Archive
November 2026
Vulnerabilities first published in this month (UTC), newest first.
3,147 results · Clear filters · Feed
-
Medium 4.1
The xmlwf tool in libexpat through 2.10.0 contains a symlink following vulnerability because -d output mode opens files…
-
Medium 5.5
GPAC through 26.07.0 Use-After-Free in gf_sg_proto_del During Scene Teardown
GPAC through 26.07.0 contains a use-after-free vulnerability in gf_sg_proto_del() in src/scenegraph/vrml_proto.c because gf_sg_reset() frees unregistered prototypes still referenced by scene commands. Attackers can supply a crafted XMT/BT scene declaring prot…
-
Medium 5.0
Dokploy 0.28.0 before 0.31.1 Path Traversal via patch.readRepoDirectories repoPath
Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization members to list tracked files of any git repository by supplying an arbitrary repoPath to patch.readRepoDirectories. Attackers with read access to one …
-
Medium 5.3
Miniflux before 2.3.5 Password Change Without Current Password via Settings Form
Miniflux before 2.3.5 contains an unverified password change vulnerability that allows holders of a signed-in session to change the account password without supplying the current password. Attackers with a stolen session cookie or unattended device can submit…
-
Medium 6.3
listmonk 6.2.0 before 7.0.0-beta.2 contains a missing authentication vulnerability that allows unauthenticated attacker…
-
Medium 4.8
ExcelJS through 4.4.0 Prototype Pollution via __proto__ Defined Name
ExcelJS through 4.4.0 contains a prototype pollution vulnerability that allows attackers to add numeric keys to Object.prototype through a crafted defined name referencing a __proto__ sheet. Attackers can supply an xlsx whose xl/workbook.xml definedName range…
-
Medium 6.9
ExcelJS through 4.4.0 contains a regular expression denial of service vulnerability in slideFormula in lib/utils/shared…
-
Medium 4.2
ExcelJS through 4.4.0 Formula Injection via Table Totals Row Column Names
ExcelJS through 4.4.0 contains a formula injection vulnerability in the totals row formula getter in lib/doc/table.js that fails to escape [, ], # and ' characters in structured reference column names. Attackers can supply column names containing ] via untrus…
-
Medium 6.5
Dell SmartFabric OS10 Software, versions prior to 10.6.0.10, contains an Improper Access Control vulnerability. A low p…
-
Medium 4.3
Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileg…
-
Medium 5.4
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains unauthorized access vulnerability. A low privileged a…
-
Medium 6.4
Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File vu…
-
Medium 4.3
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information vulnerab…
-
Medium 4.3
Dell PowerScale InsightIQ, Version 6.4.0, contain an Insufficient Verification of Data Authenticity vulnerability. A lo…
-
Medium 5.4
Quay: quay: reflected xss via image_id in v1 registry error responses
A flaw was found in Red Hat Quay. The v1 registry API error handler reflects the attacker-supplied image_id path segment in a response served as text/html, allowing a reflected cross-site scripting (XSS) attack. By tricking a user into visiting a specially cr…
-
Medium 5.4
Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains Unauthorized access vulnerability. A low privileged a…
-
Medium 6.3
Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File v…
-
Medium 5.4
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileg…
-
Medium 6.4
Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File vu…
-
Medium 5.4
Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Improper Verification of Cryptographic Signature v…
-
Medium 4.3
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File v…
-
Medium 5.4
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability. A low privile…
-
Medium 6.4
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File v…
-
Medium 5.4
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileg…
-
Medium 4.3
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File v…
-
Medium 4.3
Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File v…
-
Medium 6.9
Memory overflow in Application Firewall data decompression/inspection can lead to unpredictable or erroneous behavior o…
-
Medium 6.9
Sensitive authentication material written to a log file in Citrix NetScaler ADC and Citrix NetScaler Gateway.
-
Medium 6.9
Improper request handling can lead to a denial-of-service / reboot-loop condition in Citrix NetScaler ADC and Citrix Ne…
-
Medium 6.9
Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Ci…
-
Medium 5.1
Edito CMS is vulnerable to Stored XSS in avatar upload functionality. Authenticated attacker can inject arbitrary HTML …
-
Medium 5.1
Edito CMS is vulnerable to Stored XSS via content parameter in Tiny editor functionality. Authenticated attacker can in…
-
Medium 5.1
Edito CMS is vulnerable to Stored Cross-Site Scripting (XSS). Due to improper input validation, an authenticated attack…
-
Medium 5.1
The MISP Modules website component contains an open redirect vulnerability in its login endpoint. The /login route acce…
-
Medium 5.3
Kroxylicious-authorizer-acl: kroxylicious: acl rule file regex escapes are stripped, broadening 'matching' authorization rules
A flaw was found in Kroxylicious. The ACL authorizer's rules-file parser unquotes `matching /…/` regular-expression literals using the string unquoting rules, which strips every backslash escape. As a result, an allow rule such as `matching /orders\.v1/` is c…
-
Medium 5.3
Mine CloudVod < 2.6.7 - Unauthenticated Paid Lesson Content Disclosure
The Mine CloudVod WordPress plugin before 2.6.7 does not check whether the requester is enrolled in a course, or authorised at all, before returning the course's full curriculum together with the raw content of every published lesson, allowing unauthenticated…
-
Medium 4.3
Essential Real Estate 5.3.5 - Customer+ Email Relay Allowlist Poisoning
The Essential Real Estate WordPress plugin before 5.3.6 does not verify that the recipients it allows for its contact email action are legitimate, allowing users with the self-registered Customer role to add any address to that allowlist so that unauthenticat…
-
Medium 4.3
WP Remote Users Sync < 2.2.1 - Subscriber+ Activity Log Deletion
The WP Remote Users Sync WordPress plugin before 2.2.1 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete the WP Remote Users Sync WordPress plugin before 2.2.1's entire act…
-
Medium 5.3
AppPresser < 5.0.0 - Unauthenticated Plugin and Theme Version Disclosure
The AppPresser WordPress plugin before 5.0.0 does not restrict access to two of its REST API endpoints, allowing unauthenticated visitors to retrieve the installed versions of AppPresser, its add-ons, several third-party AppPresser WordPress plugin before 5.0…
-
Medium 4.5
Contact Form 7 < 6.2.5 - Editor+ Sensitive User Data Disclosure via Form Default Values
The Contact Form 7 WordPress plugin before 6.2.5 does not restrict which user properties a form field's default value can be populated from, allowing users with the Editor role and above to obtain the password hash and sensitive user meta (such as two-factor …