Export limit exceeded: 376707 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 376707 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (376707 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-67974 | 1 Nasa | 1 Cfs | 2026-08-13 | 7.5 High |
| A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via sending a crafted packet. | ||||
| CVE-2026-66151 | 1 Sonicwall | 1 Global Vpn Client | 2026-08-13 | 5.5 Medium |
| SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash. | ||||
| CVE-2026-16267 | 2026-08-13 | 8.1 High | ||
| The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from a public form submission, allowing unauthenticated attackers to inject arbitrary PHP objects. | ||||
| CVE-2026-16574 | 2 Dokan, Wordpress | 2 Ai Powered Woocommerce Multivendor Marketplace Solution:dokan: Ai Powered Woocommerce Multivendor Marketplace Solution, Wordpress | 2026-08-13 | 5.4 Medium |
| The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant their own customer free download access to another vendor's paid downloadable files. | ||||
| CVE-2026-16608 | 2 Download Monitor, Wordpress | 2 Download Monitor, Wordpress | 2026-08-13 | 5.3 Medium |
| The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging AJAX actions, and exposes the nonce protecting it to unauthenticated visitors, allowing unauthenticated users to inject arbitrary download log entries and inflate a site's download statistics. | ||||
| CVE-2026-16948 | 2 Solacewp, Wordpress | 2 Solace Extra, Wordpress | 2026-08-13 | 8.1 High |
| The Solace Extra WordPress plugin before 1.6.1 does not perform capability checks in several of its AJAX actions and exposes the nonce that protects them on admin pages reachable by low-privileged users, allowing users with a role as low as Subscriber to modify site-wide presentation settings and delete imported site-builder content. | ||||
| CVE-2026-16965 | 2026-08-13 | 4.3 Medium | ||
| The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber (and, via CSRF, any logged-in user) to update post meta on arbitrary posts and to deactivate the site's active templates. | ||||
| CVE-2026-16992 | 2026-08-13 | 6.5 Medium | ||
| The Create WordPress plugin before 2.5.4 does not perform an authorization check before returning content over one of its REST API routes, and that route additionally publishes the requested content as a side effect, allowing unauthenticated attackers to read unpublished content and to make it publicly available. | ||||
| CVE-2026-17014 | 2026-08-13 | 5.3 Medium | ||
| The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public REST endpoint actions, allowing unauthenticated users to delete the generated album export ZIP archives it stores. | ||||
| CVE-2026-16257 | 2026-08-13 | 8.2 High | ||
| The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer WordPress plugin before 1.5.4 has not been configured, allowing them to create arbitrary posts and pages and to disclose author account and taxonomy information. | ||||
| CVE-2026-17018 | 2026-08-13 | 4.9 Medium | ||
| The CubeWP Framework WordPress plugin through 1.1.30 does not perform a per-object read authorization check, nor restrict which metadata keys may be requested, on one of its REST API endpoints, allowing users with the Contributor role and above to read arbitrary post metadata (including that of other users' draft, pending, private, and password-protected posts) and arbitrary user metadata of any user, including administrators. | ||||
| CVE-2026-67285 | 1 Joomshaper.net | 1 Sp Page Builder Extension For Joomla | 2026-08-13 | N/A |
| Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system. | ||||
| CVE-2026-67286 | 1 Joomshaper.net | 1 Sp Page Builder Extension For Joomla | 2026-08-13 | N/A |
| Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name. | ||||
| CVE-2026-67287 | 1 Joomshaper.net | 1 Sp Page Builder Extension For Joomla | 2026-08-13 | N/A |
| Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input. | ||||
| CVE-2026-65937 | 1 Progress Software | 1 Whatsup Gold | 2026-08-13 | 8 High |
| In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content. | ||||
| CVE-2026-65939 | 1 Progress Software | 1 Whatsup Gold | 2026-08-13 | 6.8 Medium |
| In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root. | ||||
| CVE-2026-65941 | 1 Progress Software | 1 Whatsup Gold | 2026-08-13 | 8.8 High |
| In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account. | ||||
| CVE-2026-72788 | 1 Siyuan | 1 Siyuan | 2026-08-13 | 5.8 Medium |
| SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace state from publish readers. Unauthenticated attackers can retrieve the administrator's open documents, search terms, notebook paths, and private asset locations by calling the getConf endpoint without authentication. | ||||
| CVE-2026-72789 | 1 Siyuan | 1 Siyuan | 2026-08-13 | 8.6 High |
| SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating them as publicly accessible by default. Anonymous readers can enumerate and retrieve fully decrypted document content from unlocked encrypted notebooks through the publish API without authentication or key material. | ||||
| CVE-2026-72790 | 1 Siyuan | 1 Siyuan | 2026-08-13 | 5.8 Medium |
| SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/notebook/getNotebookInfo endpoint that returns notebook metadata without authorization checks. Attackers can read notebook names, document counts, sizes, and timestamps for closed or non-published notebooks that should be hidden from readers. | ||||