475452 matches found
EUVD-2026-49211
Unauthenticated Broken Access Control in Thrive Product Manager = 10.9.2 versions...
CVE-2026-59534 WordPress Post My CF7 Form plugin <= 6.2.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Post My CF7 Form = 6.2.0 versions...
CVE-2026-59533
Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions...
EUVD-2026-49209
Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions...
CVE-2026-59533
The CVE concerns the WordPress Relevanssi Light plugin (versions <= 1.2.2). It describes an unauthenticated SQL injection vulnerability in this plugin, with CVSS v3.1 indicating a CRITICAL base score (9.3) and HIGH confidentiality impact. The affected component is the Relevanssi Light plugin f...
CVE-2026-59533 WordPress Relevanssi Light plugin <= 1.2.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions...
CVE-2026-59532 WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability
Unauthenticated Other Vulnerability Type in Booking and Rental Manager = 2.7.2 versions...
EUVD-2026-49208
Unauthenticated Other Vulnerability Type in Booking and Rental Manager = 2.7.2 versions...
CVE-2026-59532
Unauthenticated Other Vulnerability Type in Booking and Rental Manager = 2.7.2 versions...
CVE-2026-59530
Unauthenticated Broken Access Control in Stripe For WooCommerce = 4.0.7 versions...
EUVD-2026-49205
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
CVE-2026-59528 WordPress ShipTime: Discounted Shipping Rates plugin <= 1.1.1 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates = 1.1.1 versions...
CVE-2026-59529 WordPress Ebook Store plugin <= 6.19 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
CVE-2026-59527 WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat
Summary IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat. Vulnerability Details CVEID:CVE-2026-41284 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 throug...
CVE-2026-17514 ZJONSSON node-unzipper extract.js Extract path traversal
A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes path traversal. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The...
CVE-2026-17514
A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes path traversal. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The...
CVE-2026-17514 ZJONSSON node-unzipper extract.js Extract path traversal
A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes path traversal. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The...
EUVD-2026-49197
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint leads to an SQL injection vector...
CVE-2026-17512
The CVE-2026-17512 entry concerns ggml-org whisper.cpp (version 1.8.4-58). The vulnerability affects the function log_mel_spectrogram in src/whisper.cpp and enables an out-of-bounds read. Access is locally exploitable, requiring that the attacker run code on the affected host. A pull request to f...