CVE-2026-59940

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON allows attacker-controlled JSON Promise control nodes to operate on values from the general deserialization reference table without verifying genuine...

EUVD-2026-60825

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...

CVE-2026-73426

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...

MINI-388J-RW88-R32J

Bulletin has no description...

CVE-2026-40467 affecting package gawk for versions less than 5.2.2-2

CVE-2026-40467 affecting package gawk for versions less than 5.2.2-2. A patched version of the package is available...

CVE-2026-20348 affecting package clamav for versions less than 1.5.4-1

CVE-2026-20348 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20

CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...

CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5

CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5. A patched version of the package is available...

CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3

CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...

MINI-C4Q8-M5PQ-CH4Q

Bulletin has no description...

MINI-75HM-F2F3-M8WR

Bulletin has no description...

MINI-5X5W-24GX-V59M

Bulletin has no description...

MINI-8FJG-W338-88H7

Bulletin has no description...

EUVD-2026-60794

Unauthenticated Bypass Vulnerability in Contact Form by Supsystic 1.10.0 versions...

MINI-5CCW-79GX-V6HR

Bulletin has no description...

EUVD-2026-60793

Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...

CVE-2026-73378 WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...

EUVD-2026-60935

Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...

CVE-2026-68565 WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...

CVE-2026-66645 WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...