Lucene search
+L

1557 matches found

Cvelist
Cvelist
•added 2026/08/03 6:00 a.m.•70 views

CVE-2026-16532 Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

0.00457EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/03 6:00 a.m.•23 views

CVE-2026-16532

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

5.7AI score0.00457EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/03 6:00 a.m.•26 views

CVE-2026-16532 Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

5.9AI score0.00457EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/03 6:00 a.m.•23 views

EUVD-2026-52165

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

9.1CVSS5.7AI score0.00457EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/03 6:00 a.m.•82 views

CVE-2026-16532

The Link Library WordPress plugin, in versions before 7.9.3 , is vulnerable to an unauthenticated SQL injection attack. The root cause is the failure to properly sanitize and escape user-supplied values before they are processed in a SQL query, specifically via the Front-End Link Submission Form ...

9.1CVSS5.9AI score0.00457EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•38 views

PT-2026-67111

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

5.7AI score0.00457EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/03 12:00 a.m.•10 views

CVE-2026-16532: Improper Neutralization of Special Elements used in an SQL Command

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

9.1CVSS5.8AI score0.00457EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/30 2:16 p.m.•23 views

CVE-2026-11980 Code execution in IBM Desktop App

IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up...

7.3CVSS6.4AI score0.0017EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/29 8:16 a.m.•26 views

CVE-2026-18197

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

6.4CVSS0.00276EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/29 6:53 a.m.•23 views

EUVD-2026-50165

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

6.4CVSS5.8AI score0.00276EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/29 6:53 a.m.•56 views

CVE-2026-18197

CVE-2026-18197 affects Link Library prior to 7.9.4. The issue is an improper neutralization of input during web page generation, enabling Cross-Site Scripting (XSS). The connected documents do not provide details on exploited components, versions beyond the affected range, specific root causes be...

6.4CVSS5.8AI score0.00276EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/29 6:53 a.m.•20 views

CVE-2026-18197

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

6.4CVSS5.8AI score0.00276EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/29 6:53 a.m.•22 views

CVE-2026-18197

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

6.4CVSS5.8AI score0.00276EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/29 6:53 a.m.•52 views

CVE-2026-18197

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

6.4CVSS0.00276EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•10 views

CVE-2026-18197: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

6.4CVSS5.8AI score0.00276EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•39 views

PT-2026-65716

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

6.4CVSS5.8AI score0.00276EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/24 8:16 a.m.•28 views

CVE-2026-16519

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS0.00173EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/24 7:05 a.m.•58 views

CVE-2026-16519 GeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS0.00173EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/24 7:05 a.m.•21 views

EUVD-2026-48512

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS5.9AI score0.00173EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•39 views

PT-2026-64253

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS5.9AI score0.00173EPSS
SaveExploits0References2
Rows per page
Query Builder