63947 matches found
CVE-2026-18962
The vulnerability CVE-2026-18962 affects the WP Photo Album Plus WordPress plugin (pre-9.2.09.002). The issue is improper authorization during front-end uploads: any authenticated user (e.g., Subscriber) can upload files into albums owned by other users or the admin because the plugin does not ve...
CVE-2026-19143 vulnerabilities
Vulnerabilities for packages: chromium...
EUVD-2026-57057
A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource CR without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to...
CVE-2026-72526
A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource CR without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to...
VulnCheck KEV: CVE-2026-55040
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network...
Linux Distros Unpatched Vulnerability : CVE-2026-73076
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwri...
CVE-2026-59135
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-48445
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not requir...
CVE-2022-50997 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp
Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...
CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability
...
CVE-2026-64914
CVE-2026-64914 is a heap-based buffer overflow in Microsoft Office Access that enables local code execution. According to the available data, the vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, NO privileges required, and user interaction required. Impact is asses...
CVE-2026-64905
CVE-2026-64905 is a Microsoft Office Word vulnerability described as a buffer over-read that could allow an attacker to execute code locally. Affected product: Microsoft Word. Root cause: unspecified in provided documents beyond the buffer over-read description. Impact: arbitrary code execution w...
CVE-2026-64904 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-63526 Microsoft Office Graphics Component Remote Code Execution Vulnerability
...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-61352
The CVE-2026-61352 entry describes a race condition in the Remote Desktop Client caused by concurrent execution with improper synchronization on a shared resource. This leads to remote code execution over the network, classified with a high impact (CVSS 3.1: 7.5) and network attack vector, requir...