Export limit exceeded: 425822 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 16978 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (16978 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-119525 | 2 Wordpress-extensions, Wp Desk | 2 Dropshipping Xml For Woocommerce, Dropshipping Xml For Woocommerce | 2026-11-12 | 4.3 Medium |
| Missing Authorization vulnerability in WP Desk Dropshipping XML for WooCommerce dropshipping-xml-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dropshipping XML for WooCommerce: from n/a through 1.7.4. | ||||
| CVE-2026-123148 | 2 Tms, Wordpress-extensions | 2 Ivyforms, Ivyforms | 2026-11-12 | 5.3 Medium |
| Missing Authorization vulnerability in TMS IvyForms ivyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IvyForms: from n/a through 1.5.1. | ||||
| CVE-2026-119513 | 2 Ahmad, Wordpress-extensions | 2 Js Help Desk, Js Help Desk | 2026-11-12 | 5.3 Medium |
| Missing Authorization vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 5.0.3. | ||||
| CVE-2026-123462 | 2 Mycred, Wordpress-extensions | 2 Mycred, Mycred | 2026-11-12 | 5.3 Medium |
| Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2. | ||||
| CVE-2026-122660 | 2 Bakkbone Australia, Wordpress-extensions | 2 Floristpress, Floristpress | 2026-11-12 | 4.3 Medium |
| Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through 7.8.5. | ||||
| CVE-2026-106027 | 1 Wordpress-extensions | 1 Oxygen Mydata For Woocommerce | 2026-11-12 | 5.3 Medium |
| The Oxygen MyData for WooCommerce WordPress plugin before 3.0.9 does not have proper authorisation, nor validate the authenticity of the request, on one of its payment callbacks, allowing unauthenticated users to mark arbitrary WooCommerce orders as completed. | ||||
| CVE-2026-101542 | 1 Oracle | 2 Capacity, E-business Suite | 2026-11-12 | 8.8 High |
| Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Capacity. Successful attacks of this vulnerability can result in takeover of Oracle Capacity. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). | ||||
| CVE-2026-123391 | 1 Microsoft | 1 Sharepoint Server | 2026-11-12 | 8.8 High |
| Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-121668 | 1 Microsoft | 1 Azure Confidential Clean Room | 2026-11-12 | 7.7 High |
| Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network. | ||||
| CVE-2026-120782 | 1 Microsoft | 1 Visual Studio Code | 2026-11-12 | 7.8 High |
| Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | ||||
| CVE-2026-96845 | 1 Microsoft | 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more | 2026-11-12 | 7.8 High |
| Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-121355 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 9.1 Critical |
| Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does not require user interaction. | ||||
| CVE-2026-121574 | 2 Wordpress-extensions, Wpchill | 2 Passster, Passster | 2026-11-12 | 5.3 Medium |
| Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20. | ||||
| CVE-2026-96162 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-12 | 7.8 High |
| Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96029 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-12 | 7.8 High |
| Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-95988 | 1 Microsoft | 4 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 and 1 more | 2026-11-12 | 7.8 High |
| Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96133 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-12 | 5.5 Medium |
| Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-88176 | 1 Microsoft | 1 Sharepoint Server | 2026-11-12 | 8.8 High |
| Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-125431 | 2026-11-12 | 5.3 Medium | ||
| Missing Authorization vulnerability in Mamunur Rashid Food Menu – Restaurant Menu & Online Ordering for WooCommerce tlp-food-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Food Menu – Restaurant Menu & Online Ordering for WooCommerce: from n/a through 6.0.7. | ||||
| CVE-2026-125046 | 2026-11-12 | 5.3 Medium | ||
| Missing Authorization vulnerability in John-Michael L'Allier Create mediavine-create allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Create: from n/a through 3.1.1. | ||||