103,766 indexed
CVECVE vulnerabilities
103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 9,801–9,850 of 103,766 · page 197 of 2076
| ID | Title | Summary |
|---|---|---|
| CVE-2026-84108 | CVE-2026-84108 CVSS 8.1ibm | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation. |
| CVE-2026-84106 | CVE-2026-84106 CVSS 8.9ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page… |
| CVE-2026-84105 | CVE-2026-84105 CVSS 7.7ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special element… |
| CVE-2026-8410 | CVE-2026-8410 CVSS 8.8concretecms | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delete. The The Concrete CMS security … |
| CVE-2026-84099 | CVE-2026-84099 CVSS 8.1 | The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input withou… |
| CVE-2026-84098 | CVE-2026-84098 CVSS 6.5 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing's ownership before d… |
| CVE-2026-84097 | CVE-2026-84097 CVSS 6.5 | The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, bef… |
| CVE-2026-84096 | CVE-2026-84096 CVSS 8.0 | The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and th… |
| CVE-2026-84095 | CVE-2026-84095 CVSS 8.0 | The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on one of its AJAX handlers, and the nonce protecting it is genera… |
| CVE-2026-84091 | CVE-2026-84091 CVSS 5.3 | The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not verify with the payment provider that a payment notification is genuine before… |
| CVE-2026-8409 | CVE-2026-8409 CVSS 8.8concretecms | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delete. The The Concrete CMS security team … |
| CVE-2026-84089 | CVE-2026-84089 CVSS 7.8ibm | IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management. |
| CVE-2026-84088 | CVE-2026-84088 CVSS 6.8 | The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link setting before storing and using it in a… |
| CVE-2026-84086 | CVE-2026-84086 CVSS 7.2ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricte… |
| CVE-2026-84085 | CVE-2026-84085 CVSS 8.1ibm | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an … |
| CVE-2026-84084 | CVE-2026-84084 CVSS 8.8ibm | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability. |
| CVE-2026-84083 | CVE-2026-84083 CVSS 7.8ibm | IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacke… |
| CVE-2026-84082 | CVE-2026-84082 CVSS 9.8ibm | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an… |
| CVE-2026-84081 | CVE-2026-84081 CVSS 8.1ibm | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation. |
| CVE-2026-84078 | CVE-2026-84078 CVSS 9.9ibm | IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privil… |
| CVE-2026-84077 | CVE-2026-84077 CVSS 8.1ibm | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability. |
| CVE-2026-84076 | CVE-2026-84076 CVSS 7.6ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization. |
| CVE-2026-84075 | CVE-2026-84075 CVSS 9.9ibm | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet. |
| CVE-2026-84074 | CVE-2026-84074 CVSS 8.9ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page… |
| CVE-2026-84073 | CVE-2026-84073 CVSS 9.1ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special eleme… |
| CVE-2026-84071 | CVE-2026-84071 CVSS 7.2ibm | IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated atta… |
| CVE-2026-84070 | CVE-2026-84070 CVSS 8.9ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page… |
| CVE-2026-84069 | CVE-2026-84069 CVSS 5.3 | The WebFacing™ WordPress plugin before 5.4 does not restrict access to one of its bundled scripts and does not validate a user-supplied path before using it t… |
| CVE-2026-84068 | CVE-2026-84068 CVSS 8.6 | The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticate… |
| CVE-2026-84066 | CVE-2026-84066 CVSS 3.1 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post be… |
| CVE-2026-84064 | CVE-2026-84064 CVSS 9.9ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special eleme… |
| CVE-2026-84063 | CVE-2026-84063 CVSS 6.5 | BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file … |
| CVE-2026-84062 | CVE-2026-84062 CVSS 4.3 | BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key. If this vulnerability is exploited, the content of th… |
| CVE-2026-84061 | CVE-2026-84061 CVSS 6.3 | A security flaw has been discovered in zhongyu09 OpenChatBI up to 0.3.0. Affected by this vulnerability is the function _validate_sql_safety of the file opench… |
| CVE-2026-8406 | CVE-2026-8406 | openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging mod… |
| CVE-2026-84059 | CVE-2026-84059 CVSS 7.4 | A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=Se… |
| CVE-2026-84058 | CVE-2026-84058 CVSS 8.1ibm | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacke… |
| CVE-2026-84057 | CVE-2026-84057 CVSS 8.1ibm | IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements us… |
| CVE-2026-8405 | CVE-2026-8405 CVSS 6.5ibm | IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" (LTR) can expose sensitive credential… |
| CVE-2026-84048 | CVE-2026-84048 | Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitra… |
| CVE-2026-84047 | CVE-2026-84047 CVSS 8.6 | The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticate… |
| CVE-2026-84046 | CVE-2026-84046 CVSS 5.0 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not validate a user-supplied URL before fetching i… |
| CVE-2026-84045 | CVE-2026-84045 CVSS 5.3 | The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the serv… |
| CVE-2026-84044 | CVE-2026-84044 CVSS 5.3 | The Restaurant Menu and Food Ordering WordPress plugin before 2.4.12 does not verify that a PayPal payment notification genuinely originates from PayPal, allow… |
| CVE-2026-84043 | CVE-2026-84043 CVSS 5.3 | The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing u… |
| CVE-2026-84042 | CVE-2026-84042 CVSS 7.8 | A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-… |
| CVE-2026-8404 | CVE-2026-8404 CVSS 3.1djangoproject | An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not match `Cache-Contr… |
| CVE-2026-84036 | CVE-2026-84036 CVSS 7.4ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization. |
| CVE-2026-84035 | CVE-2026-84035 CVSS 8.1ibm | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-84034 | CVE-2026-84034 CVSS 8.8ibm | IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticate… |