CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-105778 CRITICAL · 9.9 A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi…
- CVE-2026-105776 HIGH · 7.3 A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admin_transaction.php. This manipulation…
- CVE-2026-105701 HIGH · 8.8 The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This…
- CVE-2026-97300 MEDIUM · 6.5 Unauthenticated Broken Access Control in WP Event Solution
- CVE-2026-75962 HIGH · 7.2 The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to…
- CVE-2026-41563 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Sitemovr
- CVE-2026-41558 HIGH · 7.5 Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro
- CVE-2026-39789 HIGH · 7.5 Unauthenticated Broken Access Control in Fluent Affiliate Pro
- CVE-2026-39760 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook
- CVE-2026-39723 HIGH · 7.5 Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning for WooCommerce: from n/a…
- CVE-2026-39599 MEDIUM · 4.3 Contributor Broken Access Control in WDS MCP Content Manager
- CVE-2026-32582 MEDIUM · 6.5 Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0.
- CVE-2026-32576 MEDIUM · 6.5 Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Faktur Pro…
- CVE-2026-105775 MEDIUM · 4.3 A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions…
- CVE-2026-105708 MEDIUM · 4.3 A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component…
- CVE-2026-105072 HIGH · 7.5 Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
- CVE-2026-105707 MEDIUM · 5.3 A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user_handler.go. The manipulation…
- CVE-2026-105706 MEDIUM · 4.3 A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery.…
- CVE-2026-105705 MEDIUM · 4.3 A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation results…
- CVE-2026-105704 HIGH · 7.3 A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument…
- CVE-2026-105703 MEDIUM · 4.7 A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file…
- CVE-2026-105621 MEDIUM · 5.4 A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial…
- CVE-2026-105611 LOW · 2.7 A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail Endpoint.…
- CVE-2026-105610 MEDIUM · 4.7 A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter…
- CVE-2026-105573 MEDIUM · 4.3 A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity…
- CVE-2026-105572 MEDIUM · 4.3 A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice…
- CVE-2026-105571 HIGH · 7.3 A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component…
- CVE-2026-105487 MEDIUM · 6.3 A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_discovery of the file web/reNgine/tasks.py of the component…
- CVE-2026-105486 HIGH · 7.3 A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing…
- CVE-2026-105484 CRITICAL · 10.0 A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile…
- CVE-2026-104380 MEDIUM · 5.3 Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_one. On HTTP/2 and…
- CVE-2026-104044 MEDIUM · 6.2 A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM)…
- CVE-2026-104043 MEDIUM · 5.5 A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow…
- CVE-2026-104042 MEDIUM · 5.5 A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request…
- CVE-2026-104041 MEDIUM · 5.5 A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS) responder. Because…
- CVE-2026-104040 NONE Rejected reason: Red Hat Product Security has been notified that this CVE is a duplicated of CVE-2026-104047
- CVE-2026-104039 MEDIUM · 4.7 A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services. When handling Generic Security… Fedoraproject Redhat
- CVE-2026-92821 MEDIUM · 6.8 A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP (Lightweight Directory Access Protocol) environments, an…
- CVE-2026-105472 MEDIUM · 6.3 Er is een zwakte vastgesteld in het girishsaraf Online-Appointment-Booking-System tot f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Het getroffen element is een onbekende functie van het bestand book.php van de component…
- CVE-2026-104038 MEDIUM · 5.9 A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security…
- CVE-2026-104037 MEDIUM · 5.5 A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to…
- CVE-2026-104036 MEDIUM · 5.8 A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination…
- CVE-2026-104035 MEDIUM · 5.5 Er is een fout gevonden in SSSD. Een probleem in de Kerberos Credential Manager (KCM) -responder stelt een lokale gebruiker in staat om een Denial…
- CVE-2026-104034 MEDIUM · 4.7 A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder during Kerberos ticket-granting ticket (TGT) renewal, where a…
- CVE-2026-104033 MEDIUM · 5.4 Er is een fout gevonden in SSSD. Wanneer geconfigureerd om de vervaldatum van een account af te dwingen met behulp van LDAP (Lightweight Directory Access…
- CVE-2026-104032 MEDIUM · 5.5 A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization… Fedoraproject Redhat
- CVE-2026-104031 MEDIUM · 5.5 A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until… Fedoraproject Redhat
- CVE-2026-82989 CRITICAL · 9.8 Er is een invoerinjectie in vCast blootgestelde netwerkservices in ViewSonic ViewBoard waarmee een externe, niet-geverifieerde aanvaller willekeurige invoer in service-eindpunten kan injecteren via netwerkgebaseerde HTTP-verzoeken…
- CVE-2026-82988 HIGH · 7.5 Er bestaat een willekeurig bestandsdownloadmechanisme in vCast APK-leveringsmechanisme in ViewSonic ViewBoard unknown, waardoor een externe, niet-geverifieerde aanvaller een onbevoorrechte APK-installatie kan activeren via een kwaadaardige…
- CVE-2026-105786 NONE Joplin is een open source notitie- en to-do-applicatie die notities en lijsten organiseert in notitieblokken. Voorafgaand aan 3.7.13 accepteert packages/server/src/models/ApplicationModel.ts een door de beller gekozen…