92122 matches found
CVE-2026-65483: Improper Neutralization of Input During Web Page Generation
Author Cross Site Scripting XSS in HashThemes Demo Importer = 1.4.2 versions...
CVE-2026-65528: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...
CVE-2026-10697: Improper Authentication
Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3...
CVE-2026-65450: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-57717: Missing Authorization
Unauthenticated Broken Access Control in Knit Pay = 9.6.0.0 versions...
CVE-2026-65453: Missing Authorization
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
CVE-2026-65491: Missing Authorization
Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...
CVE-2026-52688: Improper Certificate Validation
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
CVE-2026-57696: Improper Limitation of a Pathname to a Restricted Directory
Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...
CVE-2026-57784: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in Ninja Forms File Uploads Extension = 3.3.26 versions...
CVE-2026-27418: Missing Authorization
Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...
CVE-2026-64815: Improper Control of Generation of Code
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files...
CVE-2026-15630: Improper Privilege Management
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization based on ?id= and action based on request body...
CVE-2026-15968: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3...
CVE-2026-57374: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...
CVE-2026-57373: Improper Neutralization of Input During Web Page Generation
Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...
CVE-2026-65503: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-61954: Missing Authorization
Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...