91001 matches found
CVE-2026-32561: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...
CVE-2026-66671: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...
CVE-2026-28165: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Digits = 9.2 versions...
FreeBSD : traefik -- Multiple vulnerabilities (b22fee3d-9f14-11f1-b948-5404a68ad561)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b22fee3d-9f14-11f1-b948-5404a68ad561 advisory. The traefik project releases a new version addressing multiple vulnerabilities: Tenable has extracted t...
CVE-2026-78315: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78264: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...
WPProbe Plugin Enumeration Tool 0.12.9
A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5,000 plugins detectable without brute-force, thousands more with it...
CVE-2026-78280: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...
CVE-2026-78291: Missing Authorization
Unauthenticated Broken Access Control in RepairBuddy = 4.1223 versions...
CVE-2026-66670: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Måne = 1.7 versions...
CVE-2026-32471: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
CVE-2026-28190: Missing Authorization
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2025-26237: Improper Neutralization of Special Elements used in a Command
D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...
CVE-2026-78212: Relative Path Traversal
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files...
CVE-2026-78270: Improper Neutralization of Special Elements used in an SQL Command
Author SQL Injection in FluentCRM Pro = 3.1.12 versions...
CVE-2026-66648: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...
CVE-2026-66650: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in FreightCo = 1.1.15 versions...
CVE-2026-63693: Creation of Temporary File in Directory with Insecure Permissions
Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...