717804 matches found
CVE-2026-63244 Authentication Bypass Vulnerability
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System LMS could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised...
EUVD-2026-108611
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System LMS could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised...
CVE-2026-93489
Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security...
CVE-2026-93489
An Improper Authentication vulnerability in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket . This flaw enables an attacker to perform administrator operations on the affected hardware. The documents do not provide specific software ver...
CVE-2026-93489
Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security...
EUVD-2026-108609
Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security...
CVE-2026-98770
A flaw was found in the Linux kernel's USB gadget MIDI 2.0 driver. Under-sized descriptor arrays allow a local user to trigger an out-of-bounds memory access when setting up a large number of MIDI jacks through the configuration filesystem configfs. This issue primarily results in memory corrupti...
CVE-2026-98769
A flaw was found in the Linux kernel's Universal Serial Bus USB audio gadget driver. A connected USB host can send a specially crafted audio control request with an invalid command index, causing an out-of-bounds heap memory read and write. This flaw primarily allows an attacker to cause a Denial...
CVE-2026-109933
The Otter Blocks WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styling values before writing them into an inline stylesheet, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when any visitor, including...
CVE-2026-109933 Otter Blocks < 3.2.8 - Contributor+ Stored XSS via Block Style Attributes
The Otter Blocks WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styling values before writing them into an inline stylesheet, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when any visitor, including...
CVE-2026-109933
The Otter Blocks WordPress plugin, in versions prior to 3.2.8 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the insufficient sanitization and escaping of user-supplied block styling values before they are written into an inline stylesheet . This allows users with ...
EUVD-2026-108586
The Otter Blocks WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styling values before writing them into an inline stylesheet, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when any visitor, including...
CVE-2026-109933 Otter Blocks < 3.2.8 - Contributor+ Stored XSS via Block Style Attributes
The Otter Blocks WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styling values before writing them into an inline stylesheet, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when any visitor, including...
Exploit for CVE-2026-31158
CVE-2026-31158 Unauthenticated Boolean-Based SQL Injectio...
CVE-2026-115547
An input validation issue in the Okta Access Gateway OAG Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account...
CVE-2026-115546
Okta Access Gateway OAG does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console...
EUVD-2026-108569
An input validation issue in the Okta Access Gateway OAG Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account...
CVE-2026-115547 Command Execution via Admin Console Input in Okta Access Gateway
An input validation issue in the Okta Access Gateway OAG Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account...
CVE-2026-115547 Command Execution via Admin Console Input in Okta Access Gateway
An input validation issue in the Okta Access Gateway OAG Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account...
CVE-2026-115547
The Okta Access Gateway (OAG) Admin Console is vulnerable to Command Execution due to an input validation issue that allows the processing of specially formatted configuration values. An authenticated administrator can exploit this vulnerability to execute arbitrary system commands within the con...