PT-2026-4246

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in uxper Golo golo allows PHP Local File Inclusion.This issue affects Golo: from n/a through 1.7.5...

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

WordPress DotLife theme < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme DotLife versions 4.9.5...

Microsoft Edge (Chromium) < 144.0.3719.82 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 144.0.3719.82. It is, therefore, affected by multiple vulnerabilities as referenced in the January 16, 2026 advisory. - Use after free in ANGLE. CVE-2026-0908 - Microsoft Edge Elevation Service exposes a privileged COM...

CVE-2025-9435 Path Traversal

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2025-61664 affecting package grub2 for versions less than 2.06-26

CVE-2025-61664 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-68327 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-68327 affecting package kernel for versions less than 6.6.119.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-20673 affecting package crash for versions less than 9.0.0-1

CVE-2018-20673 affecting package crash for versions less than 9.0.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-67922

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through 7.0.9...

CVE-2025-60538

A lack of rate limiting in the login page of shiori v1.7.4 and below allows attackers to bypass authentication via a brute force attack...

CVE-2025-67922

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through 7.0.9...

CVE-2025-67913

Missing Authorization vulnerability in Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Aruba HiSpeed Cache: from n/a through 3.0.3...

CVE-2025-67920

The Elated-Themes Neo Ocular WordPress theme is vulnerable to Local File Inclusion (LFI) in versions prior to 1.2 . The root cause is the improper control of filenames within PHP include or require statements, which allows an attacker to include local files on the server. To remediate this issue,...

CVE-2025-61915 affecting package cups for versions less than 2.3.3op2-11

CVE-2025-61915 affecting package cups for versions less than 2.3.3op2-11. A patched version of the package is available...

CVE-2025-65637 affecting package influxdb for versions less than 2.6.1-25

CVE-2025-65637 affecting package influxdb for versions less than 2.6.1-25. A patched version of the package is available...

CVE-2025-64433 affecting package kubevirt for versions less than 0.59.0-33

CVE-2025-64433 affecting package kubevirt for versions less than 0.59.0-33. A patched version of the package is available...

aiohttp < 3.13.3 Multiple Vulnerabilities - Linux

aiohttp is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:aio-libsproject:aiohttp";...

WordPress Neo Ocular theme < 1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Neo Ocular versions 1.2...

firefox: thunderbird: Privilege escalation in the Netmonitor component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Netmonitor component...