ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking
CVE-2026-46693
An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process whe
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题ImageMagick: Heap Buffer Over-Write in distributed pixel cache server
CVE-2026-46692
An attacker who can connect to a `magick -distribute-cache` service can cause a heap buffer over-write in the server pro
The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-8684
The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includ
A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior...
CVE-2026-8381
A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain bac
The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads,...
CVE-2026-7798
The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin f
The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...
CVE-2026-7615
The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including
The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for...
CVE-2026-8692
The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for WordPress is vulnerable to
The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is...
CVE-2026-7636
The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Informat
The Alfie – Feed Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...
CVE-2026-4070
The Alfie – Feed Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl
The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...
CVE-2026-3481
The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode' parameter in al
The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin...
CVE-2026-7509
The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `the-subtitle` short
The FastX theme for WordPress is vulnerable to unauthorized limited plugin installation and...
CVE-2026-2518
The FastX theme for WordPress is vulnerable to unauthorized limited plugin installation and activation due to missing ca
The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site...
CVE-2026-6864
The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' param
The Location Weather plugin for WordPress is vulnerable to unauthorized modification of data due...
CVE-2026-7249
The Location Weather plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability c
There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration...
CVE-2026-44409
There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control m
Mothra would respect a default value given by a website for HTML file upload forms. An attacker...
CVE-2026-9053
Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website wi
Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML...
CVE-2026-8245
Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injection. Concrete\
Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys. To be vulnerable, a site would...
CVE-2026-8337
Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys. To be vulnerable, a site would have to be configured in s
Concrete CMS 9.5.0 and below is vulnerable to IDOR. The `/ccm/frontend/conversations...
CVE-2026-8237
Concrete CMS 9.5.0 and below is vulnerable to IDOR. The `/ccm/frontend/conversations/message_detail` endpoint returns th
Concrete CMS below 9.5.0 and below is vulnerable to password change without reauthorization and...
CVE-2026-8327
Concrete CMS below 9.5.0 and below is vulnerable to password change without reauthorization and session-hardening bypass