NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin...
CVE-2026-94105
NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller t
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题A weakness has been identified in code-projects Internship Management System 1.0. This...
CVE-2026-93980
A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown cod
A vulnerability was identified in code-projects Internship Management System 1.0. Affected by...
CVE-2026-93978
A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server...
CVE-2026-86555
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plain
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the...
CVE-2026-93969
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_sup
A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1...
CVE-2026-93972
A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element
A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is...
CVE-2026-93966
A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SS
A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an...
CVE-2026-93974
A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the f
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some...
CVE-2026-93970
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the fil
A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function...
CVE-2026-93967
A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function generate_host_task of th
SmartLife app dynamically generates brand‑new SmartLife application authentication parameters...
CVE-2026-86554
SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process
A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of...
CVE-2026-93971
A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevo
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The...
CVE-2026-93973
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of...
CVE-2026-93968
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/
The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it...
CVE-2026-87068
The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a r
The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value...
CVE-2026-92422
The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the...
CVE-2026-81653
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an imag
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user...
CVE-2026-16542
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before req
The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them...
CVE-2026-84223
The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, al
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that...
CVE-2026-92410
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up del