7933191 matches found
CVE-2026-90821
An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input...
CVE-2026-18516
An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection...
CVE-2026-111593
Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce WordPress plugin and was never published. On validation the reported behaviour was determined not to be a vulnerability: the Shop Manager role that could invoke the bulk invoice...
CVE-2026-111413
Cross-Site Request Forgery CSRF vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects aThemeArt Theme Helper: from n/a through 1.0.8...
CVE-2026-18516
An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection...
CVE-2026-18516 Improper Encoding or Escaping of Output in Crafty Controller
An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection...
CVE-2026-90821 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input...
CVE-2026-90821
An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input...
Exploit for CVE-2026-79986
CVE-2026-79986 — camel-azure-files: consumer builds the remote...
TrueConf Server Code Execution
The vulnerability of the TrueConf Server software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...
ReadyScript SQL Injection
The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ReadyScript e-commerce management system Session Management
The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
ReadyScript e-commerce management system File Upload
The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...
ReadyScript e-commerce management system Sequence Data Compromise
The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
Windows Update Orchestrator Service Privilege Escalation
The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
IAM Proxy Component Compromise Information Disclosure
The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
DesktopServicesHelper Privilege Escalation
The vulnerability of DesktopServicesHelper in macOS operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Aquarius L311 Driver Access Control
The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...
ReadyScript e-commerce management system File Upload
The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...