2895937 matches found
CVE-2026-28150
Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...
CVE-2025-53999
Unauthenticated Broken Access Control in Altair = 5.2.2 versions...
CVE-2025-15637
Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...
CVE-2025-62300
HCL IntelliOps Event Management (IEM) has a race condition creating a timing window where an unauthenticated, network-adjacent attacker can modify a resource, causing unpredictable behavior with high integrity impact (CVSS 5.9). No patch version or exploit details are provided; monitor HCL PSIRT ...
ROOT-OS-DEBIAN-11-CVE-2026-34197 CVE-2026-34197 in activemq - Patched by Root
Root has patched CVE-2026-34197 in the activemq package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-44431 CVE-2023-44431 in bluez - Patched by Root
Root has patched CVE-2023-44431 in the bluez package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-56209 CVE-2026-56209 in aom - Patched by Root
Root has patched CVE-2026-56209 in the aom package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-56211 CVE-2026-56211 in aom - Patched by Root
Root has patched CVE-2026-56211 in the aom package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-56210 CVE-2026-56210 in aom - Patched by Root
Root has patched CVE-2026-56210 in the aom package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-6879 CVE-2023-6879 in aom - Patched by Root
Root has patched CVE-2023-6879 in the aom package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-74014 WordPress IT Residence theme <= 3.2.1 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in IT Residence = 3.2.1 versions...
EUVD-2026-63310
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
CVE-2026-66672
The WordPress Flatastic theme (versions ≤ 2.0) is vulnerable to unauthenticated PHP Object Injection, exploitable over the network without credentials. The Patchstack advisory documents the issue; no exploit code or in-the-wild activity is reported. Affected sites should update to a patched theme...
EUVD-2026-63303
Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...
EUVD-2026-63302
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
CVE-2026-66614
The WordPress SEO Plugin by Squirrly SEO (versions ≤ 14.2.2) contains an unauthenticated reflected/stored XSS vulnerability exploitable via crafted input, with CVSS 3.1 score 7.1 (HIGH). No exploit code or in-the-wild exploitation details are provided in the documents; patch version is not specif...
CVE-2026-66605 WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Swatchly – WooCommerce Variation Swatches for Products = 1.4.13 versions...
CVE-2026-66597 WordPress wpDataTables plugin <= 6.5.1.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in wpDataTables = 6.5.1.4 versions...