Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure across...

CVE-2026-8240

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure across every page with a configur

历史摘要 · 未重新核验 · GitHub Advisory

Concrete CMS 9.5.0 and below is vulnerable to IDOR. The '/ccm/frontend/conversations/message_page...

CVE-2026-8238

Concrete CMS 9.5.0 and below is vulnerable to IDOR. The '/ccm/frontend/conversations/message_page' endpoint returns the

历史摘要 · 未重新核验 · GitHub Advisory

In Concrete CMS 9.5.0 and below,  the submit_password() method in concrete/controllers...

CVE-2026-7879

In Concrete CMS 9.5.0 and below,  the submit_password() method in concrete/controllers/single_page/download_file.php all

历史摘要 · 未重新核验 · GitHub Advisory

Concrete CMS 9.5.0 and below is subject to Insecure Direct Object Reference (IDOR) in the Express...

CVE-2026-7881

Concrete CMS 9.5.0 and below is subject to Insecure Direct Object Reference (IDOR) in the Express Entry Detail block via

历史摘要 · 未重新核验 · GitHub Advisory

Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate....

CVE-2026-8236

Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate. The endpoint /ccm/system

历史摘要 · 未重新核验 · GitHub Advisory

Concrete CMS 9.5.0 and below is vulnerable to IDOR. The '/ccm/frontend/conversations/get_rating'...

CVE-2026-8239

Concrete CMS 9.5.0 and below is vulnerable to IDOR. The '/ccm/frontend/conversations/get_rating' endpoint confirms exist

历史摘要 · 未重新核验 · GitHub Advisory

Simple Hierarchical Select (SHS) for Drupal 7 contains cross-site scripting risk due to improper...

CVE-2026-4929

Simple Hierarchical Select (SHS) for Drupal 7 contains cross-site scripting risk due to improper output escaping of term

历史摘要 · 未重新核验 · GitHub Advisory

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template...

CVE-2026-22678

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the

历史摘要 · 未重新核验 · GitHub Advisory

In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter...

CVE-2026-4093

In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline. Ve

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix

An incorrect fix that was applied in GHSA-5592-p365-24xh could result in a heap buffer over-write of a single byte.

历史摘要 · 未重新核验 · GitHub Advisory

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

CVE-2026-46678

## Summary When an application using Pydantic AI opts a URL into `force_download='allow-local'` (which disables the def

历史摘要 · 未重新核验 · GitHub Advisory

Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

CVE-2026-46671

### Impact A maliciously crafted `.onetoc2` table-of-contents file can cause `Parser::parse_notebook` to open arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

SQLAdmin: Authorization Bypass on `ajax_lookup`

CVE-2026-46645

### Impact The `ajax_lookup` endpoint in `application.py` bypasses the `is_accessible()` access control check that all

历史摘要 · 未重新核验 · GitHub Advisory

Concrete CMS 9.5.0 and below is vulnerable to authorization Bypass in the Calendar Event Frontend...

CVE-2026-8204

Concrete CMS 9.5.0 and below is vulnerable to authorization Bypass in the Calendar Event Frontend Dialog which can allow

历史摘要 · 未重新核验 · GitHub Advisory

Concrete CMS 9.5.0 and below is vulnerable to authorization bypass in the Calendar Block since...

CVE-2026-8205

Concrete CMS 9.5.0 and below is vulnerable to authorization bypass in the Calendar Block since action_get_events does no

历史摘要 · 未重新核验 · GitHub Advisory

Concrete CMS 9.5.0 and below  is vulnerable to unauthenticated file usage disclosure via missing...

CVE-2026-6826

Concrete CMS 9.5.0 and below  is vulnerable to unauthenticated file usage disclosure via missing permission check in the

历史摘要 · 未重新核验 · GitHub Advisory

The GSheet For Woo Importer plugin for WordPress is vulnerable to unauthorized loss of data due...

CVE-2026-4843

The GSheet For Woo Importer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability

历史摘要 · 未重新核验 · GitHub Advisory

Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)

CVE-2026-46638

### Description The fix for CVE-2024-45411 / GHSA-6j75-5wfj-gh66 added an explicit `$loaded->unwrap()->checkSecurity()`

历史摘要 · 未重新核验 · GitHub Advisory

Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name

CVE-2026-46634

### Description When the sandbox is enabled selectively via `SourcePolicyInterface` (and not globally), a sandboxed tem

历史摘要 · 未重新核验 · GitHub Advisory

@hulumi/baseline: CloudTrail selector tampering events were not fully detected

Impact: @hulumi/baseline versions before 1.3.2 could miss some CloudTrail event-selector tampering evidence, reducing co

历史摘要 · 未重新核验 · GitHub Advisory