Search
Search Results (425852 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-125746 | 2026-11-12 | 5.3 Medium | ||
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ProPluginsLab Back In Stock Notifier for WooCommerce back-in-stock-notifier-for-woocommerce allows Code Injection.This issue affects Back In Stock Notifier for WooCommerce: from n/a through 7.5.2. | ||||
| CVE-2026-125850 | 2026-11-12 | 8.8 High | ||
| Cross-Site Request Forgery (CSRF) vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request Forgery.This issue affects Appointment Dark: from n/a through 1.3.4. | ||||
| CVE-2026-125848 | 2026-11-12 | 8.8 High | ||
| Cross-Site Request Forgery (CSRF) vulnerability in webriti Leo leo allows Cross Site Request Forgery.This issue affects Leo: from n/a through 1.7.4. | ||||
| CVE-2026-125838 | 2026-11-12 | 8.8 High | ||
| Cross-Site Request Forgery (CSRF) vulnerability in webriti Quality quality allows Cross Site Request Forgery.This issue affects Quality: from n/a through 3.3. | ||||
| CVE-2026-121355 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 9.1 Critical |
| Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does not require user interaction. | ||||
| CVE-2026-121574 | 2 Wordpress-extensions, Wpchill | 2 Passster, Passster | 2026-11-12 | 5.3 Medium |
| Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20. | ||||
| CVE-2026-121028 | 2 Wordpress-extensions, Wpchill | 2 Strong Testimonials, Strong Testimonials | 2026-11-12 | 5.3 Medium |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WP Chill Strong Testimonials strong-testimonials allows Code Injection.This issue affects Strong Testimonials: from n/a through 3.3.17. | ||||
| CVE-2026-113408 | 2 Git, Git-scm | 2 Git, Git | 2026-11-12 | 3.3 Low |
| Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository | ||||
| CVE-2026-69901 | 1 Microsoft | 1 Teams | 2026-11-12 | 7.5 High |
| Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-67375 | 1 Microsoft | 1 Sql Server 2025 | 2026-11-12 | 8.8 High |
| Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-68783 | 1 Microsoft | 2 Sql Server 2025, Sql Server 2025 For X64-based Systems Cu10 | 2026-11-12 | 6.5 Medium |
| Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-85923 | 1 Microsoft | 1 Azure Devops Server | 2026-11-12 | 8.8 High |
| Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-83953 | 1 Microsoft | 1 Gihub Copilot Plugin For Jetbrains Ides | 2026-11-12 | 5.5 Medium |
| Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-67382 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-12 | 6.5 Medium |
| Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-67387 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-12 | 8.8 High |
| Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-62903 | 1 Microsoft | 3 Microsoft Data Sqlclient 6 1, Microsoft Data Sqlclient 7 0, Microsoft Data Sqlclient 7 1 | 2026-11-12 | 7.4 High |
| Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-94513 | 1 Microsoft | 4 Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Sql Server 2022, Sql Server 2025 and 1 more | 2026-11-12 | 8 High |
| Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-88176 | 1 Microsoft | 1 Sharepoint Server | 2026-11-12 | 8.8 High |
| Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-117476 | 2026-11-12 | N/A | ||
| This is rejected. | ||||
| CVE-2026-117474 | 2026-11-12 | N/A | ||
| This is rejected. | ||||