6735 matches found
CVE-2026-42380 WordPress AI Lab theme < 5.4.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
CVE-2026-41557 WordPress Kapee theme < 1.7.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Kapee 1.7.1 versions...
CVE-2026-41557 WordPress Kapee theme < 1.7.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Kapee 1.7.1 versions...
CVE-2026-39582
CVE-2026-39582 affects the WordPress Hitek theme prior to version 1.8.3, with an unauthenticated Local File Inclusion vulnerability in the theme. The CVSSv3.1 score is 8.1 (HIGH), driven by network access, high attack complexity, no privileges required, and impacts to confidentiality, integrity, ...
CVE-2026-22338
CVE-2026-22338 : WordPress EcoBlue theme
CVE-2026-22335 WordPress WooCommerce Frontend Manager – Ultimate plugin < 6.7.7 - SQL Injection vulnerability
Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate 6.7.7 versions...
CVE-2025-15642
The CVE-2025-15642 entry concerns Netskope Client for Windows. The issue is described as weak discretionary access control lists on the Netskope Client service object and related registry keys, allowing a malicious insider with admin privileges to bypass NSClient Tamper Protections. Affected: Net...
CVE-2025-15642 Netskope Client Service Insufficient Access Controls
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List DACLs on the service object and related registry keys,. Produc...
CVE-2025-15641 Netskope Client Exposed IOCTL with Insufficient Access Controls
Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially tamper with the customer IOCTL by sending crafted IOCTL requests to the driver. A successful exploit can result in the bypassing of all...
PT-2026-50269
Unauthenticated Local File Inclusion in Neuronet 1.14.0 versions...
PT-2026-50399
Unauthenticated Local File Inclusion in Uppercase 1.2.2 versions...
PT-2026-50403
Unauthenticated Cross Site Scripting XSS in Royal Elementor Addons Pro 1.7.1041 versions...
PT-2026-50501
Name of the Vulnerable Software and Affected Versions Splunk AI Toolkit versions prior to 5.7.4 Description A low-privileged user without "admin" or "power" Splunk roles can force the application to make outbound HTTP requests to an attacker-controlled server, potentially leading to data...
CVE-2026-6253 affecting package cmake for versions less than 3.30.3-14
CVE-2026-6253 affecting package cmake for versions less than 3.30.3-14. A patched version of the package is available...
CVE-2026-35414 affecting package openssh for versions less than 9.8p1-7
CVE-2026-35414 affecting package openssh for versions less than 9.8p1-7. A patched version of the package is available...
CVE-2026-6276 affecting package cmake for versions less than 3.30.3-14
CVE-2026-6276 affecting package cmake for versions less than 3.30.3-14. A patched version of the package is available...
NPM: Cross-site scripting via <NoScript> slot content in Nuxt's head components
NPM: Cross-site scripting via slot content in Nuxt's head components vulnerability discovered by ? in WordPress Npm nuxt versions 3.21.7...
NPM: n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints
NPM: n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints vulnerability discovered by ? in WordPress Npm n8n versions 2.24.0...