Archive
13 November 2026
Vulnerabilities first published on this day (UTC), newest first.
337 results · Clear filters · Feed
-
Medium 6.9
Improper request handling can lead to a denial-of-service / reboot-loop condition in Citrix NetScaler ADC and Citrix Ne…
-
Medium 6.9
Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Ci…
-
Medium 5.1
Edito CMS is vulnerable to Stored XSS in avatar upload functionality. Authenticated attacker can inject arbitrary HTML …
-
Medium 5.1
Edito CMS is vulnerable to Stored XSS via content parameter in Tiny editor functionality. Authenticated attacker can in…
-
Medium 5.1
Edito CMS is vulnerable to Stored Cross-Site Scripting (XSS). Due to improper input validation, an authenticated attack…
-
Medium 5.1
The MISP Modules website component contains an open redirect vulnerability in its login endpoint. The /login route acce…
-
Medium 5.3
Kroxylicious-authorizer-acl: kroxylicious: acl rule file regex escapes are stripped, broadening 'matching' authorization rules
A flaw was found in Kroxylicious. The ACL authorizer's rules-file parser unquotes `matching /…/` regular-expression literals using the string unquoting rules, which strips every backslash escape. As a result, an allow rule such as `matching /orders\.v1/` is c…
-
Medium 5.3
Mine CloudVod < 2.6.7 - Unauthenticated Paid Lesson Content Disclosure
The Mine CloudVod WordPress plugin before 2.6.7 does not check whether the requester is enrolled in a course, or authorised at all, before returning the course's full curriculum together with the raw content of every published lesson, allowing unauthenticated…
-
Medium 4.3
Essential Real Estate 5.3.5 - Customer+ Email Relay Allowlist Poisoning
The Essential Real Estate WordPress plugin before 5.3.6 does not verify that the recipients it allows for its contact email action are legitimate, allowing users with the self-registered Customer role to add any address to that allowlist so that unauthenticat…
-
Medium 4.3
WP Remote Users Sync < 2.2.1 - Subscriber+ Activity Log Deletion
The WP Remote Users Sync WordPress plugin before 2.2.1 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete the WP Remote Users Sync WordPress plugin before 2.2.1's entire act…
-
Medium 5.3
AppPresser < 5.0.0 - Unauthenticated Plugin and Theme Version Disclosure
The AppPresser WordPress plugin before 5.0.0 does not restrict access to two of its REST API endpoints, allowing unauthenticated visitors to retrieve the installed versions of AppPresser, its add-ons, several third-party AppPresser WordPress plugin before 5.0…
-
Medium 4.5
Contact Form 7 < 6.2.5 - Editor+ Sensitive User Data Disclosure via Form Default Values
The Contact Form 7 WordPress plugin before 6.2.5 does not restrict which user properties a form field's default value can be populated from, allowing users with the Editor role and above to obtain the password hash and sensitive user meta (such as two-factor …
-
Medium 6.9
A vulnerability was identified in Zackriya-Solutions Meetily up to 0.4.1. Affected is an unknown function of the file b…
-
Medium 4.3
Cairo-dock Glx-Dock href Attribute bg_forum.php cross site scripting
A flaw has been found in Cairo-dock Glx-Dock 3.4.0. The affected element is an unknown function of the file bg_forum.php of the component href Attribute Handler. This manipulation of the argument f causes cross site scripting. The attack may be initiated remo…
-
Medium 5.3
A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vul…
-
Medium 5.1
Unchecked serial-recovery image index causes out-of-bounds slot-table read in MCUboot Zephyr port
MCUboot's Zephyr serial-recovery upload handler bs_upload() in boot/boot_serial/src/boot_serial.c decodes the host-supplied image field of an MCUmgr image-upload request into img_num (a full 32-bit value) and latches it on the off == 0 packet without any rang…
-
Medium 4.0
MCUboot's serial-recovery image-upload handler bs_upload() in boot/boot_serial/src/boot_serial.c declares const struct …