Archive
13 November 2026
Vulnerabilities first published on this day (UTC), newest first.
318 results · Clear filters · Feed
-
High 7.5
ExcelJS through 4.4.0 Memory Exhaustion via Oversized Image Anchor Column
ExcelJS through 4.4.0 contains a memory exhaustion vulnerability that allows attackers to crash applications by supplying a workbook with an unbounded image anchor column in the drawing part. Attackers can set an anchor column such as 300000000 in xl/drawings…
-
High 7.5
ExcelJS through 4.4.0 Denial of Service via Oversized Row Number
exceljs through 4.4.0 contains a denial of service vulnerability that allows attackers to block the event loop by supplying unbounded row r attributes parsed in row-xform.js. Attackers can craft an XLSX file with a row numbered far beyond Excel's limit, makin…
-
High 7.5
ExcelJS through 4.4.0 Arbitrary File Read via WorkbookWriter addImage Filename
ExcelJS through 4.4.0 contains an arbitrary file read vulnerability in the streaming WorkbookWriter that allows attackers to read local files by supplying crafted image filenames to addImage. Attackers can inject ../ path segments into user-controlled image p…
-
High 8.7
ExcelJS through 4.4.0 contains a resource leak vulnerability in the streaming WorkbookReader.parse that leaves temporar…
-
High 7.5
Dell SmartFabric OS10 Software, versions prior to 10.6.0.10, contains an Incorrect Authorization vulnerability. A low p…
-
High 7.5
Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Incorrect Authorization vulnerability. A low privi…
-
High 8.1
Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Weak Password Requirements vulnerability. An unauth…
-
High 8.7
Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScale…
-
High 7.7
Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of…
-
High 8.7
Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScal…
-
High 8.7
Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix …
-
High 8.7
Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavi…
-
High 8.7
Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredicta…
-
High 8.7
Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.
-
High 8.7
Memory overflow in Base64 decoding in advanced policy expressions leading to unpredictable or erroneous behavior or Den…
-
High 8.3
Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetSc…
-
High 8.4
Deserialization of untrusted data in Edito CMS
Edito CMS deserializes JSON data without further validation. A user (even an administrator) cannot exploit this vulnerability through the application's normal functionality. An attacker who could modify cache entries or inject them could execute code on the s…
-
High 7.1
Edito CMS restricts the ability to upload files via the UI to specific file types. However, an avatar upload functional…
-
High 7.1
Edito CMS is vulnerable to Dynamic LINQ injection. Due to improper input validation, an authenticated attacker can inje…
-
High 8.7
Edito CMS is vulnerable to improper cryptographic signature verification in the JWT refresh logic. An authenticated low…
-
High 7.2
WP Ultimate CSV Importer < 9.2 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via Media Import
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not restrict the destination filename and extension, nor validate the fetched content type, when importing remote media, allowing an Administrator of a Multisite subsite to write and execute arbitr…
-
High 8.1
WPCOM Member < 1.8.3 - Unauthenticated Account Takeover via WeChat Login Code Brute-Force
The WPCOM Member WordPress plugin before 1.8.3 does not limit or bind attempts to verify WeChat login codes, allowing unauthenticated attackers to brute-force a code issued to another user and log in as that user, including administrators, when WeChat officia…
-
High 7.5
WooCommerce Vindi Pagamento <= 0.8.3 - Unauthenticated Stored XSS via 'code' Parameter
The WooCommerce Vindi Pagamento WordPress plugin through 0.8.3 does not perform any authorisation check when updating an order's shipment tracking code, and does not escape that code when displaying it on the order edit page, allowing unauthenticated attacker…
-
High 7.5
WP Remote Users Sync < 2.2.1 - Privilege Escalation to Administrator via 'create' and 'update' Sync Actions
The WP Remote Users Sync WordPress plugin before 2.2.1 does not restrict which account fields a synchronised site may set when it creates or updates users, allowing a site holding the shared synchronisation keys to assign the administrator role, modify any ex…
-
High 7.5
Advance Guest Post <= 1.9 - Unauthenticated Arbitrary Attachment Deletion
The Advance Guest Post WordPress plugin through 1.9 does not perform any authorization or ownership check when deleting media attachments, relying only on a nonce exposed to every site visitor, allowing unauthenticated users to permanently delete arbitrary Me…
-
High 8.6
LetsRecover <= 1.2.0 - Unauthenticated SQL Injection
The LetsRecover WordPress plugin through 1.2.0 does not sanitize a user-supplied value that is used as a database column name in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to append SQL to the query and read arbitrary data fro…
-
High 8.7
Memory overflow in LDAP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix N…
-
High 8.7
Memory overflow in client-certificate authentication can lead to unpredictable or erroneous behavior or Denial of Servi…
-
High 8.7
Memory overflow in KBA (knowledge-based authentication) can lead to unpredictable or erroneous behavior or Denial of Se…
-
High 8.7
Memory overflow in WebAuth authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citri…
-
High 8.7
Memory overflow in SAML authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix N…
-
High 8.7
Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
-
High 7.3
SourceCodester Food Ordering System Admin Write add_category.php sql injection
A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/add_category.php of the component Admin Write Handler. Performing a manipulation of the argument title/description/price/current_ima…
-
High 7.3
SourceCodester Food Ordering System Admin Image update_food.php unrestricted upload
A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/update_food.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted…
-
High 7.3
lanyulei ferry JWT Validation auth.go improper authentication
A vulnerability was found in lanyulei ferry 1.0.0-beta.1/1.0.0. Affected is an unknown function of the file middleware/auth.go of the component JWT Validation. The manipulation results in improper authentication. The attack can be executed remotely. The explo…
-
High 7.3
AIP-PUB ACPs-community Discovery Server main.py missing authentication
A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the file discovery-server/app/main.py of the component Discovery Server. The manipulation results in missing authentication. The attack may be launched rem…
-
High 7.3
AIP-PUB ACPs-community verify-code Endpoint service_auth.py send_verification_code improper authentication
A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function send_verification_code of the file registry-server/app/account/service_auth.py of the component verify-code Endpoint. Executing a manipulation of the ar…
-
High 7.7
A type allow-list bypass in the BSON serialization library of the MongoDB C# Driver allows a type-restriction check to …