92122 matches found
CVE-2026-49035: Heap-based Buffer Overflow
The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...
CVE-2026-21653: Server-Side Request Forgery (SSRF)
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0...
CVE-2026-65538: Improper Neutralization of Input During Web Page Generation
Author Cross Site Scripting XSS in Machete = 5.2 versions...
CVE-2026-65537: Missing Authorization
Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names = 1.3.3 versions...
CVE-2026-65536: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in افزونه حمل و نقل ووکامرس پست پیشتاز و سفارشی، پیک موتوری = 4.4.5 versions...
CVE-2026-65531: Missing Authorization
Unauthenticated Broken Access Control in Qubely = 1.8.14 versions...
CVE-2026-65527: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in LIQUID SPEECH BALLOON = 1.2.5 versions...
CVE-2026-65521: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in WP Social Ninja = 4.3.0 versions...
CVE-2026-64811: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration...
CVE-2026-64809: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter...
CVE-2026-64804: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling...
CVE-2026-64802: Improper Control of Generation of Code
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...
CVE-2026-61972: Missing Authorization
Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions...
CVE-2026-61950: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...
CVE-2026-61943: Missing Authorization
Unauthenticated Broken Access Control in WPDM – Premium Packages = 6.2.0 versions...
CVE-2026-59542: Improper Limitation of a Pathname to a Restricted Directory
Subscriber Arbitrary File Deletion in Kali Forms = 2.4.18 versions...
CVE-2026-59540: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...
CVE-2026-57809: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.34.0 versions...