CVE-2026-5037

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

CVE-2025-8383

CVE-2025-8383: Depicter for WordPress suffers a Cross-Site Request Forgery in versions

PT-2024-30257 · Unknown · Tosei Online Store Management System

Name of the Vulnerable Software and Affected Versions: TOSEI online store management system versions v4.02 through v4.04 Description: An issue in the downloader.php component allows attackers to execute a directory traversal. Recommendations: For versions v4.02 through v4.04, consider disabling t...

ch.mobi.mobitor:mobitor-base (>=3.1.242 <=3.1.295), cloud.piranha.session:piranha-session-hazelcast (>=20.5.0 <=20.11.0) +84 more potentially affected by unknown CVE via com.hazelcast:hazelcast (>=4.0.1 <=4.0.4)

com.hazelcast:hazelcast MAVEN version =4.0.1, =3.1.242, =20.5.0, =3.1.1, =3.1.1, =0.4.0, =0.1.1, =6.0.1, =1.0.2, =4.1, =4.0.1, =2.1.0, =2.1.0, =2.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V57X-GXFJ-484Q...

Ron-checkmarx gitlog command injection vulnerability

Ron-checkmarx gitlog is a parser from the US-based Ron-checkmarx organization. It provides a Git log parser for Node.JS. A command injection vulnerability exists in gitlog version 4.0.4, which stems from the gitlog function in src/index not properly filtering special elements within it. An attack...

UBUNTU-CVE-2017-10788

The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by triggering 1 certain error responses from a MySQL server or 2 a loss of a network connection to a MySQL server. The...

PT-2017-17974 · Dolibarr · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 4.0.4 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs in the doli/societe/list.php file through the sall parameter. This allows for potential malicious script injection...