Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
11 results
Oct 15, 2026OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crCVE-2026-111130 · Other software · OpenSlide · reported by VulnCheckMedium 6.9
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts, crashing applications that open it and corrupting tile geometry.
- Product
- openslide
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2026OpenSlide is a C library for reading whole slide image files.CVE-2026-54604 · Other software · openslide · reported by GitHubMedium 5.3
OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and _openslide_tiff_read_tile() to request a full-height destination for a partial bottom tile row, allowing uninitialized heap memory to enter pixel data returned by openslide_read_region(). A crafted but valid slide can trigger the issue in TIFF-based formats other than Hamamatsu NDPI when a network service renders attacker-provided slides. Successful extraction depends on pixel transparency handling and recompression, OpenSlide with libtiff 4.7.0 or earlier is not affected, and official binary builds 4.0.0.10 and 4.0.0.11 are affected. This issue is fixed in OpenSlide 4.0.1 and official binary build 4.0.0.12.
- Product
- openslide
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2026OpenSlide is a C library for reading whole slide image files.CVE-2026-48977 · Other software · openslide · reported by GitHubHigh 7.7
OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memory offsets and allow arbitrary values to be written at those offsets, affecting all supported platforms and configurations and resulting in a crash or potential arbitrary code execution. This issue is fixed in version 4.0.1.
- Product
- openslide
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 4, 2026OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly.CVE-2026-25519 · Other software · OpenSlides · reported by GitHubHigh 8.1
OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single sign on with SAML via an external IDP. For users synced to OpenSlides via an external IDP, there is an incorrect access control regarding the local login of these users. Users can successfully login using the local login form and the OpenSlides username of a SAML user and a trivial password. This password is valid for all SAML users. This issue has been patched in version 4.2.29.
- Product
- OpenSlides
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 21, 2025An issue was discovered in OpenSlides before 4.2.5.CVE-2025-30345 · Other software · Intevation · reported by MITRELow 3.5
An issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chat_group.create action, the user is able to specify the name of the chat. Some HTML elements such as SCRIPT are filtered, whereas others are not. In most cases, HTML entities are encoded properly, but not when deleting chats or deleting messages in these chats. This potentially allows attackers to interfere with the layout of the rendered website, but it is unlikely that victims would click on deleted chats or deleted messages.
- Product
- OpenSlides
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 21, 2025An issue was discovered in OpenSlides before 4.2.5.CVE-2025-30344 · Other software · Intevation · reported by MITREMedium 5.3
An issue was discovered in OpenSlides before 4.2.5. During login at the /system/auth/login/ endpoint, the system's response times differ depending on whether a user exists in the system. The timing discrepancy stems from the omitted hashing of the password (e.g., more than 100 milliseconds).
- Product
- OpenSlides
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 21, 2025A directory traversal issue was discovered in OpenSlides before 4.2.5.CVE-2025-30343 · Other software · Intevation · reported by MITRELow 3
A directory traversal issue was discovered in OpenSlides before 4.2.5. Files can be uploaded to OpenSlides meetings and organized in folders. The interface allows users to download a ZIP archive that contains all files in a folder and its subfolders. If an attacker specifies the title of a file or folder as a relative or absolute path (e.g., ../../../etc/passwd), the ZIP archive generated for download converts that title into a path. Depending on the extraction tool used by the user, this might overwrite files locally outside of the chosen directory.
- Product
- OpenSlides
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 21, 2025An XSS issue was discovered in OpenSlides before 4.2.5.CVE-2025-30342 · Other software · Intevation · reported by MITREMedium 5.4
An XSS issue was discovered in OpenSlides before 4.2.5. When submitting descriptions such as Moderator Notes or Agenda Topics, an editor is shown that allows one to format the submitted text. This allows insertion of various HTML elements. When trying to insert a SCRIPT element, it is properly encoded when reflected; however, adding attributes to links is possible, which allows the injection of JavaScript via the onmouseover attribute and others. When a user moves the mouse over such a prepared link, JavaScript is executed in that user's session.
- Product
- OpenSlides
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 25, 2024OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime.CVE-2024-22893 · Other software · openslides · reported by MITREHigh 7.5
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack.
- Product
- openslides
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 25, 2024OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords.CVE-2024-22892 · Other software · Openslides · reported by MITREHigh 7.5
OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords.
- Product
- Openslides
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2020OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies.CVE-2020-26280 · Other software · OpenSlides · reported by GitHubHigh 8.9
OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting (XSS). In the web applications users can enter rich text in various places, e.g. for personal notes or in motions. These fields can be used to store arbitrary JavaScript Code that will be executed when other users read the respective text. An attacker could utilize this vulnerability be used to manipulate votes of other users, hijack the moderators session or simply disturb the meeting. The vulnerability was introduced with 6eae497abeab234418dfbd9d299e831eff86ed45 on 16.04.2020, which is first included in the 3.2 release. It has been patched in version 3.3 ( in commit f3809fc8a97ee305d721662a75f788f9e9d21938, merged in master on 20.11.2020).
- Product
- OpenSlides
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.