Export limit exceeded: 376794 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (376794 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-18488 | 2 Creativethemes, Wordpress | 2 Blocksy Companion, Wordpress | 2026-09-01 | 6.4 Medium |
| The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data) in all versions up to, and including, 2.1.51 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. | ||||
| CVE-2026-74916 | 2 Wordpress, Wpfastestcache | 2 Wordpress, Wp Fastest Cache | 2026-09-01 | 6.5 Medium |
| The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from, the clean URL's cache entry to every subsequent visitor. | ||||
| CVE-2026-78363 | 2 Mw Wp Form Project, Wordpress | 2 Mw Wp Form, Wordpress | 2026-09-01 | 4.8 Medium |
| The MW WP Form WordPress plugin before 5.1.5 does not prevent shortcodes in user-submitted values from being executed when it merges those values into a message that it later processes for shortcodes, allowing unauthenticated users to run any shortcode registered on the site. Exploitation requires the site to have been configured to echo a submitted value back to the visitor after submission. | ||||
| CVE-2026-76111 | 1 Dell | 12 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 9 more | 2026-09-01 | 8.8 High |
| Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation. | ||||
| CVE-2026-74952 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-09-01 | 8.8 High |
| Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, and Firefox ESR 153.2. | ||||
| CVE-2026-84144 | 2026-09-01 | N/A | ||
| Internally found bugs present in Firefox 154 and Firefox ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||
| CVE-2026-84143 | 2026-09-01 | N/A | ||
| Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, and Firefox ESR 153.2. | ||||
| CVE-2026-84142 | 2026-09-01 | N/A | ||
| Internally found bugs present in Firefox 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155. | ||||
| CVE-2026-84141 | 2026-09-01 | N/A | ||
| Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||
| CVE-2026-84140 | 2026-09-01 | N/A | ||
| Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||
| CVE-2026-84139 | 2026-09-01 | N/A | ||
| Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||
| CVE-2026-84138 | 2026-09-01 | N/A | ||
| Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155. | ||||
| CVE-2026-84137 | 2026-09-01 | N/A | ||
| Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||
| CVE-2026-84136 | 2026-09-01 | N/A | ||
| Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||
| CVE-2026-84135 | 2026-09-01 | N/A | ||
| Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155. | ||||
| CVE-2026-84134 | 2026-09-01 | N/A | ||
| Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||
| CVE-2026-84133 | 2026-09-01 | N/A | ||
| Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||
| CVE-2026-84132 | 2026-09-01 | N/A | ||
| Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||
| CVE-2026-84130 | 2026-09-01 | N/A | ||
| Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||
| CVE-2026-84129 | 2026-09-01 | N/A | ||
| Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | ||||