91059 matches found
CVE-2026-66668: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...
CVE-2026-20231: Improper Neutralization of Special Elements in Output Used by a Downstream Component
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. ...
CVE-2026-16851: Use After Free
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free...
CVE-2026-16885: Stack-based Buffer Overflow
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...
CVE-2026-73347: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in TrueBooker = 1.2.6 versions...
CVE-2026-73390: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...
PT-2026-78799
In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...
CVE-2026-73183: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-68560: Improper Neutralization of Special Elements used in an OS Command
Wekan is open source kanban built with Meteor. Prior to 9.75, models/fileValidation.js interpolated the uploaded fileObj.path into the administrator-configured externalCommandLine at its file placeholder and executed the result through asyncExec, which is promisifyexec and invokes /bin/sh -c. On...
CVE-2026-20030: Improper Neutralization of Special Elements used in an SQL Command
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
CVE-2026-32552: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...
CVE-2026-76372: Incorrect Permission Assignment for Critical Resource
In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...
CVE-2026-49415: Time-of-check Time-of-use (TOCTOU) Race Condition
During execve2 of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user can access the target process's memory via procfs or linprocfs, because the kernel's debugging permission check still saw...
CVE-2026-19489: Buffer Copy without Checking Size of Input
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...
CVE-2026-73363: Missing Authorization
Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce 2.0.8 versions...
CVE-2026-73364: Deserialization of Untrusted Data
Customer PHP Object Injection in Flexible Subscriptions = 1.8.1 versions...
CVE-2026-32475: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...
CVE-2026-16875: Improper Neutralization of Special Elements used in an OS Command
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to shell metacharacter injection...