CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

5.150 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-102397 Medium · 6.5 CWE-862 Sep 30, 2026
WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic <= 1.5.5 versions.
CVE-2026-102375 Medium · 6.5 CWE-862 Sep 30, 2026
WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14.
CVE-2026-47604 Medium · 5.5 CWE-862 Sep 30, 2026
Missing Authorization in NVIDIA GeForce
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-47603 Medium · 5.5 CWE-862 Sep 30, 2026
Missing Authorization in NVIDIA GeForce
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-47580 High · 7.3 CWE-862 Sep 30, 2026
Missing Authorization in NVIDIA GeForce
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause a missing authorization issue. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
CVE-2026-47559 High · 7.8 CWE-862 Sep 30, 2026
Missing Authorization in NVIDIA GeForce
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could access memory belonging to another user's process. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
CVE-2026-47552 High · 7.8 CWE-862 Sep 30, 2026
Missing Authorization in NVIDIA GeForce
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass an authorization check and modify privileged configuration. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVE-2026-47493 High · 7.8 CWE-862 Sep 30, 2026
Missing Authorization in NVIDIA Virtual GPU Manager
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
CVE-2026-47492 Medium · 5.5 CWE-862 Sep 30, 2026
Missing Authorization in NVIDIA GeForce
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-100280 Medium · 4.3 CWE-862 Sep 30, 2026
Missing Authorization in Jetbrains Youtrack
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible
CVE-2026-100271 Low · 2.7 CWE-862 Sep 30, 2026
Missing Authorization in Jetbrains Youtrack
In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from other projects
CVE-2026-100269 Medium · 4.3 CWE-862 Sep 30, 2026
Missing Authorization in Jetbrains Youtrack
In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed
CVE-2026-100266 Medium · 6.5 CWE-862 Sep 30, 2026
Missing Authorization in Jetbrains Hub
In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address
CVE-2026-97285 Medium · 5.4 CWE-862 Sep 30, 2026
WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability
Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.
CVE-2026-97267 Medium · 4.3 CWE-862 Sep 30, 2026
WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.
CVE-2026-97247 Medium · 6.5 CWE-862 Sep 30, 2026
WordPress Blocksy Companion plugin <= 2.1.55 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.
CVE-2026-97243 Medium · 5.4 CWE-862 Sep 30, 2026
WordPress AllAble Connector plugin <= 0.13.4 - Broken Access Control vulnerability
Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.
CVE-2026-97239 Medium · 6.5 CWE-862 Sep 30, 2026
WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions.
CVE-2026-97197 High · 7.5 CWE-862 Sep 30, 2026
WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.
CVE-2026-96834 Medium · 6.5 CWE-862 Sep 30, 2026
WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.
CVE-2026-96823 High · 7.5 CWE-862 Sep 30, 2026
WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.
CVE-2026-96818 High · 7.5 CWE-862 Sep 30, 2026
WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.
CVE-2026-96817 High · 8.2 CWE-862 Sep 30, 2026
WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.
CVE-2026-96348 High · 7.5 CWE-862 Sep 30, 2026
WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Bookly <= 28.2 versions.
CVE-2026-95587 High · 7.5 CWE-862 Sep 30, 2026
WordPress Hostinger Migrator plugin <= 1.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions.