CVE IDSeverityCVSSDescriptionDate
CVE-2026-15785MEDIUM6.1The Joinchat – Enhanced "click to chat" plugin for WordPress is vulnerable to Reflected Cross-Site Scripting v…2026-11-11
CVE-2026-76981HIGH8.8Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order…2026-11-11
CVE-2026-92408MEDIUM5.3The WPS Bookings for WooCommerce WordPress plugin before 3.13.1 does not validate a price value taken from use…2026-11-11
CVE-2026-93487NAN/AIn affected versions of Octopus Server, incorrect validation of the permissions assigned to a user that would …2026-11-11
CVE-2026-126607HIGH7.8Progressive Robot hMailServer 6.2.3 through 6.3.7 on Windows, with a MySQL or MariaDB database, hands the bund…2026-11-11
CVE-2026-126609HIGH7.5Progressive Robot hMailServer 6.2.25 through 6.3.7 on Windows, with a PostgreSQL database, the connection's ss…2026-11-11
CVE-2026-126610HIGH7.4Progressive Robot hMailServer 6.3.4 through 6.3.7, with a MySQL or MariaDB database and TlsMode=verify-full, d…2026-11-11
CVE-2026-126611HIGH7.0Progressive Robot hMailServer 6.3.4 through 6.3.7, with a MySQL or MariaDB database, TlsMode=verify-full and n…2026-11-11
CVE-2026-126612HIGH7.8Improper link resolution in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.7 allows …2026-11-11
CVE-2026-126613HIGH7.5Allocation of resources without limits in the JSON reader of Progressive Robot hMailServer 6.3.2 through 6.3.7…2026-11-11
CVE-2026-126614MEDIUM5.3The web services listener of Progressive Robot hMailServer 6.3.3 through 6.3.7 does not apply the server's IP …2026-11-11
CVE-2026-126615MEDIUM5.3The sign-in of Progressive Robot hMailServer 6.2.22-pre2 through 6.3.7 takes for an account names that are not…2026-11-11
CVE-2026-126616MEDIUM5.3The auto-ban of Progressive Robot hMailServer 6.2.0 through 6.3.3, with a MySQL or MariaDB database, can be ke…2026-11-11
CVE-2026-126617HIGH8.8SQL injection in the database layer of Progressive Robot hMailServer 6.0.0-B1 through 6.2.18, when the server …2026-11-11
CVE-2026-126618MEDIUM5.3The auto-ban of Progressive Robot hMailServer 6.0.0-B1 through 6.3.7 can be kept from banning an address after…2026-11-11
CVE-2026-126619MEDIUM4.8Misinterpretation of SQL statement text in the database layer of Progressive Robot hMailServer 6.0.0-B1 throug…2026-11-11
CVE-2026-126621HIGH7.5Progressive Robot hMailServer 6.0.0-B1 through 6.3.7 on Windows hands OpenSSL the names of its own TLS files -…2026-11-11
CVE-2026-126622HIGH7.3Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local au…2026-11-11
CVE-2026-126623HIGH7.5Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer 6.3.6 and 6.3.7 allows …2026-11-11
CVE-2026-126624HIGH7.3Unverified ownership in the Windows installer of Progressive Robot hMailServer 6.3.7 allows a local authentica…2026-11-11
CVE-2026-126625MEDIUM6.7Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local au…2026-11-11
CVE-2026-126626MEDIUM5.3The web services listener of Progressive Robot hMailServer 6.3.3 through 6.3.7 counts every failed CardDAV, Ca…2026-11-11
CVE-2026-18767HIGH7.8A local low privileged attacker or process can access I/O ports via TcRouter.sys because of exposed IOCTL func…2026-11-11
CVE-2026-18768HIGH7.8A local low privileged attacker can access arbitrary physical memory or define its mapping via TcRouter.sys be…2026-11-11
CVE-2026-18769HIGH7.8A local low privileged attacker can move arbitrary physical memory content via TcRouter.sys because of exposed…2026-11-11
CVE-2026-112174NAN/ALocal privilege escalation vulnerability in Iperius Backup 8.8.3, due to insufficient separation between the g…2026-11-11
CVE-2026-124250HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AyeCode …2026-11-11
CVE-2026-124256MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRock…2026-11-11
CVE-2026-124257MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus…2026-11-11
CVE-2026-124737HIGH7.5A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small blo…2026-11-11
CVE-2026-111792NAN/AUncontrolled Recursion vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics B…2026-11-11
CVE-2026-118965NAN/APath traversal in the discovered host label synchronization in Checkmk <2.5.0p19, <2.4.0p40 and 2.3.0 (EOL) al…2026-11-11
CVE-2026-120495NAN/APath traversal in the Synthetic Monitoring "Robotmk" test service of Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (…2026-11-11
CVE-2026-121374NAN/AArgument injection in the Kubernetes special agent in Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows a u…2026-11-11
CVE-2026-123478HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meow App…2026-11-11
CVE-2026-124253HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeop…2026-11-11
CVE-2026-124739HIGH7.5A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly l…2026-11-11
CVE-2026-124741HIGH7.6A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options …2026-11-11
CVE-2026-78287CRITICAL10.0Improper Control of Generation of Code ('Code Injection') vulnerability in Staggs STAGGS staggs allows Remote …2026-11-11
CVE-2026-90993NAN/AXXE vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik: through 1.19.…2026-11-11
CVE-2026-103883HIGH8.8The 6Storage Rentals plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Acco…2026-11-11
CVE-2026-115600MEDIUM5.3Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restr…2026-11-11
CVE-2026-119097MEDIUM6.4The Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' para…2026-11-11
CVE-2026-119615HIGH8.8The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including…2026-11-11
CVE-2026-121014MEDIUM5.3Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configu…2026-11-11
CVE-2026-121028MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WP Chill Strong…2026-11-11
CVE-2026-121574MEDIUM5.3Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Confi…2026-11-11
CVE-2026-121770MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme VISeek viseek-easy-custom-search allows Cross Si…2026-11-11
CVE-2026-121773MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Generate…2026-11-11
CVE-2026-122671MEDIUM6.5Missing Authorization vulnerability in E2Pdf.com e2pdf e2pdf allows Exploiting Incorrectly Configured Access C…2026-11-11
←28 / 8516→