| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental <= 3.7 versions. |
| The weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce WordPress plugin before 2.1.3 does not properly escape a user-supplied parameter before reflecting it into an HTML attribute on a non-nonce-protected AJAX response, allowing unauthenticated attackers to deliver Reflected Cross-Site Scripting against any authenticated user (including administrators) via a crafted URL. |
| Unauthenticated Local File Inclusion in Printo <= 1.11 versions. |
| Unauthenticated Local File Inclusion in Gita <= 1.11 versions. |
| Unauthenticated Local File Inclusion in Grecko <= 5.17 versions. |
| The LearnPress WordPress plugin before 4.3.7 does not gate the `edit` context on one of its REST endpoint behind the `edit_users` capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted request |
| Unauthenticated Local File Inclusion in WineShop <= 3.17 versions. |
| Unauthenticated Local File Inclusion in Choreo <= 1.6 versions. |
| Unauthenticated Local File Inclusion in Eros <= 1.3 versions. |
| The Taskbuilder WordPress plugin before 5.0.8 does not properly sanitise a URL parameter before echoing it into inline JavaScript on a frontend page containing one of its shortcodes, leading to a Reflected Cross-Site Scripting vulnerability that can be triggered against any logged-in user. |
| Unauthenticated Local File Inclusion in Spike <= 1.2 versions. |
| Unauthenticated Local File Inclusion in ITactics <= 1.0 versions. |
| Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions. |
| An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to execute arbitrary code with kernel privileges. |
| Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code. |
| Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints. |
| A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7. The CGI component allows authenticated users to execute arbitrary shell commands with root privileges via the action=runcmd parameter. |
| Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions. |
| Contributor PHP Object Injection in Avada <= 3.15.3 versions. |
| Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions. |
