91341 matches found
CVE-2026-78269: Server-Side Request Forgery (SSRF)
Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...
CVE-2026-78266: Missing Authorization
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...
CVE-2026-75464: Files or Directories Accessible to External Parties
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...
CVE-2026-63693: Creation of Temporary File in Directory with Insecure Permissions
Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...
CVE-2026-66648: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...
CVE-2026-66599: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...
CVE-2026-66585: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...
CVE-2026-66584: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...
CVE-2026-32477: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...
CVE-2026-32471: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
CVE-2026-28190: Missing Authorization
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-28165: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Digits = 9.2 versions...
CVE-2026-28151: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Tonda 2.6 versions...
CVE-2026-59295: Undefined Security Weakness
It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service DoS condition due to an unbounded memory leak. Micrometer 1.17.0 Micrometer 1.16.0 - 1.16.6 Micrometer 1.15.0 - 1.15.12 Micrometer 1.14.0 - 1.14.16 Micrometer 1.9.18 and earlier...
CVE-2026-78317: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78315: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78314: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78212: Relative Path Traversal
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files...