CVE-2026-48907 · joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,935 matching vulnerabilities · Page 160 of 779
joomlacontenteditor.net
Termix-SSH
CVE-2026-45744 · Termix-SSH Termix
Termix has an OS Command Injection in File Manager resolvePath endpoint
CVE-2026-45748 · Termix-SSH Termix
Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection
CVE-2026-45746 · Termix-SSH Termix
Termix Vulnerable to Arbitrary Command Execution via Session Hijacking
CVE-2026-45750 · Termix-SSH Termix
Termix Vulnerable to Arbitrary Command Execution in File Manager
Riello UPS
WP Travel Kit
CVE-2023-54352 · WP Travel Kit Travelscape
WordPress Seotheme Remote Code Execution Unauthenticated
hippooo
CVE-2026-10580 · hippooo Hippoo Mobile App for WooCommerce
Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API
ShapedPlugin, LLC
CVE-2026-49777 · ShapedPlugin, LLC Product Slider Pro for WooCommerce
WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability
Altium
CVE-2026-11429 · Altium Altium Enterprise Server
Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution
CVE-2026-11420 · Altium Altium Enterprise Server
Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read
CVE-2026-11414 · Altium Altium Enterprise Server
Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal
CVE-2026-11419 · Altium Altium Enterprise Server
Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write
CVE-2026-11423 · Altium Altium Enterprise Server
Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation
haxtheweb
CVE-2026-46399 · haxtheweb haxcms-nodejs
Authenticated Remote Code Execution via File Overwrite
CVE-2026-46395 · haxtheweb haxcms-nodejs
HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation
CVE-2026-46396 · haxtheweb haxcms-nodejs
HAX CMS has a stored XSS via <iframe> that allows access to sensitive client-side data and account takeover
CVE-2026-46496 · haxtheweb haxcms-nodejs
HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft
Morse Micro
CVE-2026-7762 · Morse Micro HaLowLink 2
Heap buffer overflow in dot11ah.ko S1G Capabilities IE processing
CVE-2026-7763 · Morse Micro HaLowLink 2
Heap buffer overflow in morse.ko TIM IE processing
HMBRAND
mitre
ubccr
BINARY
CVE-2026-11362 · BINARY DataDog::DogStatsd
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags
CVE-2026-9270 · BINARY DataDog::DogStatsd
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections
DTS Electronics Industry and Trade Ltd. Co.
CVE-2026-6274 · DTS Electronics Industry and Trade Ltd. Co. Redline WR3200
Authentication Bypass in DTS Electronics' Redline WR3200
defenseunicorns
CVE-2026-46389 · defenseunicorns uds-identity-config
UDS Identity Config has a client authentication bypass in `ClientIdAndKubernetesSecretAuthenticator`
CVE-2026-11095 · Google Chrome
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromise…
CVE-2026-11113 · Google Chrome
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…
CVE-2026-11120 · Google Chrome
Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who…
CVE-2026-11100 · Google Chrome
Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in s…
CVE-2026-11114 · Google Chrome
Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…
CVE-2026-11119 · Google Chrome
Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the…
CVE-2026-11131 · Google Chrome
Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…
CVE-2026-11146 · Google Chrome
Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compro…
CVE-2026-11152 · Google Chrome
Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape…
CVE-2026-11163 · Google Chrome
Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox…
CVE-2026-11165 · Google Chrome
Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escap…
CVE-2026-11167 · Google Chrome
Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised…
CVE-2026-11250 · Google Chrome
Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the render…
CVE-2026-11282 · Google Chrome
Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perf…
CVE-2026-11112 · Google Chrome
Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who h…
CVE-2026-11153 · Google Chrome
Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via…
CVE-2026-11198 · Google Chrome
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially per…
CVE-2026-11207 · Google Chrome
Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially p…
CVE-2026-11213 · Google Chrome
Insufficient validation of untrusted input in Reading Mode in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had comp…
CVE-2026-11293 · Google Chrome
Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a c…
guardrails-ai
CVE-2026-45758 · guardrails-ai guardrails