CVE ID :CVE-2026-32929 Published : April 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may…
CVE-2026-32928 – SFT VS Stack-Based Buffer Overflow
CVE ID :CVE-2026-32928 Published : April 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file…
CVE-2026-32927 – Symantec V-SFT Out-of-Bounds Read Information Disclosure
CVE ID :CVE-2026-32927 Published : April 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file…
CVE-2026-32926 – Symantec File Transfer (SFT) Out-of-Bounds Read Information Disclosure
CVE ID :CVE-2026-32926 Published : April 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Opening a crafted V7 file…
CVE-2026-5214 – D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow
CVE ID :CVE-2026-5214 Published : March 31, 2026, 10:16 p.m. | 2 hours, 20 minutes ago Description :A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326,…
CVE-2026-34605 – SiYuan: Reflected XSS via SVG namespace prefix bypass in SanitizeSVG ( getDynamicIcon, unauthenticated )
CVE ID :CVE-2026-34605 Published : March 31, 2026, 10:16 p.m. | 2 hours, 20 minutes ago Description :SiYuan is a personal knowledge management system. From version 3.6.0 to before version 3.6.2, the SanitizeSVG function…
CVE-2026-34585 – SiYuan: Stored XSS in imported .sy.zip content leads to arbitrary command execution
CVE ID :CVE-2026-34585 Published : March 31, 2026, 10:16 p.m. | 2 hours, 20 minutes ago Description :SiYuan is a personal knowledge management system. Prior to version 3.6.2, a vulnerability allows crafted block attribute…
CVE-2026-34449 – SiYuan: Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injection
CVE ID :CVE-2026-34449 Published : March 31, 2026, 10:16 p.m. | 2 hours, 20 minutes ago Description :SiYuan is a personal knowledge management system. Prior to version 3.6.2, a malicious website can achieve Remote…
CVE-2026-34448 – SiYuan: Stored XSS in Attribute View gallery/kanban cover rendering allows arbitrary command execution in the desktop client
CVE ID :CVE-2026-34448 Published : March 31, 2026, 10:16 p.m. | 2 hours, 20 minutes ago Description :SiYuan is a personal knowledge management system. Prior to version 3.6.2, an attacker who can place a…
CVE-2026-5156 – Tenda CH22 Parameter QuickIndex formQuickIndex stack-based overflow
CVE ID :CVE-2026-5156 Published : March 31, 2026, 12:16 a.m. | 20 minutes ago Description :A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of…