[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109190 | 13 Oct 2026 | CVSS 6.3 | conductor-oss conductorA vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java… | |
| CVE-2026-109402 | 13 Oct 2026 | CVSS 6.3 | conductor-oss conductorA vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file… | |
| CVE-2026-109160 | 13 Oct 2026 | CVSS 4.3 | PublicCMSA vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file… | |
| CVE-2026-109153 | 13 Oct 2026 | CVSS 6.3 | MosaicML ComposerA vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py… | |
| CVE-2026-109155 | 13 Oct 2026 | CVSS 6.3 | DeepPavlovA flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes… | |
| CVE-2026-109156 | 13 Oct 2026 | CVSS 6.3 | SeldonIO MLServerA vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlserver/env.py of the component… | |
| CVE-2026-109157 | 13 Oct 2026 | CVSS 9.9 | TRENDnet TEW-432BRPA vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file… | |
| CVE-2026-89204 | 13 Oct 2026 | CVSS 5.4 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries… | |
| CVE-2026-89205 | 13 Oct 2026 | CVSS 6.3 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization… | |
| CVE-2026-89206 | 13 Oct 2026 | CVSS 6.3 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization… | |
| CVE-2026-89208 | 13 Oct 2026 | CVSS 5.3 | Siemens Capital Embedded AR Classic 431-422A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303)… | |
| CVE-2026-89197 | 13 Oct 2026 | CVSS 8.8 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the… | |
| CVE-2026-89198 | 13 Oct 2026 | CVSS 8.8 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename… | |
| CVE-2026-89199 | 13 Oct 2026 | CVSS 8.8 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive… | |
| CVE-2026-89200 | 13 Oct 2026 | CVSS 6.7 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the… | |
| CVE-2026-89201 | 13 Oct 2026 | CVSS 7.5 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in… | |
| CVE-2026-89202 | 13 Oct 2026 | CVSS 6.5 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for… | |
| CVE-2026-89203 | 13 Oct 2026 | CVSS 4.3 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database… | |
| CVE-2026-72895 | 13 Oct 2026 | CVSS 7.7 | Siemens SIMATIC IPC BX-21AA vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G /… | |
| CVE-2026-78556 | 13 Oct 2026 | CVSS 7.4 | Siemens Industrial Edge App PublisherA vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the… | |
| CVE-2026-78557 | 13 Oct 2026 | CVSS 8.3 | Siemens Industrial Edge App PublisherA vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape… | |
| CVE-2026-85114 | 13 Oct 2026 | CVSS 7.5 | Siemens .NET Client Library for SIMATIC S7 Webserver APIA vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not… | |
| CVE-2026-85115 | 13 Oct 2026 | CVSS 5.5 | Siemens .NET Client Library for SIMATIC S7 Webserver APIA vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not… | |
| CVE-2026-89196 | 13 Oct 2026 | CVSS 8.8 | Siemens RUGGEDCOM CROSSBOWA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in… | |
| CVE-2026-63356 | 13 Oct 2026 | CVSS 6.1 | Siemens SIMATIC Drive Controller CPU 1504D TFAffected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on… | |
| CVE-2026-63357 | 13 Oct 2026 | CVSS 6.1 | Siemens SIMATIC Drive Controller CPU 1504D TFAffected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page… | |
| CVE-2026-63353 | 13 Oct 2026 | CVSS 9.6 | Siemens SIMATIC Drive Controller CPU 1504D TFAffected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This could allow… | |
| CVE-2026-63354 | 13 Oct 2026 | CVSS 9.6 | Siemens SIMATIC Drive Controller CPU 1504D TFAffected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace… | |
| CVE-2026-63355 | 13 Oct 2026 | CVSS 6.1 | Siemens SIMATIC Drive Controller CPU 1504D TFAffected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace… | |
| CVE-2026-63351 | 13 Oct 2026 | CVSS 6.1 | Siemens SIMATIC Drive Controller CPU 1504D TFAffected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering… | |
| CVE-2026-63352 | 13 Oct 2026 | CVSS 6.1 | Siemens SIMATIC Drive Controller CPU 1504D TFAffected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This… | |
| CVE-2026-44414 | 13 Oct 2026 | CVSS 6.8 | Siemens Industrial Edge Cloud Device (IECD)A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit -… | |
| CVE-2026-44415 | 13 Oct 2026 | CVSS 9.1 | Siemens Industrial Edge Device Kit - arm64 V1.10Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote… | |
| CVE-2026-59241 | 13 Oct 2026 | CVSS 8.8 | Siemens SIMATIC WinCC V7.5A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All… | |
| CVE-2026-63350 | 13 Oct 2026 | CVSS 9.6 | Siemens SIMATIC Drive Controller CPU 1504D TFAffected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an… | |
| CVE-2026-109149 | 13 Oct 2026 | CVSS 5.3 | beautifier js-beautifyA weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation… | |
| CVE-2026-109152 | 13 Oct 2026 | CVSS 5.4 | jbardin scp.pyA security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_file/_recv_pushd of the… | |
| CVE-2026-109162 | 13 Oct 2026 | CVSS 6.3 | TYPO3 CMSForms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the default storage folder… | Fix |
| CVE-2026-109854 | 13 Oct 2026 | CVSS 2.5 | Red Hat Enterprise Linux 10A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read… | |
| CVE-2026-102073 | 13 Oct 2026 | CVSS 8.2 | Siemens APOGEE MBC (PPC) (BACnet)A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC)… | |
| CVE-2026-102074 | 13 Oct 2026 | CVSS 7.5 | Siemens APOGEE MBC (PPC) (BACnet)A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC)… | |
| CVE-2026-102075 | 13 Oct 2026 | CVSS 7.5 | Siemens APOGEE MBC (PPC) (BACnet)A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC)… | |
| CVE-2026-102076 | 13 Oct 2026 | CVSS 7.5 | Siemens APOGEE MBC (PPC) (BACnet)A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC)… | |
| CVE-2026-109144 | 13 Oct 2026 | CVSS 5.3 | wbond certvalidatorA vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path… | |
| CVE-2026-89309 | 13 Oct 2026 | CVSS 10.0 | JTL SW GmbH JTL-WMSThe authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization… | |
| CVE-2026-96535 | 13 Oct 2026 | CVSS 5.1 | YouMind web applicationCross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL. This… | |
| CVE-2026-13138 | 13 Oct 2026 | CVSS 8.6 | Divasoft Software and E-Commerce Inc. Biletiva Ticketing PlatformClient-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows… | |
| CVE-2026-109143 | 13 Oct 2026 | CVSS 5.4 | calcom cal.comA vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file… | |
| CVE-2026-109684 | 13 Oct 2026 | CVSS 5.3 | TMS AmeliaMissing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… | |
| CVE-2026-109687 | 13 Oct 2026 | CVSS 7.6 | Link Whisper INC Link Whisper FreeImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper… | |
| CVE-2026-109691 | 13 Oct 2026 | CVSS 6.5 | BdThemes Prime Slider – Addons For ElementorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor… | |
| CVE-2026-109696 | 13 Oct 2026 | CVSS 5.4 | WP ManageNinja LLC FluentBoardsMissing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-109697 | 13 Oct 2026 | CVSS 6.5 | Brainstorm Force SureCartImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows… | |
| CVE-2026-109699 | 13 Oct 2026 | CVSS 5.4 | ThemeGrill User RegistrationMissing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-108495 | 13 Oct 2026 | CVSS 6.5 | Brainstorm Force SureFormsImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureForms sureforms allows… | |
| CVE-2026-108496 | 13 Oct 2026 | CVSS 5.3 | WP User ManagerMissing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-109110 | 13 Oct 2026 | CVSS 10.0 | Wavlink WL-WN592AX6A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation… | |
| CVE-2026-109114 | 13 Oct 2026 | CVSS 7.3 | AdithyaYelloju Restaurant-Management-SystemA vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability… | |
| CVE-2026-109115 | 13 Oct 2026 | CVSS 7.3 | AdithyaYelloju Restaurant-Management-SystemA vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some… | |
| CVE-2026-109116 | 13 Oct 2026 | CVSS 7.3 | AdithyaYelloju Restaurant-Management-SystemA vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the… | |
| CVE-2026-108174 | 13 Oct 2026 | CVSS 5.3 | PluginUs.Net FOXMissing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-108179 | 13 Oct 2026 | CVSS 7.6 | PluginUs.Net WOLFImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL… | |
| CVE-2026-108487 | 13 Oct 2026 | CVSS 6.5 | Hossni Mubarak Books GalleryImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak Books Gallery wp-books-gallery… | |
| CVE-2026-108488 | 13 Oct 2026 | CVSS 6.5 | IdeaBox Creations PowerPack Addons for ElementorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Addons for… | |
| CVE-2026-108489 | 13 Oct 2026 | CVSS 5.3 | PluginUs.Net Active Products Tables for WooCommerceInsertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce… | |
| CVE-2026-108490 | 13 Oct 2026 | CVSS 6.5 | LeapWorx Premium Addons for ElementorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor… | |
| CVE-2026-108492 | 13 Oct 2026 | CVSS 5.3 | Fullworks Plugins Quick Paypal PaymentsMissing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access… | |
| CVE-2026-108493 | 13 Oct 2026 | CVSS 5.3 | Karolína Vyskočilová Pay for Payment for WooCommerceMissing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly… | |
| CVE-2026-101020 | 13 Oct 2026 | CVSS 8.5 | Hammock Corporation AssetViewAn incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is… | |
| CVE-2026-103076 | 13 Oct 2026 | CVSS 5.4 | ThemeGrill User RegistrationCross-Site Request Forgery (CSRF) vulnerability in ThemeGrill User Registration user-registration allows Cross Site Request Forgery.This issue… | |
| CVE-2026-105881 | 13 Oct 2026 | CVSS 6.5 | ThemeGrill User RegistrationImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Registration user-registration… | |
| CVE-2026-106597 | 13 Oct 2026 | CVSS 5.3 | ThemeGrill User RegistrationMissing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-106598 | 13 Oct 2026 | CVSS 5.3 | ThemeGrill User RegistrationMissing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User… | |
| CVE-2026-89097 | 13 Oct 2026 | CVSS 4.3 | spacetime Ad Inserter – Ad Manager & AdSense AdsThe Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including… | |
| CVE-2026-109109 | 13 Oct 2026 | CVSS 10.0 | Wavlink WL-WN530BE1-AA vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file… | |
| CVE-2026-109703 | 13 Oct 2026 | CVSS 5.3 | WPGraphQLMissing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue affects WPGraphQL: from n/a… | |
| CVE-2026-14308 | 13 Oct 2026 | CVSS 4.9 | Zohocorp ManageEngine Malware Protection PlusZohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService. | |
| CVE-2026-15399 | 13 Oct 2026 | CVSS 4.9 | wpmart Animated Number CountersThe Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter in all versions up to, and… | |
| CVE-2026-67165 | 13 Oct 2026 | CVSS 5.4 | HCLSoftware ConnectionsHCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the… | |
| CVE-2026-102562 | 13 Oct 2026 | CVSS 7.2 | acyba AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPressThe AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe… | |
| CVE-2026-103417 | 13 Oct 2026 | CVSS 5.5 | Mozilla Firefox for iOSFirefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was… | Fix |
| CVE-2026-103418 | 13 Oct 2026 | CVSS 8.8 | Mozilla Firefox for iOSFirefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute… | Fix |
| CVE-2026-109107 | 13 Oct 2026 | CVSS 6.5 | Wavlink WL-WN592AX6A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This… | |
| CVE-2026-109108 | 13 Oct 2026 | CVSS 9.9 | Wavlink WL-WN530BE1-AA security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such… | |
| CVE-2026-102007 | 13 Oct 2026 | CVSS 7.2 | bitpressadmin Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email AutomationThe Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site… | |
| CVE-2026-75826 | 13 Oct 2026 | CVSS 8.5 | Teltonika Networks RUTCommand injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP… | |
| CVE-2026-108973 | 13 Oct 2026 | CVSS 7.3 | SourceCodester Contact Tracing SystemA vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file… | |
| CVE-2026-108974 | 13 Oct 2026 | CVSS 7.3 | SourceCodester E-Learning SystemA vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save… | |
| CVE-2026-108975 | 13 Oct 2026 | CVSS 7.3 | SourceCodester Library Management SystemA security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of… | |
| CVE-2026-109106 | 13 Oct 2026 | CVSS 4.4 | Polaris Office AppA security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the function… | |
| CVE-2026-103316 | 13 Oct 2026 | CVSS 7.1 | Logius DigiD for macOSThe macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via… | |
| CVE-2026-89271 | 13 Oct 2026 | CVSS 5.3 | Unknown WP-BusinessDirectoryThe WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload… | |
| CVE-2026-54870 | 13 Oct 2026 | CVSS 6.5 | wpweaver Weaver Xtreme Theme SupportImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweaver Weaver Xtreme Theme Support… | |
| CVE-2026-89269 | 13 Oct 2026 | CVSS 6.8 | Unknown WP TestimonialsThe WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when… | |
| CVE-2026-54869 | 13 Oct 2026 | CVSS 6.5 | IDX Broker IMPress for IDX BrokerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker… | |
| CVE-2026-54868 | 13 Oct 2026 | CVSS 6.5 | FolioVision FV Simpler SEOImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO… | |
| CVE-2026-54867 | 13 Oct 2026 | CVSS 6.5 | Griden Responsive SliderImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive Slider responsive-slider… | |
| CVE-2026-108972 | 13 Oct 2026 | CVSS 7.3 | SourceCodester Human Resource Management SystemA vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session_start of the… | |
| CVE-2026-108971 | 13 Oct 2026 | CVSS 9.6 | D-Link DCS-930LA flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency… | |
| CVE-2026-108970 | 13 Oct 2026 | CVSS 7.3 | itsmeravitejak Online-Examination-SystemA vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function… |
Page 81 of 168