CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-93947 CRITICAL · 9.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from…
- CVE-2026-78341 MEDIUM · 6.5 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially… Dell
- CVE-2026-78340 MEDIUM · 6.3 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.… Dell
- CVE-2026-78339 MEDIUM · 6.3 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with… Dell
- CVE-2026-78027 MEDIUM · 5.8 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access… Dell
- CVE-2026-78026 MEDIUM · 4.3 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote… Dell
- CVE-2026-78025 HIGH · 7.5 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access… Dell
- CVE-2026-78024 HIGH · 7.7 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access… Dell
- CVE-2026-78023 HIGH · 7.1 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote… Dell
- CVE-2026-71884 NONE In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter…
- CVE-2026-62049 MEDIUM · 6.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Stored XSS.This issue affects JetBlocks For Elementor:…
- CVE-2026-107935 CRITICAL · 9.3 A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied…
- CVE-2026-84224 MEDIUM · 4.1 The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access…
- CVE-2026-84220 MEDIUM · 4.8 The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders them, and displays comments regardless of…
- CVE-2026-78022 MEDIUM · 6.8 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote… Dell
- CVE-2026-78021 LOW · 3.7 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenticated attacker with… Dell
- CVE-2026-78020 HIGH · 7.5 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially… Dell
- CVE-2026-78019 HIGH · 7.5 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker… Dell
- CVE-2026-78018 MEDIUM · 6.3 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged… Dell
- CVE-2026-78017 LOW · 3.8 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker… Dell
- CVE-2026-78016 LOW · 3.1 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker… Dell
- CVE-2026-78015 LOW · 3.7 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access… Dell
- CVE-2026-78013 MEDIUM · 5.2 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged… Dell
- CVE-2026-76779 HIGH · 7.4 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote… Dell
- CVE-2026-76769 MEDIUM · 4.3 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially… Dell
- CVE-2026-107655 MEDIUM · 4.0 A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null…
- CVE-2026-104635 NONE Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash the decoding process via a deeply nested JSON document. Any…
- CVE-2026-98384 NONE In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() sk_protocol lives in struct sock, not in…
- CVE-2026-98383 HIGH · 7.8 In de Linux kernel is de volgende kwetsbaarheid verholpen: bpf: bpf_skb_pull_data() niet toestaan voor lwt_SEG6LOCAL Een LWT_SEG6LOCAL-programma kan zijn gecachete SRH ongeldig maken met bpf_lwt_seg6_adjust_srh()…
- CVE-2026-98382 HIGH · 7.8 In de Linux kernel is de volgende kwetsbaarheid verholpen: bpf: Weiger dev-bound-only programma's op andere apparaten __bpf_offload_dev_match() valt terug op het vergelijken van offdev pointers…
- CVE-2026-98381 HIGH · 7.8 In de Linux kernel is de volgende kwetsbaarheid verholpen: veth: XDP-programmapointers beheren tijdens het wijzigen van het kanaalformaat veth_set_channels() haalt XDP-bronnen weg voor verwijderde RX-wachtrijen…
- CVE-2026-98380 NONE In de Linux kernel is de volgende kwetsbaarheid verholpen: net/sched: verwerp IDR-foutmeldingen bij het verwijderen van acties tcf_action_delete() verwijdert de referentie die wordt vastgehouden door…
- CVE-2026-98379 NONE In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rpfilter: reject routes without inet6_dev ip6_route_lookup() can return an error-free route whose rt6i_idev is…
- CVE-2026-98378 HIGH · 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpf_link_prime() inserts a link into link_idr before anon_inode_getfile()…
- CVE-2026-98377 NONE In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in __vlan_insert_inner_tag() __vlan_insert_inner_tag() only guarantees head room…
- CVE-2026-98376 HIGH · 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu array inner map replacement percpu_array_map_ops.map_meta_equal points to the generic bpf_map_meta_equal(),…
- CVE-2026-98375 NONE In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handle_incoming_queue() pulls pull_to bytes into the…
- CVE-2026-97075 MEDIUM · 6.5 Ontbrekende autorisatiekwetsbaarheid in WP Media WP Rocket wp-raket maakt het mogelijk om onjuist geconfigureerde toegangscontrolebeveiligingsniveaus te exploiteren. Dit probleem heeft invloed op WP Rocket: van…
- CVE-2026-4264 NONE Reflected Cross-Site Scripting (XSS) on the BeeTienda e-commerce platform, specifically in the latest demo version. The incident occurs due to a lack of proper sanitization…
- CVE-2026-19575 HIGH · 7.8 The user-mode verification handler for the device_deinit() system call, z_vrfy_device_deinit() in kernel/device.c, validated its dev argument with K_SYSCALL_OBJ_INIT(dev, K_OBJ_ANY). k_object_validate() short-circuits its type comparison when…
- CVE-2026-19574 HIGH · 7.0 The ARM64 MMU back-end allocated address space identifiers (ASIDs) for memory domains with a bare round-robin counter in arch_mem_domain_init() (arch/arm64/core/mmu.c). VM_ASID_BITS is 8, so only…
- CVE-2026-19571 MEDIUM · 6.7 The ITE IT8xxx2 SHI host-command backend (subsys/mgmt/ec_host_cmd/backends/ec_host_cmd_backend_shi_ite.c) copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data->in_msg…
- CVE-2026-19570 HIGH · 8.8 The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter…
- CVE-2026-19569 HIGH · 8.8 dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as obj_size_get(otype) + size, and for thread stack elements as STACK_ELEMENT_DATA_SIZE(size) (a…
- CVE-2026-106155 HIGH · 8.9 In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to…
- CVE-2026-106145 HIGH · 7.1 In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or…
- CVE-2025-14123 MEDIUM · 6.8 The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin…
- CVE-2026-97076 HIGH · 7.5 Executable Regular Expression Error vulnerability in WP Media WP Rocket wp-rocket allows Code Injection.This issue affects WP Rocket: from n/a before 3.23.5.
- CVE-2026-93548 HIGH · 8.8 The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any…
- CVE-2026-92990 MEDIUM · 5.3 The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a…