Export limit exceeded: 424331 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424331 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424331 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-105574 | 1 Microsoft | 8 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 5 more | 2026-11-11 | 7 High |
| Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-105575 | 1 Microsoft | 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more | 2026-11-11 | 7.8 High |
| Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-105579 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-11 | 7.5 High |
| Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-105580 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 7.8 High |
| Heap-based buffer overflow in Windows Management Instrumentation allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-102219 | 1 Microsoft | 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more | 2026-11-11 | 8.1 High |
| Inadequate encryption strength in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-104060 | 1 Worklenz | 1 Worklenz | 2026-11-11 | 6.5 Medium |
| Worklenz before 3.3.0 contains an SQL injection vulnerability in the reporting members endpoints that allows authenticated attackers to read arbitrary database contents by injecting SQL through the projects and status parameters. Attackers can send crafted values to POST /api/v1/reporting/members/all or GET /api/v1/reporting/members/export, which are interpolated unparameterized into IN clauses in getTeamMemberInsightData, and use time-based blind techniques to extract data across tenants, including user password hashes. | ||||
| CVE-2026-102166 | 1 Arista | 1 Wi-fi Access Points | 2026-11-11 | 8.8 High |
| Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image verification and SSLP authentication. An attacker who is able to access these keys would be able to create modified firmware that will pass verification checks. This vulnerability is specific to the C-260 and C-250 models; other access point models enforce digitally signed upgrade images with secure boot and are not affected by this issue. | ||||
| CVE-2025-59848 | 1 Hcltech | 1 Hcl Leap | 2026-11-11 | 6.8 Medium |
| HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session | ||||
| CVE-2026-124686 | 2026-11-11 | 5.4 Medium | ||
| In Progress® Kendo® UI for jQuery versions prior to 2026.4.1111, kendo.init() compiles data-* attribute values with new Function when an invalid JSON object is supplied. An attacker with low privileges who can control these attribute values can inject JavaScript that executes during declarative widget initialization when a user loads or interacts with an affected page. Successful exploitation can compromise the confidentiality and integrity of data accessible in the user's browser context. The issue was reported in version 2022.3.1109; the first affected release has not been established. | ||||
| CVE-2026-16260 | 1 Wordpress-extensions | 1 Post Grid Slider Carousel Ultimate | 2026-11-11 | 6.8 Medium |
| The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.8.1 does not sanitise and escape one of its custom post type settings before outputting it in an HTML attribute on the admin edit screen, allowing users with the Contributor role and above to inject JavaScript that executes in the session of any administrator who opens the affected item. | ||||
| CVE-2026-16738 | 1 Wordpress-extensions | 1 Conekta Payment Gateway | 2026-11-11 | 5.3 Medium |
| The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without payment. | ||||
| CVE-2026-18052 | 1 Wordpress-extensions | 1 Managewp Worker | 2026-11-11 | 8.1 High |
| The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain a session as any user on the site, including an administrator. | ||||
| CVE-2026-19093 | 1 Wordpress-extensions | 1 Tutor Lms | 2026-11-11 | 6.8 Medium |
| The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root. The readable files include the WordPress configuration file, which exposes the database credentials and the authentication keys and salts, so authentication cookies can be forged. | ||||
| CVE-2026-76789 | 1 Wordpress-extensions | 1 Slider Hero | 2026-11-11 | 8.8 High |
| The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a stored setting before outputting it, allowing unauthenticated users to store malicious JavaScript which will be executed in the context of an administrator viewing the Slider Hero with Video Background, Animation WordPress plugin before 9.1.3's admin area, as well as any visitor of a page embedding a slider. | ||||
| CVE-2026-76793 | 1 Wordpress-extensions | 1 Firebase Authentication | 2026-11-11 | 8.1 High |
| The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to log in as any user, including administrators. | ||||
| CVE-2026-77000 | 1 Wordpress-extensions | 1 Wp Social Media Login | 2026-11-11 | 9.8 Critical |
| The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's email address. | ||||
| CVE-2026-77002 | 1 Wordpress-extensions | 1 Smilepass Selfie Login | 2026-11-11 | 9.8 Critical |
| The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators. | ||||
| CVE-2026-13598 | 1 Wordpress-extensions | 1 Restrictmate | 2026-11-11 | 9.8 Critical |
| The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover. | ||||
| CVE-2026-14853 | 1 Wordpress-extensions | 1 Woocommerce Bookings | 2026-11-11 | 4.3 Medium |
| The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to create draft bookable products. | ||||
| CVE-2026-32561 | 2 Liquidthemes, Wordpress-extensions | 2 Booking Hub, Booking Hub | 2026-11-11 | 8.8 High |
| Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions. | ||||