88746 matches found
CVE-2026-17573
A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free...
CVE-2026-17572
Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service crash via a crafted HDF5 file whose shared-message list index declares a nummessages count exceeding listmax, triggering out-of-bounds heap...
CVE-2026-47078
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...
CVE-2026-42792
Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...
CVE-2026-58227
The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In sslcertificate:handleincompletechain/5, the received chain is passed to sslcertificate:buildcertificatechain/5, which walks issuer relationships via...
CVE-2025-59181
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...
CVE-2025-59180
Ericsson Packet Core Controller PCC versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information...
CVE-2026-66050
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...
CVE-2025-59178
Ericsson Packet Core Controller PCC versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system...
CVE-2026-10819
Mattermost versions 11.6.x = 11.6.5, 10.11.x = 10.11.20, 11.8.x = 11.8.1, 11.7.x = 11.7.4 fail to limit the number of frames and enforce the file size cap on animated GIF uploads, which allows an authenticated attacker to cause a denial of service via a crafted animated GIF uploaded as a custom...
CVE-2026-10600
Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to bound the time and resource consumption of server-side document content extraction which allows an authenticated user with file-upload permission to degrade file uploads for all users on the server v...
CVE-2025-59177
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages...
CVE-2025-59172
Ericsson Packet Core Controller PCC versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root...
CVE-2026-66477
Unauthenticated Broken Access Control in Gillion = 4.13 versions...
CVE-2026-66476
Administrator Arbitrary File Deletion in Easy Digital Downloads = 3.6.9 versions...
CVE-2026-66475
Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce - Checkout Manager = 3.0.5 versions...
CVE-2026-66474
Unauthenticated Cross Site Request Forgery CSRF in Insert Headers and Footers Code – HT Script = 1.1.8 versions...
CVE-2026-66448
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.3 versions...
CVE-2026-66445
Contributor Cross Site Scripting XSS in Open User Map = 1.4.46 versions...
CVE-2026-66442
Subscriber Broken Access Control in YayPricing = 3.5.6 versions...
CVE-2026-66437
Contributor Server Side Request Forgery SSRF in Feedzy = 5.2.4 versions...
CVE-2026-66438
Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...
CVE-2026-66434
Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...
CVE-2026-66428
Unauthenticated Cross Site Request Forgery CSRF in WP Google Review Slider = 18.4 versions...
CVE-2026-66433
Contributor Cross Site Scripting XSS in Location Weather = 3.0.6 versions...
CVE-2026-66427
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...
CVE-2026-65568
Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...
CVE-2026-65567
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
CVE-2026-65564
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions...
CVE-2026-65563
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
CVE-2026-65562
Contributor Cross Site Scripting XSS in BetterDocs = 4.6.2 versions...
CVE-2026-65561
Contributor Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.0 versions...
CVE-2026-65558
Unauthenticated Server Side Request Forgery SSRF in AffiliateX = 2.3.5 versions...
CVE-2026-65557
Shop manager Cross Site Scripting XSS in Abandoned Cart Lite for WooCommerce = 6.8.0 versions...
CVE-2026-65435
Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...
CVE-2026-65436
Editor Arbitrary File Deletion in Kirki = 6.0.13 versions...
CVE-2026-65434
Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...
CVE-2026-59560
Subscriber Broken Access Control in FundEngine = 1.7.8 versions...
CVE-2026-65433
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
CVE-2026-59559
Subscriber Cross Site Scripting XSS in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
CVE-2026-59557
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59558
Unauthenticated Cross Site Scripting XSS in Booking Calendar = 11.4.2 versions...
CVE-2026-59556
Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...
CVE-2026-59553
Unauthenticated Cross Site Scripting XSS in Product Feed Manager = 7.6.1 versions...
CVE-2026-59552
Unauthenticated Server Side Request Forgery SSRF in 3D Flipbook PDF Viewer & Embedder = 1.4.2 versions...
CVE-2026-59551
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
CVE-2026-59550
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
CVE-2026-59549
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...