A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function...
CVE-2026-96603
A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirm_logged_in/confirm_user
#advisory
共收录 23334 条相关情报。
← 返回所有主题The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all...
CVE-2026-19125
The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and includi
A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function...
CVE-2026-96601
A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the...
CVE-2026-96604
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-57854
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects...
CVE-2026-96606
A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file M
The Import and export users and customers plugin for WordPress is vulnerable to Privilege...
CVE-2026-86583
The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up
A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the...
CVE-2026-96602
A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could hav...
CVE-2026-93577
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 1
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could hav...
CVE-2026-89078
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 1
elysia has Inefficient Algorithmic Complexity and Interpretation Conflict
CVE-2026-56669
Elysia v1.4.28 is vulnerable to denial-of-service attacks due to CPU exhaustion in the form data normalization code. El
ReactPress has SQL injection via dynamic column names in TypeORM query builders
CVE-2026-61685
## Summary ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP query parameter
plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length
### Impact When creating an Image or File with a very large filename, Plone can become unresponsive. Even if the content
plone.app.dexterity has a Denial of Service due to excessive title or description length
CVE-2026-57576
### Impact When creating content with a very large title or description field, Plone can become unresponsive. Even if th
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-80425
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du
Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting...
CVE-2026-82369
Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authentica
A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the...
CVE-2026-96556
A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the fi
IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially...
CVE-2026-6721
IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is inc
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-80379
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-80412
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to