92118 matches found
CVE-2026-59556: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...
CVE-2026-56537: Generation of Error Message Containing Sensitive Information
HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...
CVE-2026-66442: Missing Authorization
Subscriber Broken Access Control in YayPricing = 3.5.6 versions...
Wapiti Web Application Vulnerability Scanner 3.3.1
Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...
CVE-2026-65616: Improper Verification of Cryptographic Signature
Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token...
CVE-2026-59537: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce = 2.10.22 versions...
Linux Distros Unpatched Vulnerability : CVE-2026-13058
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomple...
Linux Distros Unpatched Vulnerability : CVE-2026-64230
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irqdata.rdev not being assigned Commit 64a6b577490c regulator:...
CVE-2026-65568: Missing Authorization
Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...
CVE-2026-64703: Use After Free
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service...
CVE-2026-59549: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
CVE-2026-59527: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-63077: Deserialization of Untrusted Data
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...
CVE-2026-66477: Missing Authorization
Unauthenticated Broken Access Control in Gillion = 4.13 versions...
CVE-2026-59560: Missing Authorization
Subscriber Broken Access Control in FundEngine = 1.7.8 versions...
CVE-2026-59529: Missing Authorization
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
CVE-2026-65567: Missing Authorization
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
Erlang/OTP -- megaco flex scanner buffer overflow
https://github.com/erlang/otp/security/advisories/GHSA-7xgh-gmgf-q2g7 reports: A remote unauthenticated attacker can crash Erlang nodes running the megaco text codec with the flex scanner option by sending an H.248/Megaco message with a property parm name exceeding 452 bytes. The overflow occurs ...