151067 matches found
CVE-2026-84766
Unauthenticated Bypass Vulnerability in FluentBooking Pro = 2.2.1 versions...
CVE-2026-84758
Unauthenticated Broken Access Control in Business Directory = 6.4.26 versions...
CVE-2026-84757
Unauthenticated Settings Change in WP Compress = 7.21.28 versions...
CVE-2026-84753
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84215
Unauthenticated Broken Access Control in Timetics = 1.0.61 versions...
CVE-2026-84755
Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...
CVE-2026-84238
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...
CVE-2026-84754
Unauthenticated Broken Access Control in WPFunnels = 3.12.13 versions...
CVE-2026-81773
Unauthenticated Cross Site Scripting XSS in Ninja Forms File Uploads Extension = 3.3.26 versions...
CVE-2026-81292
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
CVE-2026-81300
Unauthenticated Cross Site Scripting XSS in Calculation For Contact Form 7 = 1.0 versions...
CVE-2026-81295
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
CVE-2026-81776
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-63219
CVE-2026-63219 (CVSS 8.6) is a missing authorization check on the GeoNetwork formatter upload API endpoint, affecting versions prior to 4.4.12 and 4.2.17 . An unauthenticated attacker can upload arbitrary .xsl or .zip files into the server formatter directory, granting unauthorized write access. ...
CVE-2026-63219 Unauthenticated file upload via missing authorization on formatter upload endpoint
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenticated attacker can upload arbitrary .x...
CVE-2026-63219 Unauthenticated file upload via missing authorization on formatter upload endpoint
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenticated attacker can upload arbitrary .x...
Exploit for CVE-2026-75604
CVE-2026-75604 - Next.js path traversal → RCE Windows · rese...
CVE-2026-84968 Heap out-of-bounds read via corrupt nested BSON in field path error message
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended...
CVE-2026-84968
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver can be triggered by an unauthenticated party supplying specially crafted input containing corrupt nested BSON in a field path. This causes a small amount of adjacent process memory to be copied into an error message re...