Export limit exceeded: 381974 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (381974 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-18315 | 2 Themetechmount, Wordpress | 2 Truebooker-appointment-booking, Wordpress | 2026-08-21 | 9.8 Critical |
| The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all versions up to, and including, 1.2.6. This is due to the admin_user_create_cus AJAX handler lacking any authentication or capability check before passing the attacker-supplied truebooker_wp_user_id parameter directly to wp_update_user. This makes it possible for unauthenticated attackers to overwrite the email address of any WordPress user — including an administrator — and then complete the standard WordPress lost-password flow to fully take over the targeted account. | ||||
| CVE-2026-19615 | 2 Bowo, Wordpress | 2 Admin And Site Enhancements Ase, Wordpress | 2026-08-21 | 6.8 Medium |
| The Admin and Site Enhancements (ASE) WordPress plugin before 9.0.1 does not sanitise uploaded SVG files on every route it accepts them through, allowing users with a role the site owner granted upload access to store a file containing JavaScript which then executes in the browser of anyone who opens it. | ||||
| CVE-2026-76565 | 1 Phoca | 1 Phoca Cart Extension For Joomla | 2026-08-21 | N/A |
| Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7 | ||||
| CVE-2026-76569 | 1 Phoca | 1 Phoca Download Extension For Joomla | 2026-08-21 | N/A |
| Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4 | ||||
| CVE-2026-76564 | 1 Phoca | 1 Phoca Cart Extension For Joomla | 2026-08-21 | N/A |
| Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7 | ||||
| CVE-2026-77026 | 1 Tassos.gr | 1 Convert Forms Component For Joomia | 2026-08-21 | N/A |
| Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions. | ||||
| CVE-2026-66583 | 2 Wordpress, Wpmudev | 2 Wordpress, Forminator Forms | 2026-08-21 | 9.8 Critical |
| Unauthenticated PHP Object Injection in Forminator <= 1.57.0 versions. | ||||
| CVE-2026-66586 | 2 Themewinter, Wordpress | 2 Wpcafe, Wordpress | 2026-08-21 | 6.6 Medium |
| Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions. | ||||
| CVE-2026-63770 | 2 Glance Project, Glanceapp | 2 Glance, Glance | 2026-08-21 | 7.5 High |
| Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unauthenticated attackers to bypass brute-force lockout protections by supplying arbitrary values in the X-Forwarded-For request header when the server proxied option is enabled. Attackers can manipulate the leftmost value of the X-Forwarded-For header to make each login attempt appear to originate from a distinct IP address, preventing the per-IP failed-login counter from reaching the lockout threshold and enabling unlimited credential guessing against the authentication endpoint. | ||||
| CVE-2026-50774 | 2026-08-21 | 9.8 Critical | ||
| An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role. | ||||
| CVE-2026-52480 | 2026-08-21 | 6.5 Medium | ||
| An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service | ||||
| CVE-2026-76023 | 1 Google | 1 Chrome | 2026-08-21 | 8.8 High |
| Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-53762 | 1 Veracrypt | 1 Veracrypt | 2026-08-21 | 6.2 Medium |
| VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPT_BACKEND route SHA-256 and SHA-512 volume-header key derivation through derive_key_sha256 and derive_key_sha512 in src/Crypto/wolfCrypt.c, where the configured iterations value is discarded and wc_HKDF is used instead of PBKDF2-HMAC. Changing the PIM or iteration count therefore does not increase derivation cost, allowing an attacker with an affected container, disk image, or volume header to perform substantially cheaper offline password guesses. Official precompiled VeraCrypt binaries and normal distribution packages use the standard PBKDF2 backend and are not affected. Volumes created by an affected WOLFCRYPT=1 build require backup and recreation because corrected builds derive different keys. This issue is fixed in version 1.26.29. | ||||
| CVE-2026-16650 | 2 Wordpress, Wpcharitable | 2 Wordpress, Charitable | 2026-08-21 | 5.3 Medium |
| The Charitable WordPress plugin before 1.8.12 does not verify the authenticity of incoming Square payment webhook events in a default configuration, allowing unauthenticated attackers to forge webhook notifications that mark donations as paid without any real payment. | ||||
| CVE-2026-17559 | 2 Passster Project, Wordpress | 2 Passster, Wordpress | 2026-08-21 | 5.3 Medium |
| The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which REST API requests may bypass global password protection, comparing them as an unanchored substring of the request URI rather than against the resolved route, allowing an unauthenticated attacker to read the content of globally password-protected posts and pages. | ||||
| CVE-2026-18356 | 2 Limit Login Attempts Project, Wordpress | 2 Limit Login Attempts, Wordpress | 2026-08-21 | 3.7 Low |
| The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the account's email address, allowing an account an administrator intended to block from logging in to authenticate anyway. | ||||
| CVE-2026-77087 | 1 Paperclip | 1 Paperclipai | 2026-08-21 | 9.6 Critical |
| Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated API requests and execute commands through the process adapter. | ||||
| CVE-2026-17251 | 1 Tp-link | 1 Tl-mr6400 V7 | 2026-08-21 | N/A |
| A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7. An unauthenticated remote attacker can trigger the vulnerability by sending a specially crafted HTTP request containing a malformed session cookie header. Successful exploitation may cause the HTTP service process to crash, resulting in a denial-of-service condition and temporary loss of management or CGI functionality until service recovery. | ||||
| CVE-2026-17252 | 1 Tp-link | 1 Tl-mr6400 V7 | 2026-08-21 | N/A |
| A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the vulnerability by sending a specially crafted malformed HTTP request. Successful exploitation may cause the web service process to crash, resulting in a denial-of-service condition and temporary loss of access to the router's web management interface. | ||||
| CVE-2026-35163 | 1 Octoprint | 1 Octoprint | 2026-08-21 | N/A |
| OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popups use PNotify rendering for printer-controlled payload.command and payload.message values in src/octoprint/static/js/app/viewmodels/terminal.js without HTML escaping. An attacker who convinces a victim to print a crafted file can inject HTML and JavaScript into the notification, disrupt prints, read information available to the victim including sensitive settings when permitted, or perform actions in the victim's OctoPrint session. This issue is fixed in versions 1.11.8 and 2.0.0rc3. | ||||