Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or...
CVE-2026-14906
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within t
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows...
CVE-2026-49969
Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue
The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all...
CVE-2026-12385
The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-12536
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Module Title’ para
Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-49971
Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows authenticated or anonymou
Decidim: Push subscriptions can be abused for server-side requests
CVE-2026-45573
## Description The push-subscription endpoint stores an attacker-controlled delivery URL, and the notification send pat
Decidim: HTML content blocks allow stored script execution
CVE-2026-45572
## Description A privileged admin user who can edit an affected landing page can store arbitrary HTML/JavaScript in an
Decidim: CSV census record endpoints improper authorization
CVE-2026-45415
## Description A participant manager can access and modify the CSV census record admin forms. ## Technical description
Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow...
CVE-2026-15551
Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects
A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file ...
CVE-2026-15517
A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSumma
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue...
CVE-2026-15515
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown process
A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability...
CVE-2026-15514
A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affects the function RPCS
A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase...
CVE-2026-15502
A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of the file /ipn.php o
Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats...
CVE-2026-56281
Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit p
Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated ...
CVE-2026-56336
Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /private/sso/check-domain
A vulnerability was identified in sergomanov SmartHomeAdatum up to...
CVE-2026-15498
A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9aa14a318aa45ce12c. This impact
Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test...
CVE-2026-56252
Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test endpoint that allows app-scope
A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown...
CVE-2026-15497
A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file so
A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to...
CVE-2026-15490
A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected
A vulnerability was detected in Akpali9 Attendance-Management-System up to...
CVE-2026-15493
A vulnerability was detected in Akpali9 Attendance-Management-System up to 70b91fe38f4195b701a45f0edcd4f42d5f64aeee. Thi