Search: 7.3.1.1

Scribus versions prior to 1.6.7 contain an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin. This flaw occurs when decoding planar pixel data from crafted PICT files with manipulated dimensions, potentially causing heap over-reads. Exploitation can lead to application crashes or disclosure of heap memory contents.

Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.

Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions.

In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates

Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of service vulnerability caused by unbounded nesting depth when parsing SOAP/XML and JSON request bodies before authentication. Attackers can send a single deeply nested request to WebMail, WebAdmin, or WebMail Proxy listeners to exhaust the stack and crash SMTP, IMAP, POP3, and web services repeatedly.

Axigen Mail Server WebMail versions before 10.6.39 and 10.7.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows unauthenticated remote attackers to inject malicious scripts via unescaped sender display names in the conversation view. Exploitation occurs when a recipient opens a folder containing a crafted email, potentially leading to mailbox content theft or redirection. The vulnerability is fixed in versions 10.6.39 and 10.7.1.

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convert_palette_images_to_truecolor() function. This is due to insufficient file type validation before processing uploaded files. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.

The FV Flowplayer Video Player WordPress plugin up to version 7.5.55.7212 contains a stored cross-site scripting (XSS) vulnerability. Authenticated users with subscriber-level access or higher can inject malicious scripts via the 'fv_player_videos[_fv_player_user_video][]' parameter if the administrator has enabled the profile video upload feature. These scripts execute when any user accesses the affected pages, potentially compromising user interactions.

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.9.2.7 via the process. This makes it possible for unauthenticated attackers to extract sensitive data including the WordPress password hash of any user by injecting a {get_user} template tag that is resolved and written as a publicly readable term name. Exploitation requires that an administrator has configured a public [acfe_form] shortcode page with a Term action using a save.name field mapping — a supported and documented configuration.

Bazarr versions prior to 1.5.7-beta.14 contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities in the Plex API namespace due to missing authentication and incomplete OAuth state validation. These flaws allow anonymous attackers to manipulate API keys, clear credentials, bind attacker-controlled Plex accounts, and perform configuration changes without authorization. The vulnerabilities enable persistent configuration tampering, denial of service of the Plex integration, and potential server-side request forgery with credential exposure. Version 1.5.7-beta.14 addresses the anonymous API mutation by adding authentication, although some OAuth state validation issues remain.

Multiple critical vulnerabilities have been identified and fixed in Red Hat Identity Management (IdM), also known as FreeIPA. These include unauthenticated denial-of-service, privilege escalation, cross-site scripting allowing arbitrary code execution, unauthorized LDAP writes, and unauthorized credential access. The vulnerabilities affect Red Hat Enterprise Linux Server Extended Lifecycle Support 7 and related architectures. Red Hat has released security updates addressing these issues.

CVE-2026-104623 is an authentication bypass vulnerability in SUSE Rancher Manager versions 2.11.0 up to 2.11.19, 2.12.0 up to 2.12.15, 2.13.0 up to 2.13.11, 2.14.0 up to 2.14.7, and 2.15.0 up to 2.15.3. The flaw exists in the authorization handling of the local management cluster shell feature, where some API routes bypass the intended access checks. This allows any authenticated user to run a pod on the management cluster without proper authorization. The vulnerability has a medium severity with a CVSS score of 6.3. Fixed versions are available for all affected release lines.

HuLa-Server versions through 3.0.7 have an insecure direct object reference (IDOR) vulnerability in the PrivacyController. Authenticated users can exploit this flaw by supplying another user's uid in GET or POST requests to the /privacy endpoint, allowing them to read and overwrite that user's privacy settings without proper ownership verification.

HuLa-Server versions up to 3.0.7 have an insecure direct object reference (IDOR) vulnerability in the FriendController.friendList endpoint. Authenticated users can exploit this flaw by supplying a uid parameter in GET requests to /user/friend/page, allowing them to view other users' friend lists without proper authorization checks. This vulnerability exposes user contact lists to unauthorized access.

HuLa-Server versions through 3.0.7 have an insecure direct object reference (IDOR) vulnerability in the FeedController.delFeed function. Authenticated users can exploit this flaw by sending POST requests with arbitrary feedId values to delete other users' moments, including associated media, comments, and likes. This vulnerability allows unauthorized deletion of content without proper access control checks.

A missing authorization vulnerability exists in Crocoblock JetFormBuilder (jetformbuilder) up to version 3.6.7.1. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification of data or functionality. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact primarily on integrity without affecting confidentiality or availability. No public exploits or known active exploitation have been reported. No patch or remediation information is currently available.

AFFLIB versions through 3.7.22 have a heap out-of-bounds write vulnerability in the af_get_page() function. This flaw occurs when attackers supply crafted AFF images with mismatched page and sector sizes, specifically setting a page size larger than and not a multiple of the sector size. This causes a sector zero-fill loop to write beyond the allocated buffer, potentially crashing forensic tools that use AFFLIB.

Dell OpenManage Enterprise versions prior to 4.8.0 contain a vulnerability involving the use of a hard-coded cryptographic key. This flaw allows a low privileged attacker with local access to potentially disclose sensitive information. The vulnerability is identified as CVE-2026-91912 and has a high severity rating with a CVSS score of 7.3.

Traefik versions from 3.2.0 up to but not including 3.7.15 contain a data race vulnerability in the experimental FastProxy feature. This flaw allows unauthenticated attackers to crash the Traefik process by exploiting HTTP/1 protocol upgrades, such as repeatedly opening and aborting upgraded connections like WebSocket. The attack corrupts an unsynchronized shared bufio.Reader, causing an unrecovered panic that terminates the service.

Traefik versions 3.7.11 through 3.7.14 contain an authorization bypass vulnerability in the Kubernetes Ingress NGINX provider. This flaw allows users with permission to create Ingress resources to bypass cross-namespace checks on the auth-tls-secret annotation when a cached client TLS authentication option is reused. Exploiting this, an attacker can reference a CA secret from another namespace already used by a different Ingress, enforcing it on their own routes and determining its existence without accessing the secret's contents.