104,345 indexed
CVECVE vulnerabilities
104,345 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 10,951–11,000 of 104,345 · page 220 of 2087
| ID | Title | Summary |
|---|---|---|
| CVE-2026-82846 | CVE-2026-82846 CVSS 6.8 | The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course settings before outputting them in a page available to all visitors, … |
| CVE-2026-82845 | CVE-2026-82845 CVSS 9.9 | The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowi… |
| CVE-2026-82844 | CVE-2026-82844 CVSS 5.3 | The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayP… |
| CVE-2026-82843 | CVE-2026-82843 CVSS 9.0 | The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization g… |
| CVE-2026-82842 | CVE-2026-82842 CVSS 8.1 | The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress … |
| CVE-2026-82841 | CVE-2026-82841 CVSS 5.3 | The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does … |
| CVE-2026-8284 | CVE-2026-8284 CVSS 6.1 | URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexC… |
| CVE-2026-82838 | CVE-2026-82838 | The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A val… |
| CVE-2026-82837 | CVE-2026-82837 CVSS 5.3gitlab | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain condit… |
| CVE-2026-82835 | CVE-2026-82835 CVSS 5.4 | A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of… |
| CVE-2026-82834 | CVE-2026-82834 CVSS 5.4 | A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a … |
| CVE-2026-82833 | CVE-2026-82833 CVSS 6.3 | A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Docum… |
| CVE-2026-82832 | CVE-2026-82832 CVSS 9.6ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page… |
| CVE-2026-82829 | CVE-2026-82829 CVSS 9.8 | Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by ex… |
| CVE-2026-82828 | CVE-2026-82828 CVSS 8.8 | Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perform administrator-level operations. T… |
| CVE-2026-82827 | CVE-2026-82827 CVSS 9.8 | Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attac… |
| CVE-2026-82826 | CVE-2026-82826 CVSS 7.5 | Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on … |
| CVE-2026-82825 | CVE-2026-82825 CVSS 9.8 | Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invo… |
| CVE-2026-82824 | CVE-2026-82824 CVSS 9.8 | Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete fil… |
| CVE-2026-82823 | CVE-2026-82823 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-82814. Reason: This candidate is a reservation duplicate of CVE-2026-82814… |
| CVE-2026-82821 | CVE-2026-82821 CVSS 4.3 | A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amf_object_get of the file src/amf.c of the component AMF… |
| CVE-2026-82820 | CVE-2026-82820 CVSS 4.3 | A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the component AMF String Processing. The man… |
| CVE-2026-82818 | CVE-2026-82818 CVSS 6.3 | A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/resource of the component Tenant Resourc… |
| CVE-2026-82817 | CVE-2026-82817 CVSS 6.3 | A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Admin… |
| CVE-2026-82816 | CVE-2026-82816 CVSS 6.3 | A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality of the file /api/ai-session/ of the co… |
| CVE-2026-82815 | CVE-2026-82815 CVSS 7.3 | A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulati… |
| CVE-2026-82813 | CVE-2026-82813 CVSS 5.4 | A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebu… |
| CVE-2026-82811 | CVE-2026-82811 CVSS 5.4 | A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. Th… |
| CVE-2026-82810 | CVE-2026-82810 CVSS 3.3 | A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExte… |
| CVE-2026-8281 | CVE-2026-8281 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-82809 | CVE-2026-82809 CVSS 4.3 | A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The affected element is the function window.addEventListener of th… |
| CVE-2026-82808 | CVE-2026-82808 CVSS 7.3 | A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impacted is an unknown function of the file dist/service-worker.… |
| CVE-2026-82807 | CVE-2026-82807 CVSS 8.8 | A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kern… |
| CVE-2026-82806 | CVE-2026-82806 | Exposure of data element to wrong session vulnerability in Apache APISIX. This issue affects Apache APISIX: from 2.3.0 before 3.7.0. Under a supported au… |
| CVE-2026-82805 | CVE-2026-82805 CVSS 4.3 | A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of… |
| CVE-2026-82804 | CVE-2026-82804 CVSS 8.8 | The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substituti… |
| CVE-2026-82803 | CVE-2026-82803 CVSS 5.3 | A vulnerability has been found in armink struct2json 1.0. This affects the function S2J_STRUCT_GET_string_ELEMENT in the library struct2json/inc/s2jdef.h of th… |
| CVE-2026-82802 | CVE-2026-82802 CVSS 5.3 | A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLambda of the file serverless/src/openSearc… |
| CVE-2026-82801 | CVE-2026-82801 CVSS 7.3 | A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage of the file serverless/src/scaleImage/ha… |
| CVE-2026-82797 | CVE-2026-82797 CVSS 5.5 | Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca… |
| CVE-2026-82796 | CVE-2026-82796 CVSS 5.4 | SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be execute… |
| CVE-2026-82795 | CVE-2026-82795 CVSS 5.4 | SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS… |
| CVE-2026-82794 | CVE-2026-82794 CVSS 8.8 | SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be ex… |
| CVE-2026-82793 | CVE-2026-82793 CVSS 7.2 | Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is… |
| CVE-2026-82792 | CVE-2026-82792 CVSS 5.2 | Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary … |
| CVE-2026-82791 | CVE-2026-82791 CVSS 8.8 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Con… |
| CVE-2026-82790 | CVE-2026-82790 CVSS 5.4 | Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is explo… |
| CVE-2026-8279 | CVE-2026-8279 CVSS 5.3 | The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'delete_item_permissions_check' fun… |
| CVE-2026-82789 | CVE-2026-82789 CVSS 8.8 | An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). If exploited, arbitrary co… |
| CVE-2026-82788 | CVE-2026-82788 CVSS 6.1 | Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web bro… |