CVE ID :CVE-2026-77027 Published : Aug. 22, 2026, 3:16 p.m. | 3 hours, 29 minutes ago Description :Joomla Extension – fabrikar.com – Unauthenticated stored XSS in Fabrik < 4.7.2 – The handling of user supplied input in the jsactions feature leads to…
CVE ID :CVE-2026-77992 Published : Aug. 22, 2026, 3:16 p.m. | 3 hours, 29 minutes ago Description :Joomla Extension – fabrikar.com – heredoc terminator breakout in the calc element in Fabrik < 4.7.2 – The onUpdateComment endpoint did not perform any access…
CVE ID :CVE-2026-76606 Published : Aug. 22, 2026, 3:16 p.m. | 3 hours, 29 minutes ago Description :Joomla Extension – fabrikar.com – Path Traversal via image element in Fabrik < 4.7.3 – ???. Severity: 10.0 | CRITICAL Visit the link for more…
CVE ID :CVE-2026-76607 Published : Aug. 22, 2026, 3:16 p.m. | 3 hours, 29 minutes ago Description :Joomla Extension – fabrikar.com – Missing ACL check in download element in Fabrik < 4.7.3 – ???. Severity: 10.0 | CRITICAL Visit the link for…
CVE ID :CVE-2026-77810 Published : Aug. 21, 2026, 8:16 p.m. | 29 minutes ago Description :In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for…
CVE ID :CVE-2026-76876 Published : Aug. 21, 2026, 8:16 p.m. | 29 minutes ago Description :Craftplan before 0.5.1 contains a broken access control vulnerability that allows unauthenticated attackers to read sensitive credentials by exploiting an unconditional authorization policy on the Settings…
CVE ID :CVE-2026-74252 Published : Aug. 21, 2026, 8:16 p.m. | 29 minutes ago Description :Joomla Extension – j2commerce.com – Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 – J2Commerce 4.1.5 is vulnerable to Stored Cross-Site Scripting (XSS) through…
CVE ID :CVE-2026-67359 Published : Aug. 21, 2026, 8:16 p.m. | 29 minutes ago Description :Joomla Extension – j2commerce.com – Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 – An unauthenticated visitor could supply any order_id as a query parameter to render…
CVE ID :CVE-2026-50288 Published : Aug. 21, 2026, 8:16 p.m. | 29 minutes ago Description :SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when `new URL()` throws a parse error, the `assertSecureUrl` function returned without throwing, silently…
CVE ID :CVE-2026-77234 Published : Aug. 21, 2026, 6:16 p.m. | 28 minutes ago Description :Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue,…