93,331 indexed
CVECVE vulnerabilities
93,331 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 3,851–3,900 of 93,331 · page 78 of 1867
| ID | Title | Summary |
|---|---|---|
| CVE-2026-91841 | CVE-2026-91841 CVSS 7.8 | A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline chara… |
| CVE-2026-91840 | CVE-2026-91840 CVSS 7.8 | A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character i… |
| CVE-2026-9184 | CVE-2026-9184 CVSS 4.3 | The 24liveblog - live blog tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_lb24_to… |
| CVE-2026-91839 | CVE-2026-91839 CVSS 7.8 | A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-f… |
| CVE-2026-91838 | CVE-2026-91838 CVSS 7.8 | A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special … |
| CVE-2026-91837 | CVE-2026-91837 CVSS 7.8 | A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserv… |
| CVE-2026-91836 | CVE-2026-91836 CVSS 2.8 | A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/static_scanner.go of the component Static … |
| CVE-2026-91835 | CVE-2026-91835 CVSS 2.8 | A vulnerability was detected in OpenClaw ClawScan up to 0.1.6. The impacted element is the function IsBinaryFile of the file internal/runner/static_scanner.go … |
| CVE-2026-91832 | CVE-2026-91832 CVSS 7.1 | The WP Mobile Menu WordPress plugin before 2.9 does not correctly verify the nonce on its settings import, so an attacker can import arbitrary WP Mobile Menu … |
| CVE-2026-9183 | CVE-2026-9183 CVSS 4.3 | The 24liveblog - live blog tool plugin for WordPress is vulnerable to Exposure of Sensitive Information in versions up to, and including, 2.2. This is due to t… |
| CVE-2026-91829 | CVE-2026-91829 CVSS 7.1 | The Subscribe to Comments WordPress plugin before 2.3.3 does not properly validate a parameter before reflecting it into a link target, allowing unauthenticate… |
| CVE-2026-91828 | CVE-2026-91828 CVSS 7.5 | The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin before 6.3.11 does not require authentication or a valid nonce on an action that i… |
| CVE-2026-91827 | CVE-2026-91827 CVSS 7.5 | The Ninja Forms WordPress plugin 3.15.3 does not prevent user-submitted form field values from being deserialised when an administrator later exports form subm… |
| CVE-2026-91826 | CVE-2026-91826 CVSS 4.4 | Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering craft… |
| CVE-2026-91825 | CVE-2026-91825 | Affected versions of MISP fail to authorize a submitted sharing group in a specific event-edit path. The vulnerable logic checked whether the acting user cou… |
| CVE-2026-9182 | CVE-2026-9182 CVSS 9.8esri | Esri ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the … |
| CVE-2026-91819 | CVE-2026-91819 | Affected versions of MISP rely on CakePHP request-method override processing in a way that can disable CSRF and form-security validation. CakePHP honors a _me… |
| CVE-2026-91818 | CVE-2026-91818 CVSS 7.8foxit | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation en… |
| CVE-2026-91817 | CVE-2026-91817 CVSS 6.1foxit | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation … |
| CVE-2026-91816 | CVE-2026-91816 CVSS 7.8foxit | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript … |
| CVE-2026-91815 | CVE-2026-91815 CVSS 7.8foxit | Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap… |
| CVE-2026-91814 | CVE-2026-91814 CVSS 5.3 | A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content m… |
| CVE-2026-91813 | CVE-2026-91813 CVSS 8.8foxit | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to ins… |
| CVE-2026-91812 | CVE-2026-91812 CVSS 7.9foxit | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks,… |
| CVE-2026-91811 | CVE-2026-91811 CVSS 7.8 | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fa… |
| CVE-2026-91810 | CVE-2026-91810 CVSS 6.1foxit | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause … |
| CVE-2026-9181 | CVE-2026-9181 CVSS 9.8esri | Esri ArcGIS Server contains a directory traversal vulnerability. ArcGIS Enterprise on Kubernetes is not impacted. An unauthenticated attacker could exploit thi… |
| CVE-2026-91809 | CVE-2026-91809 CVSS 7.8foxit | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may c… |
| CVE-2026-91808 | CVE-2026-91808 CVSS 6.1foxit | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insuffi… |
| CVE-2026-91807 | CVE-2026-91807 CVSS 6.1 | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the so… |
| CVE-2026-91806 | CVE-2026-91806 CVSS 7.8foxit | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the … |
| CVE-2026-91805 | CVE-2026-91805 CVSS 7.8foxit | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during re… |
| CVE-2026-91804 | CVE-2026-91804 CVSS 7.8foxit | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in … |
| CVE-2026-91803 | CVE-2026-91803 CVSS 8.8foxit | A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writabl… |
| CVE-2026-91802 | CVE-2026-91802 CVSS 7.8foxit | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buf… |
| CVE-2026-91801 | CVE-2026-91801 CVSS 7.8foxit | A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow… |
| CVE-2026-91800 | CVE-2026-91800 CVSS 8.8 | A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configurat… |
| CVE-2026-9180 | CVE-2026-9180 CVSS 5.3 | The MotoPress Appointment Booking plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, … |
| CVE-2026-91799 | CVE-2026-91799 CVSS 7.8foxit | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to a… |
| CVE-2026-91798 | CVE-2026-91798 CVSS 8.8 | A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the c… |
| CVE-2026-91797 | CVE-2026-91797 CVSS 7.8foxit | Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be writte… |
| CVE-2026-91796 | CVE-2026-91796 CVSS 6.1foxit | The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB… |
| CVE-2026-91795 | CVE-2026-91795 CVSS 7.8foxit | Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal … |
| CVE-2026-91794 | CVE-2026-91794 CVSS 7.8 | An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation whe… |
| CVE-2026-91793 | CVE-2026-91793 CVSS 7.8foxit | When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. Duri… |
| CVE-2026-91792 | CVE-2026-91792 CVSS 7.8foxit | When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScri… |
| CVE-2026-91791 | CVE-2026-91791 CVSS 7.8foxit | When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visi… |
| CVE-2026-91790 | CVE-2026-91790 CVSS 7.8foxit | When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a resul… |
| CVE-2026-9179 | CVE-2026-9179 CVSS 7.5 | The WP Forms Connector plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/wp/v3/post/list REST endpoint in versions … |
| CVE-2026-91789 | CVE-2026-91789 CVSS 7.8foxit | Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain condi… |