CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-102915 HIGH · 8.5 Subscriber Broken Access Control in WPO365
- CVE-2026-102387 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Xserver Migrator
- CVE-2026-100518 MEDIUM · 5.3 Unauthenticated Broken Authentication in Advanced Google reCAPTCHA
- CVE-2026-85153 NONE This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker…
- CVE-2026-105807 HIGH · 7.3 A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in…
- CVE-2026-105305 MEDIUM · 5.4 A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities…
- CVE-2026-94299 MEDIUM · 6.5 The elegro Crypto Payment WordPress plugin through 1.0.1 does not require a shared secret to be configured before trusting incoming payment notification requests, allowing unauthenticated…
- CVE-2026-94293 CRITICAL · 9.8 An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.
- CVE-2026-94278 MEDIUM · 5.5 The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any…
- CVE-2026-94271 MEDIUM · 5.3 The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout,…
- CVE-2026-94270 MEDIUM · 5.3 The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider notifications, and ships with that verification disabled by…
- CVE-2026-89289 MEDIUM · 5.3 The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the…
- CVE-2026-86786 MEDIUM · 5.3 The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX actions, allowing unauthenticated users to…
- CVE-2026-59358 NONE Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attacker holding a valid user access token to obtain…
- CVE-2026-59357 NONE Insufficient verification of data authenticity (CWE-345) in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 (inclusive) allows an authenticated UAA user…
- CVE-2026-57559 HIGH · 7.8 Memory corruption while processing service requests. Qualcomm
- CVE-2026-57555 HIGH · 7.8 Memory Corruption when executing system service routines due to improper handling of user input buffers. Qualcomm
- CVE-2026-57554 HIGH · 7.8 Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. Qualcomm
- CVE-2026-57546 HIGH · 7.5 Transient DOS when processing a continuous receive command with a zero-sized global configuration override. Qualcomm
- CVE-2026-57545 HIGH · 7.8 Memory corruption when processing draw objects of incorrect type during graphics command list execution. Qualcomm
- CVE-2026-57537 HIGH · 7.8 Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. Qualcomm
- CVE-2026-25302 HIGH · 7.1 Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. Qualcomm
- CVE-2026-25291 HIGH · 7.8 Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms. Qualcomm
- CVE-2026-25274 MEDIUM · 6.7 Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. Qualcomm
- CVE-2026-25273 MEDIUM · 6.7 Memory Corruption when processing camera operations due to out-of-bounds write during driver updates. Qualcomm
- CVE-2026-25272 MEDIUM · 6.7 Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation. Qualcomm
- CVE-2026-25270 MEDIUM · 6.7 Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver. Qualcomm
- CVE-2026-25269 MEDIUM · 6.7 Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size. Qualcomm
- CVE-2026-25267 HIGH · 7.8 Memory corruption when non-secure loader rewrites page tables before secure memory initialization. Qualcomm
- CVE-2026-25263 MEDIUM · 6.6 Geheugenbeschadiging tijdens het verwerken van IOCTL-opdracht aangeroepen vanuit gebruikersruimte naar de kernel met ongeldige parameters. Qualcomm
- CVE-2026-105778 CRITICAL · 9.9 A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi…
- CVE-2026-105776 HIGH · 7.3 A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admin_transaction.php. This manipulation…
- CVE-2026-105701 HIGH · 8.8 The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This…
- CVE-2026-97300 MEDIUM · 6.5 Unauthenticated Broken Access Control in WP Event Solution
- CVE-2026-75962 HIGH · 7.2 The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to…
- CVE-2026-41563 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Sitemovr
- CVE-2026-41558 HIGH · 7.5 Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro
- CVE-2026-39789 HIGH · 7.5 Unauthenticated Broken Access Control in Fluent Affiliate Pro
- CVE-2026-39760 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook
- CVE-2026-39723 HIGH · 7.5 Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning for WooCommerce: from n/a…
- CVE-2026-39599 MEDIUM · 4.3 Contributor Broken Access Control in WDS MCP Content Manager
- CVE-2026-32582 MEDIUM · 6.5 Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0.
- CVE-2026-32576 MEDIUM · 6.5 Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Faktur Pro…
- CVE-2026-105775 MEDIUM · 4.3 A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions…
- CVE-2026-105708 MEDIUM · 4.3 A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component…
- CVE-2026-105072 HIGH · 7.5 Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
- CVE-2026-105707 MEDIUM · 5.3 A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user_handler.go. The manipulation…
- CVE-2026-105706 MEDIUM · 4.3 A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery.…
- CVE-2026-105705 MEDIUM · 4.3 A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation results…
- CVE-2026-105704 HIGH · 7.3 A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument…