91212 matches found
CVE-2026-17226: Out-of-bounds Read
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read...
CVE-2026-17212: Out-of-bounds Read
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
CVE-2026-17101: Improper Authentication
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
CVE-2026-17078: Uncontrolled Resource Consumption
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to resource exhaustion...
CVE-2026-73479: Improper Encoding or Escaping of Output
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...
CVE-2026-66467: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...
CVE-2026-66465: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...
CVE-2026-66464: Missing Authorization
Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...
CVE-2026-66462: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...
CVE-2026-66461: Missing Authorization
Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce = 1.0.5 versions...
CVE-2026-66459: Missing Authorization
Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...
CVE-2026-66458: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in RealPress = 1.1.2 versions...
CVE-2026-66449: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...
CVE-2026-66444: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
CVE-2026-66436: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...
CVE-2026-66441: Missing Authorization
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
CVE-2026-66432: Exposure of Sensitive System Information Due to Uncleared Debug Information
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-66430: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.10 versions...
CVE-2026-66429: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.10 versions...