Export limit exceeded: 110930 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (110930 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-19685 | 1 Redhat | 7 Enterprise Linux, Hardened Images, Hummingbird and 4 more | 2026-11-11 | 7.1 High |
| NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point. | ||||
| CVE-2026-124741 | 1 Redhat | 2 Hummingbird, Rhel Els | 2026-11-11 | 7.6 High |
| A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a crafted reply, triggering a stack-based buffer overflow. This vulnerability could allow an attacker to achieve arbitrary code execution with root privileges or cause a denial of service (DoS) crash. | ||||
| CVE-2026-124739 | 1 Redhat | 2 Hummingbird, Rhel Els | 2026-11-11 | 7.5 High |
| A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could exploit this vulnerability to execute arbitrary code with elevated privileges or cause a denial of service (DoS) by crashing the server process. | ||||
| CVE-2026-124253 | 2026-11-11 | 7.1 High | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Calculated Fields Form calculated-fields-form allows DOM-Based XSS.This issue affects Calculated Fields Form: from n/a through 5.5.2.8. | ||||
| CVE-2026-123478 | 2026-11-11 | 7.1 High | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meow Apps AI Engine ai-engine allows Stored XSS.This issue affects AI Engine: from n/a through 3.9.1. | ||||
| CVE-2026-14839 | 1 Wordpress-extensions | 1 Mapster Wp Maps | 2026-11-11 | 7.5 High |
| The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished (draft, pending, private, and trashed) posts. | ||||
| CVE-2026-15151 | 1 Wordpress-extensions | 1 Five Star Restaurant Reservations | 2026-11-11 | 7.5 High |
| The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role (which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's settings) to reset the site's configured booking notification rules. | ||||
| CVE-2026-15241 | 1 Wordpress-extensions | 1 Chatbot For Ecommerce | 2026-11-11 | 7.5 High |
| The AI ChatBot for WooCommerce WordPress plugin before 4.8.4 does not perform any authorization or nonce check on one of its AJAX actions, allowing unauthenticated users to abuse the site owner's stored third-party API key to send requests billed to the owner's account and, when an optional feature is enabled, to retrieve indexed knowledge-base content. | ||||
| CVE-2026-12586 | 1 Wordpress-extensions | 1 Lenxel Wp | 2026-11-11 | 8.1 High |
| The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthenticated attackers to reset the password of any user (including an administrator) and take over the account. | ||||
| CVE-2026-16261 | 1 Wordpress-extensions | 1 Login-social | 2026-11-11 | 7.5 High |
| The login-social WordPress plugin through 1.0.4 does not validate password-reset requests against a reset key or the requester's identity, and it issues authentication sessions from unverified third-party sign-in data, allowing unauthenticated attackers to reset any user's password or log in as any existing account, including administrators, and take over the site. | ||||
| CVE-2026-16285 | 1 Wordpress-extensions | 1 Woocommerce Product Attachment | 2026-11-11 | 7.5 High |
| The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID. | ||||
| CVE-2026-16623 | 1 Wordpress-extensions | 1 Create Block Theme | 2026-11-11 | 8 High |
| The Create Block WordPress plugin before 2.10.0 does not correctly escape user-supplied text before writing it into a generated PHP pattern file, allowing a multisite subsite administrator (who holds the capability gating this action but is denied the capability that normally gates PHP file editing) to inject and execute arbitrary PHP code on the server. | ||||
| CVE-2026-16561 | 1 Wordpress-extensions | 1 Sunshine Photo Cart | 2026-11-11 | 7.5 High |
| The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to retrieve the comments of images belonging to private, password-protected or otherwise access-restricted galleries. | ||||
| CVE-2026-16602 | 1 Wordpress-extensions | 1 Passster | 2026-11-11 | 7.5 High |
| The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an unauthenticated REST endpoint, allowing unauthenticated users to disclose the content of non-public (draft, private, and pending) posts on sites that have a captcha provider configured. | ||||
| CVE-2026-16603 | 1 Wordpress-extensions | 1 Passster | 2026-11-11 | 7.5 High |
| The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST API, allowing unauthenticated users to read the full content, title, and excerpt of category-locked posts through the core REST API. | ||||
| CVE-2026-16604 | 1 Wordpress-extensions | 1 Passster | 2026-11-11 | 7.5 High |
| The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response before verifying the password, allowing unauthenticated users to recover the protected content without knowing the password. | ||||
| CVE-2026-14553 | 1 Wordpress-extensions | 1 Zportals | 2026-11-11 | 8.1 High |
| The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied content type and preserving the original file extension, allowing any authenticated user (Subscriber or higher) to upload arbitrary PHP files and achieve remote code execution. | ||||
| CVE-2026-16268 | 1 Wordpress-extensions | 1 Newsletters | 2026-11-11 | 8.2 High |
| The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before fetching a user-supplied URL on the server side, allowing unauthenticated attackers to make the site issue requests to arbitrary internal or external hosts. | ||||
| CVE-2026-18050 | 1 Wordpress-extensions | 1 Events Manager | 2026-11-11 | 7.5 High |
| The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves temporarily stored file uploads, allowing unauthenticated users to retrieve another user's in-progress upload when its temporary identifier is known. The identifier is high-entropy, is disclosed only to the uploader, and the file is removed on submission or by a scheduled cleanup, so a cross-user read is not achievable by guessing alone. | ||||
| CVE-2026-14829 | 1 Wordpress-extensions | 1 Checkimate | 2026-11-11 | 8.2 High |
| The Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13 does not properly restrict access to its license-management functionality, relying on a shared secret computed entirely from publicly available information, allowing unauthenticated attackers to deactivate the Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13's premium licensing state and erase the stored license key. | ||||