1994 matches found
CVE-2026-65884
Joomla Extension - balbooa.com - Privilege Escalation in Gridbox 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions...
CVE-2026-65946
CVE-2026-65946 : Joomla extension rolandd.com RO CSVI is vulnerable to XSS in AJAX endpoint handlers in versions
WordPress security-ninja-premium plugin < 5.290 - Two-Factor Authentication Bypass vulnerability
Two-Factor Authentication Bypass vulnerability discovered by Adam Clinch in WordPress Plugin security-ninja-premium versions 5.290...
CVE-2026-55717 affecting package unbound for versions less than 1.25.2-1
CVE-2026-55717 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-8927 affecting package cmake for versions less than 3.30.3-15
CVE-2026-8927 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...
CVE-2026-57219 affecting package rabbitmq-server for versions less than 3.13.7-7
CVE-2026-57219 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...
NPM: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
NPM: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...
NPM: n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
NPM: n8n: AI Agents Project Viewer Privilege Escalation via runnodetool vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...
NPM: Immutable.js `List` 32-bit trie overflow → unrecoverable DoS
NPM: Immutable.js List 32-bit trie overflow → unrecoverable DoS vulnerability discovered by ? in WordPress Npm immutable versions 4.3.9...
NPM: Directus: SSRF Protection Bypass via 0.0.0.0 in File Import
NPM: Directus: SSRF Protection Bypass via 0.0.0.0 in File Import vulnerability discovered by ? in WordPress Npm directus versions 12.0.0...
CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24
CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...
CVE-2026-53151 affecting package kernel for versions less than 6.6.144.1-1
CVE-2026-53151 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-46135 affecting package kernel for versions less than 6.6.144.1-1
CVE-2026-46135 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...
IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 / Liberty 17.0.0.3 < 26.0.0.8 (7280131)
The version of IBM WebSphere Application Server running on the remote host is affected by a vulnerability as referenced in the 7280131 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
NPM: websocket-driver: Resource limit bypass via message compression
NPM: websocket-driver: Resource limit bypass via message compression vulnerability discovered by ? in WordPress Npm websocket-driver versions 0.7.5...
CVE-2026-50183 WWBN AVideo: Stored XSS via Hostile YouTube Video Title in AVideo YouTubeAPI Gallery Section
WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerability in the YouTubeAPI plugin. The plugin renders the snippet.title field returned by the YouTube Data API into the homepage gallery markup with no HTML encoding. The title is set ...
Splunk Enterprise 9.3.0 < 9.3.14, 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4.0 < 10.4.1 (SVD-2026-0703)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0703 advisory. - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below...
CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1
CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...