96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 6,351–6,400 of 96,609 · page 128 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-88847 | CVE-2026-88847 CVSS 4.3 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions ag… |
| CVE-2026-88846 | CVE-2026-88846 CVSS 5.3 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled on the site before creating an account… |
| CVE-2026-88845 | CVE-2026-88845 CVSS 4.3 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, a… |
| CVE-2026-88844 | CVE-2026-88844 CVSS 2.7 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-stu… |
| CVE-2026-88843 | CVE-2026-88843 CVSS 7.2 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings before using it to build a template pa… |
| CVE-2026-88840 | CVE-2026-88840 CVSS 5.3 | BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message. |
| CVE-2026-88839 | CVE-2026-88839 CVSS 6.7 | BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers. |
| CVE-2026-88838 | CVE-2026-88838 CVSS 5.5 | A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on th… |
| CVE-2026-88837 | CVE-2026-88837 CVSS 6.5 | BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check. |
| CVE-2026-88836 | CVE-2026-88836 | Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATU… |
| CVE-2026-88835 | CVE-2026-88835 CVSS 6.1 | BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read. |
| CVE-2026-88834 | CVE-2026-88834 CVSS 3.7 | A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configu… |
| CVE-2026-88833 | CVE-2026-88833 CVSS 6.5 | A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled… |
| CVE-2026-88832 | CVE-2026-88832 CVSS 7.3 | BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images. |
| CVE-2026-88831 | CVE-2026-88831 CVSS 5.3 | BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients. |
| CVE-2026-88830 | CVE-2026-88830 CVSS 7.5 | A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExch… |
| CVE-2026-8883 | CVE-2026-8883 CVSS 6.4 | The Global Body Mass Index Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gbmicalc' shortcode in versions up to, and inc… |
| CVE-2026-88828 | CVE-2026-88828 CVSS 5.4 | The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder… |
| CVE-2026-88827 | CVE-2026-88827 CVSS 8.8 | The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account … |
| CVE-2026-88826 | CVE-2026-88826 CVSS 8.8 | The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or… |
| CVE-2026-88825 | CVE-2026-88825 CVSS 8.8 | The iGMS Direct Booking WordPress plugin before 2.0 does not authorise or escape its widget appearance settings, allowing unauthenticated users to store arbitr… |
| CVE-2026-88824 | CVE-2026-88824 CVSS 8.8 | The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthenticated users to update its settings, … |
| CVE-2026-8882 | CVE-2026-8882 CVSS 6.4 | The WP ApplicantStack Jobs Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and includ… |
| CVE-2026-88819 | CVE-2026-88819 | In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID. |
| CVE-2026-88817 | CVE-2026-88817 | An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitatio… |
| CVE-2026-88816 | CVE-2026-88816 CVSS 7.5 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow_hashref uses the string pointer of the FetchHashK… |
| CVE-2026-88815 | CVE-2026-88815 CVSS 6.2 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes t… |
| CVE-2026-8881 | CVE-2026-8881 CVSS 7.5securly | Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since … |
| CVE-2026-88808 | CVE-2026-88808 CVSS 8.8suse | A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials… |
| CVE-2026-88807 | CVE-2026-88807 | A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients. |
| CVE-2026-88806 | CVE-2026-88806 CVSS 7.5 | A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map. |
| CVE-2026-88805 | CVE-2026-88805 CVSS 8.1 | Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Ra… |
| CVE-2026-88804 | CVE-2026-88804 CVSS 9.6 | An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Ra… |
| CVE-2026-88802 | CVE-2026-88802 CVSS 7.5 | The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3 do not check a capability, a nonce or … |
| CVE-2026-8880 | CVE-2026-8880 CVSS 6.4 | The RomanCart Ecommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blclass' attribute (and other attributes) of the romancart_b… |
| CVE-2026-88798 | CVE-2026-88798 CVSS 5.3 | The Really Simple Security WordPress plugin before 9.8.3 does not validate a client-supplied address value before using it as a storage key in one of its own … |
| CVE-2026-88797 | CVE-2026-88797 CVSS 7.1 | The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in u… |
| CVE-2026-88795 | CVE-2026-88795 CVSS 9.0 | The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester con… |
| CVE-2026-88793 | CVE-2026-88793 CVSS 8.8 | The YouTube Embed WordPress plugin from 10.0 to 10.3 does not perform any authorisation check on one of its AJAX actions, relying only on a nonce it prints on … |
| CVE-2026-88792 | CVE-2026-88792 CVSS 8.8 | The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in place when adding or updating dictionary entries, allowing… |
| CVE-2026-88791 | CVE-2026-88791 CVSS 3.4 | The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is… |
| CVE-2026-88790 | CVE-2026-88790 CVSS 4.8 | A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/f… |
| CVE-2026-8879 | CVE-2026-8879 CVSS 7.5securly | Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runti… |
| CVE-2026-88789 | CVE-2026-88789 CVSS 8.6 | Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apache Camel Quarkus from 3.2.0 before 3.3… |
| CVE-2026-88788 | CVE-2026-88788 CVSS 6.8 | The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user-supplied styling values before outputting them within a front-end style block,… |
| CVE-2026-88785 | CVE-2026-88785 CVSS 4.7 | The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an op… |
| CVE-2026-88783 | CVE-2026-88783 CVSS 8.8 | The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowed HTML elements to the editor context, so the wider set is app… |
| CVE-2026-88782 | CVE-2026-88782 CVSS 6.8 | The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowi… |
| CVE-2026-8878 | CVE-2026-8878 CVSS 7.5securly | Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed i… |
| CVE-2026-88779 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability KEVCVSS 7.5Citrix | Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the boun… |