Export limit exceeded: 393727 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (393727 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-16588 | 2 Wordpress, Wpdirectorykit | 2 Wordpress, Wp Directory Kit | 2026-09-16 | 6.5 Medium |
| The WP Directory Kit plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. | ||||
| CVE-2026-12793 | 2 Jetmonsters, Wordpress | 2 Jetformbuilder — Dynamic Blocks Form Builder, Wordpress | 2026-09-16 | 9.8 Critical |
| The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.6.2. This is due to the plugin not validating that a submitted form ID belongs to a JetFormBuilder form before parsing the referenced post's content as form schema and executing an Advanced Validation server-side callback. This makes it possible for unauthenticated attackers to create a new administrator-level user account. | ||||
| CVE-2026-86878 | 1 Apple | 3 Ios And Ipados, Ipados, Iphone Os | 2026-09-16 | 5.5 Medium |
| A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data. | ||||
| CVE-2026-65404 | 1 Apple | 4 Ios And Ipados, Ipados, Iphone Os and 1 more | 2026-09-16 | 5.5 Medium |
| An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences. | ||||
| CVE-2026-91782 | 1 Gnu | 1 Binutils | 2026-09-16 | 3.3 Low |
| A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null pointer dereference. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.48 addresses this issue. The patch is identified as d1268210b6f6/471130b39c0/283d3198bed/0a84e560216/a692a633d40. Upgrading the affected component is recommended. | ||||
| CVE-2026-91781 | 1 Gnu | 1 Binutils | 2026-09-16 | 3.3 Low |
| A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 is able to address this issue. The identifier of the patch is 7322e9bc30cb282575a701c307851fd3d66fee68. It is suggested to upgrade the affected component. | ||||
| CVE-2026-91780 | 1 Gnu | 1 Binutils | 2026-09-16 | 3.3 Low |
| A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet. | ||||
| CVE-2026-91779 | 1 Gnu | 1 Binutils | 2026-09-16 | 3.3 Low |
| A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet. | ||||
| CVE-2026-90829 | 1 Gnu | 1 Binutils | 2026-09-16 | 5.3 Medium |
| A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet. | ||||
| CVE-2026-90830 | 1 Gnu | 1 Binutils | 2026-09-16 | 5.3 Medium |
| A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet. | ||||
| CVE-2026-84588 | 1 Apple | 1 Macos | 2026-09-16 | 6.5 Medium |
| A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory. | ||||
| CVE-2026-84585 | 1 Apple | 1 Macos | 2026-09-16 | 5.5 Medium |
| A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent. | ||||
| CVE-2026-65410 | 1 Apple | 7 Ios And Ipados, Ipados, Iphone Os and 4 more | 2026-09-16 | 7.5 High |
| The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination. | ||||
| CVE-2026-65411 | 1 Apple | 4 Ios And Ipados, Ipados, Iphone Os and 1 more | 2026-09-16 | 5.5 Medium |
| A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system. | ||||
| CVE-2026-69422 | 1 Microsoft | 8 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 5 more | 2026-09-16 | 7 High |
| Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-87088 | 1 Tanium | 1 Enforce | 2026-09-16 | 7 High |
| Tanium addressed an unauthorized code execution vulnerability in Enforce. | ||||
| CVE-2026-87084 | 1 Tanium | 1 Enforce | 2026-09-16 | 7.7 High |
| Tanium addressed a server-side request forgery vulnerability in Enforce. | ||||
| CVE-2026-87075 | 1 Tanium | 1 Comply | 2026-09-16 | 8.1 High |
| Tanium addressed an improper access controls vulnerability in Comply. | ||||
| CVE-2026-87073 | 1 Tanium | 1 Comply | 2026-09-16 | 6.5 Medium |
| Tanium addressed an improper access controls vulnerability in Comply. | ||||
| CVE-2026-87072 | 1 Tanium | 1 Comply | 2026-09-16 | 7.1 High |
| Tanium addressed an improper access controls vulnerability in Comply. | ||||