National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 63,872 matching advisories
Page 196 of 2,662

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Us...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport. This issue affects Apache Thrift: before 0....

๐Ÿ“… 2026-10-02 Inspect Dossier →

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgr...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache ...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform() copies the comp...

๐Ÿ“… 2026-10-02 Inspect Dossier →

An improper verification of cryptographic signature vulnerability exists in protocol gatewaysย because the device does not properly verify the cryptographic authenticity of firmware images before insta...

๐Ÿ“… 2026-10-02 Inspect Dossier →

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter whe...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resource with an insecure ...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes ...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to ve...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victimโ€™s brows...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victimโ€™s brows...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victimโ€™s brows...

๐Ÿ“… 2026-10-02 Inspect Dossier →

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID result...

๐Ÿ“… 2026-10-02 Inspect Dossier →
CVE-2026-97652 MEDIUM 6.1

The WP Statistics โ€“ Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Key in all versions up to...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victimโ€™s brows...

๐Ÿ“… 2026-10-02 Inspect Dossier →

improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift:...

๐Ÿ“… 2026-10-02 Inspect Dossier →

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25....

๐Ÿ“… 2026-10-02 Inspect Dossier →

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before ...

๐Ÿ“… 2026-10-02 Inspect Dossier →
CVE-2026-94541 CRITICAL 9.8

The WPMobile.App โ€“ Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying t...

๐Ÿ“… 2026-10-02 Inspect Dossier →
CVE-2026-94405 MEDIUM 5.3

Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sensitive Data. This issue affects Download Manager: from n/a through 3.3.71....

๐Ÿ“… 2026-10-02 Inspect Dossier →
CVE-2026-94180 MEDIUM 4.3

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a through 2.0.26....

๐Ÿ“… 2026-10-02 Inspect Dossier →

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buffer Regex Rewrite in all versions up to, and including, 2.10.6 due to insufficien...

๐Ÿ“… 2026-10-02 Inspect Dossier →
CVE-2026-85492 MEDIUM 6.1

The All in One SEO โ€“ AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via URL Pathname in ...

๐Ÿ“… 2026-10-02 Inspect Dossier →
Showing Page 196 of 2,662 • 63,872 matching CVEs (out of 396,747 NIST advisories)