CVEs
Browse the synced catalog, newest first.
- CVE-2026-123277In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on LinuxJetBrains CLion
- CVE-2026-123276In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profileJetBrains CLion
- CVE-2026-84155Session Token Remains Valid After Logout in Multi-Worker DeploymentsEricsson CodeChecker
- CVE-2026-66294XML injection in Saxy via unescaped CDATA section terminatorqcam saxy · saxy
- CVE-2026-66295Processing instruction target and content emitted unescaped in Saxy encoder allows XML injectionqcam saxy · saxy
- CVE-2026-66293XML comment injection in Saxy encoder via unescaped double hyphenqcam saxy · saxy
- CVE-2026-116630undici vulnerable to cross-user information disclosure via cross-origin redirect revalidationundici
- CVE-2026-120415undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect strippingundici
- CVE-2026-120423undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadataundici
- CVE-2026-33379Dashboard snapshot permission bypassGrafana OSS · Grafana Enterprise
- CVE-2026-116592undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hopsundici
- CVE-2026-120222undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replayundici
- CVE-2026-120474undici vulnerable to cross-user cache disclosure via same-origin redirectundici
- CVE-2026-115831VOD Infomaniak <= 1.5.15 - Missing Authorization to Authenticated (Subscriber+) Unauthorized Video Importation via vodimportvideo AJAX…infomaniak-dev VOD Infomaniak
- CVE-2026-97642Wp Parsidate <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'theme' Block Attributeman4toman Parsi Date | بسته فارسی ساز وردپرس و ووکامرس پارس…
- CVE-2026-120659Redirection for Contact Form 7 <= 3.2.14 - Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File…themeisle Redirection for Contact Form
- CVE-2026-109977YaySMTP <= 2.7.8 - Authenticated (Administrator+) SQL Injection via 'params[searchKey]' Parameteryaycommerce YaySMTP – WP Mail SMTP with Email Logs, Trackin…
- CVE-2026-109994Eventin <= 4.1.29 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'id' Parameterarraytics Eventin – Events Calendar, Tickets, Registration,…
- CVE-2026-110776MDTF <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting via 'vars' Parameterrealmag777 MDTF – Meta Data and Taxonomies Filter
- CVE-2026-87964Product Feed Manager for WooCommerce <= 8.0.26 - Authenticated (Shop Manager+) PHP Code Injection via eval() via 'feedConfigCustom2'…wahid0003 Product Feed Manager for WooCommerce – CTX Feed –…
- CVE-2026-120550WP User Manager <= 2.10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' User Metawpusermanager WP User Manager – Registration Form, Login Fo…
- CVE-2026-123087SQL injection in Atmira’s SIRECAtmira SIREC
- CVE-2026-103682Jolokia special agent exposes password in process listCheckmk
- CVE-2026-103674NetApp ONTAP special agent exposes password in process listCheckmk
- CVE-2026-123660Vulnerability-Lookup: memory amplification through webhook payload template format specifiersvulnerability-lookup
- CVE-2026-122222Permalink Manager Lite <= 2.6.1 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slugmbis Permalink Manager Lite
- CVE-2026-121794Travelly <= 2.3.11 - Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler…magepeopleteam Travelly – Tour & Travel Booking Manager for…
- CVE-2026-118189Posts Table with Search & Sort <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attributebarn2media Posts Table with Search & Sort
- CVE-2026-110291Graphina <= 3.1.13 - Unauthenticated Stored Cross-Site Scripting via Tree Chart Widget Settingsiqonicdesign Graphina – Charts and Graphs For Elementor
- CVE-2026-120671UsersWP <= 1.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'badge' Shortcode Attributestiofansisland UsersWP – Front-end login form, User Registr…