129928 matches found
WordPress PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer plugin <= 1.1.0 - Missing Authorization to Unauthenticated Sensitive PDF Disclosure vulnerability
Missing Authorization to Unauthenticated Sensitive PDF Disclosure vulnerability discovered by sl4x0 in WordPress Plugin PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer versions = 1.1.0...
WordPress Demi – One Click Demo Import, Backup & Site Migration plugin <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy vulnerability
Unauthenticated Information Exposure to Arbitrary Directory Copy vulnerability discovered by SAHRAOUI AYMEN in WordPress Plugin Demi One Click Demo Import, Backup & Site Migration versions = 0.0.8...
CVE-2026-59250
Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially achieve remote code execution or a denial-of-service crash by sending a single text-encoded H.248/Megaco message containing an oversized...
CVE-2026-58227
The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In sslcertificate:handleincompletechain/5, the received chain is passed to sslcertificate:buildcertificatechain/5, which walks issuer relationships via...
CVE-2026-59250
Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially achieve remote code execution or a denial-of-service crash by sending a single text-encoded H.248/Megaco message containing an oversized...
CVE-2026-59250
CVE-2026-59250 describes a Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver. During tokenization of Local/Remote descriptors, mfs_load_property_groups extracts an attacker-controlled property name and, when no value follows, formats it into a fixed 512-byte error_msg field u...
EEF-CVE-2026-59250 Megaco flex scanner buffer overflow via oversized property parm name
Summary Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially achieve remote code execution or a denial-of-service crash by sending a single text-encoded H.248/Megaco message containing an...
CVE-2026-56819
A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing t...
CVE-2026-66477
Unauthenticated Broken Access Control in Gillion = 4.13 versions...
CVE-2026-66438
Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...
CVE-2026-66050
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...
CVE-2026-65558
Unauthenticated Server Side Request Forgery SSRF in AffiliateX = 2.3.5 versions...
CVE-2026-65567
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
CVE-2026-65564
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions...
CVE-2026-65435
Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...
CVE-2026-59553
Unauthenticated Cross Site Scripting XSS in Product Feed Manager = 7.6.1 versions...
CVE-2026-59557
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59550
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...