16992 matches found
CVE-2026-55680 WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastrocobranca.php can place a quoted SQL expression in the codigo parameter, which extract$REQUEST passes into the WHERE codigo= clause of an UPDATE statement without...
DEBIAN-CVE-2026-93683
A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before validating that length. A guest that changes the length between those reads, or that supplies an...
CVE-2026-110613
youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's orders via the app order list endpoint. Attackers can page through the omsorder table using a self-registered account to read order ids, ordersn values,...
CVE-2026-110613
The youlai-mall software (through commit 9f62de8 ) contains a missing authorization vulnerability in the app order list endpoint. This flaw allows authenticated members to access and view order information belonging to every customer. By using a self-registered account, an attacker can paginate t...
EUVD-2026-101241
youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's orders via the app order list endpoint. Attackers can page through the omsorder table using a self-registered account to read order ids, ordersn values,...
CVE-2026-110613 youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List
youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's orders via the app order list endpoint. Attackers can page through the omsorder table using a self-registered account to read order ids, ordersn values,...
CVE-2026-110605
libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of 0 in the head table. Attackers can provide a crafted TrueType font whose NaN glyph coordinates bypass clippoints, causing an out-of-bounds raster re...
EUVD-2026-101233
libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of 0 in the head table. Attackers can provide a crafted TrueType font whose NaN glyph coordinates bypass clippoints, causing an out-of-bounds raster re...
EUVD-2026-100898
Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script sub calculate concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an...
CVE-2026-86797
The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affect...
CVE-2026-106099
The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated...
CVE-2026-86797 Pricing Table Block 1.0.7 - 2.1.4 - Contributor+ Stored XSS via Pricing Link
The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affect...
EUVD-2026-100854
The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affect...
CVE-2026-86797
The Pricing Table WordPress plugin, in versions 1.0.7 through 2.1.4 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to validate the scheme of a user-supplied link value within one of its blocks before rendering. This allows users with contributor-level access or...
WordPress Pricing Table plugin 1.0.7-2.1.4 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Philipp Doblhofer in WordPress Plugin Pricing Table block – Display product prices as a table. versions 1.0.7-2.1.4...
EUVD-2026-100882
The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated...
CVE-2026-106099 WP Data Access < 5.5.84 - Unauthenticated Sensitive Data Disclosure via Table Export
The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated...
CVE-2026-106099
The WP Data Access WordPress plugin (versions before 5.5.84 ) is vulnerable to unauthenticated sensitive data disclosure . The plugin fails to restrict its database table export action to authorized users, instead relying on a token that is publicly printed on the pages where tables are displayed...
PT-2026-113682
The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affect...
PT-2026-114118
unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield get file table that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range file table offset or large file count...