CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-85423 HIGH · 8.8 A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails… Broadcom
- CVE-2026-85422 HIGH · 7.8 A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure… Broadcom
- CVE-2026-85421 HIGH · 8.8 A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks… Broadcom
- CVE-2026-85097 CRITICAL · 9.8 The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation…
- CVE-2026-94275 MEDIUM · 5.3 The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning its billing details, allowing unauthenticated attackers to…
- CVE-2026-94258 LOW · 2.7 The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored…
- CVE-2026-94246 MEDIUM · 6.3 The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a withdrawal submission belongs to the user…
- CVE-2026-94245 MEDIUM · 6.5 The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user submitting a wallet transfer owns the wallet being debited, allowing…
- CVE-2026-94244 MEDIUM · 4.3 The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain…
- CVE-2026-86828 MEDIUM · 6.6 The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library…
- CVE-2026-86827 MEDIUM · 5.3 The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handler actually originates from WordPress's internal scheduled-event dispatch,…
- CVE-2026-86826 MEDIUM · 5.9 The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on…
- CVE-2026-5769 MEDIUM · 4.1 A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on… Broadcom
- CVE-2026-5049 MEDIUM · 5.7 A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded… Broadcom
- CVE-2026-5048 HIGH · 8.0 In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious… Broadcom
- CVE-2026-5047 MEDIUM · 5.7 A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker… Broadcom
- CVE-2026-107459 CRITICAL · 9.8 The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the…
- CVE-2026-105260 MEDIUM · 4.3 The Database Addon For WPForms ( wpforms entries ) WordPress plugin before 1.1.1 does not verify the CSRF nonce when the field is omitted and…
- CVE-2026-105198 MEDIUM · 5.3 The Appointment Booking Plugin WordPress plugin before 5.7.3 does not verify that the caller owns the order referenced by an order-item identifier before rendering that…
- CVE-2026-105197 LOW · 2.7 The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to act on the specific record targeted…
- CVE-2026-105196 LOW · 3.3 The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user…
- CVE-2026-105195 LOW · 2.7 The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing…
- CVE-2026-105194 MEDIUM · 4.3 The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to the current user, allowing users with subscriber-level access to…
- CVE-2026-105193 MEDIUM · 4.8 The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient entropy, deriving each from a low-entropy time-seeded value, which…
- CVE-2026-104646 MEDIUM · 6.8 The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery…
- CVE-2026-104645 LOW · 2.7 The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions,…
- CVE-2026-103692 CRITICAL · 9.8 The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen…
- CVE-2026-103646 CRITICAL · 9.8 The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress…
- CVE-2026-103309 HIGH · 7.5 De GPTranslate WordPress-plug-in vóór 2.34.14 beperkt niet goed wie vertalingen kan opslaan en ontsnapt er niet aan wanneer ze worden uitgevoerd in vertaalde pagina's, waardoor…
- CVE-2026-94587 MEDIUM · 4.5 A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and… Broadcom
- CVE-2026-94586 MEDIUM · 6.8 A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and… Broadcom
- CVE-2026-94585 HIGH · 8.8 An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent… Broadcom Dell
- CVE-2026-94581 MEDIUM · 6.8 An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an… Broadcom
- CVE-2026-94579 HIGH · 8.0 An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before… Broadcom
- CVE-2026-94577 HIGH · 7.8 A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.… Broadcom
- CVE-2026-94576 HIGH · 8.0 An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under… Broadcom
- CVE-2026-87677 MEDIUM · 6.6 An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administrator… Broadcom
- CVE-2026-87664 HIGH · 7.8 A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process… Broadcom
- CVE-2026-87663 MEDIUM · 6.7 An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.… Broadcom
- CVE-2026-87662 MEDIUM · 6.7 Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, parameters are converted… Broadcom
- CVE-2026-87661 MEDIUM · 5.7 Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of… Broadcom
- CVE-2026-17609 CRITICAL · 9.1 The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including,…
- CVE-2026-17196 HIGH · 8.8 De Super Forms – Drag & Drop Form Builder plugin voor WordPress is kwetsbaar voor Unrestricted File Type Upload in alle versies tot en met…
- CVE-2026-107450 MEDIUM · 5.4 In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_lists.rs) depend only on the shared AccessSmartList permission and resolve the target list at Reader…
- CVE-2026-107449 LOW · 3.4 linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps::execute(), a GuzzleHttp client…
- CVE-2023-5649 MEDIUM · 5.5 An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs… Broadcom
- CVE-2023-5648 MEDIUM · 6.1 In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks… Broadcom
- CVE-2026-94584 LOW · 2.6 A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across… Broadcom
- CVE-2026-94580 MEDIUM · 4.5 An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1.… Broadcom
- CVE-2026-94575 MEDIUM · 5.7 A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC)… Broadcom