Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. ...
CVE-2026-86607
Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. This issue affects Hitach
#advisory
共收录 23043 条相关情报。
← 返回所有主题The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email'...
CVE-2026-103422
The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions u
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL...
CVE-2026-102251
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' pa
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array...
CVE-2026-82715
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability....
CVE-2026-110444
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers
Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default...
CVE-2026-14765
Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchUR
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation...
CVE-2026-104749
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vuln
Improper neutralization of special elements used in an OS command ('OS command injection')...
CVE-2026-110392
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open
The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id...
CVE-2026-103425
The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all vers
The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up...
CVE-2026-103423
The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7
The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is...
CVE-2026-104767
The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Esc
The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is...
CVE-2026-17092
The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authoriz
The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary...
CVE-2026-107652
The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions
A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows...
CVE-2026-110385
A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attack
The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up...
CVE-2026-104995
The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 v
Multiple Kasa devices contain an improper authentication vulnerability in the local device...
CVE-2026-108473
Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unaut
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This...
CVE-2026-110359
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privilege
An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows...
CVE-2026-88964
An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated serv
The Ignition Perspective module does not properly validate session privileges when determining...
CVE-2026-92817
The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and...
CVE-2026-105390
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 al