Export limit exceeded: 424331 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424331 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424331 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-84938 | 2026-11-10 | 7.2 High | ||
| The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Notification Dynamic-Data action_hook → Media Upload Chain (ID3 Metadata / html_attributes) in all versions up to, and including, 3.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that a Fusion Form is embedded on an admin-authored page (granting manage_options context to the Dynamic Data action hook callback), and that a Post Cards element configured to display attachment post types is present on a publicly accessible page so the planted shortcode payload is rendered. | ||||
| CVE-2026-93427 | 2026-11-10 | 7.2 High | ||
| The ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Registration Custom Field (Profile Cover) in all versions up to, and including, 7.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. | ||||
| CVE-2026-100386 | 2026-11-10 | 7.5 High | ||
| The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.54 via the uacf7_wpcf7_mail_components function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires the PDF Generator addon to be active and an administrator-configured PDF body template to be enabled for the targeted contact form. | ||||
| CVE-2026-120513 | 2026-11-10 | 8.2 High | ||
| The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the remove_csv_file_after_email_send function in all versions up to, and including, 3.6.2 This makes it possible for unauthenticated attackers to delete files within the wp-content/uploads directory on the server, which can lead to loss of uploaded content. On hardened Apache configurations, deletion of uploads/.htaccess can re-enable PHP execution inside the uploads directory. This attack is only possible when the Save-and-Continue addon is active (EVF_SAVE_AND_CONTINUE_VERSION is defined) and the 'Disable storing entry information' setting is enabled on the target form. Escaping the uploads directory and deleting files in the site root can be possible under rare circumstances. | ||||
| CVE-2026-44768 | 1 Sap Se | 1 Sap Webclient Ui | 2026-11-10 | 4.1 Medium |
| SAP WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy (CSP) configuration for certain restrictive directives. This vulnerability has a low impact on the integrity of the application. Confidentiality and availability are not impacted. | ||||
| CVE-2026-63287 | 2026-11-10 | 6.5 Medium | ||
| It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to tamper with audit log creation in AXIS Camera Station. | ||||
| CVE-2026-13387 | 2026-11-10 | 3.5 Low | ||
| A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended external content under specific conditions. | ||||
| CVE-2026-13312 | 2026-11-10 | 9.9 Critical | ||
| A vulnerability that could allow an attacker to compromise a system. | ||||
| CVE-2026-12964 | 2026-11-10 | 8 High | ||
| A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges. | ||||
| CVE-2026-12963 | 2026-11-10 | 7.4 High | ||
| A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server. | ||||
| CVE-2026-12389 | 2026-11-10 | 8.4 High | ||
| A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack. | ||||
| CVE-2026-8372 | 2026-11-10 | 8.8 High | ||
| A vulnerability that could allow an attacker to gain unauthorized access. | ||||
| CVE-2026-4762 | 2026-11-10 | 8.8 High | ||
| A vulnerability to perform a privilege escalation attack on the server as a non-admin user. | ||||
| CVE-2026-63288 | 2026-11-10 | 8.3 High | ||
| A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer. | ||||
| CVE-2026-14918 | 2026-11-10 | 5.3 Medium | ||
| The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected. | ||||
| CVE-2026-63282 | 2026-11-10 | 6.5 Medium | ||
| Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation. | ||||
| CVE-2026-14543 | 2026-11-10 | 3.9 Low | ||
| The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account. | ||||
| CVE-2026-72868 | 1 Dokploy | 1 Dokploy | 2026-11-10 | 9.9 Critical |
| Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey, region, endpoint, provider, and bucket fields from destination.testConnection into an rclone ls command executed through child_process.exec. The `withPermission("destination", "create")` path permits a low-privileged organization member to reach the mutation, close a quoted argument with a crafted field, and execute arbitrary commands in the root Dokploy container, which has access to the host Docker socket. This issue is fixed in version 0.29.13. | ||||
| CVE-2026-6715 | 1 Ibm | 1 Concert | 2026-11-10 | 9.8 Critical |
| IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating system command without adequate validation or sanitization. Successful exploitation allows remote attackers to execute arbitrary commands on the underlying operating system with the privileges of the affected service. | ||||
| CVE-2026-15266 | 1 Ibm | 1 Concert | 2026-11-10 | 9.8 Critical |
| IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host. | ||||