CVE-2014-125138 C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerability in administrative image fields. Editor-role users can upload PHP scripts via the pageimage or catimage parameters to the web-accessible /public/image...

CVE-2014-125136 C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backup

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information disclosure vulnerability that exposes database backups in the web-accessible /admin/backup directory. Unauthenticated attackers can list the directory or guess date-based names...

CVE-2013-20009 Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter

Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the policyname parameter in setup.cgi. Attackers can save a malicious policy name from the AccessRes.htm page that executes in administrators' browsers wh...

CVE-2013-20008 Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate...

CVE-2013-20007 Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timerinterval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and ru...

CVE-2026-118272

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionError of the file renderers/webcore/src/v09/rendering/data-context.ts of the component Error Handler. Performing a manipulation results in information exposure through error...

CVE-2026-106013

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verifytwittercallback function because after exchanging the visitor's oauthverifier for their acces...

CVE-2026-118271

A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the file renderers/webcore/src/v09/rendering/data-context.ts of the component data-context Resolver. Such manipulation leads to resource consumption. The attack may be performed from...

CVE-2026-110879

The jackson-databind library (com.fasterxml.jackson.core:jackson-databind from version 2.10.0 and tools.jackson.core:jackson-databind from version 3.0.0 ) contains a PolymorphicTypeValidator bypass. The vulnerability occurs because the library validates the outer class of a class-name type ID but...

CVE-2026-110747

The jackson-dataformat-protobuf library is vulnerable to an integer overflow in the ProtobufParser._readStringKey() method. When processing a protobuf map entry, the parser reads the length prefix of a string key into an attacker-controlled int and performs a bounds check using signed arithmetic....

CVE-2026-104895

The jackson-dataformat-smile library (specifically versions >=2.9.0.pr4, =3.0.0,

CVE-2026-104016

The jackson-dataformat-protobuf library is vulnerable to a signed integer overflow within the ProtobufParser component when processing length-prefixed protobuf string and bytes fields. Specifically, when an attacker provides a varint decoding with a length near Integer.MAX_VALUE , the arithmetic ...

CVE-2026-118129

A vulnerability exists in jeremyckahn Chitchatter (up to commit f82538633813c854a81a8b2112a2f6ba17b39cbc ) within the PostMessage Handler component. The isConfigMessageEvent function in the src/Bootstrap.tsx file is susceptible to improper authentication due to the manipulation of the parentDomai...

CVE-2026-118338

A Use after free vulnerability exists in the Animation component of Google Chrome in versions prior to 156.0.8078.73 . This flaw allows a remote attacker to potentially execute arbitrary code inside the sandbox by navigating to a crafted HTML page. No specific exploit details or in-the-wild explo...

CVE-2026-118309

Google Chrome on Android versions prior to 156.0.8078.73 is vulnerable to a security flaw caused by improper input validation in the UI. A remote attacker can exploit this by delivering a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox . This issue has a High...

CVE-2026-118315

Google Chrome versions prior to 156.0.8078.73 are affected by an improper input validation vulnerability within the SVG component. A remote attacker could exploit this flaw by using a crafted HTML page to potentially execute arbitrary code inside the sandbox. No specific exploit details or links ...

CVE-2026-118356

A Use after free vulnerability exists in the WTF component of Google Chrome versions prior to 156.0.8078.73 . A remote attacker can exploit this flaw by navigating to a crafted HTML page to achieve arbitrary code execution within the sandbox. No specific exploit information or proof-of-concept is...

CVE-2026-118319

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption issue in the Skia component. A remote attacker could exploit this by using a crafted HTML page to potentially read memory inside the sandbox . No specific exploit details or in-the-wild exploitation information ar...

CVE-2026-118312

Google Chrome contains a memory corruption vulnerability in the Paint component affecting versions prior to 156.0.8078.73 . A remote attacker could leverage this flaw by navigating a victim to a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox. The vulnerabili...

CVE-2026-118341

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free issue within the Modularization component. A remote attacker can exploit this vulnerability by using a crafted HTML page to achieve arbitrary code execution inside the sandbox. The Chromium security severity for this...