CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-105317 HIGH · 8.5 Subscriber SQL Injection in Paid Member Subscriptions
- CVE-2026-105071 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning
- CVE-2026-105070 HIGH · 8.8 Unauthenticated Privilege Escalation in Salon booking system
- CVE-2026-105061 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in WP Mailster
- CVE-2026-105059 MEDIUM · 6.5 Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of…
- CVE-2026-105058 HIGH · 8.8 Subscriber Privilege Escalation in WP User Profiles
- CVE-2026-105057 MEDIUM · 5.3 Unauthenticated Bypass Vulnerability in Zero Spam
- CVE-2026-104814 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Form Block
- CVE-2026-104757 HIGH · 7.2 Editor Privilege Escalation in Import and export users and customers
- CVE-2026-104747 HIGH · 8.1 Unauthenticated PHP Object Injection in Haaken
- CVE-2026-104672 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in GiveWP
- CVE-2026-104670 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in LearnPress
- CVE-2026-104406 HIGH · 7.3 Unauthenticated Broken Access Control in picu
- CVE-2026-104405 HIGH · 8.1 Unauthenticated Privilege Escalation in GiveWP
- CVE-2026-104399 NONE Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data. This issue affects Motors: from n/a through 1.4.124.
- CVE-2026-104395 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in picu
- CVE-2026-104394 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Charitable
- CVE-2026-104387 HIGH · 7.2 Unauthenticated Broken Access Control in PowerPress Podcasting
- CVE-2026-104385 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Groundhogg
- CVE-2026-103346 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This issue affects Payflex Payment Gateway:…
- CVE-2026-102915 HIGH · 8.5 Subscriber Broken Access Control in WPO365
- CVE-2026-102387 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Xserver Migrator
- CVE-2026-100518 MEDIUM · 5.3 Unauthenticated Broken Authentication in Advanced Google reCAPTCHA
- CVE-2026-85153 NONE This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker…
- CVE-2026-105807 HIGH · 7.3 A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in…
- CVE-2026-105305 MEDIUM · 5.4 A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities…
- CVE-2026-94299 MEDIUM · 6.5 The elegro Crypto Payment WordPress plugin through 1.0.1 does not require a shared secret to be configured before trusting incoming payment notification requests, allowing unauthenticated…
- CVE-2026-94293 CRITICAL · 9.8 An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.
- CVE-2026-94278 MEDIUM · 5.5 The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any…
- CVE-2026-94271 MEDIUM · 5.3 The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout,…
- CVE-2026-94270 MEDIUM · 5.3 The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider notifications, and ships with that verification disabled by…
- CVE-2026-89289 MEDIUM · 5.3 The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the…
- CVE-2026-86786 MEDIUM · 5.3 The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX actions, allowing unauthenticated users to…
- CVE-2026-59358 NONE Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attacker holding a valid user access token to obtain…
- CVE-2026-59357 NONE Insufficient verification of data authenticity (CWE-345) in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 (inclusive) allows an authenticated UAA user…
- CVE-2026-57559 HIGH · 7.8 Memory corruption while processing service requests. Qualcomm
- CVE-2026-57555 HIGH · 7.8 Memory Corruption when executing system service routines due to improper handling of user input buffers. Qualcomm
- CVE-2026-57554 HIGH · 7.8 Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. Qualcomm
- CVE-2026-57546 HIGH · 7.5 Transient DOS when processing a continuous receive command with a zero-sized global configuration override. Qualcomm
- CVE-2026-57545 HIGH · 7.8 Memory corruption when processing draw objects of incorrect type during graphics command list execution. Qualcomm
- CVE-2026-57537 HIGH · 7.8 Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. Qualcomm
- CVE-2026-25302 HIGH · 7.1 Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. Qualcomm
- CVE-2026-25291 HIGH · 7.8 Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms. Qualcomm
- CVE-2026-25274 MEDIUM · 6.7 Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. Qualcomm
- CVE-2026-25273 MEDIUM · 6.7 Memory Corruption when processing camera operations due to out-of-bounds write during driver updates. Qualcomm
- CVE-2026-25272 MEDIUM · 6.7 Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation. Qualcomm
- CVE-2026-25270 MEDIUM · 6.7 Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver. Qualcomm
- CVE-2026-25269 MEDIUM · 6.7 Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size. Qualcomm
- CVE-2026-25267 HIGH · 7.8 Memory corruption when non-secure loader rewrites page tables before secure memory initialization. Qualcomm
- CVE-2026-25263 MEDIUM · 6.6 Geheugenbeschadiging tijdens het verwerken van IOCTL-opdracht aangeroepen vanuit gebruikersruimte naar de kernel met ongeldige parameters. Qualcomm