Lucene search
+L

1112391 matches found

ATTACKERKB
ATTACKERKB
added 6 days ago7 views

CVE-2026-16548

The Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat WordPress plugin before 1.8.2 does not validate the type, extension, content, or size of files submitted to its public response endpoint and stores them under the uploads directory, so an...

6.1AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago41 views

CVE-2026-16618 ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploaded files, checking only the file content type while writing the file with the attacker-supplied extension into a publicly accessible directory, allowing unauthenticated users to upload executable PHP files and achiev...

0.00462EPSS
SaveExploits0References1
CVE
CVE
added 6 days ago33 views

CVE-2026-16623

The CVE concerns the Create Block WordPress plugin (before 2.10.0). It fails to properly escape user input when writing to a generated PHP pattern file, enabling a multisite subsite administrator—who has the gating capability for this action but lacks the PHP file editing capability—to inject and...

8CVSS6AI score0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago41 views

CVE-2026-16623 Create Block Theme < 2.10.0 - Admin+ PHP Code Injection via Pattern Save (Multisite)

The Create Block WordPress plugin before 2.10.0 does not correctly escape user-supplied text before writing it into a generated PHP pattern file, allowing a multisite subsite administrator who holds the capability gating this action but is denied the capability that normally gates PHP file editin...

0.00238EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago9 views

EUVD-2026-52578

The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploaded files, checking only the file content type while writing the file with the attacker-supplied extension into a publicly accessible directory, allowing unauthenticated users to upload executable PHP files and achiev...

9.8CVSS5.9AI score0.00462EPSS
SaveExploits0References1
CVE
CVE
added 6 days ago53 views

CVE-2026-16618

The CVE concerns the WordPress plugin Improve SEO (version up to 2.0.11). The vulnerability arises from improper validation of uploaded files: the plugin checks only the file content type while saving the file with an attacker-supplied extension into a publicly accessible directory. This allows u...

9.8CVSS5.9AI score0.00462EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago6 views

EUVD-2026-52579

The Create Block WordPress plugin before 2.10.0 does not correctly escape user-supplied text before writing it into a generated PHP pattern file, allowing a multisite subsite administrator who holds the capability gating this action but is denied the capability that normally gates PHP file editin...

8CVSS6AI score0.00238EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 6 days ago7 views

CVE-2026-18739

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 6 days ago49 views

CVE-2026-18739 Popt-devel: popt-static: off-by-one in poptstuffargs

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS0.00095EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 6 days ago6 views

CVE-2026-18739 Popt-devel: popt-static: off-by-one in poptstuffargs

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago8 views

EUVD-2026-52577

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References2
CVE
CVE
added 6 days ago40 views

CVE-2026-18739

The CVE concerns the popt library, specifically a vulnerability in the function poptStuffArgs . An off-by-one condition occurs when the function is called repeatedly by a host application or through deep alias nesting, which can corrupt internal program data. The description states this corruptio...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 6 days ago10 views

CVE-2026-18739

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 6 days ago6 views

CSV file injection vulnerability in BaserCMS

Overview BaserCMS provided by baserCMS Users Community contains the following vulnerability. Improper neutralization of formula elements in a CSV file CWE-1236 - CVE-2026-65875 This vulnerability was reported by the following persons to JPCERT/CC. JPCERT/CC coordinated with the developer. VCSLab ...

7.1CVSS5.4AI score0.00152EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 6 days ago7 views

Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App

Overview Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc. web server for debugging purposes remains enabled CWE-489 - CVE-2026-66403 Missing serv...

10CVSS8.7AI score0.01925EPSS
SaveExploits2References18
CVE
CVE
added 6 days ago54 views

CVE-2026-16881

The LINE Android app (before 26.7.2) contains a vulnerability in the profile rendering component where externally supplied script content embedded in profile templates is not adequately validated or sandboxed. This can allow crafted profile content to execute arbitrary code with the app’s privile...

8.7CVSS5.7AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago41 views

CVE-2026-16881

A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...

8.7CVSS0.00262EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago9 views

EUVD-2026-52574

A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...

8.7CVSS5.7AI score0.00262EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 6 days ago11 views

CVE-2026-40553

A flaw was found in gawk. A buffer overflow vulnerability exists in the ftype routine, located in the extension/readdir.c program file. This vulnerability could allow an attacker to crash the program, resulting in a denial of service. It may also potentially lead to arbitrary code execution, thou...

7.5CVSS6AI score0.00291EPSS
SaveExploits0References5
OSV
OSV
added 6 days ago5 views

UBUNTU-CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

7.3CVSS6AI score0.00133EPSS
SaveExploits0References6
Rows per page
Query Builder