https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-41256.htmlhttps://patchthecve.com/cve/CVE-2021-41256.htmlWed, 17 Jun 2026 04:08:11 +0000MEDIUM 5.8: nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back, unintentionally givhttps://patchthecve.com/cve/CVE-2019-12724.htmlhttps://patchthecve.com/cve/CVE-2019-12724.htmlWed, 17 Jun 2026 02:15:19 +0000MEDIUM 6.1: An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI. It allows a stored XSS attack via the $_POST['name'] parameter.https://patchthecve.com/cve/CVE-2017-15982.htmlhttps://patchthecve.com/cve/CVE-2017-15982.htmlWed, 17 Jun 2026 01:08:35 +0000CRITICAL 9.8: Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.https://patchthecve.com/cve/CVE-2014-6290.htmlhttps://patchthecve.com/cve/CVE-2014-6290.htmlWed, 17 Jun 2026 00:12:51 +0000HIGH 7.5: The News (tt_news) extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impact via vectors related to an "insecure unserialize" issue.https://patchthecve.com/cve/CVE-2013-4748.htmlhttps://patchthecve.com/cve/CVE-2013-4748.htmlTue, 16 Jun 2026 23:57:50 +0000HIGH 7.5: SQL injection vulnerability in the News system (news) extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.https://patchthecve.com/cve/CVE-2011-3851.htmlhttps://patchthecve.com/cve/CVE-2011-3851.htmlTue, 16 Jun 2026 23:34:02 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the News theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.