490201 matches found
CVE-2026-75838
DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in INPLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned...
WordPress Ultimate Dashboard Pro plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Ultimate Dashboard Pro versions = 3.11.2...
WordPress Turnkey bbPress by WeaverTheme plugin <= 1.7.1 - Authenticated (Administrator+) PHP Object Injection vulnerability
Authenticated Administrator+ PHP Object Injection vulnerability discovered by Luk6785 in WordPress Plugin Turnkey bbPress versions = 1.7.1...
MINI-F7M2-V5H5-6FRX
Bulletin has no description...
MINI-RMH8-7HC9-RFCH
Bulletin has no description...
MINI-RCP8-97CF-769J
Bulletin has no description...
MINI-297J-98WQ-CGHX
Bulletin has no description...
MINI-5XV2-2677-874M
Bulletin has no description...
CVE-2026-19447 Stored XSS in Fileorbis Informatics's FileOrbis
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5...
CVE-2024-14046 OpenBoxes Document Upload Controller DocumentController.groovy DocumentController unrestricted upload
A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy of the component Document Upload Controller. The manipulation leads to unrestricted upload. I...
WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by 20kilograma in WordPress Plugin Affiliates Manager versions = 2.9.53...
WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by hackthesoul in WordPress Plugin WordPress Social Login and Register versions = 7.8.1...
WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dutafi in WordPress Plugin MasterStudy LMS versions = 3.7.41...
CVE-2024-14045
A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Product Supplier Edit Controller. Executing a manipulation can lead to improper authorization. The attack m...
CVE-2024-14045 OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization
A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Product Supplier Edit Controller. Executing a manipulation can lead to improper authorization. The attack m...
MINI-HJF9-Q3WG-JJR5
Bulletin has no description...
MINI-7HXP-J446-8GFR
Bulletin has no description...
MINI-JX68-GW8G-8H8C
Bulletin has no description...