Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.
CVE-2026-49067
Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.
#severity:critical
共收录 1443 条相关情报。
← 返回所有主题Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms,...
CVE-2026-49109
Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, N
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.
CVE-2026-49764
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.
Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.
CVE-2026-48836
Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.
Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.
CVE-2026-48886
Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.
Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions.
CVE-2026-48881
Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions.
Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.
CVE-2026-45439
Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.
Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.
CVE-2026-42665
Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.
Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow
CVE-2026-54257
### Impact Most apps will crash and some may perform incorrect buffer allocations in the Node.js `Buffer` API resulting
Naxclow devices use a server-side, per-device relay credential that never rotates and is re...
CVE-2026-50101
Naxclow devices use a server-side, per-device relay credential that never rotates and is re-issued to the device on each
Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide salt...
CVE-2026-28742
Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide salt embedded in every firmwar
Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows...
CVE-2026-49060
Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This iss
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-39494
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Produc
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-42647
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport
Incomplete input validation and improperly configured folder permissions within Idira Privileged...
CVE-2026-45171
Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) v
Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that...
CVE-2026-49973
Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remot
Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its...
CVE-2026-45177
Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication
Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as...
CVE-2026-41005
Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a substitute for XML s
The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS...
CVE-2026-9648
The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certi
Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information...
CVE-2026-11839
Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows