490233 matches found
CVE-2026-32327 Apache Portable Runtime Utility: apr-util XML stack recursion crash
A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...
CVE-2026-34191 Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Portable Runtime Utility via aprdbdoracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3...
CVE-2026-34501 Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...
EUVD-2026-53917
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...
CVE-2026-34502
The Apache Portable Runtime Utility (apr-util) is vulnerable to a heap-based buffer overflow in the memcached client component. This issue affects versions 1.3.0 through 1.6.3 . Exploitation of this vulnerability could potentially result in a denial of service or the execution of arbitrary code ....
EUVD-2026-53916
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...
CVE-2026-34502 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...
CVE-2026-66710 WordPress e2pdf plugin <= 1.32.40 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...
CVE-2026-66708
CVE-2026-66708 affects the WordPress plugin Total Upkeep (versions
CVE-2026-66708 WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...
EUVD-2026-53911
Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...
EUVD-2026-53909
Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...
CVE-2026-66706 WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...
EUVD-2026-53910
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...
CVE-2026-66705 WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...
CVE-2026-66702
Unauthenticated Cross Site Scripting XSS in Rank Math SEO = 1.0.274.1 versions...
CVE-2026-66703
Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...
EUVD-2026-53906
Unauthenticated Cross Site Scripting XSS in Rank Math SEO = 1.0.274.1 versions...