Export limit exceeded: 26160 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 425959 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (425959 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-125837 | 2 Thethemefoundry, Wordpress-extensions | 2 Make, Make | 2026-11-14 | 7.1 High |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thethemefoundry Make make allows Reflected XSS.This issue affects Make: from n/a through 1.10.10. | ||||
| CVE-2026-125855 | 2 Elextensions, Wordpress-extensions | 2 Elex Wordpress Helpdesk & Customer Ticketing System, Elex Wordpress Helpdesk & Customer Ticketing System | 2026-11-14 | 9.8 Critical |
| Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Object Injection.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.3.9. | ||||
| CVE-2026-125858 | 2 Cleverreach, Wordpress-extensions | 2 Cleverreach® Wp, Cleverreach Wp | 2026-11-14 | 6.3 Medium |
| Missing Authorization vulnerability in CleverReach CleverReach® WP cleverreach-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CleverReach® WP: from n/a through 1.5.26. | ||||
| CVE-2026-124970 | 2 Wordpress-extensions, Wp Base | 2 Wp Base Booking, Wp Base Booking | 2026-11-14 | 9.3 Critical |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.5.2. | ||||
| CVE-2026-124420 | 2 Themeisle, Wordpress-extensions | 2 Woody Ad Snippets, Woody Ad Snippets | 2026-11-14 | 7.1 High |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Woody ad snippets insert-php allows Reflected XSS.This issue affects Woody ad snippets: from n/a through 2.7.10. | ||||
| CVE-2026-124267 | 2 Noor Alam, Wordpress-extensions | 2 Gmail Smtp, Gmail Smtp | 2026-11-14 | 7.5 High |
| Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gmail SMTP: from n/a through 1.2.3.23. | ||||
| CVE-2026-124415 | 2 Alejandro, Wordpress-extensions | 2 Alex Reservations, Alex Reservations | 2026-11-14 | 9.3 Critical |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alejandro Alex Reservations alex-reservations allows SQL Injection.This issue affects Alex Reservations: from n/a through 2.4.8. | ||||
| CVE-2026-125432 | 2 Relywp, Wordpress-extensions | 2 Recaptcha For Woocommerce, Recaptcha For Woocommerce | 2026-11-14 | 5.3 Medium |
| Weak Password Recovery Mechanism for Forgotten Password vulnerability in RelyWP reCAPTCHA for WooCommerce recaptcha-woo allows Password Recovery Exploitation.This issue affects reCAPTCHA for WooCommerce: from n/a through 1.4.7. | ||||
| CVE-2026-63079 | 1 Rbh Access Technologies | 1 Integra32 Security Management System | 2026-11-14 | 9.8 Critical |
| RBH Access Technologies Integra32 Security Management System 5.1.11 R5.0 contains an unauthenticated deserialization vulnerability in its deprecated .NET Remoting service, exposed on TCP port 2001 via the AxcvcLt.dll library using BinaryServerFormatterSinkProvider at TypeFilterLevel.Full without requiring authentication. A remote unauthenticated attacker can send a malicious serialized gadget payload (such as a ysoserial.net TypeConfuseDelegate chain) to the IntegraURI object endpoint, or exploit MarshalByRefObject/MarshalByValue unmarshalling for arbitrary file read/write and SMB/NTLMv2 credential coercion, to achieve remote code execution as NT AUTHORITY\SYSTEM and fully compromise the host. | ||||
| CVE-2026-105671 | 1 Zenitel | 1 Zenitel Connect | 2026-11-14 | N/A |
| The login flow in Zenitel Connect before 1.11.0 returns different error responses depending on whether a submitted username exists, which allows remote attackers to enumerate valid user accounts via crafted login requests. | ||||
| CVE-2026-129105 | 1 Shenzhen Cudy Technology | 1 Tr3000 | 2026-11-14 | 6.5 Medium |
| Cudy TR3000 before 2.5.42 contains an option injection vulnerability that allows authenticated administrators to inject arbitrary pppd options by embedding quotes and newlines in L2TP credentials. Attackers can submit crafted usernames or passwords to the net.set_wan RPC method, which l2tp.sh writes into a pppd options file, adding options like logfile to the root pppd process. | ||||
| CVE-2026-129104 | 1 Shenzhen Cudy Technology | 1 Tr3000 | 2026-11-14 | 6.5 Medium |
| Cudy TR3000 before 2.5.42 contains a dnsmasq configuration injection vulnerability that allows authenticated administrators to inject directives by embedding a newline in the net.set_dhcp leasetime field. Attackers can append address= entries via /etc/init.d/dnsmasq to alter DNS answers for LAN clients, or insert invalid lines that stop dnsmasq. | ||||
| CVE-2026-129103 | 1 Shenzhen Cudy Technology | 1 Tr3000 | 2026-11-14 | 7.2 High |
| Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators to execute commands as root by injecting newlines into reboot_time. Attackers can submit a reboot_time value followed by a newline and crontab line, which /etc/init.d/autoreboot writes to the root crontab for crond to run. | ||||
| CVE-2026-129102 | 1 Shenzhen Cudy Technology | 1 Tr3000 | 2026-11-14 | 7.2 High |
| Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators to execute commands as root by injecting newlines into the IPsec keyexchange field of the vpn.set_conf RPC method. Attackers can append a second leftupdown directive to ipsec.conf, which StrongSwan's updown plugin runs as root when an attacker-controlled peer establishes the CHILD_SA. | ||||
| CVE-2026-129101 | 1 Shenzhen Cudy Technology | 1 Tr3000 | 2026-11-14 | 7.2 High |
| Cudy TR3000 before 2.5.42 contains a mass assignment vulnerability in the vpn.set_conf App RPC method that allows authenticated administrators to inject arbitrary OpenVPN server options. Attackers can set enabled=1 and a malicious up option in the openvpns object, which the openvpn-hotplug wrapper executes via /bin/sh as root. | ||||
| CVE-2026-129100 | 1 Shenzhen Cudy Technology | 1 Tr3000 | 2026-11-14 | 7.2 High |
| Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to execute commands as root by uploading crafted OpenVPN private or tls-auth keys. Attackers can close the inline key block with </key>, inject directives such as tls-verify that bypass the .ovpn denylist, and have OpenVPN execute the hook as root. | ||||
| CVE-2026-129099 | 1 Shenzhen Cudy Technology | 1 Tr3000 | 2026-11-14 | 7.2 High |
| Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to run root commands by importing a malicious OpenVPN client configuration. Attackers can include tls-verify or ipchange directives, which the incomplete denylist does not filter, to execute commands as root when the router connects to an attacker-controlled VPN endpoint. | ||||
| CVE-2026-105625 | 1 Zenitel | 1 Zenitel Connect | 2026-11-14 | N/A |
| The web interface in Zenitel Connect before 1.11.0 loads an integration iframe without sandboxing or origin restrictions, which allows remote attackers to present phishing content to authenticated users via a crafted frame source. | ||||
| CVE-2026-105622 | 1 Zenitel | 1 Zenitel Connect | 2026-11-14 | N/A |
| Improper restriction of excessive authentication attempts in the WAMP-CRA (challenge-response) authentication path in Zenitel Connect before 1.11.0 allows remote attackers to guess user passwords via unlimited authentication attempts, because the path, in which the broker issues a challenge and the client returns an HMAC of it keyed with the user's secret, applies no account lockout or rate limiting. Affected releases enforce a password policy of at least 12 characters including upper-case, lower-case, numeric and special characters, so practical exploitation requires a reused or predictable password rather than exhaustive guessing. The WAMP-CRA authentication path is removed in 1.11.0. | ||||
| CVE-2026-105624 | 1 Zenitel | 1 Zenitel Connect | 2026-11-14 | N/A |
| The login flow in Zenitel Connect before 1.11.0 applies per-account lockout on repeated failed login attempts, which allows remote attackers to cause a denial of service (temporary lockout of targeted user accounts from the web interface, repeatable for as long as the attack continues) via repeated failed login requests for a known or guessed username. Intercom call handling is not affected. | ||||