getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array...
CVE-2026-94108
getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fail
#severity:high
共收录 5373 条相关情报。
← 返回所有主题getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that...
CVE-2026-94106
getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames
The Import and export users and customers WordPress plugin before 2.5.2 does not correctly...
CVE-2026-92540
The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users cap
The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the...
CVE-2026-92541
The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in
The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion...
CVE-2026-82842
The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly...
CVE-2026-81650
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of f
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be...
CVE-2026-87067
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deser
The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability...
CVE-2026-85017
The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX actio
The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not...
CVE-2026-87839
The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of t
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function...
CVE-2026-93958
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows...
CVE-2026-94056
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uni
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of...
CVE-2026-94054
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree...
CVE-2026-93993
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes
Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that...
CVE-2026-93992
Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write
Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input,...
CVE-2026-93990
Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input, allowing malformed UTF-1
QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin...
CVE-2026-93988
QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows a
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in...
CVE-2026-93991
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is...
CVE-2026-93742
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &...
CVE-2026-85658
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePres
The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all...
CVE-2026-1255
The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including