CVE-2026-5336

The DataPress Dataverse Integration WordPress plugin before 2.91 does not properly restrict access to its template rendering feature and exposes the viewing user's data to it, allowing users with a role as low as Contributor to disclose sensitive information, such as the session cookies of higher...

CVE-2025-54784 SuiteCRM is vulnerable to Cross Site Scripting (XSS) through its email viewer

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. There is a Cross Site Scripting XSS vulnerability in the email viewer in versions 7.14.0 through 7.14.6. An external attacker could send a prepared message to the inbox of the SuiteCRM-instance...

KEYENCE CORPORATION KV REPLAY VIEWER Memory Walking Code Execution

The vulnerability of the KEYENCE CORPORATION KV STUDIO programming software and the KV REPLAY VIEWER data viewing and analysis software lies in memory reading outside the bounds of the memory space. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...