Archive
18 September 2026
Vulnerabilities first published on this day (UTC), newest first.
215 results · Clear filters · Feed
-
Medium 6.4
RT Mega Menu <= 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via rtmega_update_menu_options AJAX Action
The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…
-
Medium 6.4
RT Mega Menu <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute
The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute in all versions up to, and including, 1.5.2 due to insufficient input sanitization and out…
-
Medium 6.3
Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remo…
-
Medium 6.5
A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowe…
-
Medium 6.2
Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote inst…
-
Medium 4.3
The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without v…
-
Medium 4.3
The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing…
-
Medium 6.5
The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolde…
-
Medium 6.3
Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV paths of other users. The …
-
Medium 6.5
django-page-cms through 2.0.13 Unauthorized Content Access via Staff Account
django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff account to read arbitrary page content and stored media paths. Attackers with low-privilege staff credentials can enumerate content identifier…
-
Medium 6.3
Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The e…
-
Medium 4.3
Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been publ…
-
Medium 4.3
Freedesktop Poppler SampledFunction Function.cc integer overflow
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer o…
-
Medium 5.3
O-RAN-SC SMO OAM VES Collector allocation of resources
A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collector. The manipulation leads to allocation of resources. Remote exploitation of the attack is possible. The exploit is publicly available and…
-
Medium 6.1CVE-2026-79294 Public exploit
Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arb…