Export limit exceeded: 386167 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (386167 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-85307 | 2026-09-03 | 5.3 Medium | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in Kevin Pirnie KP Agent Ready allows Retrieve Embedded Sensitive Data. This issue affects KP Agent Ready: from n/a before 1.2.08. | ||||
| CVE-2026-85304 | 2026-09-03 | 5.3 Medium | ||
| Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.17. | ||||
| CVE-2026-85303 | 2026-09-03 | 6.5 Medium | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Booking and Rental Manager allows Stored XSS. This issue affects Booking and Rental Manager: from n/a through 2.7.7. | ||||
| CVE-2026-85242 | 1 Lookyloo | 1 Playwrightcapture | 2026-09-03 | N/A |
| PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality. When only_global_lookup is enabled, the application validates the initial favicon URL to prevent requests to localhost, loopback, or other non-public network addresses. However, redirects followed by aiohttp were not subjected to the same validation. An attacker able to influence the content of a page processed by PlaywrightCapture could specify a publicly reachable favicon URL that responds with an HTTP redirect to a local or otherwise restricted address, such as 127.0.0.1, localhost, or an internal network service. Because aiohttp automatically followed the redirect, the resulting request could bypass the application's local-address restrictions and cause the PlaywrightCapture host to issue HTTP requests to resources that should not be externally reachable. Depending on the services reachable from the PlaywrightCapture host and how retrieved favicon data is subsequently exposed or processed, this could be used to probe internal HTTP services or potentially obtain information from otherwise inaccessible endpoints. The patch introduces an aiohttp request middleware that applies the existing local-URL validation to every request in the redirect chain. Requests resolving to restricted/local destinations are rejected before they are issued. | ||||
| CVE-2026-85212 | 1 Crmeb | 1 Crmeb | 2026-09-03 | 8.3 High |
| CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits requests. | ||||
| CVE-2026-85181 | 1 Dianping | 1 Cat | 2026-09-03 | 9.8 Critical |
| CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access. | ||||
| CVE-2026-85176 | 1 Dbgate | 1 Dbgate | 2026-09-03 | 8.8 High |
| DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file:// scheme resolution. Attackers can exploit getJslFileName() to bypass directory containment and access sensitive files including encrypted database credentials stored in connections configuration. | ||||
| CVE-2026-85012 | 1 Aws | 1 Amazon-codecatalyst Blueprints.blueprint | 2026-09-03 | 8 High |
| Improper neutralization of special elements used in an OS command (CWE-78) in the blueprint resynthesis framework in Amazon Web Services codecatalyst-blueprints before 0.3.156 might allow a user with permission to commit to a repository in the project to execute arbitrary commands in the blueprint resynthesis environment via shell metacharacters in the owner field of a [local] merge strategy entry in a crafted .ownership-file. Version 0.3.156 removes shell interpretation of the owner field, running the command directly rather than through a shell, and rejects values outside an allowlisted command form. This eliminates shell metacharacter command injection. To remediate this issue, users should upgrade to version 0.3.156 or later. No action is required for use of the Amazon CodeCatalyst service. Resynthesis runs in an isolated per-project environment with scoped credentials, and the service applies server-side validation there that rejects [local] merge strategy commands outside a restricted allowlisted form, including for blueprint versions published before 0.3.156. | ||||
| CVE-2026-84849 | 2026-09-03 | 6.5 Medium | ||
| Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce <= 2.3 versions. | ||||
| CVE-2026-84836 | 2026-09-03 | 7.1 High | ||
| Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions. | ||||
| CVE-2026-84814 | 2 Bricksforge, Wordpress | 2 Bricksforge, Wordpress | 2026-09-03 | 9.8 Critical |
| Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions. | ||||
| CVE-2026-84779 | 2026-09-03 | 8.1 High | ||
| Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents <= 1.51.0 versions. | ||||
| CVE-2026-84777 | 2 Really-simple-plugins, Wordpress | 2 Really Simple Ssl, Wordpress | 2026-09-03 | 7.4 High |
| Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions. | ||||
| CVE-2026-84773 | 2026-09-03 | 7.2 High | ||
| Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions. | ||||
| CVE-2026-84768 | 2 E4jvikwp, Wordpress | 2 Vikappointments Services Booking Calendar, Wordpress | 2026-09-03 | 9.3 Critical |
| Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions. | ||||
| CVE-2026-84765 | 2026-09-03 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions. | ||||
| CVE-2026-84762 | 2 Saad Iqbal, Wordpress | 2 Wp Easypay, Wordpress | 2026-09-03 | 5.3 Medium |
| Unauthenticated Bypass Vulnerability in WP EasyPay <= 4.5.3 versions. | ||||
| CVE-2026-84755 | 2026-09-03 | 6.5 Medium | ||
| Unauthenticated Broken Access Control in Mail Mint <= 1.31.0 versions. | ||||
| CVE-2026-84752 | 2 Rometheme, Wordpress | 2 Rtmkit, Wordpress | 2026-09-03 | 8.8 High |
| Contributor PHP Object Injection in RTMKit <= 2.1.5 versions. | ||||
| CVE-2026-84736 | 2026-09-03 | N/A | ||
| In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate validation for outbound HTTPS connections by default. When the TLS_CERTIFICATE_VALIDATION environment variable is unset or set to false, the component configures its HTTP transport to skip TLS certificate verification. As a result, an attacker able to intercept network communications between the Federator and external services could impersonate those services and intercept sensitive information transmitted over HTTPS, including OAuth client credentials and bearer tokens. The issue has been addressed by enabling TLS certificate validation by default. The TLS_CERTIFICATE_VALIDATION environment variable is now set to true in the default configuration provided by the Helm chart and Docker Compose deployment. | ||||