Export limit exceeded: 10522 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (10522 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-119128 | 1 Zitadel | 1 Zitadel | 2026-10-29 | 7.4 High |
| ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users lacking any authentication method. Attackers can compute a valid verificationCheck cookie from the user ID and browser fingerprint to set a password, register a passkey, or link an identity provider, taking over the account. | ||||
| CVE-2026-118661 | 1 Capricorn86 | 1 Happy-dom | 2026-10-29 | 6.5 Medium |
| Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 20.14.6, Happy DOM's CookieContainer in src/cookie/CookieContainer.ts does not correctly validate or match Domain cookie attributes. It can accept a Domain unrelated to the origin setting the cookie, including a public suffix, and separately treats an unrelated suffix-sharing hostname as a match because cookieMatchesURL does not enforce a DNS-label boundary. In server-side rendering and prerendering applications that contact attacker-controlled origins and then make requests to a victim origin, these behaviors can plant and deliver a forged cookie, enabling cookie injection or session fixation. This issue is fixed in version 20.14.6. | ||||
| CVE-2026-115707 | 1 Elastic | 1 Elastic Cloud Enterprise | 2026-10-29 | 6.4 Medium |
| Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Retrieve Embedded Sensitive Data (CAPEC-37). After the ECE certificate rotation procedure runs, data that it retains contains platform credentials and certificate authority private keys, and lower-privileged platform components can read this data. An attacker who controls any host in the installation can use this data to get full control of the ECE control plane and of the deployments that it manages. | ||||
| CVE-2026-88967 | 1 Grafana | 2 Grafana, Grafana Enterprise | 2026-10-29 | 7.7 High |
| A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token (server-side request forgery). | ||||
| CVE-2026-79656 | 1 Grafana | 2 Grafana, Grafana Enterprise | 2026-10-29 | 6 Medium |
| A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens of users who sign in through the Generic OAuth, Google or GitLab providers. Grafana writes these tokens to its logs unredacted when an access or ID token is not a valid JWT, when the ID token is missing (at debug level) or is not a string (exposure of sensitive information in log files). The exposure is bounded by the scopes granted to the configured OAuth client. | ||||
| CVE-2026-118081 | 2026-10-29 | 8.8 High | ||
| Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions. | ||||
| CVE-2026-118079 | 2026-10-29 | 7.2 High | ||
| Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions. | ||||
| CVE-2026-118078 | 2026-10-29 | 7.2 High | ||
| Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions. | ||||
| CVE-2026-118077 | 2026-10-29 | 7.2 High | ||
| Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. | ||||
| CVE-2026-118076 | 2026-10-29 | 8.8 High | ||
| Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. | ||||
| CVE-2026-118074 | 2026-10-29 | 7.2 High | ||
| Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. | ||||
| CVE-2026-118073 | 2026-10-29 | 8.8 High | ||
| Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. | ||||
| CVE-2026-116869 | 2026-10-29 | 7.2 High | ||
| Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. | ||||
| CVE-2026-116868 | 2026-10-29 | 8.8 High | ||
| Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions. | ||||
| CVE-2026-116866 | 2026-10-29 | 8.8 High | ||
| Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions. | ||||
| CVE-2026-116865 | 2026-10-29 | 7.2 High | ||
| Editor PHP Object Injection in Zippy <= 1.7.0 versions. | ||||
| CVE-2026-116864 | 2026-10-29 | 7.2 High | ||
| Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions. | ||||
| CVE-2026-62131 | 2026-10-29 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. | ||||
| CVE-2026-62018 | 2026-10-29 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions. | ||||
| CVE-2026-62016 | 2026-10-29 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. | ||||