Lucene search
+L

1583 matches found

Vulnrichment
Vulnrichment
•added 2026/01/26 9:28 p.m.•8 views

CVE-2026-22696 dcap-qvl has Missing Verification for QE Identity

dcap-qvl implements the quote verification logic for DCAP Data Center Attestation Primitives. A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity,...

9.3CVSS5.8AI score0.00208EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/26 9:28 p.m.•19 views

EUVD-2026-4661

dcap-qvl implements the quote verification logic for DCAP Data Center Attestation Primitives. A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity,...

9.3CVSS5.9AI score0.00208EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/26 9:28 p.m.•10 views

CVE-2026-22696

dcap-qvl implements the quote verification logic for DCAP Data Center Attestation Primitives. A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity,...

9.3CVSS5.9AI score0.00208EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/26 12:00 a.m.•28 views

PT-2026-4832

Name of the Vulnerable Software and Affected Versions Shaarli versions prior to 0.16.0 Description Shaarli is a personal bookmarking service susceptible to a cross-site scripting XSS issue. A malicious tag beginning with a double quote " can prematurely terminate the tag on the start page, enabli...

5.3CVSS6AI score0.00171EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2026/01/23 9:16 p.m.•19 views

CVE-2025-68849

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank Corso Quote Master quote-master allows Reflected XSS.This issue affects Quote Master: from n/a through = 7.1.1...

7.1CVSS5.4AI score0.00274EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•19 views

CVE-2026-24366

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through = 2.46.0...

5.3CVSS5.4AI score0.00217EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•23 views

CVE-2026-24366

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through = 2.46.0...

5.3CVSS0.00217EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•13 views

CVE-2025-68849

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank Corso Quote Master quote-master allows Reflected XSS.This issue affects Quote Master: from n/a through = 7.1.1...

7.1CVSS0.00274EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/22 4:52 p.m.•49 views

CVE-2026-24366

CVE-2026-24366 : Missing Authorization in the WordPress plugin “YITH Request a Quote for WooCommerce” (YITH WooCommerce Request A Quote) due to incorrectly configured access control. Affected versions: from n/a through 2.46.0. Public sources (NVD, Red Hat, CIRCL, CVE List) describe it as a Broken...

5.3CVSS5.9AI score0.00217EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•44 views

CVE-2026-24366 WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through = 2.46.0...

5.3CVSS0.00217EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•9 views

CVE-2026-24366 WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through = 2.46.0...

5.3CVSS5.9AI score0.00217EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•19 views

CVE-2026-24366

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through = 2.46.0...

5.3CVSS5.3AI score0.00217EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/22 4:52 p.m.•32 views

CVE-2025-68849

CVE-2025-68849 — Quote Master WordPress plugin (

7.1CVSS5.8AI score0.00274EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•7 views

CVE-2025-68849

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank Corso Quote Master quote-master allows Reflected XSS.This issue affects Quote Master: from n/a through = 7.1.1...

7.1CVSS5.3AI score0.00274EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•33 views

CVE-2025-68849 WordPress Quote Master plugin <= 7.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank Corso Quote Master quote-master allows Reflected XSS.This issue affects Quote Master: from n/a through = 7.1.1...

7.1CVSS0.00274EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•7 views

CVE-2025-68849 WordPress Quote Master plugin <= 7.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank Corso Quote Master quote-master allows Reflected XSS.This issue affects Quote Master: from n/a through = 7.1.1...

5.8AI score0.00274EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•11 views

CVE-2026-24366: Missing Authorization

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through = 2.46.0...

5.3CVSS5.9AI score0.00217EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•1 views

CVE-2025-68849: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank Corso Quote Master quote-master allows Reflected XSS.This issue affects Quote Master: from n/a through = 7.1.1...

7.1CVSS5.8AI score0.00274EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•18 views

WordPress plugin Quote Master has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.1CVSS5.7AI score0.00274EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•29 views

WordPress plugin YITH WooCommerce Request A Quote has a security vulnerability.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.00217EPSS
SaveExploits0References1
Rows per page
Query Builder