Export limit exceeded: 398280 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 398280 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (398280 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-96609 | 1 Robur | 1 Albatross | 2026-09-24 | N/A |
| Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fill the ring buffer (1024 lines). It is not exploitable by unauthorized clients. | ||||
| CVE-2026-73858 | 1 Solspace | 1 Freeform | 2026-09-24 | 5.3 Medium |
| Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted values from public Freeform forms can be evaluated by the isolated Twig renderer when rendered into HTML attributes. An unauthenticated attacker can place Twig expressions in submitted field values, including value attributes, and receive evaluated PHP, operating-system, or Craft filesystem-path constants in the form response. The isolated context was not shown to expose Craft globals, environment variables, credentials, arbitrary files, or code execution, so the confirmed impact is limited server and environment information disclosure and possible rendering errors. This issue is fixed in version 5.10.14. | ||||
| CVE-2026-96599 | 1 Isotope | 1 Isotope-core | 2026-09-24 | 5.9 Medium |
| Isotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographically secure source, allowing unauthenticated attackers to guess identifiers. Guest orders lack ownership verification, enabling attackers to access order details including billing address, customer information, and purchased files by supplying a guessed uid parameter. | ||||
| CVE-2026-96600 | 1 Isotope | 1 Isotope-core | 2026-09-24 | 5.5 Medium |
| Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers and administrator-supplied values directly into SQL statements. Authenticated Contao backend users with Isotope module permissions can exploit conditional and time-based injection payloads to extract arbitrary database contents including user password hashes from the tl_user table. | ||||
| CVE-2026-96276 | 2 Flatpak, Redhat | 2 Flatpak, Enterprise Linux | 2026-09-24 | 9.8 Critical |
| If a malicious SDK container declares an extension point with a crafted `directory` path, and a developer runs `flatpak build-init --writable-sdk --sdk-extension` with that SDK, attacker-chosen files could be written outside the working directory, since the target path is resolved via a function that allows `..` traversal. | ||||
| CVE-2026-88840 | 2 Busybox, Redhat | 3 Busybox, Hardened Images, Hummingbird | 2026-09-24 | 5.3 Medium |
| BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message. | ||||
| CVE-2026-93529 | 2 Bilal Naseer, Wordpress | 2 Wsp Mcp – Ai Agents Connector, Wordpress | 2026-09-24 | 6.5 Medium |
| Contributor Broken Access Control in WSP MCP – AI Agents Connector <= 2.7.0 versions. | ||||
| CVE-2026-93622 | 2 Nicolaskulka, Wordpress | 2 Wps Limit Login, Wordpress | 2026-09-24 | 7.1 High |
| Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions. | ||||
| CVE-2026-94118 | 2 Leap13, Wordpress | 2 Premium Blocks – Gutenberg Blocks For Wordpress, Wordpress | 2026-09-24 | 6.5 Medium |
| Contributor Cross Site Scripting (XSS) in Premium Blocks – Gutenberg Blocks for WordPress <= 2.3.17 versions. | ||||
| CVE-2026-94174 | 2 Webfactory, Wordpress | 2 Email Log, Wordpress | 2026-09-24 | 7.6 High |
| Administrator SQL Injection in Email Log <= 2.63 versions. | ||||
| CVE-2026-94457 | 2 Webfactory, Wordpress | 2 Captcha Code, Wordpress | 2026-09-24 | 4.8 Medium |
| Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions. | ||||
| CVE-2026-94500 | 2 Roxnor, Wordpress | 2 Elementskit Elementor Addons Lite, Wordpress | 2026-09-24 | 6.5 Medium |
| Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions. | ||||
| CVE-2026-95593 | 2 Ben Roberts, Wordpress | 2 Ultimeter, Wordpress | 2026-09-24 | 7.6 High |
| Editor SQL Injection in Ultimeter <= 3.0.8 versions. | ||||
| CVE-2026-95603 | 2 Victor Rodriguez, Wordpress | 2 Reycob Product Import Export, Wordpress | 2026-09-24 | 7.2 High |
| Shop manager PHP Object Injection in Reycob Product Import Export <= 2.3.0 versions. | ||||
| CVE-2026-96545 | 2 Gimp, Redhat | 2 Gimp, Enterprise Linux | 2026-09-24 | 4.4 Medium |
| An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the file-tim plug-in allocates an undersized row buffer but processes it using the larger RGBA row size. This can copy adjacent heap contents into the decoded image and may crash the plug-in. | ||||
| CVE-2026-61814 | 2 Org.typelevel, Typelevel | 4 Jawn-parser 2.12, Jawn-parser 2.13, Jawn-parser 3 and 1 more | 2026-09-24 | 7.5 High |
| Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many small chunks because each absorb call rescans the incomplete token from the start. A remote attacker who controls untrusted JSON input and its chunk sizes can exhaust CPU resources and cause denial of service in applications using AsyncParser. This issue is fixed in version 1.7.0. | ||||
| CVE-2026-96872 | 1 Wikimedia | 1 Mediawiki-wikilambda Extension | 2026-09-24 | N/A |
| Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0. | ||||
| CVE-2026-94181 | 1 The Browser Company Of New York | 1 Arc | 2026-09-24 | 7.4 High |
| An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a <select> element that triggers requestFullscreen without displaying the fullscreen notification. | ||||
| CVE-2026-96770 | 1 Temporal Technologies, Inc. | 1 S2s-proxy | 2026-09-24 | N/A |
| All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private key but does not verify the certificate against the configured CA. An attacker can therefore use a self-signed certificate and key to establish a TLS and yamux connection, then invoke RPCs allowed by the proxy's configuration and Temporal credentials. No certificate or private key trusted by the deployment, and no Temporal credential, is required. | ||||
| CVE-2026-87900 | 1 Webpros | 1 Wp Toolkit For Cpanel | 2026-09-24 | N/A |
| Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts. | ||||