115865 matches found
CVE-2026-12859
A Missing Authorization (CWE-862) vulnerability exists in Caz Informatics Services Trade Inc. Advancity ALMS Cloud . The flaw allows an attacker to access functionality that is not properly constrained by Access Control Lists (ACLs). This issue affects the product through 2026-10-08 . The CVSS v3...
CVE-2026-105399
The ImageMagick software is vulnerable to a Denial of Service (DoS) attack in the MVG decoder due to a missing limit check . A remote attacker can submit a specially crafted Magick Vector Graphics (MVG) image to trigger a long-running decoding operation, consuming excessive processor resources an...
CVE-2026-105399
...
CVE-2026-105399
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial of service vulnerability in the MVG decoder caused by a missing limit check. Attackers can supply a crafted MVG image that triggers a long-running decoding operation, consuming excessive CPU resources and stalling image...
CVE-2026-105399 ImageMagick before 7.1.2-31 Denial of Service via MVG Decoder
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial of service vulnerability in the MVG decoder caused by a missing limit check. Attackers can supply a crafted MVG image that triggers a long-running decoding operation, consuming excessive CPU resources and stalling image...
CVE-2026-105399
Removed by vendor...
Azure App Service Remote Code Execution Vulnerability
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network...
CVE-2026-62128
Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through 1.2.21...
CVE-2026-106600
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0...
CVE-2026-105891
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-105878
Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...
CVE-2026-105888
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-105886
Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...
EUVD-2026-94959
Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through 1.2.21...
EUVD-2026-94951
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
EUVD-2026-94943
Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...
CVE-2026-105886
The BdThemes Ultimate Post Kit WordPress plugin (versions up to and including 4.5.5 ) is vulnerable to a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels . The vulnerability results in a medium severity r...