Lucene search
+L

8125 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•2 views

CVE-2026-57374: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...

7.1CVSS5.7AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•4 views

CVE-2026-57373: Improper Neutralization of Input During Web Page Generation

Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•27 views

PT-2026-63822

Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•26 views

PT-2026-63894

Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...

5.3CVSS5.2AI score0.00294EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•24 views

PT-2026-63910

Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions...

5.3CVSS5.2AI score0.00313EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•31 views

PT-2026-63909

Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...

7.1CVSS5.2AI score0.00128EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•33 views

PT-2026-63957

Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2026.2 Description Arbitrary code execution is possible before granting project trust through the configured Go SDK. Recommendations Update JetBrains GoLand to version 2026.2...

7.8CVSS6.3AI score0.00211EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•28 views

PT-2026-63924

Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions...

5.3CVSS5.2AI score0.0033EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•4 views

CVE-2026-65482: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.3...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•5 views

CVE-2026-65472: Missing Authorization

Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...

5.3CVSS5.7AI score0.00294EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/07/22 8:40 p.m.•19 views

WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Bao - BlueRock in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 3.0.5...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/07/22 8:39 p.m.•18 views

WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 3.0.5...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/07/22 2:54 p.m.•14 views

WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by Steven Julian in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.2...

7.1CVSS5.8AI score0.00128EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/07/22 12:55 p.m.•9 views

WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abu Hurayra in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.2...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/07/22 9:59 a.m.•14 views

WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Kit formerly ConvertKit versions = 3.3.5...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/22 12:00 a.m.•28 views

PT-2026-63903

Name of the Vulnerable Software and Affected Versions LA-Studio Element Kit for Elementor versions prior to 1.6.3 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows authenticated attackers with contributor-level access and above ...

6.5CVSS6.1AI score0.00224EPSS
SaveExploits0References5
NVD
NVD
•added 2026/07/21 10:18 p.m.•16 views

CVE-2026-61053

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Diameter Gateway and SDK. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacke...

7.8CVSS0.00161EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/21 10:17 p.m.•22 views

UBUNTU-CVE-2026-47063

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...

7.5CVSS6.3AI score0.00354EPSS
SaveExploits0References12
OSV
OSV
•added 2026/07/21 10:17 p.m.•15 views

UBUNTU-CVE-2026-47021

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...

5.3CVSS5.7AI score0.00411EPSS
SaveExploits0References12
Wolfi
Wolfi
•added 2026/07/21 8:24 p.m.•30 views

GHSA-8Q5V-6PQQ-X66H vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-sdk, powershell, promitor, dotnet-bootstrap...

5.8AI score
SaveExploits0
Rows per page
Query Builder