A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the...
CVE-2026-7238
A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PH
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable...
CVE-2026-40980
In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when ha
The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to,...
CVE-2026-4911
The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to, and including, 1.7.06 Th
A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is an...
CVE-2026-7230
A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is an unknown function. The manip
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of...
CVE-2026-40356
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an applica
A vulnerability was found in code-projects Coaching Management System 1.0. This affects an...
CVE-2026-7229
A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the...
CVE-2026-7227
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This...
CVE-2026-7226
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects the functi
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability...
CVE-2026-7225
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function d
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the...
CVE-2026-7228
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_coun
A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects...
CVE-2026-7224
A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_car
A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the...
CVE-2026-7221
A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file m
OpenStack Ironic through 25.0.0 allows ipmitool execution in a non-default configuration that has...
CVE-2026-42510
OpenStack Ironic through 25.0.0 allows ipmitool execution in a non-default configuration that has a console interface.
The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-6809
The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in
A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63. Affected...
CVE-2026-7223
A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63. Affected by this issue is the fun
The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-6725
The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text'
A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this...
CVE-2026-7222
A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unk
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application...
CVE-2026-40355
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_c
The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-6551
The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' a
A vulnerability has been found in jackwrichards FastlyMCP up to...
CVE-2026-7220
A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620. This impacts a