cve.bz

Matching records, newest first

Filter
  1. 6.9CVE-2026-112071EPSS 0.4%

    The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a pa…

  2. 5.3CVE-2026-112070EPSS 0.3%

    The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to.

  3. 6.3CVE-2026-112069EPSS 0.5%

    The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is onl…

  4. 5.3CVE-2026-112068EPSS 0.3%

    The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site.

  5. 6.9CVE-2026-112067EPSS 0.4%

    The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a CAPTCHA image can read the answer from it and submit it, so automated clients can pass the challenge. This applies…

  6. 7.1CVE-2026-112066EPSS 0.4%

    The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with access to the module could import a configuration that adds arbitrary scripts to the frontend of the website.

  7. 5.3CVE-2026-112065EPSS 0.3%

    The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the requested page. Any authenticated backend user, regardless of permissions, could therefore retrieve conse…

  8. 7.1CVE-2026-112064EPSS 0.4%

    The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a database query without validation. Only the filter conditions of that query were bound as parameters. A b…

  9. 6.5CVE-2026-111844EPSS 0.2%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23.

  10. 8.1CVE-2026-92287EPSS 0.2%

    Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. …

  11. 6.9CVE-2026-43848EPSS 0.3%

    A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.

  12. 8.2CVE-2026-43847EPSS 0.3%

    A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.

  13. 8.6CVE-2026-43846EPSS 0.5%

    A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.

  14. 9.2CVE-2026-43845EPSS 0.5%

    A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

  15. 9.3CVE-2026-43844EPSS 0.5%

    A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

  16. 6.9CVE-2026-43843EPSS 0.3%

    An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.

  17. 6.9CVE-2026-43842EPSS 0.3%

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

  18. 6.9CVE-2026-43841EPSS 0.3%

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.

  19. 6.9CVE-2026-43840EPSS 0.3%

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

  20. 8.7CVE-2026-43839EPSS 0.3%

    A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

  21. 9.2CVE-2026-43838EPSS 0.4%

    A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

  22. 7.5CVE-2026-43837EPSS 0.4%

    A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.

  23. 9.3CVE-2026-43836EPSS 0.9%

    A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

  24. 6.9CVE-2026-11960EPSS 0.3%

    Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when attempting to log in with a valid username compared to an invalid one. An unauthenticated attacker could systematical…

  25. 6.9CVE-2026-11959EPSS 0.3%

    Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitisation of user input in the ‘city’ and ‘province’ fields in the ‘ListAlmacen’ endpoint. Successful exploitation of this …

  26. 7.5CVE-2026-113469EPSS 0.2%

    A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.

  27. 6.6CVE-2026-113465EPSS 0.2%

    It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specif…

  28. 4.3CVE-2026-101201EPSS 0.2%

    A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.

  29. 8.6CVE-2026-43835EPSS 0.2%

    A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.

  30. 7.5CVE-2026-43834EPSS 0.4%

    A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.

  31. 8.7CVE-2026-113407EPSS 0.5%

    BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.

  32. 8.7CVE-2026-113406EPSS 0.5%

    BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.

  33. 8.7CVE-2026-113405EPSS 0.5%

    BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.

  34. 7.3CVE-2026-112177EPSS 0.4%

    A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insuf…

  35. 7.8CVE-2026-111090EPSS 0.2%

    A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic …

  36. 4.8CVE-2024-2323EPSS 0.2%

    The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation feature is enabled. This oversight allows an attacker to repeatedly attempt password guesses for a user account …

  37. 6.4CVE-2026-93878EPSS 0.2%

    The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it po…

  38. 8.7CVE-2026-113404EPSS 0.4%

    WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server.

  39. 7.1CVE-2026-113403EPSS 0.7%

    ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server.

  40. 7.1CVE-2026-113402EPSS 0.4%

    ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can exploit path traversal to cause the application to include PHP files outside the intended directory.

  41. 5.1CVE-2026-112148EPSS 0.4%

    A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows an attacker to execute arbitrary JavaScript in the origin of an affected LIFF application's endpoint w…

  42. 3.7CVE-2026-110725EPSS 0.3%

    fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, when serialize(), normalize(), or resolve() are called with the non-default opt…

  43. 6.1CVE-2026-110306EPSS 0.2%

    fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme component with the legacy global unescape()…

  44. 4.8CVE-2026-110180EPSS 0.3%

    fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and from 4.0.1 through 4.2.2, for HTTP-family schemes the canonicalizeHost() function passes the …

  45. 3.7CVE-2026-110095EPSS 0.3%

    fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, the normalize() and serialize() functions apply RFC 3986 dot-segment removal to…

  46. 8.6CVE-2026-97627EPSS 0.4%

    Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may execute arbitrary OS commands.

  47. 4.3CVE-2026-96903EPSS 0.2%

    The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on several of its contact-management read AJAX actions, allowing any authenticated user with a role as low as subscriber to read other users' C…

  48. 5.3CVE-2026-96902EPSS 0.3%

    The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API output, allowing unauthenticated users to read details a site has chosen to hide on published listings, such as…

  49. 7.5CVE-2026-93300EPSS 0.5%

    The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up to, and including, 1.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient p…

  50. 6.9CVE-2026-100737EPSS 0.3%

    Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmw…