A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy...
CVE-2026-94089
A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_aut
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery...
CVE-2026-88854
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar()
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft...
CVE-2026-88856
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension f
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft...
CVE-2026-88857
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension f
An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough...
CVE-2026-90817
An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import proce
A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function...
CVE-2026-94003
A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /c
NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten...
CVE-2026-94107
NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that gene
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup...
CVE-2026-94083
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected...
CVE-2026-94084
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.r
OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the...
CVE-2026-93985
OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template
The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of...
CVE-2026-86591
The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowi
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this...
CVE-2026-93741
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the functio
The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress...
CVE-2026-92229
The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitr
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up...
CVE-2026-84434
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.
The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all...
CVE-2026-89274
The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and inclu
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function...
CVE-2026-93740
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file
A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `...
CVE-2026-75885
A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` end
LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register...
CVE-2026-93839
LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allow
Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users...
CVE-2026-93868
Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecover.php, creati
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-84064
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to i