The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an order as paid on several of its payment-completion endpoint...

CVE-2026-16038

The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an or

历史摘要 · 未重新核验 · NVD

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a n

历史摘要 · 未重新核验 · NVD

OpenReception: Tenant admin self-promotes to GLOBAL_ADMIN

CVE-2026-48086

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver

历史摘要 · 未重新核验 · OSV.dev

OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrap

CVE-2026-48085

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver

历史摘要 · 未重新核验 · OSV.dev

OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer

CVE-2026-48081

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver

历史摘要 · 未重新核验 · OSV.dev

league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes

CVE-2026-71478

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the Attributes

历史摘要 · 未重新核验 · OSV.dev

pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

CVE-2026-67422

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0,

历史摘要 · 未重新核验 · OSV.dev

Decidim: Verification documents can be downloaded through reusable links

CVE-2026-45378

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.3

历史摘要 · 未重新核验 · OSV.dev

Decidim: HTML content blocks allow stored script execution

CVE-2026-45572

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.3

历史摘要 · 未重新核验 · OSV.dev

llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrap

历史摘要 · 未重新核验 · OSV.dev

Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

CVE-2026-53984 · CVE-2026-53985 · CVE-2026-53983

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital

历史摘要 · 未重新核验 · OSV.dev

llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp

CVE-2026-70639

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper w

历史摘要 · 未重新核验 · OSV.dev

llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp

CVE-2026-70638

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where th

历史摘要 · 未重新核验 · OSV.dev

llama.cpp b1886–b7445 Double Free via llama-android.cpp

CVE-2026-43622

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1bat

历史摘要 · 未重新核验 · OSV.dev

html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection

CVE-2026-66829

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allow

历史摘要 · 未重新核验 · OSV.dev

html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking

CVE-2026-66370

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allow

历史摘要 · 未重新核验 · OSV.dev

html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding

CVE-2026-66843

Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex

历史摘要 · 未重新核验 · OSV.dev

Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an...

CVE-2026-19012

Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service

历史摘要 · 未重新核验 · GitHub Advisory

PLANET VDR-300NU ADSL Router - 未授权修改DNS

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Acknowledgements

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin