CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3897 matches found

RedhatCVE•added 2026/03/06 7:54 a.m.•21 views

CVE-2026-28108

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a through ...

7.1CVSS5.8AI score0.00261EPSS

SaveExploits0References1

RedhatCVE•added 2026/03/06 7:53 a.m.•20 views

CVE-2026-28110

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through =...

7.1CVSS5.8AI score0.00261EPSS

SaveExploits0References1

NVD•added 2026/03/05 10:16 p.m.•23 views

CVE-2026-29609

OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the fetchWithGuard function that allocates entire response payloads in memory before enforcing maxBytes limits. Remote attackers can trigger memory exhaustion by serving oversized responses without content-length...

8.7CVSS0.00788EPSS

SaveExploits0References3

Vulnrichment•added 2026/03/05 10:00 p.m.•8 views

CVE-2026-29609 OpenClaw < 2026.2.14 - Denial of Service via Unbounded URL-backed Media Fetch

8.7CVSS7.1AI score0.00788EPSS

SaveExploits0References3

SUSE CVE•added 2026/03/05 6:49 a.m.•19 views

SUSE CVE-2026-29022

drlibs drwav.h version 0.14.4 and earlier fixed in commit 8a7258c contain a heap buffer overflow vulnerability in the drwavreadsmpltometadataobj function of drwav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 a...

7.8CVSS6.7AI score0.00238EPSS

SaveExploits1References3

EUVD•added 2026/03/05 6:30 a.m.•21 views

EUVD-2026-9764

7.1CVSS5.9AI score0.00261EPSS

SaveExploits0References2

NVD•added 2026/03/05 6:16 a.m.•16 views

CVE-2026-28110

7.1CVSS0.00261EPSS

SaveExploits0References1

NVD•added 2026/03/05 6:16 a.m.•33 views

CVE-2026-28108

7.1CVSS0.00261EPSS

SaveExploits0References1

attackerkb•added 2026/03/05 6:00 a.m.•10 views

CVE-2026-2418

The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as any user such as admin by simply knowing the email...

5.9AI score0.00327EPSS

SaveExploits0References1

attackerkb•added 2026/03/05 5:54 a.m.•13 views

CVE-2026-28110

5.8AI score0.00261EPSS

SaveExploits0References2

CVE•added 2026/03/05 5:54 a.m.•39 views

CVE-2026-28110

CVE-2026-28110 is a Reflected Cross-Site Scripting vulnerability in LambertGroup AllInOne - Banner with Playlist (plugin: all-in-one-bannerWithPlaylist) affecting versions up to 3.8. The issue is a Cross-site Scripting flaw that can be triggered via input reflected in the web page; CVSS v3.1 base...

7.1CVSS5.8AI score0.00261EPSS

SaveExploits0References1

Cvelist•added 2026/03/05 5:54 a.m.•51 views

CVE-2026-28110 WordPress LambertGroup - AllInOne - Banner with Playlist plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

7.1CVSS0.00261EPSS

SaveExploits0References1

Cvelist•added 2026/03/05 5:54 a.m.•45 views

CVE-2026-28108 WordPress LambertGroup - AllInOne - Banner with Thumbnails plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

7.1CVSS0.00261EPSS

SaveExploits0References1

Vulnrichment•added 2026/03/05 5:54 a.m.•12 views

CVE-2026-28108 WordPress LambertGroup - AllInOne - Banner with Thumbnails plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

7.1CVSS5.8AI score0.00261EPSS

SaveExploits0References1

CVE•added 2026/03/05 5:54 a.m.•34 views

CVE-2026-28108

CVE-2026-28108 is a Reflected Cross-Site Scripting vulnerability in the WordPress plugin LambertGroup – AllInOne, specifically the Banner with Thumbnails (all-in-one-thumbnailsBanner). Affected versions are listed as up to 3.8 (from n/a through

7.1CVSS5.8AI score0.00261EPSS

SaveExploits0References1

attackerkb•added 2026/03/05 5:54 a.m.•11 views

CVE-2026-28108

5.9AI score0.00261EPSS

SaveExploits0References2

attackerkb•added 2026/03/05 5:53 a.m.•10 views

CVE-2026-27354

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace WooCommerce Coming Soon Product with Countdown woo-coming-soon-product allows Stored XSS.This issue affects WooCommerce Coming Soon Product with Countdown: from n/a through = 5.0...

5.9AI score0.00233EPSS

SaveExploits0References2

Positive Technologies•added 2026/03/05 12:00 a.m.•18 views

PT-2026-23382

5.9AI score0.00261EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/03/05 12:00 a.m.•6 views

CVE-2026-28108: Improper Neutralization of Input During Web Page Generation

7.1CVSS5.8AI score0.00261EPSS

SaveExploits0References1

CNNVD•added 2026/03/05 12:00 a.m.•25 views

WordPress plugin LambertGroup - AllInOne - Banner with Playlist 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.1CVSS5.7AI score0.00261EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by