Search
450 CVEs · published 2026-07-27 to 2026-07-27
CVEs (450)
Showing 351–375 of 450
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-59536 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions. | |
| CVE-2026-59535 | HIGH | 7.3 | 2026-07-27 | Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions. | |
| CVE-2026-59534 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Broken Access Control in Post My CF7 Form <= 6.2.0 versions. | |
| CVE-2026-59533 | CRITICAL | 9.3 | 2026-07-27 | Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. | |
| CVE-2026-59532 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions. | |
| CVE-2026-59531 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions. | |
| CVE-2026-59530 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions. | |
| CVE-2026-59529 | HIGH | 7.5 | 2026-07-27 | Unauthenticated Sensitive Data Exposure in Ebook Store <= 6.19 versions. | |
| CVE-2026-59528 | HIGH | 7.5 | 2026-07-27 | Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions. | |
| CVE-2026-59527 | CRITICAL | 9.3 | 2026-07-27 | Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. | |
| CVE-2026-10819 | MEDIUM | 6.5 | 2026-07-27 | Mattermost versions 11.6.x <= 11.6.5, 10.11.x <= 10.11.20, 11.8.x <= 11.8.1, 11.7.x <= 11.7.4 fail to limit the number of frames and enforce the file size cap on animated G… | |
| CVE-2026-10600 | MEDIUM | 4.3 | 2026-07-27 | Mattermost versions 11.8.x <= 11.8.0, 11.7.x <= 11.7.3, 11.6.x <= 11.6.5, 10.11.x <= 10.11.20 fail to bound the time and resource consumption of server-side document conten… | |
| CVE-2025-59181 | NONE | — | 2026-07-27 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change … | |
| CVE-2025-59180 | NONE | — | 2026-07-27 | Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with k… | |
| CVE-2025-59178 | NONE | — | 2026-07-27 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attac… | |
| CVE-2025-59177 | NONE | — | 2026-07-27 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted comma… | |
| CVE-2025-59172 | NONE | — | 2026-07-27 | Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary … | |
| CVE-2026-65879 | NONE | — | 2026-07-27 | Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to for… | |
| CVE-2026-65878 | NONE | — | 2026-07-27 | Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path validation and ACL checks lead to a file deletion vector i… | |
| CVE-2026-65877 | NONE | — | 2026-07-27 | Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of various parameters in the media manager search and date… | |
| CVE-2026-65876 | NONE | — | 2026-07-27 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of catid parameters in the loadMoreArticles endpoint lea… | |
| CVE-2026-65766 | NONE | — | 2026-07-27 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint lead… | |
| CVE-2026-61511 | CRITICAL | 9.8 | 2026-07-27 | vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that a… | |
| CVE-2026-17514 | MEDIUM | 5.3 | 2026-07-27 | A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation … | |
| CVE-2026-17513 | LOW | 3.3 | 2026-07-27 | A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_to_ggml_type of the file ggml/src/ggml.c. The manipulation of the argument f… |