 and earlier are affected by a path traversal vulnerability in the LoginWithV8 interface of the series data application service, enabling unauthorized access to sensitive information. This is triggered by improper validation in LoginWithV8. Remediation: update to the latest versio...

PT-2026-1807

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.4.0.0 Dell PowerProtect Data Domain LTS2025 release version 8.3.1.10 Dell PowerProtect Data Domain LTS2024 release versions 7.13.1.0 through 7.13.1.40 Dell PowerProtect Data Domain LTS...

PT-2026-1853

Name of the Vulnerable Software and Affected Versions Vivotek IP7137 camera versions prior to 0200a Description The Vivotek IP7137 camera is affected by an information disclosure issue. Live camera footage can be accessed through the Real Time Streaming Protocol RTSP on port 8554 without...

Vivotek IP7137 安全漏洞

Vivotek IP7137 is an IP camera from China VIVOTEK Communications Vivotek. A security vulnerability exists in the Vivotek IP7137 version 0200a, which stems from the default situation where no password is required when logging in as administrator, which could lead to unauthorized access...

WordPress plugin Tutor LMS – eLearning and online course solution 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

PT-2026-1709

Name of the Vulnerable Software and Affected Versions Contact Form vCard Generator versions up to and including 2.4 Description The Contact Form vCard Generator plugin for WordPress has a flaw where a missing capability check on the wp gvccf check download request function allows unauthorized...

PT-2026-2169

Name of the Vulnerable Software and Affected Versions GestSup versions up to and including 3.2.56 Description GestSup versions up to and including 3.2.56 contain a SQL injection issue in the ticket creation functionality. User-controlled input during ticket creation is used in SQL queries without...

Tenda N300和Tenda F3 安全漏洞

Tenda N300 and Tenda F3 are both products of Tenda, a Chinese company.Tenda N300 is a router.Tenda F3 is a wireless router. A security vulnerability exists in the Tenda N300 and Tenda F3 that originates from the transmission of credentials encoded using reversible Base64 encoding via a web-based...

WordPress plugin WP Page Permalink Extension 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

The vulnerability of the Red Hat Ansible Automation Platform, related to the transmission of secret information in the form of open text, allows a perpetrator to gain unauthorized access to the protected information.

The vulnerability of the Red Hat Ansible Automation Platform relates to the transmission of secret information in the form of open text. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

CVE-2026-22486 WordPress Re Gallery plugin <= 1.18.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Re Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Re Gallery: from n/a through 1.18.9...

CVE-2026-22490

CVE-2026-22490 affects Bulk Landing Page Generator for WordPress LPagery (LPagery) with a Missing Authorization flaw up to version 2.4.9. Wordfence notes this as LPagery

CVE-2026-22492 WordPress Docket Cache plugin <= 24.07.04 - Broken Access Control vulnerability

Missing Authorization vulnerability in Nawawi Jamili Docket Cache docket-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Docket Cache: from n/a through = 24.07.04...