Export limit exceeded: 376212 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (376212 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-19225 | 2026-08-27 | 6.6 Medium | ||
| The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network. | ||||
| CVE-2026-19715 | 2026-08-27 | 7.5 High | ||
| The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.3.1 does not restrict access to the debug log it writes, which is stored at a fixed and publicly reachable location, allowing unauthenticated users to read the OAuth tokens and authorisation codes it has issued as well as user records including password hashes when debug logging is enabled. | ||||
| CVE-2021-48005 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2021-48004 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2021-48003 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2021-48002 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2021-48001 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2021-48000 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2021-47999 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2021-47998 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2021-47997 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2022-51007 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2022-51006 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2022-51005 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2022-51004 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2022-51003 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2022-51002 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2022-51001 | 2026-08-27 | N/A | ||
| This CVE ID has been rejected. | ||||
| CVE-2026-75871 | 1 Gitlab | 1 Ai-gateway | 2026-08-27 | 8.2 High |
| GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an externally-controlled endpoint via a crafted inline flow configuration that overrides the HTTP Host header, resulting in disclosure of Google Cloud Vertex cloud service credentials and private signing keys. | ||||
| CVE-2026-13415 | 2026-08-27 | 7.2 High | ||
| The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the Editor role (when the administrator has granted the Editor role access to the CMP WordPress plugin before 4.1.18's admin-bar controls) to update arbitrary WordPress options, including options that lead to privilege escalation to Administrator. | ||||