NVD CVEs — 本日公開 (5 件)
CVE-2025-11729 4.3 MEDIUM
The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the can_access function in all versions up to, and including, 1.9.15. This makes it possible for authenticated attackers, with Con
CVE-2026-75976 9.9 CRITICAL
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been mad
CVE-2026-75978 6.3 MEDIUM
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues.
CVE-2026-75979 6.3 MEDIUM
A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected is the function execSqlText/previewSqlText of the file DesignerController.java of the component SQL Preview Endpoint. The manipulation of the argument sqlText results in improper neutralization of special elements us
CVE-2026-75984 7.4 HIGH
A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admin.cgi. The manipulation of the argument Hostname results in command injection. The attack can be launched remotely. The exploit is now public and may be used.
GitHub Security Advisories — 本日公開 (13 件)
GHSA-vf63-rhmj-wrvg
LOW
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The...
GHSA-h8w7-jqg9-6hfv
HIGH
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy...
GHSA-4v9h-c8v9-crhp
MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
GHSA-9ppj-ppgq-52c9
MEDIUM
The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is...
GHSA-9cx2-qw86-5677
MEDIUM
Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly...
GHSA-f2x7-mvmx-mxhc
MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
GHSA-rpmr-654g-p9gh
MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
GHSA-g9fq-59hq-pppw
HIGH
Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar...
GHSA-vxxr-hxj5-58vp
HIGH
This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE...
GHSA-88w8-m3v4-74h6
CRITICAL
This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration...