Total
417694 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-119560 | 2026-10-30 | N/A | 5.9 MEDIUM | ||
| OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append ntpd.conf directives by embedding newlines in the fudge and refid fields. Attackers holding the page-services-ntp-gps or PPS privilege can submit CR/LF characters via services_ntpd_gps.php or services_ntpd_pps.php to inject directives loaded by ntpd running as root. | |||||
| CVE-2026-119712 | 2026-10-30 | N/A | 6.4 MEDIUM | ||
| PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web connectors to reach loopback, private-network, or cloud metadata endpoints, with image responses embedded into indexed content. | |||||
| CVE-2026-119713 | 2026-10-30 | N/A | 8.8 HIGH | ||
| Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cleanupExecutionWorkspaceArtifacts runs these commands through a shell as the Paperclip server process, executing attacker-chosen OS commands on the server host. | |||||
| CVE-2026-119714 | 2026-10-30 | N/A | 6.5 MEDIUM | ||
| My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticated attackers to execute registered shortcodes via the mcs search parameter. The mcs value reaches mc_search_results() in src/my-calendar-search.php without bracket encoding before do_shortcode runs, so a GET request triggers shortcodes on any page or post, enabling content injection and spoofing. | |||||
| CVE-2026-104063 | 2026-10-30 | N/A | 6.1 MEDIUM | ||
| Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pixel data. Attackers can supply a crafted PICT file with manipulated dimensions that, when placed or imported, causes heap over-reads leading to crashes or heap memory disclosure. | |||||
| CVE-2026-104065 | 2026-10-30 | N/A | 7.8 HIGH | ||
| Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when imported by a user, writes decoded bitmap data outside the heap image buffer, causing crashes or code execution. | |||||
| CVE-2026-119597 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json. Attackers can mint HS256 bearer tokens with an Admin role claim to access /api/admin endpoints and control users, roles, repositories, settings, and API keys. | |||||
| CVE-2026-119710 | 2026-10-30 | N/A | 7.1 HIGH | ||
| PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delete to the schedule route, bypassing connector:delete and lock checks to remove connector instances and purge record embeddings. | |||||
| CVE-2026-119701 | 2026-10-30 | N/A | 5.3 MEDIUM | ||
| WPGraphQL before 2.24.1 contains a missing rate limiting vulnerability that allows unauthenticated attackers to flood password reset emails by aliasing the sendPasswordResetEmail mutation. Attackers can send one HTTP request with many aliases, bypassing batch_limit, to exhaust mail provider quota and repeatedly rotate reset keys, blocking legitimate password recovery. | |||||
| CVE-2026-119662 | 2026-10-30 | N/A | 8.8 HIGH | ||
| Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to authenticate as administrator using the fixed admin/admin pair. Attackers on the same network can log in via the /api/v1/auth/login endpoint to modify library and configuration settings and install JavaScript plugins running in QuickJS. | |||||
| CVE-2026-116862 | 2026-10-30 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions. | |||||
| CVE-2026-14467 | 2026-10-30 | N/A | N/A | ||
| An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an HTTP/HTTPS request to the server controlled by the attacker, who can then collect information such as the source IP address, the User-Agent header, the date and time of access, and other metadata derived from the request, thereby compromising the user’s privacy. | |||||
| CVE-2026-54855 | 2026-10-30 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions. | |||||
| CVE-2026-116851 | 2026-10-30 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions. | |||||
| CVE-2026-105077 | 2026-10-30 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions. | |||||
| CVE-2026-116861 | 2026-10-30 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions. | |||||
| CVE-2026-62122 | 2026-10-30 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31. | |||||
| CVE-2026-54850 | 2026-10-30 | N/A | 6.5 MEDIUM | ||
| Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions. | |||||
| CVE-2026-62047 | 2026-10-30 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2. | |||||
| CVE-2026-116386 | 2026-10-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | |||||