378497 matches found
CVE-2026-13332
Summary (CVE-2026-13332): The Masteriyo LMS WordPress plugin before 2.3.1 permits an unauthenticated user to trigger an AJAX action that clears user sessions without proper authorization checks. This leads to potential force-logout of any user’s active session, including administrators, by unauth...
CVE-2026-13152
The CVE concerns the Custom Fields Account Registration For WooCommerce WordPress plugin, pre-1.4. The issue allows an unauthenticated user who registers an account to gain administrator privileges by writing to the user capabilities meta key on sites using a non-default database table prefix, if...
CVE-2026-12493
The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin is affected up to version 1.3.6. The vulnerability stems from insufficient verification of external payment records: an approved payment may not be tied to the correct WooCommerce order, and the paid amount may not be validate...
CVE-2026-13390
CVE-2026-13390 affects the WordPress plugin The Events Calendar (pre-6.16.5.1). The issue is an missing authorization check on an Event Aggregator import REST API route and an integrity check bypass for a specific status, enabling unauthenticated attackers to mark import records as failed and to ...
CVE-2026-12394
The CVE-2026-12394 entry describes a vulnerability in the MemberGlut WordPress plugin (version before 1.1.5) where the front-end registration flow does not validate the user-selected role. This allows unauthenticated users to create accounts with arbitrary roles, including Administrator, leading ...
CVE-2026-12255
CVE-2026-12255 affects the MainWP Child WordPress plugin prior to 6.1.2. The site-registration request handler does not verify the requester’s identity when password authentication is disabled for the targeted account, enabling an unauthenticated attacker to obtain a valid authentication session ...
CVE-2025-15662
The CVE-2025-15662 issue affects the Printcart Web to Print Product Designer for WooCommerce WordPress plugin up to version 2.5.3. The root cause is that the plugin does not restrict a user-supplied URL before server-side fetching and does not enforce a valid authorization check, enabling unauthe...
CVE-2026-10082
CVE-2026-10082 affects the Advanced Ads WordPress plugin, versions before 2.0.23. The vulnerability stems from insufficient sanitization/escaping of a shortcode parameter in the_ad shortcodes (parameter: ad_args), which allows stored XSS that executes when affected content is viewed. Impact can a...
CVE-2026-66412
Leantime vulnerability CVE-2026-66412 affects all versions prior to 3.6.2. A broken access control flaw in the tickets.getMilestone JSON-RPC endpoint allows authenticated users to read milestone data from projects they aren’t assigned to by supplying arbitrary integer milestone IDs. Attackers can...
CVE-2026-15928
XMLRPC-C Library versions 1.07–1.67.01 are vulnerable to a reflected XSS in the error page component. The CVE entry specifies a reflected cross-site scripting vulnerability with NETWORK attack vector, no privileges required, and user interaction needed. Impact is HIGH on confidentiality (both vul...
CVE-2026-17501
CVE-2026-17501 affects ggml-org llama.cpp within the JSON-Schema-to-GBNF Conversion pipeline, specifically the transform function in common/json-schema-to-grammar.cpp. The issue involves resource allocation during processing, with remote initiation possible per the description, and a fix pull req...
CVE-2026-17500
The CVE concerns ggml-org llama.cpp (d006858/e15efe0) with impact centered on the function _visit_pattern in common/json-schema-to-grammar.cpp. The issue enables a null pointer dereference and can be triggered remotely. A fix is not yet accepted; a pull request to address this issue is awaiting a...
CVE-2026-51304
CVE-2026-51304 relates to sqlite3 3.41 with a use-after-free (UAF) in the ORDER BY clause parsing routine. The code releases memory of an ExprList via sqlite3ExprListDelete(), then accesses the freed object’s nExpr, producing an invalid memory read. By crafting a malicious SQL statement with a la...
CVE-2021-32086
CVE-2021-32086 affects Quest KACE Systems Deployment Appliance (SMA) 11.0.273. The issue is a hardcoded symmetric encryption key used to encrypt secrets in MySQL databases, with the key not unique per installation. If an attacker gains access to the MySQL server or backup files, they can decrypt ...
CVE-2025-50455
CVE-2025-50455 affects EasyAppointments (
CVE-2026-51296
SQLite 3.41 has a use-after-free vulnerability in the JSON module’s jsonRemoveFunc. The parsed JSON object is freed at line 3555 while jsonLookupStep is called on the released pointer at line 3575, enabling remote attackers to crash the service and potentially leak heap memory information. Affect...
CVE-2026-51235
LibRaw 0.21 contains a buffer overflow in the stretch() and fuji_rotate() functions. Red Hat’s advisory states the issue is a vulnerability in the LibRaw library that could allow memory overwrite, potentially leading to denial of service or unauthorized code execution. Mitigation: avoid processin...
CVE-2028-6942
The connected PT-2016-64894 document references CVE-2028-6942 as part of a broader API/infrastructure attack scenario. It notes timing-based exploitation that purportedly uses CVE-2028-6942 to induce a 14 ms+ drift in a quantum-coherent lattice, destabilizing high-precision operations. It also li...
CVE-2025-63913
The CVE-2025-63913 issue affects OpenSBI 1.3 and allows a denial of service via crafted requests to the SBI function #2 or the SBI PMU extension’s “Find and configure a matching counter” function. The vulnerability is characterized with CVSS 3.1: Network attack vector, low attack complexity, no p...
CVE-2021-32085
Summary (CVE-2021-32085): Quest KACE Systems Deployment Appliance (SMA) 11.0.273 is affected by a credential-related issue where default user credentials are installed with a known MySQL password (box747) for the report and R1 accounts. This enables remote attackers to gain privileged access to t...
CVE-2026-51078
Technical details about CVE-2026-51078 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE and ENISA sources for affected versions, impact, and remediation.
CVE-2026-51564
Milk admin ≤0.9.8 is affected by an open redirect via the redirect parameter. A crafted request can redirect users to arbitrary external URLs. Root cause: improper handling of the redirect parameter in Milk admin. Impact: potential user redirection with network access implications; CVSS v3.1 base...
CVE-2021-32088
CVE-2021-32088 affects Quest KACE Systems Deployment Appliance (SMA) 11.0.273. The vulnerability lies in API endpoints’ rate-limiting protection, which can be bypassed by removing the kboxid cookie, potentially enabling brute-force attempts against authenticated users. No explicit remediation det...
CVE-2021-32087
The CVE-2021-32087 entry concerns Quest KACE Systems Deployment Appliance (SMA) 11.0.273, where the kbftp account uses the documented default password getbxf. This allows remote attackers to gain privileged access to the FTP service interface, which contains MySQL backups and sensitive informatio...
CVE-2026-51302
SQLite 3.41 contains a use-after-free in the expression evaluation logic: sqlite3ReleaseTempReg frees temporary registers, but exprComputeOperands may access freed memory. This could allow a remote attacker to cause DoS, leak data, or potentially execute arbitrary code. The connected docs do not ...
CVE-2026-51300
SQLite 3.41 contains a use-after-free vulnerability in the expression parsing/memory management logic. Specifically, after sqlite3ExprDelete releases an expression object, the program may still access freed memory in expr.c, allowing a remote attacker to craft malicious SQL queries that trigger i...
CVE-2026-51077
Dede CMS v5.7.118 is affected by a SQL injection in the sys_sql_query.php component (parameter sqlquery). Remote attackers can obtain sensitive information with network access; no privileges required, no user interaction. Root cause: unsafely handling input in sqlquery parameter. Impact: confiden...
CVE-2026-51565
Summary (CVE-2026-51565): Cross-site scripting (XSS) in Milk admin
CVE-2026-51298
Summary of findings (CVE-2026-51298) : Several connected advisories confirm a use-after-free vulnerability in SQLite 3.41 related to the JSON extraction function. The flaw occurs when, after releasing the JsonParse object with jsonParseFree(), the code still accesses internal members of the freed...
CVE-2021-32084
The CVE-2021-32084 entry describes a vulnerability in Quest KACE Systems Deployment Appliance (SMA) 11.0.273 where API endpoints remain accessible when web console access is restricted by IP/subnet, allowing an attacker who has credentials or API keys to access the API and potentially compromise ...
CVE-2026-51303
SQLite core parsing contains a use-after-free in sqlite3ExprListDelete (expr.c). Frees an ExprList and then accesses the freed object, enabling a remote attacker to crash the app, leak memory, or, in some scenarios, achieve arbitrary code execution. Affected component: core parsing; potentially S...
CVE-2026-51244
The CVE-2026-51244 entry is corroborated by multiple connected sources describing a buffer overflow in ESP32-audioI2S 3.4.5 via UnpackFrameHeader. The vulnerability arises from multiple attacker-controlled index parameters used to access static and heap table arrays without proper range checks, c...
CVE-2026-51297
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2026-52504
Technical details for CVE-2026-52504 are not publicly available in the provided documents. No affected products, versions, root cause, or fixes are disclosed. Monitor for updates or additional disclosures.
CVE-2026-57990
CVE-2026-57990 affects Microsoft Edge (Chromium-based). The vulnerability is described as an information disclosure where files or directories accessible to external parties allow an unauthorized attacker to disclose information over a network. The published CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R...
CVE-2026-57989
CVE-2026-57989 affects Microsoft Edge (Chromium-based). The provided documents describe an origin validation error that allows an unauthorized attacker to disclose information over a network. The NVD entry and MSRC page confirm the same description; no specific exploit vectors, affected product v...
CVE-2026-57978
CVE-2026-57978 describes an origin validation error in Microsoft Edge (Chromium-based) that could enable an attacker to perform spoofing over a network. The entry’s metrics show a CVSS v3.1 base score of 5.4 (Medium) , with attack vector Network , required user interaction, and no availability im...
CVE-2026-17497
NoteGen before 0.32.0 allows arbitrary OS command execution via the Tauri shell plugin shell:allow-execute for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript in the app’s webview can invoke plugin:shell|execute to run attacker-controlled command...
CVE-2026-17496
NoteGen prior to 0.32.0 renders AI chat responses using markdown-it with html:true and injects output into the chat-preview DOM via dangerouslySetInnerHTML without HTML sanitization and with CSP set to null. Attackers can inject content (e.g., a malicious REFERENCE.md) that instructs the model to...
CVE-2026-17459
CVE-2026-17459 affects SparkJava (up to 2.9.4), specifically the ExternalResourceHandler.java function staticFiles.externalLocation. The vulnerability enables symlink following via manipulations of the externalLocation path, with a remote attack surface. Exploitation is described as Proof-of-Conc...
CVE-2026-17458
Affected software: mf-yang openclaw-cn (versions up to 0.2.1). The vulnerability resides in the Browser Control HTTP API, specifically the function clickViaPlaywright in src/browser/routes/agent.act.ts. Root cause: manipulation of the function leads to server-side request forgery. Impact: enables...
CVE-2026-17457
The CVE-2026-17457 entry affects mf-yang openclaw-cn up to version 0.2.1. The vulnerability resides in the function assertBrowserNavigationAllowed within src/browser/navigation-guard.ts of the Scheme Handler, where manipulation of the url argument leads to information disclosure. The issue can be...
CVE-2024-14040
CVE-2024-14040 affects the Linux kernel’s nexthop handling in ECMP/CLOS networks. The patch increases the nexthop weight width from 8-bit to 16-bit to accommodate large weight ratios (e.g., 1000:999) that don’t fit in 8 bits. The UAPI changes introduce a weight_high field and split fields to pres...
CVE-2026-64530
CVE-2026-64530 affects the Linux kernel net/sched subsystem. The root cause is that tcf_qevent_handle() did not properly handle TC_ACT_CONSUMED, causing the skb to be returned to the caller as if classification passed, while the defragmentation engine still owned it. This led to a use-after-free ...
CVE-2026-63720
CVE-2026-63720 affects datamodel-code-generator prior to version 0.70.0. The issue is a code injection vulnerability where attackers who control input schemas can supply a malicious customBasePath containing embedded newlines and a dot-free Python expression, which is emitted into a generated fro...
CVE-2026-17434
The CVE-2026-17434 affects nanocoai NanoClaw up to version 2.0.64, specifically the function handleAddMcpServer in src/modules/self-mod/request.ts of the add_mcp_server component. The underlying issue leads to improper authorization when a manipulation is executed, with potential for remote explo...
CVE-2026-17433
CVE-2026-17433 affects nanocoai NanoClaw up to v2.0.64 in MCP Server Approval, specifically the createChatSdkBridge.setup function in src/channels/chat-sdk-bridge.ts. Root cause: improper authorization due to manipulation of the function. Local attack vector; exploit publicly available. The provi...
CVE-2026-15962
CVE-2026-15962 affects the Fluent Forms Pro Add On Pack for WordPress (all versions up to 6.2.6). It enables PHP Object Injection through deserialization of untrusted input. An authenticated attacker with Subscriber-level access or higher can inject a PHP Object, with a POP chain allowing passwor...
CVE-2026-17432
The vulnerability CVE-2026-17432 affects NousResearch hermes-agent 2026.6.5. It targets the file hermes-agent/plugins/platforms/simplex/adapter.py within the SimpleX Gateway Authorization component. The issue arises from manipulation of the contactId argument, leading to improper access controls....