2026

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndA

A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function

A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipul

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity

HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process

HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table fo

HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authen

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who

The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The cred

The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rul

The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration fi

The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload.

The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the a

The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before w

The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search fil

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive

The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client

The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field

The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authentic

The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configu

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code e

ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vuln

ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a vic

ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-se

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An att

ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerabi

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con

Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in t

Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulner

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-