Export limit exceeded: 416109 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 416109 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 416109 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (416109 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-11882 | 1 Wordpress-extensions | 1 Builderall For Wordpress | 2026-11-11 | 3.7 Low |
| The Builderall for WordPress plugin before 3.0.2 does not bind the state value of its public OAuth authentication routes to the initiating user session, allowing unauthenticated attackers to complete the connection flow and overwrite the stored third-party integration access token. A durable overwrite requires the site to already be connected to a paid account. | ||||
| CVE-2026-12696 | 1 Wordpress-extensions | 1 Wpforo Forum | 2026-11-11 | 5.4 Medium |
| The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant profile page, allowing users with a subscriber-level account to inject JavaScript that executes in the browser of any visitor who views the profile, including a logged-in administrator. | ||||
| CVE-2026-13329 | 1 Wordpress-extensions | 1 Wc Buckaroo Bpe Gateway | 2026-11-11 | 6.5 Medium |
| The Buckaroo Woocommerce Payments Plugin WordPress plugin before 4.9.0 does not perform any capability check or nonce validation on an AJAX action that processes payment capture refunds, allowing any authenticated user, including Subscribers, to trigger refunds against captured orders. | ||||
| CVE-2026-13596 | 1 Wordpress-extensions | 1 Participants Database | 2026-11-11 | 9.1 Critical |
| The Participants Database WordPress plugin before 2.7.8.4 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks. | ||||
| CVE-2025-0604 | 1 Redhat | 2 Build Keycloak, Red Hat Single Sign On | 2026-11-11 | 5.4 Medium |
| A flaw was found in Keycloak. When an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate the new credentials against AD. This vulnerability allows users whose AD accounts are expired or disabled to regain access in Keycloak, bypassing AD restrictions. The issue enables authentication bypass and could allow unauthorized access under certain conditions. | ||||
| CVE-2026-92091 | 1 Redhat | 5 Ansible Automation Platform, Enterprise Linux, Openshift Ai and 2 more | 2026-11-11 | 5.9 Medium |
| A flaw was found in jwcrypto. The JWK.import_key() function validates the key_ops JWK member for duplicate values using an algorithm with O(n^2) time complexity, and the length of key_ops is not bounded. A remote, unauthenticated attacker can supply a JWK with a large key_ops array to an application that passes attacker-controlled key material to a public key-import API (reachable via ECDH-ES key agreement, OIDC dynamic client registration, DPoP, or ACME account key registration, among others) to consume excessive CPU time, resulting in a denial of service. | ||||
| CVE-2026-80179 | 2 Red Hat, Redhat | 6 Red Hat Openshift Ai (rhoai), Ansible Automation Platform, Enterprise Linux and 3 more | 2026-11-11 | 5.9 Medium |
| A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force the JWE.deserialize() function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of service (DoS) for services that process untrusted JWE values. | ||||
| CVE-2026-79655 | 2 Red Hat, Redhat | 3 Enterprise Linux, Enterprise Linux, Rhel Els | 2026-11-11 | 7.8 High |
| A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink targets are not properly validated. This enables the attacker to write files to arbitrary locations on the system with the privileges of the sos clean process, which often runs as root. | ||||
| CVE-2026-18769 | 1 Beckhoff | 2 Tcrouter.sys, Twincat.xar.base.km | 2026-11-11 | 7.8 High |
| A local low privileged attacker can move arbitrary physical memory content via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices. | ||||
| CVE-2026-18768 | 1 Beckhoff | 2 Tcrouter.sys, Twincat.xar.base.km | 2026-11-11 | 7.8 High |
| A local low privileged attacker can access arbitrary physical memory or define its mapping via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices. | ||||
| CVE-2026-18767 | 1 Beckhoff | 2 Tcrouter.sys, Twincat.xar.base.km | 2026-11-11 | 7.8 High |
| A local low privileged attacker or process can access I/O ports via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices. | ||||
| CVE-2026-92905 | 1 Zohocorp | 4 Eventlog Analyzer, Log360, Manageengine Eventlog Analyzer and 1 more | 2026-11-11 | 5.3 Medium |
| Zoho Corporation ManageEngine EventLog Analyzer and Log360 versions below 13071 are vulnerable to a denial-of-service (DoS) vulnerability in the log collector component. | ||||
| CVE-2026-116468 | 1 Redhat | 2 Build Keycloak, Red Hat Single Sign On | 2026-11-11 | 6.6 Medium |
| A flaw was found in the group-move and organization group reparenting endpoints of the keycloak-services component. This component is responsible for core authentication and authorization services in the Red Hat build of Keycloak. The issue occurs because the system fails to check if a target parent group confers administrative roles when a group is moved. A delegated administrator can exploit this to move a group they control under an administrative group, causing all members to inherit full realm-admin privileges and gain complete control over the realm. | ||||
| CVE-2026-12062 | 1 Zohocorp | 1 Adaudit Plus | 2026-11-11 | 8.8 High |
| Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnerability in ADAudit Plus Reports API. | ||||
| CVE-2026-76981 | 1 Zohocorp | 1 Adaudit Plus | 2026-11-11 | 8.8 High |
| Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module. | ||||
| CVE-2026-111190 | 2026-11-11 | 8.1 High | ||
| The ARForms plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 7.2.4 via its form file-upload handler. The name of the stored file is taken from an attacker-controlled request header and is not adequately restricted to safe file types, and the plugin's file-type and content-safety checks can be evaded, allowing files that contain executable PHP code to be written to a publicly accessible directory. This makes it possible for unauthenticated attackers to upload malicious files to the affected site's server, which may make remote code execution possible. Exploitation requires a published form containing a File field to be publicly accessible on the site. | ||||
| CVE-2026-121837 | 1 Redhat | 3 Build Of Quarkus, Exploit Intelligence, Quarkus | 2026-11-11 | 4.3 Medium |
| A flaw was found in the REST Data Panache component of Quarkus. When a security constraint is applied to an entity property using the @SecureField annotation on its getter method rather than the field itself, the generated REST resource fails to enforce this constraint for filtering and sorting operations. This allows an authenticated user to infer sensitive data values by observing which records match specific filter criteria or how they are ordered, even though the values are omitted from the final response. | ||||
| CVE-2026-18912 | 1 Zohocorp | 2 Datasecurity Plus, Manageengine Datasecurity Plus | 2026-11-11 | 8.1 High |
| Zoho Corporation ManageEngine DataSecurity Plus versions below 6310 are vulnerable to an authenticated SQL injection vulnerability in reports module where an authenticated technician could execute arbitrary SQL queries. | ||||
| CVE-2026-89126 | 2026-11-11 | 10 Critical | ||
| SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system. | ||||
| CVE-2026-89017 | 1 Skyline Communications | 1 Dataminer | 2026-11-11 | 7.5 High |
| Skyline DataMiner BrokerGateway contains an embedded API key vulnerability that allows unauthenticated attackers to retrieve the installation-specific BrokerGateway key even while pairing mode is disabled. Attackers can use the retrieved key to obtain the unrestricted DataMinerUser.creds NATS credential and gain trusted message-bus access via TCP port 4222 without any prior DataMiner credentials. Fixed in DataMiner 10.6.9 CU1, 10.6.0 CU7, 10.5.0 CU19, and 10.4.0 CU22. | ||||