Export limit exceeded: 371114 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (371114 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-47004 | 1 Oracle | 1 Enterprise Manager Base Platform | 2026-07-23 | 8.8 High |
| Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). | ||||
| CVE-2026-65051 | 2 Ninjaforms, Wordpress | 2 Ninja Forms, Wordpress | 2026-07-23 | 6.5 Medium |
| Ninja Forms WordPress plugin version 3.14.8 contains a client-side enforcement of server-side security vulnerability that allows unauthenticated attackers to bypass all form validation by merging attacker-controlled field metadata over server-loaded form definitions before validation runs. Attackers can craft a malicious AJAX submission overriding field types, removing required flags, and disabling CAPTCHA checks through the nopriv AJAX endpoint to trigger form actions such as email notifications and database storage with unverified, attacker-controlled content. | ||||
| CVE-2026-61948 | 2026-07-23 | 9.3 Critical | ||
| Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions. | ||||
| CVE-2026-47391 | 1 Mervinpraison | 1 Praisonai | 2026-07-23 | 9.8 Critical |
| PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an unauthenticated A2A JSON-RPC endpoint and registers a `calculate(expression)` tool implemented with Python `eval()`. The example also binds to `0.0.0.0`. A remote unauthenticated attacker can send `message/send` to `/a2a`; the request reaches `agent.chat()`, and a real LLM can invoke the registered `calculate` tool. In testing with `gemini/gemini-2.5-flash-lite`, this resulted in arbitrary Python execution in the server process, confirmed by creation of a marker file from an unauthenticated HTTP request. The issue affects deployments following the official A2A example or similar unauthenticated public A2A deployments with unsafe tools. The default unauthenticated A2A surface also exposes task history and task cancellation APIs, increasing confidentiality and integrity impact. Version 4.6.40 patches the issue. | ||||
| CVE-2026-16450 | 1 Zsadmin2025 | 1 Zs-admin | 2026-07-23 | 4.3 Medium |
| A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This affects the function getTenantId of the file /api/system/sys/dept/page of the component MyBatis-Plus Tenant Plugin. Such manipulation of the argument X-Tenant-Id leads to authorization bypass. The attack may be performed from remote. The exploit is publicly available and might be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet. | ||||
| CVE-2026-59554 | 2026-07-23 | 7.5 High | ||
| Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions. | ||||
| CVE-2026-47397 | 1 Mervinpraison | 1 Praisonai | 2026-07-23 | N/A |
| PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. `write_file` skips path validation when `workspace=None` (always `None` in production). Version 4.6.40 fixes the issue. | ||||
| CVE-2026-59541 | 2 Hakan Ozevin, Wordpress | 2 Wp Base Booking, Wordpress | 2026-07-23 | 8.8 High |
| Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions. | ||||
| CVE-2026-13057 | 1 Mongodb | 1 Mongodb Server | 2026-07-23 | 5.3 Medium |
| An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls. In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due to insufficient input validation, an authenticated client can supply these fields directly. | ||||
| CVE-2026-13058 | 1 Mongodb | 1 Mongodb Server | 2026-07-23 | N/A |
| An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required fields. The issue stems from inconsistent validation across related transaction command parameters, resulting in a fatal internal invariant failure and denial of service. | ||||
| CVE-2026-9737 | 1 Mongodb | 1 Mongodb Server | 2026-07-23 | 6.5 Medium |
| During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure. | ||||
| CVE-2026-57428 | 2 Boldgrid, Wordpress | 2 Sprout Clients, Wordpress | 2026-07-23 | 7.1 High |
| Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions. | ||||
| CVE-2026-57373 | 2026-07-23 | 6.5 Medium | ||
| Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions. | ||||
| CVE-2026-16630 | 1 Syncfusion | 1 Ej2-javascript-ui-controls | 2026-07-23 | 5.3 Medium |
| A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function child_process.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. | ||||
| CVE-2026-61946 | 2 Easy-appointments, Wordpress | 2 Easy Appointments, Wordpress | 2026-07-23 | 6.5 Medium |
| Unauthenticated Insecure Direct Object References (IDOR) in Easy Appointments <= 3.12.27 versions. | ||||
| CVE-2026-65456 | 2 Pickplugins, Wordpress | 2 Product Slider For Woocommerce, Wordpress | 2026-07-23 | 4.3 Medium |
| Contributor Insecure Direct Object References (IDOR) in Product Slider for WooCommerce <= 1.13.62 versions. | ||||
| CVE-2026-47667 | 1 Greyclab | 1 Cimg | 2026-07-23 | 7.5 High |
| CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, the header_size field is read as an `unsigned int` from the first 4 bytes of an Analyze/NIfTI file and passed directly to `new unsigned char[header_size]` without being bounded against the actual file size. A value up to ~4 GB is accepted. If the subsequent `fread` returns `short` as it will for any malformed file), the function throws a `CImgIOException` and the allocated buffer is never freed. A 6-byte crafted file is sufficient to trigger an allocation of ~1.3 GB per call, with the full allocation leaked on every error path. The issue is reachable via `load_analyze()` and the generic `load()` when the file extension is .hdr, .img, or .nii. Version 4.0.0 fixes the issue. | ||||
| CVE-2026-12082 | 2026-07-23 | 7.5 High | ||
| The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes, allowing unauthenticated users to modify the permalink of any published post and to read Praison AI SEO WordPress plugin before 5.0.7 configuration data. | ||||
| CVE-2026-9577 | 2026-07-23 | 4.8 Medium | ||
| The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the `mod` URL parameter before reflecting it into the admin settings page (`admin.php?page=post-status-notifier-lite`), leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's session when they are tricked into following a crafted URL. | ||||
| CVE-2026-9066 | 2 Wordpress, Wpcompress | 2 Wordpress, Wp Compress | 2026-07-23 | 6.1 Medium |
| The WP Compress WordPress plugin before 7.10.04 does not validate the value of a query parameter that controls the asset CDN host before using it to build the URLs of JavaScript files emitted on the page, leading to Reflected XSS. When a visitor follows a crafted link, the WP Compress WordPress plugin before 7.10.04's loader injects script elements pointing to an attacker-controlled origin, which lets the attacker execute arbitrary JavaScript in the visitor's session on the target site. | ||||