91452 matches found
CVE-2026-28185: Insufficient Verification of Data Authenticity
Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...
CVE-2026-66661: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...
CVE-2026-66658: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-73353: Missing Authorization
Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce 4.22.10 versions...
CVE-2026-73346: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...
CVE-2026-66700: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Smart Online Order for Clover = 1.6.1 versions...
CVE-2026-66687: Improper Neutralization of Input During Web Page Generation
Customer Cross Site Scripting XSS in WpBookingly = 1.3.2 versions...
CVE-2026-54481: Improper Certificate Validation
Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override CWE-295...
CVE-2026-56755: Improper Access Control
Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload...
CVE-2026-58434: Exposure of Sensitive Information to an Unauthorized Actor
Private Repository Metadata Remains Accessible After Access Revocation...
CVE-2026-66460: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...
CVE-2026-61974: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...
CVE-2026-66472: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Everest Backup = 2.3.12 versions...
CVE-2026-66656: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...
CVE-2026-28189: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.4 versions...
CVE-2026-58444: Incorrect Authorization
Personal access token scope enforcement bypass on the repository home page GET /owner/repo discloses private repository contents...
CVE-2026-55984: Improper Access Control
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
CVE-2026-16722: Improper Privilege Management
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized privileges due to improper privilege management...