256302 matches found
PT-2026-103355
šØ CVE-2026-47496 NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of...
CVE-2026-47503: Out-of-bounds Write
NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead t...
PT-2026-103354
šØ CVE-2026-47495 NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, informati...
CVE-2026-102122: Incorrect Authorization
Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...
CVE-2026-97292: Improper Neutralization of Input During Web Page Generation
Author Cross Site Scripting XSS in YITH WooCommerce Tab Manager = 2.15.0 versions...
PT-2026-103158
Shop manager PHP Object Injection in Music Player for WooCommerce = 1.9.1 versions...
CVE-2026-27085: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Shop manager Content Injection in Astra WordPress Theme = 4.13.12 versions...
CVE-2026-96832: Deserialization of Untrusted Data
Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...
CVE-2026-94677: Deserialization of Untrusted Data
Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...
PT-2026-103339
Name of the Vulnerable Software and Affected Versions NVIDIA vGPU Virtual GPU Manager for Windows and Linux affected versions not specified Description A flaw exists in the kernel mode layer where a guest user can trigger an integer overflow, resulting in memory corruption. This condition may all...
CVE-2026-97239: Missing Authorization
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
CVE-2026-93908: Improper Neutralization of Input During Web Page Generation
The Real Estate Manager ā Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforepricetext' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-97272: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Premmerce Permalink Manager for WooCommerce = 2.3.13 versions...
PT-2026-103490
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
CVE-2026-76504: Improper Handling of URL Encoding (Hex Encoding)
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request,...
PT-2026-103368
šØ CVE-2026-47519 NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...
VulnCheck KEV: CVE-2026-76504
Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request...
PT-2026-103422
Name of the Vulnerable Software and Affected Versions NVIDIA vGPU Virtual GPU Manager for Linux affected versions not specified Description An issue exists where an attacker could cause incorrect resource transfer between spheres. This could lead to code execution, denial of service, escalation o...
PT-2026-103161
Shop manager PHP Object Injection in Cost of Goods for WooCommerce = 3.5.2 versions...
CVE-2026-103474: Unrestricted Upload of File with Dangerous Type
yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request them to execute arbitrary code on the serv...