115760 matches found
BELL-CVE-2026-68457
Bulletin has no description...
PT-2026-77122
Name of the Vulnerable Software and Affected Versions Charitable versions prior to 1.8.11.4 Description An unauthenticated broken access control issue exists, allowing network exploitation without requiring user interaction. Recommendations Update to a version newer than 1.8.11.3...
PT-2026-77120
Name of the Vulnerable Software and Affected Versions Restaurant Menu by MotoPress versions prior to 2.4.12 Description An unauthenticated Local File Inclusion LFI exists, which allows a remote attacker to read files from the server without requiring user interaction. Local File Inclusion is a...
PT-2026-77103
Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...
PT-2026-76915
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5...
The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE, related to the manipulation of inter-site requests, allows a violator to execute arbitrary code.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted GET requests...
PT-2026-77094
Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...
PT-2026-77100
Unauthenticated Cross Site Scripting XSS in URL Shortify = 2.5.0 versions...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +290 more potentially affected by CVE-2026-47686 via vm2 (>=3.0.0, <=3.11.5)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
EUVD-2026-60200
Dell ObjectScale, versions prior to 4.3.0.1, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-16471
Missing Authorization vulnerability in Dolusoft Software Technologies Sonlogger allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sonlogger: from v6.6.6 before 6.7.4.8...
MINI-WW3C-HC4R-PC8M
Bulletin has no description...
WordPress Kirki plugin < 6.0.13 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Hermanhms in WordPress Plugin Kirki versions 6.0.13...
BIT-DISCOURSE-2026-72729 Discourse: Stored XSS in discourse-local-dates plugin
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the discourse-local-dates plugin rendered crafted local-date format data as HTML on sites with a modified or disabled default Content Security Policy. This issue is fixed in versions 2026.1.6,...
PT-2026-73440
Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application...
PT-2026-73281
Ghost is a Node.js content management system. From 4.22.0 until 6.54.1, a missing validation check allowed users to redeem subscription offers that were no longer active. This issue is fixed in version 6.54.1...
Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099487)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099487 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a...