[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108124 | 9 Oct 2026 | CVSS 4.9 | VulnerabilityImproper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects… | |
| CVE-2026-108125 | 9 Oct 2026 | CVSS 7.1 | VulnerabilityImproper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects… | |
| CVE-2026-108103 | 9 Oct 2026 | CVSS 5.3 | open5gsOpen5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_dropped_dl_traffic_threshold() that allows remote… | |
| CVE-2026-108104 | 9 Oct 2026 | CVSS 4.8 | xerial snappy-javaXerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice… | |
| CVE-2026-108105 | 9 Oct 2026 | CVSS 5.9 | open5gsOpen5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows remote unauthenticated… | |
| CVE-2026-108106 | 9 Oct 2026 | CVSS 7.5 | xerial snappy-javaXerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a… | |
| CVE-2026-108107 | 9 Oct 2026 | CVSS 9.8 | hotspotbilling phpnuxbillPHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates… | |
| CVE-2026-108108 | 9 Oct 2026 | CVSS 7.1 | hotspotbilling phpnuxbillPHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chap_verify() returns true… | |
| CVE-2026-107806 | 9 Oct 2026 | CVSS 7.2 | Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config OverwriteNginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can… | Fix |
| CVE-2026-108100 | 9 Oct 2026 | CVSS 6.5 | danielbrendel hortusfox-webHortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted… | |
| CVE-2026-108101 | 9 Oct 2026 | CVSS 7.5 | danielbrendel hortusfox-webHortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that allows authenticated users to… | |
| CVE-2026-108102 | 9 Oct 2026 | CVSS 5.3 | open5gsOpen5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfcp/types.c that allows remote… | |
| CVE-2026-107804 | 9 Oct 2026 | CVSS 5.3 | Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockoutNginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not preserve the external client… | Fix |
| CVE-2026-107805 | 9 Oct 2026 | CVSS 7.5 | Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storageNginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file… | Fix |
| CVE-2026-105278 | 9 Oct 2026 | CVSS 9.8 | Grid Protection Alliance openPDC (Docker image)The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access… | |
| CVE-2026-104112 | 9 Oct 2026 | CVSS 6.8 | illumos-gateA missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server… | |
| CVE-2026-104113 | 9 Oct 2026 | CVSS 5.4 | OmniOSA double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request… | |
| CVE-2026-104114 | 9 Oct 2026 | CVSS 5.4 | illumos-gateA NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamd_door_switch() in… | |
| CVE-2026-104115 | 9 Oct 2026 | CVSS 5.4 | illumos-gateA stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. get_fs_locations() in… | |
| CVE-2026-104116 | 9 Oct 2026 | CVSS 1.9 | illumos-gateA missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones… | |
| CVE-2026-104117 | 9 Oct 2026 | CVSS 1.9 | illumos-gateA missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent IP multipathing (IPMP)… | |
| CVE-2026-102916 | 9 Oct 2026 | CVSS 6.8 | illumos-gateA reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS… | |
| CVE-2026-104081 | 9 Oct 2026 | CVSS 8.1 | kalcaddle KodExplorerKodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/helper.function.php, where a… | |
| CVE-2026-94067 | 9 Oct 2026 | CVSS 8.1 | Fuelthemes The VouxImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes The Voux… | |
| CVE-2026-94064 | 9 Oct 2026 | CVSS 8.8 | BuddhaThemes Neo | Barber Shop WordPress ThemeDeserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object Injection.This issue affects… | |
| CVE-2026-94065 | 9 Oct 2026 | CVSS 8.8 | BuddhaThemes ColorFolioDeserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue affects ColorFolio: from n/a… | |
| CVE-2026-94066 | 9 Oct 2026 | CVSS 7.1 | SpabRice PondImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpabRice Pond pond allows Reflected XSS.This… | |
| CVE-2026-92085 | 9 Oct 2026 | CVSS 5.4 | TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management SoftwareImproper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Industry and Trade Co. Ltd… | |
| CVE-2026-94063 | 9 Oct 2026 | CVSS 7.1 | ThemeREX Education CenterImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education Center education allows… | |
| CVE-2026-85479 | 9 Oct 2026 | CVSS 5.3 | Grid Protection Alliance openPDCThe STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network… | |
| CVE-2026-62026 | 9 Oct 2026 | CVSS 7.1 | MIGHTYminnow Dashboard NotesCross-Site Request Forgery (CSRF) vulnerability in MIGHTYminnow Dashboard Notes dashboard-notes allows Cross Site Request Forgery.This issue affects… | |
| CVE-2026-79363 | 9 Oct 2026 | CVSS 5.9 | VulnerabilityCloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An authenticated administrator can… | |
| CVE-2026-108063 | 9 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its… | |
| CVE-2026-107785 | 9 Oct 2026 | CVSS 6.3 | Sirius Computer, Inc. Crux AgentCrux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512… | |
| CVE-2026-107803 | 9 Oct 2026 | CVSS 6.5 | processmakerProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the `GET /api/1.0/tasks` endpoint in ProcessMaker is… | |
| CVE-2026-106581 | 9 Oct 2026 | CVSS 7.3 | Docker DesktopBefore 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package. An… | |
| CVE-2026-104629 | 9 Oct 2026 | CVSS 8.8 | Grid Protection Alliance openPDCA component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An… | |
| CVE-2026-105281 | 9 Oct 2026 | CVSS 7.5 | Grid Protection Alliance openPDCThe internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network… | |
| CVE-2026-101022 | 9 Oct 2026 | CVSS 4.3 | Grid Protection Alliance openPDCA Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be… | |
| CVE-2026-100730 | 9 Oct 2026 | CVSS 9.8 | Grid Protection Alliance openPDCA service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an… | |
| CVE-2026-96396 | 9 Oct 2026 | CVSS 4.9 | canva affinityThe Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating… | |
| CVE-2026-94061 | 9 Oct 2026 | CVSS 7.1 | Designthemes Whistle - Sports ClubImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designthemes Whistle - Sports Club… | |
| CVE-2026-94062 | 9 Oct 2026 | CVSS 8.1 | Fuelthemes WerkstattImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes Werkstatt… | |
| CVE-2026-96393 | 9 Oct 2026 | CVSS 3.6 | canva affinityThe Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading… | |
| CVE-2026-96394 | 9 Oct 2026 | CVSS 2.9 | canva affinityThe Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data… | |
| CVE-2026-96395 | 9 Oct 2026 | CVSS 3.6 | canva affinityThe Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails… | |
| CVE-2026-86405 | 9 Oct 2026 | CVSS 9.8 | Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS ModuleImproper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module… | |
| CVE-2026-8374 | 9 Oct 2026 | CVSS 8.5 | SwitchBot Lock Series LockMisuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access… | |
| CVE-2026-94058 | 9 Oct 2026 | CVSS 7.1 | Bracketweb TreckImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Treck treck allows Reflected… | |
| CVE-2026-94059 | 9 Oct 2026 | CVSS 7.1 | Bracketweb OgencyImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Ogency ogency allows Reflected… | |
| CVE-2026-94060 | 9 Oct 2026 | CVSS 7.1 | Bracketweb VoldorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Voldor voldor allows Reflected… | |
| CVE-2026-62028 | 9 Oct 2026 | CVSS 5.4 | bPlugins Before After Image Comparison – Image comparison for WPMissing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting… | |
| CVE-2026-62029 | 9 Oct 2026 | CVSS 6.5 | WPFunnels Team WPFunnelsImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPFunnels wpfunnels allows… | |
| CVE-2026-85531 | 9 Oct 2026 | CVSS 9.8 | Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS ModuleImproper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows… | |
| CVE-2026-105877 | 9 Oct 2026 | CVSS 6.9 | QuarkA QA AnalyticsInsertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive… | |
| CVE-2026-105883 | 9 Oct 2026 | CVSS 7.1 | ThemeHunk Th Shop ManiaMissing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop-mania allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-106601 | 9 Oct 2026 | CVSS 5.4 | Automattic JetpackAuthentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue… | |
| CVE-2026-106602 | 9 Oct 2026 | CVSS 4.8 | Automattic JetpackAuthentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue… | |
| CVE-2026-104392 | 9 Oct 2026 | CVSS 8.8 | ExpressTech Quiz And Survey MasterDeserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects… | |
| CVE-2026-105318 | 9 Oct 2026 | CVSS 7.1 | Datasolution AcyMailing SMTP NewsletterImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Datasolution AcyMailing SMTP Newsletter… | |
| CVE-2026-105870 | 9 Oct 2026 | CVSS 7.1 | Delight Star Inc. WP Associate Post R2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delight Star Inc. WP Associate Post R2… | |
| CVE-2026-105872 | 9 Oct 2026 | CVSS 7.2 | mklacroix Product Configurator for WooCommerceDeserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object… | |
| CVE-2026-101130 | 9 Oct 2026 | CVSS 3.6 | canva affinityThe Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in… | |
| CVE-2026-103220 | 9 Oct 2026 | CVSS 4.5 | canva affinityThe Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in… | |
| CVE-2026-103412 | 9 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache Camel KaravanImproper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan. A project file name supplied… | |
| CVE-2026-103413 | 9 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache Camel KaravanImproper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kubernetes.yaml`… | |
| CVE-2026-104079 | 9 Oct 2026 | CVSS 4.3 | Syed Balkhi Envira GalleryEnvira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged… | |
| CVE-2026-101094 | 9 Oct 2026 | CVSS 3.6 | canva affinityThe Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text… | |
| CVE-2026-85348 | 9 Oct 2026 | CVSS 4.3 | Unknown GDPR Data Request FormThe GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to… | |
| CVE-2026-86851 | 9 Oct 2026 | CVSS 6.5 | Unknown Livees CheckoutThe Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acting on request parameters on… | |
| CVE-2026-87846 | 9 Oct 2026 | CVSS 5.3 | Unknown Shipping for Nova PoshtaThe Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions… | |
| CVE-2026-89235 | 9 Oct 2026 | CVSS 6.8 | Unknown Testimonials by BestWebSoftThe Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parameter before using it in a SQL query, allowing… | |
| CVE-2026-62041 | 9 Oct 2026 | CVSS 5.4 | Ashok Dudhat WP Event ManagerMissing Authorization vulnerability in Ashok Dudhat WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-62042 | 9 Oct 2026 | CVSS 5.3 | unFocus Projects Scripts n StylesMissing Authorization vulnerability in unFocus Projects Scripts n Styles scripts-n-styles allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-39779 | 9 Oct 2026 | CVSS 4.3 | Asgaros ForumMissing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-62036 | 9 Oct 2026 | CVSS 4.3 | AREOI All Bootstrap BlocksExposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstrap Blocks all-bootstrap-blocks allows… | |
| CVE-2026-62039 | 9 Oct 2026 | CVSS 6.5 | bPlugins Html5 Audio PlayerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player html5-audio-player… | |
| CVE-2026-62040 | 9 Oct 2026 | CVSS 5.3 | DEV Institute Restrict User Access – Membership Plugin with ForceMissing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting… | |
| CVE-2026-107419 | 9 Oct 2026 | CVSS 5.4 | Cool Plugins AI Translation for PolylangMissing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allows Exploiting Incorrectly… | |
| CVE-2026-103329 | 9 Oct 2026 | CVSS 5.3 | Unknown Super PaymentsThe Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing… | |
| CVE-2026-79650 | 9 Oct 2026 | CVSS 6.1 | Apache Software Foundation Apache CXFApache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication. The issue occurs… | |
| CVE-2026-86463 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFApache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The search pattern can get stuck trying… | |
| CVE-2026-97468 | 9 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache CXFApache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token… | |
| CVE-2026-97791 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFIn Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That… | |
| CVE-2026-107937 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFIn Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300… | |
| CVE-2026-107938 | 9 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache CXFIn Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS… | |
| CVE-2026-108039 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFBy default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document. A very large request… | |
| CVE-2026-71575 | 9 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache CXFThe max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted… | |
| CVE-2026-73179 | 9 Oct 2026 | CVSS 8.1 | Apache Software Foundation Apache CXFImproper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote… | |
| CVE-2026-78384 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFCompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap. A small (~KB) crafted payload could expand to… | |
| CVE-2026-100227 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFImproper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The JAX-RS XML Signature interceptors… | |
| CVE-2026-96461 | 9 Oct 2026 | CVSS 7.5 | TMS AmeliaMissing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… | |
| CVE-2026-96518 | 9 Oct 2026 | CVSS 5.9 | properfraction ProfilePressMissing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-96539 | 9 Oct 2026 | CVSS 5.6 | Ultimate MemberIncorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects… | |
| CVE-2026-96553 | 9 Oct 2026 | CVSS 7.1 | Damian Góra FiboSearchImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Damian Góra FiboSearch… | |
| CVE-2026-96607 | 9 Oct 2026 | CVSS 7.1 | Basix NEX-FormsImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms… | |
| CVE-2026-96671 | 9 Oct 2026 | CVSS 8.8 | fifu.app Featured Image from URLCross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This… | |
| CVE-2026-96761 | 9 Oct 2026 | CVSS 7.1 | Welcart e-CommerceImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows… | |
| CVE-2026-96809 | 9 Oct 2026 | CVSS 9.3 | MultiNet Interactive AB EduAdmin BookingImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MultiNet Interactive AB EduAdmin Booking… | |
| CVE-2026-96331 | 9 Oct 2026 | CVSS 9.3 | wpdreams Ajax Search ProImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows… |
Page 97 of 168