20142 matches found
CVE-2026-27302
creationtimestamp| type| source ---|---|--- 2026-08-11 19:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstf5jgqok2v...
EUVD-2026-56929
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleterevision function in all versions up to, and including, 2.8.169. This makes it possible for...
CVE-2026-16230
The CVE concerns the Formidable Digital Signatures plugin for WordPress, where the delete_file function fails to validate file paths in all versions up to 3.0.6. This allows unauthenticated attackers to delete files on the server by submitting an attacker-controlled filename via item_meta[field_i...
CVE-2026-16230
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...
CVE-2026-18712
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain...
CVE-2026-18705
An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructin...
CVE-2026-62696
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:56+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:52+00:00| seen|...
CVE-2026-64920
creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:59+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:54+00:00| seen|...
CVE-2026-62890
creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:50+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:58+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:00:46+00:00| seen|...
CVE-2026-62911
creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:38+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 01:00:35+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 08:00:07+00:00| seen|...
CVE-2026-18712
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain...
EUVD-2026-56885
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain...
EUVD-2026-56908
An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructin...
CVE-2026-48381
creationtimestamp| type| source ---|---|--- 2026-08-11 18:25:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ldzcdyflfkli 2026-08-11 20:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstfpfx23o2o...
CVE-2026-48771 ishankportfolio: Stored Contact Form Submission Exposure via Public Client-Side Database Configuration
ishankportfolio is a portfolio website. Prior to version 1.0.1, contact form submissions could potentially be exposed due to improperly secured client-side database configuration and insufficient access control policies. Applications using publicly exposed database credentials or permissive...
CVE-2026-62869
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...
CVE-2026-20349
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...
EUVD-2026-56776
Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-20349
The CVE-2026-20349 issue affects Cisco Secure Firewall ASA/FTD Remote Access SSL VPN, caused by insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can send a crafted HTTP request to the VPN service and cause the device to reload, triggering a denial-of-...