91434 matches found
CVE-2026-66459: Missing Authorization
Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...
CVE-2026-66444: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
CVE-2026-61962: Improper Control of Generation of Code
Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...
CVE-2026-16859: Out-of-bounds Read
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...
CVE-2026-28155: Authorization Bypass Through User-Controlled Key
Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...
CVE-2026-17223: Out-of-bounds Write
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow...
CVE-2026-17212: Out-of-bounds Read
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
CVE-2026-55986: Improper Access Control
Email Management API Bypasses ManageCredentials Feature Restrictions...
CVE-2026-59765: Server-Side Request Forgery (SSRF)
SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata...
CVE-2026-33818: Uncontrolled Resource Consumption
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CVE-2026-66463: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...
CVE-2026-23603: Server-Side Request Forgery (SSRF)
Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim...
CVE-2026-66443: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...
CVE-2026-56654: Improper Access Control
Privilege Escalation via Access Token Scope Escalation in API...
CVE-2026-73344: Improper Neutralization of Input During Web Page Generation
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-66468: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...
CVE-2026-61965: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in GeekyBot = 1.2.6 versions...
CVE-2026-27538: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...