91592 matches found
CVE-2026-9169
DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a...
DEBIAN-CVE-2026-18938
A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...
MINI-PWGJ-797M-PCVC
Bulletin has no description...
MINI-G3Q6-M9HW-7CXR
Bulletin has no description...
CVE-2026-16265
The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, allowing users with a Subscriber account to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service...
BELL-CVE-2026-64604
Bulletin has no description...
BELL-CVE-2026-64568
Bulletin has no description...
BELL-CVE-2026-64590
Bulletin has no description...
BELL-CVE-2026-64592
Bulletin has no description...
BELL-CVE-2026-64594
Bulletin has no description...
BELL-CVE-2026-64570
Bulletin has no description...
BELL-CVE-2026-64576
Bulletin has no description...
BELL-CVE-2026-64575
Bulletin has no description...
CVE-2026-16265 WP Maps < 4.9.7 - Subscriber+ Denial of Service
The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, allowing users with a Subscriber account to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service...
CVE-2026-16041
The CVE-2026-16041 entry concerns the MStore API WordPress plugin prior to version 4.21.0. The REST endpoint used for creating product reviews lacks authorization and purchase-ownership checks, allowing an unauthenticated attacker to submit WooCommerce product reviews with arbitrary reviewer name...
CVE-2026-15215 Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation
The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify the user's capability before installing and activating a Subscriptions for WooCommerce WordPress plugin before 2.0.1 from a user-supplied slug through a nonce-protected AJAX action, allowing users with the Shop Manage...
MINI-W27M-XWWJ-MJ8P
Bulletin has no description...
CGA-382M-XRX3-W728
Bulletin has no description...
