Skip to content

Menu
  • Home
Menu

CVE-2026-27458 – LinkAce: Stored XSS in Atom Feed via CDATA Escape in List Description

Posted on February 21, 2026

CVE ID : CVE-2026-27458 Published : Feb. 21, 2026, 7:16 a.m. | 1 hour, 28 minutes ago Description : LinkAce is a self-hosted archive to collect website links. Versions 2.4.2 and below have a…

CVE-2026-27452 – ASN.1 TypeScript Library: Decoding an INTEGER could leak the underlying ArrayBuffer

Posted on February 21, 2026

CVE ID : CVE-2026-27452 Published : Feb. 21, 2026, 7:16 a.m. | 1 hour, 28 minutes ago Description : ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules…

CVE-2026-27206 – Zumba Json Serializer has a potential PHP Object Injection via Unrestricted @type in unserialize()

Posted on February 21, 2026

CVE ID : CVE-2026-27206 Published : Feb. 21, 2026, 7:16 a.m. | 1 hour, 28 minutes ago Description : Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions…

CVE-2026-27212 – Swiper has a Prototype Pollution Vulnerability

Posted on February 21, 2026

CVE ID : CVE-2026-27212 Published : Feb. 21, 2026, 6:17 a.m. | 27 minutes ago Description : Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. Versions…

CVE-2026-27211 – Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse

Posted on February 21, 2026

CVE ID : CVE-2026-27211 Published : Feb. 21, 2026, 6:17 a.m. | 27 minutes ago Description : Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. Versions 34.0 through 50.0 arevulnerable to…

CVE-2026-27198 – Formwork Improperly Manages Privileges During User Creation

Posted on February 21, 2026

CVE ID : CVE-2026-27198 Published : Feb. 21, 2026, 6:17 a.m. | 27 minutes ago Description : Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application…

CVE-2026-27197 – Sentry: Improper Authentication on SAML SSO process allows user identity linking

Posted on February 21, 2026

CVE ID : CVE-2026-27197 Published : Feb. 21, 2026, 5:17 a.m. | 1 hour, 27 minutes ago Description : Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have…

CVE-2026-27196 – Statamic affected by privilege escalation via stored Cross-site Scripting

Posted on February 21, 2026

CVE ID : CVE-2026-27196 Published : Feb. 21, 2026, 5:17 a.m. | 1 hour, 27 minutes ago Description : Statmatic is a Laravel and Git powered content management system (CMS). Versions 5.73.8 and below…

CVE-2026-27203 – eBay API MCP Server Affected by Environment Variable Injection

Posted on February 21, 2026

CVE ID : CVE-2026-27203 Published : Feb. 21, 2026, 12:16 a.m. | 1 hour, 46 minutes ago Description : eBay API MCP Server is an open source local MCP server providing AI assistants with…

CVE-2026-27202 – GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability

Posted on February 21, 2026

CVE ID : CVE-2026-27202 Published : Feb. 21, 2026, 12:16 a.m. | 1 hour, 46 minutes ago Description : GetSimple CMS is a content management system. All versions of GetSimple CMS have a flaw…

Posts pagination

Previous 1 … 46 47 48 … 75 Next

Site map

  • About Us
  • Privacy Policy
  • Terms & Conditions of Use
©2026 | Design: Newspaperly WordPress Theme