The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end...
CVE-2026-92403
The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end form submission corresp
#severity:low
共收录 1576 条相关情报。
← 返回所有主题The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its...
CVE-2025-15698
The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could
In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper()...
CVE-2026-93894
In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type
A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This...
CVE-2026-93650
A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive...
CVE-2026-11545
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the admi
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function...
CVE-2026-93313
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTabl
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function...
CVE-2026-93314
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of t
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream:...
CVE-2026-93312
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/J
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve...
CVE-2026-68493
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function...
CVE-2026-93311
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFun
A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some...
CVE-2026-93309
A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of t
A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an...
CVE-2026-93308
A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of...
CVE-2026-93307
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Coll
A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the...
CVE-2026-92993
A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected...
CVE-2026-92992
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown functio
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
CVE-2026-81870
### Summary OpenTelemetry Go versions 1.5.0 through 1.44.0 can include trace exporter endpoint configuration in an inte
Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection
CVE-2026-72701
## Summary `Grav\Common\Utils::verifyNonce()`, the core function Grav and its plugins use to validate CSRF nonces, comp
changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications,...
CVE-2026-92814
changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary marku
A vulnerability was determined in gedelumbung HospitalManagement up to...
CVE-2026-92221
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affecte
A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This...
CVE-2026-92247
A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename o