2026

When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotatio

The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper

When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlyi

After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form e

When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object

The application re-enters the document structure via field processing and deletes the current page, and then continues u

When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature

When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to valida

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verifica

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document stat

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete

The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related

When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old fie

The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege use

After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the under

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland b

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland b

When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in t

Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the

The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the

The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a

An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an a

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin through 1.1.28 does not validate data be

The Wp Js Detect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The Eventer plugin for WordPress is vulnerable to time-based SQL Injection via the ‘code’ parameter in all versions up t

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executa

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the

The Bulk Order Update for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and i

The DoLogin Security plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Randomness in all vers

The WHMCS Bridge plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the

The WP Learn Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.

The User Management plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2

The Chatra Live Chat + ChatBot + Cart Saver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin

The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Refle

The Sympl Repeater for ACF and Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ACF repea

The Backstage - Customizer Demo Access plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,

The Eventer plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and includ

The Simple Coherent Form plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path val

The 多说社会化评论框 plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2. The v

The Jssor Slider by jssor.com plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and inclu

The Widget Logic Visual plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive au

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if th

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs betwee