Export limit exceeded: 417674 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (417674 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-107253 | 1 Drupal | 1 Orphans Media | 2026-10-30 | 5.9 Medium |
| Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*. | ||||
| CVE-2026-107252 | 1 Drupal | 1 Mathjax: Latex For Drupal | 2026-10-30 | 5.4 Medium |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Scripting (XSS). This issue affects MathJax: LaTeX for Drupal versions: from 0.0.0 to 4.1.2. | ||||
| CVE-2026-107251 | 1 Drupal | 1 Entity Reference Manager (merge Entities) | 2026-10-30 | 6.5 Medium |
| Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This issue affects Entity Reference Manager (Merge entities) versions: from 0.0.0 to 1.0.3. | ||||
| CVE-2026-107250 | 1 Drupal | 1 Eca Helper | 2026-10-30 | 5.9 Medium |
| Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*. | ||||
| CVE-2026-107249 | 1 Drupal | 1 Block Ajax | 2026-10-30 | 9.8 Critical |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows Object Injection. This issue affects Block AJAX versions: from 0.0.0 to 3.0.2. | ||||
| CVE-2026-103039 | 2 Gravityforms, Wordpress-extensions | 2 Gravity Forms, Gravity Forms | 2026-10-30 | 9.8 Critical |
| The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This is due to GFFormsModel::create_post() passing the submitted value to WordPress' unrestricted global maybe_unserialize() rather than the plugin's own hardened GFCommon::maybe_unserialize(), which was added in 3.1.1 and passes allowed_classes => false precisely to prevent object instantiation. Where the field has a content template enabled, the submitted row reaches that call verbatim. This makes it possible for unauthenticated attackers to inject a PHP object into post meta. No PHP Object Injection gadget chain is present in the plugin itself; however, if a gadget chain is present via an additional plugin or theme, it could allow the attacker to perform actions such as remote code execution. Where the custom field is mapped to the protected _wp_page_template meta key, WordPress itself supplies the chain: validate_file() accepts non-scalars, WP_Theme::__toString() then resolves an attacker-controlled path, and on hosts with a readable PEAR install and register_argc_argv enabled this yields remote code execution. | ||||
| CVE-2026-85268 | 1 Google Cloud | 1 Identity Platform And Firebase Authentication | 2026-10-30 | N/A |
| A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID. | ||||
| CVE-2025-31704 | 1 Dahua | 1 Intelligent Connection Center | 2026-10-30 | 9.8 Critical |
| A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution. | ||||
| CVE-2026-22114 | 1 Delta Electronics | 1 Delta Ufc500 | 2026-10-30 | N/A |
| HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible. | ||||
| CVE-2026-22109 | 1 Delta Electronics | 1 Delta Ufc500 | 2026-10-30 | N/A |
| The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit. | ||||
| CVE-2026-22105 | 1 Delta Electronics | 1 Delta Ufc500 | 2026-10-30 | N/A |
| Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct the resulting password, or exhaust the keyspace, and log in to read and change sensitive settings such as the OCPP backend. | ||||
| CVE-2026-22110 | 1 Delta Electronics | 1 Delta Ufc500 | 2026-10-30 | N/A |
| The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting. | ||||
| CVE-2026-119420 | 1 Getlago | 1 Lago | 2026-10-30 | 8.8 High |
| Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session tokens for existing accounts via the acceptInvite mutation without a password check. Attackers can invite a victim's email, accept with an arbitrary password, and receive a JWT to access the victim's organizations, billing data, API keys and payment integrations. | ||||
| CVE-2026-119421 | 1 Juspay | 1 Hyperswitch | 2026-10-30 | 5.9 Medium |
| Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that allows unauthenticated attackers to confirm payouts with any client_secret via POST /payouts/{payout_id}/confirm. Attackers holding the merchant's publishable key and a payout_id can confirm payouts and overwrite amount, currency, connector, and routing fields to trigger unauthorized merchant payouts. | ||||
| CVE-2026-119422 | 1 Juspay | 1 Hyperswitch | 2026-10-30 | 5.9 Medium |
| Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge payment status updates because the Worldpayxml connector's verify_webhook_source always returns true without enforced mTLS. Attackers knowing the merchant_id and Worldpay orderCode can POST unsigned XML with lastEvent SETTLED to the worldpayxml webhook endpoint, marking unpaid payments as charged or triggering refund, dispute and payout events. | ||||
| CVE-2026-119548 | 1 Getlago | 1 Lago | 2026-10-30 | 3.1 Low |
| Lago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments::StripeService that allows users of one organization to mark another organization's invoice as paid due to an unscoped invoice lookup. Attackers controlling their organization's Stripe integration can sign a payment_intent.succeeded event carrying a victim invoice UUID to unlock wallet top-ups or payment-gated subscriptions. | ||||
| CVE-2025-68391 | 1 Arketeam | 2 Bdf, Protectelmaj | 2026-10-30 | N/A |
| ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to download the uploaded file. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67 | ||||
| CVE-2026-110970 | 2 Zak Ad Ubezpiecze Spo Ecznych, Zakład Ubezpieczeń Społecznych | 2 P Atnik, Płatnik | 2026-10-30 | N/A |
| Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with their own. This issue was fixed in metric 242 in version 10.02.002. | ||||
| CVE-2026-110971 | 2 Zak Ad Ubezpiecze Spo Ecznych, Zakład Ubezpieczeń Społecznych | 2 P Atnik, Płatnik | 2026-10-30 | N/A |
| Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 242 in version 10.02.002. | ||||
| CVE-2026-87768 | 1 Perl | 1 Datetime::lite | 2026-10-30 | N/A |
| DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_leap_seconds crosses day boundaries one day at a time, so add(seconds => $n) on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS implementation and the pure-Perl fallback both have the loop. An attacker who controls the number of seconds added can keep the process busy for as long as they choose. | ||||