CVEs
Browse the synced catalog, newest first.
- CVE-2026-60041CSRF in backendMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60040DoS in backup creationMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60039Command injection in backup restoreMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60038OpenSSL command injection in ImportPKCS12MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60037OpenSSL command injection in device importerMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60036Command injection in patch activateMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60035Command injection in network authMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-106025Cargo Shipping Location for WooCommerce 4.0.0 - 5.7.1 - Unauthenticated Order Status ManipulationCargo Shipping Location for WooCommerce
- CVE-2026-106007FraudLabs Pro SMS Verification <= 1.12.1 - Unauthenticated Unrestricted SMS Sending via wp_sms_action_sendFraudLabs Pro SMS Verification
- CVE-2026-120013Path Traversal in Agent Memory Module of SAP Cloud SDK for PythonSAP_SE SAP Cloud SDK for Python
- CVE-2026-120012Information Disclosure vulnerability in SAP Cloud SDK for AI(JavaScript)SAP_SE SAP Cloud SDK for AI
- CVE-2026-125652Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions entry pointRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-84938Avada (Fusion) Builder <= 3.16.1 - Unauthenticated Stored Cross-Site Scripting via Form Notification Dynamic-Data action_hookthemefusion Avada (Fusion) Builder
- CVE-2026-93427ARMember Premium <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Registration Custom FieldARMember Premium – Membership Plugin, Content Restriction,…
- CVE-2026-100386Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Arbitrary File Read via CF7 Field Value in mPDF WriteHTML SVG Parserthemefic Ultra Addons for Contact Form
- CVE-2026-120513Everest Forms <= 3.6.2 - Unauthenticated Arbitrary File Deletion via 'everest_forms_{form_id}_old_{field_id}' Parameterwpeverest Everest Forms – Contact Form, Payment Form, Quiz,…
- CVE-2026-76877WPML Multilingual CMS <= 4.9.7 - Unauthenticated Authentication Bypass in Language-per-Domain SSO via 'wpml_sso_token_domain' ParameterWPML Multilingual CMS
- CVE-2026-119273BulletProof Security <= 7.2 - Unauthenticated Sensitive Data Disclosure via Security LogBulletProof Security
- CVE-2026-110516All in One Visual Composer Addons <= 1.2 - Contributor+ LFI via vca_tabs_style Shortcode AttributeAll in One Addons For WPBakery Page Builder
- CVE-2026-104676Zion Builder <= 3.6.17 - Author+ Stored XSS via SVG UploadZion Builder
- CVE-2026-63287It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could…Axis Communications AB AXIS Camera Station Pro · Axis Commu…
- CVE-2026-13387A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended…Axis Communications AB AXIS Camera Station Pro
- CVE-2026-13312A vulnerability that could allow an attacker to compromise a system.Axis Communications AB AXIS Camera Station Pro · Axis Commu…
- CVE-2026-12964A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.Axis Communications AB AXIS Camera Station Pro
- CVE-2026-12963A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.Axis Communications AB AXIS Camera Station Pro · Axis Commu…
- CVE-2026-12389A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.Axis Communications AB AXIS Camera Station Pro
- CVE-2026-8372A vulnerability that could allow an attacker to gain unauthorized access.Axis Communications AB AXIS Camera Station Pro
- CVE-2026-4762A vulnerability to perform a privilege escalation attack on the server as a non-admin user.Axis Communications AB AXIS Camera Station Pro
- CVE-2026-63288A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint.Axis Communications AB AXIS A1210 - Secure Entry · Axis… +3
- CVE-2026-14918The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this…Axis Communications AB Signed Video Framework · Axis Com… +1