[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112101 | 19 Oct 2026 | CVSS 4.3 | BlackBeltTechnology pi-agent-dashboardA vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file… | |
| CVE-2026-112102 | 19 Oct 2026 | CVSS 6.3 | AXA Group NLP.jsA vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file… | |
| CVE-2026-112183 | 19 Oct 2026 | CVSS 4.8 | MISPMISP contains a CSS injection vulnerability in the remote event preview feature. When a user previews an event from a linked MISP server, the colour… | |
| CVE-2026-108823 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinExposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. The impact is minor unless job services are… | |
| CVE-2026-108833 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinDefault startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue… | |
| CVE-2026-108837 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinAllocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacker has got project admin permission, an cache API… | |
| CVE-2026-110379 | 19 Oct 2026 | CVSS 7.1 | Ays Pro Quiz MakerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected… | |
| CVE-2026-110887 | 19 Oct 2026 | CVSS 9.9 | HivePressImproper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue… | |
| CVE-2026-110898 | 19 Oct 2026 | CVSS 6.4 | WPDeveloper Essential Addons for ElementorIncorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege… | |
| CVE-2026-111398 | 19 Oct 2026 | CVSS 7.7 | PT Norther Lights Production MapSVGImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG… | |
| CVE-2026-108762 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinPath-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to public… | |
| CVE-2026-108764 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinServer-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network… | |
| CVE-2026-108766 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinMissing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed to public network… | |
| CVE-2026-108771 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinMissing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the kylin services that… | |
| CVE-2026-108776 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. The impact is moderate if kylin… | |
| CVE-2026-108780 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinPotential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to… | |
| CVE-2026-112161 | 19 Oct 2026 | CVSS 8.5 | Mobatek MobaXtermMobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write… | |
| CVE-2026-112178 | 19 Oct 2026 | CVSS 7.1 | MISPMISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The authorization check accepted any attribute or object… | |
| CVE-2026-112179 | 19 Oct 2026 | CVSS 5.3 | MISPIn MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push. The filtering of… | |
| CVE-2026-112180 | 19 Oct 2026 | CVSS 5.1 | MISPMISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, several associated records are not removed from the… | |
| CVE-2026-13695 | 19 Oct 2026 | CVSS 8.8 | IntegratecSQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via… | |
| CVE-2026-111438 | 19 Oct 2026 | CVSS 6.5 | openGauss-server在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/SW 复制发送方时，不要求 is_node_internal_connection()，直接调用… | |
| CVE-2026-112095 | 19 Oct 2026 | CVSS 3.5 | SourceCodester Inventory SystemA flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products_handler.php?action=save of the… | |
| CVE-2026-112096 | 19 Oct 2026 | CVSS 3.5 | SourceCodester Inventory SystemA vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file… | |
| CVE-2026-112097 | 19 Oct 2026 | CVSS 3.5 | SourceCodester Inventory SystemA vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file… | |
| CVE-2026-112098 | 19 Oct 2026 | CVSS 6.3 | DeepPavlovA security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the… | |
| CVE-2026-104679 | 19 Oct 2026 | CVSS 7.1 | Yamaha Corporation VOCALOID6 EditorVOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the… | |
| CVE-2026-112091 | 19 Oct 2026 | CVSS 5.3 | Dav-ee dairy-management-systemA flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted… | |
| CVE-2026-112092 | 19 Oct 2026 | CVSS 4.3 | subhajitkhan online-clinic-management-systemA flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is the… | |
| CVE-2026-112093 | 19 Oct 2026 | CVSS 4.3 | subhajitkhan online-clinic-management-systemA vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The impacted element… | |
| CVE-2026-112094 | 19 Oct 2026 | CVSS 5.5 | michaelrsweet mxmlA security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file.c. The… | |
| CVE-2026-111439 | 19 Oct 2026 | CVSS 4.3 | openGauss-server在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks()… | |
| CVE-2026-112090 | 19 Oct 2026 | CVSS 6.3 | Dav-ee dairy-management-systemA vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d… | |
| CVE-2026-86791 | 19 Oct 2026 | CVSS 5.3 | Unknown iPOSpays Payment Gateway for WooCommerceThe iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an… | |
| CVE-2026-91831 | 19 Oct 2026 | CVSS 3.8 | Unknown Subscribe to CommentsThe Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it… | |
| CVE-2026-94228 | 19 Oct 2026 | CVSS 5.3 | Unknown TrueBookerThe TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is… | |
| CVE-2026-94229 | 19 Oct 2026 | CVSS 5.3 | Unknown TrueBookerThe TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation summary, allowing… | |
| CVE-2026-94230 | 19 Oct 2026 | CVSS 5.3 | Unknown TrueBookerThe TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted… | |
| CVE-2026-94231 | 19 Oct 2026 | CVSS 5.3 | Unknown TrueBookerThe TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users… | |
| CVE-2026-94272 | 19 Oct 2026 | CVSS 5.3 | Unknown Snap FinanceThe Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorised… | |
| CVE-2026-94294 | 19 Oct 2026 | CVSS 5.3 | Unknown App BuilderThe App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-supplied data to one of its… | |
| CVE-2026-112089 | 19 Oct 2026 | CVSS 4.7 | Dav-ee dairy-management-systemA security vulnerability has been detected in Dav-ee dairy-management-system… | |
| CVE-2026-16460 | 19 Oct 2026 | CVSS 7.4 | Red Hat Enterprise Linux 10A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the… | |
| CVE-2026-74921 | 19 Oct 2026 | CVSS 6.8 | Unknown Document GalleryThe Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a… | |
| CVE-2026-74922 | 19 Oct 2026 | CVSS 5.3 | Unknown Document GalleryThe Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared… | |
| CVE-2026-76740 | 19 Oct 2026 | CVSS 7.2 | Hewlett Packard Enterprise HPE Compute Scale-up Server 3200 platformA security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited… | |
| CVE-2026-103311 | 19 Oct 2026 | CVSS 5.3 | Unknown Coinbase Commerce Payment Gateway for WooCommerceThe Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of incoming payment webhook… | |
| CVE-2026-106010 | 19 Oct 2026 | CVSS 5.3 | Unknown BDM Digital Payment GatewayThe BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status update route and treats… | |
| CVE-2026-110034 | 19 Oct 2026 | CVSS 3.7 | Unknown Salon Booking SystemThe Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a… | |
| CVE-2026-112087 | 19 Oct 2026 | CVSS 6.3 | itsourcecode Online Cake Ordering SystemA weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php… | |
| CVE-2026-112088 | 19 Oct 2026 | CVSS 6.3 | Dav-ee dairy-management-systemA weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d… | |
| CVE-2026-89286 | 19 Oct 2026 | CVSS 5.3 | Unknown FormFlow for GoHighLevel (GHL)The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible… | |
| CVE-2026-91046 | 19 Oct 2026 | CVSS 4.3 | Unknown ElementsReady Addons for ElementorThe ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its… | |
| CVE-2026-91047 | 19 Oct 2026 | CVSS 5.3 | Unknown ElementsReady Addons for ElementorThe ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads… | |
| CVE-2026-94273 | 19 Oct 2026 | CVSS 5.3 | Unknown Snap FinanceThe Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved… | |
| CVE-2026-76739 | 19 Oct 2026 | CVSS 4.3 | Hewlett Packard Enterprise HPE Compute Scale-up Server 3200 platformA potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to… | |
| CVE-2026-112082 | 19 Oct 2026 | CVSS 7.5 | sgl-project SGLangA vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file… | |
| CVE-2026-112083 | 19 Oct 2026 | CVSS 5.3 | sgl-project SGLangA security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of… | |
| CVE-2026-112086 | 19 Oct 2026 | CVSS 6.3 | ESPnetA vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_model.py of… | |
| CVE-2026-108121 | 19 Oct 2026 | CVSS 6.9 | Koozali SME ServerBrian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215… | |
| CVE-2026-112081 | 19 Oct 2026 | CVSS 6.3 | hankcs HanLPA vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file… | |
| CVE-2026-108120 | 19 Oct 2026 | CVSS 7.7 | koozali SME ServerBrian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version… | |
| CVE-2026-106028 | 19 Oct 2026 | CVSS 5.3 | Unknown ActiveTrail for WooCommerceThe ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing… | |
| CVE-2026-106933 | 19 Oct 2026 | CVSS 6.8 | Unknown Blaze Demo ImporterThe Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media… | |
| CVE-2026-106014 | 19 Oct 2026 | CVSS 5.3 | Unknown Gateway for Vantiv on WCThe Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its… | |
| CVE-2026-112077 | 19 Oct 2026 | CVSS 5.6 | radareorg radare2A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. This issue affects the function r_core_cmd_str_pipe in the library… | |
| CVE-2026-112078 | 19 Oct 2026 | CVSS 6.3 | RVC-Project Retrieval-based-Voice-Conversion-WebUIA flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function change_info_ of the file… | |
| CVE-2026-112079 | 19 Oct 2026 | CVSS 6.3 | hankcs HanLPA vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_as_vocab_tensor of the file… | |
| CVE-2026-112080 | 19 Oct 2026 | CVSS 6.3 | LlamaChinese Llama-ChineseA vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function… | |
| CVE-2026-112075 | 19 Oct 2026 | CVSS 6.3 | unslothai unslothA weakness has been identified in unslothai unsloth up to 0.1.501-beta. This affects the function FastSentenceTransformer._is_transformer_module_ref… | |
| CVE-2026-112076 | 19 Oct 2026 | CVSS 5.6 | alexta69 MeTubeA security vulnerability has been detected in alexta69 MeTube up to 2026.09.28. This vulnerability affects the function… | |
| CVE-2026-112045 | 19 Oct 2026 | CVSS 5.4 | donetickA vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file… | |
| CVE-2026-112073 | 19 Oct 2026 | CVSS 6.3 | Tencent ncnnA vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the function… | |
| CVE-2026-112074 | 19 Oct 2026 | CVSS 6.3 | Tencent ncnnA security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function… | |
| CVE-2026-111440 | 19 Oct 2026 | CVSS 7.0 | openGauss-server openGauss-connector-jdbc在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger 类名调用 Class.forName… | |
| CVE-2026-112044 | 19 Oct 2026 | CVSS 7.3 | dotnet eShopA security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function… | |
| CVE-2026-102503 | 19 Oct 2026 | CVSS 9.3 | Google SAMMissing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in… | |
| CVE-2026-103091 | 19 Oct 2026 | CVSS 9.3 | Google SAMMissing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough in… | |
| CVE-2026-111441 | 19 Oct 2026 | CVSS 8.1 | openGauss-server在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖… | |
| CVE-2026-112042 | 19 Oct 2026 | CVSS 3.5 | diem-project diemA security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This issue affects the function… | |
| CVE-2026-112043 | 19 Oct 2026 | CVSS 6.3 | calcom cal.comA weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the function createWebhookProcedure of the file… | |
| CVE-2026-112037 | 19 Oct 2026 | CVSS 3.7 | diem-project diemA flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown function of the file… | |
| CVE-2026-112038 | 19 Oct 2026 | CVSS 2.4 | diem-project diemA vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function… | |
| CVE-2026-112039 | 19 Oct 2026 | CVSS 2.4 | diem-project diemA vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this issue is the function append of the… | |
| CVE-2026-112040 | 19 Oct 2026 | CVSS 4.3 | diem-project diemA vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unknown part of the file… | |
| CVE-2026-112041 | 19 Oct 2026 | CVSS 3.7 | diem-project diemA vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function… | |
| CVE-2026-108983 | 19 Oct 2026 | CVSS 9.8 | GeoVision Inc. GV-ASManagerA vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . | |
| CVE-2026-108984 | 19 Oct 2026 | CVSS 7.5 | GeoVision Inc. GV-ASManagerA vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . | |
| CVE-2026-112034 | 19 Oct 2026 | CVSS 4.3 | aircheng-org iWebShop-5A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the function IController::redirect of the file… | |
| CVE-2026-112035 | 19 Oct 2026 | CVSS 6.3 | aircheng-org iWebShop-5A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send_message_mobile of the file… | |
| CVE-2026-112036 | 19 Oct 2026 | CVSS 4.3 | Artifex MuPDFA vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the… | |
| CVE-2026-112033 | 19 Oct 2026 | CVSS 4.3 | aircheng-org iWebShop-5A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function admin_repwd/admin_repwd_act of the… | |
| CVE-2026-112031 | 19 Oct 2026 | CVSS 3.5 | Chamilo LMSA vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file… | |
| CVE-2026-112032 | 19 Oct 2026 | CVSS 4.7 | aircheng-org iWebShop-5A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The… | |
| CVE-2026-112030 | 19 Oct 2026 | CVSS 6.3 | diem-project diemA vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php… | |
| CVE-2026-112027 | 18 Oct 2026 | CVSS 5.3 | light0011 cmsA vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this… | |
| CVE-2026-112028 | 18 Oct 2026 | CVSS 6.5 | light0011 cmsA flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is… | |
| CVE-2026-112029 | 18 Oct 2026 | CVSS 2.5 | diem-project diemA vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php… | |
| CVE-2026-112111 | 18 Oct 2026 | CVSS 5.1 | Bootstrap Shortcodes project Bootstrap ShortcodesThe Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The… | |
| CVE-2026-112112 | 18 Oct 2026 | CVSS 2.3 | nic BIRDAn IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching… |
Page 34 of 168