90946 matches found
CVE-2026-81297: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-81765: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Tailored Tools = 3.0.2 versions...
CVE-2026-82863: Insufficient Logging
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...
CVE-2026-82228: Authentication Bypass by Spoofing
Unauthenticated Bypass Vulnerability in SiteGround Security = 1.6.6 versions...
CVE-2026-82484: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/empsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...
Web--Vulnerability-scanner
Web--Vulnerability-scanner A web vulnerability scanner i...
CVE-2026-82481: Incorrect Behavior Order: Validate Before Canonicalize
The cohttp package before 6.3.0 for OCaml allows directory traversal...
vamp-forticheck
vamp-forticheck VampSecure Labs — Security Research Division Scanner di vulnerabilità critiche nei dispositivi FortiOS/FortiGate. Descrizione Strumento di audit di sicurezza per valutare l'esposizione dei dispositivi Fortinet rispetto a quattro vulnerabilità critiche pubblicamente documentate...
grype v0.118.0
Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...
CVE-2026-82222: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1...
CVE-2026-81767: Missing Authorization
Unauthenticated Broken Access Control in Simple Payment = 2.5.2 versions...
CVE-2026-81761: Missing Authorization
Subscriber Broken Access Control in WpEvently = 5.5.0 versions...
CVE-2026-3686: Allocation of Resources Without Limits or Throttling
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources...
CVE-2026-78238: Improper Neutralization of Input During Web Page Generation
SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...
CVE-2026-82227: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in WPBulky = 1.2.2 versions...
CVE-2025-36271: Use of a One-Way Hash without a Salt
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2026-81284: Missing Authorization
Contributor Broken Access Control in ACF Extended = 0.9.2.6 versions...
CVE-2026-42392: Exposure of Sensitive Information to an Unauthorized Actor
An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...
CVE-2026-58106: Out-of-bounds Write
CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy with a bounded safestrcpy helper. At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size passed down is the full PATHMAX. safestrcpy is strncpy, which...