92235 matches found
CVE-2026-9260: Use of Hard-coded Cryptographic Key
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier...
CVE-2026-39574: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in InPost Gallery = 2.1.4.6 versions...
CVE-2026-11890: Undefined Security Weakness
Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results...
CVE-2026-52715: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in GEO my WordPress = 4.5.5 versions...
CVE-2026-54198: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.35 versions...
FreeType Scanner for Structural Anomaly Detection
This Python utility implements a heuristic analysis framework for inspecting TrueType glyph metadata and identifying structurally unusual or potentially problematic glyph configurations...
CVE-2026-52703: Path Traversal: '.../...//'
Unauthenticated Path Traversal in FastDup = 2.7.2 versions...
CVE-2026-52700: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in WCMultiShipping = 3.0.2 versions...
CVE-2026-52699: Authorization Bypass Through User-Controlled Key
Unauthenticated Insecure Direct Object References IDOR in VikRentCar = 1.4.5 versions...
CVE-2026-52695: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout = 1.8.2 versions...
CVE-2026-52694: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce = 2.0 versions...
CVE-2026-52693: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in eCommerce Product Catalog = 3.5.5 versions...
CVE-2026-52692: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Affiliates Manager = 2.9.50 versions...
CVE-2026-49780: Incorrect Privilege Assignment
Customer Privilege Escalation in Dokan = 5.0.2 versions...
CVE-2026-49776: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites = 2.32.6 versions...
CVE-2026-49775: Missing Authorization
Unauthenticated Broken Access Control in Welcart e-Commerce = 2.11.28 versions...
CVE-2026-49768: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Happyforms = 1.26.13 versions...
CVE-2026-49763: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot = 1.3.7 versions...