Subscriber SQL Injection in Charitable <= 1.8.12.1 versions.
CVE-2026-81287
Subscriber SQL Injection in Charitable <= 1.8.12.1 versions.
#severity:high
共收录 5383 条相关情报。
← 返回所有主题Unauthenticated Cross Site Scripting (XSS) in Tailored Tools <= 3.0.2 versions.
CVE-2026-81765
Unauthenticated Cross Site Scripting (XSS) in Tailored Tools <= 3.0.2 versions.
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions.
CVE-2026-81297
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions.
Unauthenticated Cross Site Scripting (XSS) in Super Store Finder <= 7.10 versions.
CVE-2026-81768
Unauthenticated Cross Site Scripting (XSS) in Super Store Finder <= 7.10 versions.
Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.
CVE-2026-81298
Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions.
CVE-2026-81290
Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions.
Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows...
CVE-2026-72001
Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access a
Unrestricted deserialization of untrusted data in the cursor pagination component in the...
CVE-2026-83497
Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a
A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb...
CVE-2026-13732
A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a
NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the...
CVE-2026-80206
NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links...
CVE-2026-80196
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after passwo
Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet...
CVE-2026-80197
Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet add and remove endpoints
Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController...
CVE-2026-80194
Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route (report_pro
Socket.IO: Engine.IO WebTransport SID DoS
CVE-2026-59724
### Impact Engine.IO servers with **WebTransport enabled** are vulnerable to a remotely triggerable denial of service.
elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback
CVE-2026-81889
[poc.zip](https://github.com/user-attachments/files/30352020/poc.zip) ## Summary elFinder 2.1.69 is vulnerable to a Ser
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of...
CVE-2026-82592
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDisk
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file ...
CVE-2026-82593
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgr
AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability...
CVE-2026-56718
AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web ser
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the...
CVE-2026-82648
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails
Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for...
CVE-2026-82657
Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements