Filter public vulnerability entries by severity / channel / vendor / time.
CVE-2026-41940 · 2026-09-02 · pending_review
WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control …
CVE-2024-9680 · 2026-09-02 · pending_review
Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.
CVE-2024-21413 · 2026-09-02 · pending_review
Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and o…
CVE-2023-7101 · 2026-09-02 · pending_review
Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings wi…
CVE-2023-45249 · 2026-09-02 · pending_review
Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.
CVE-2022-47966 · 2026-09-03 · pending_review
Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.
CVE-2022-26486 · 2026-09-04 · pending_review
Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.
CVE-2020-8467 · 2026-09-04 · pending_review
Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution.
CVE-2020-25213 · 2026-09-04 · pending_review
WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
CVE-2019-9978 · 2026-09-04 · pending_review
WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.
CVE-2019-18187 · 2026-09-04 · pending_review
Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.
CVE-2019-1297 · 2026-09-04 · pending_review
A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.
CVE-2019-11708 · 2026-09-03 · pending_review
Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
CVE-2018-4990 · 2026-09-03 · pending_review
Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
CVE-2018-0802 · 2026-09-04 · pending_review
Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is…
CVE-2018-0798 · 2026-09-04 · pending_review
Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is…
CVE-2017-8570 · 2026-09-04 · pending_review
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.
CVE-2017-11882 · 2026-09-04 · pending_review
Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user.
CVE-2017-11826 · 2026-09-04 · pending_review
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in…
CVE-2017-0262 · 2026-09-04 · pending_review
A remote code execution vulnerability exists in Microsoft Office.
CVE-2017-0261 · 2026-09-04 · pending_review
Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.
CVE-2017-0199 · 2026-09-04 · pending_review
Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.
CVE-2016-7193 · 2026-09-04 · pending_review
Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.
CVE-2016-3235 · 2026-09-04 · pending_review
Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote…
CVE-2015-1641 · 2026-09-04 · pending_review
Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user.
CVE-2014-1761 · 2026-09-04 · pending_review
Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.
CVE-2013-0640 · 2026-09-04 · pending_review
An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.
CVE-2012-2539 · 2026-09-03 · pending_review
Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.
CVE-2012-1856 · 2026-09-04 · pending_review
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.
CVE-2010-3333 · 2026-09-04 · pending_review
A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.
CVE-2010-2572 · 2026-09-03 · pending_review
Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
CVE-2009-3953 · 2026-09-03 · pending_review
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
CVE-2009-0556 · 2026-09-02 · pending_review
Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers …
CVE-2009-0238 · 2026-09-02 · pending_review
Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed o…
CVE-2008-2992 · 2026-09-04 · pending_review
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.
CVE-2007-0671 · 2026-09-02 · pending_review
Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a mali…
CVE-2026-104730 · 2026-10-16 · auto
The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted in…
CVE-2026-89079 · 2026-10-16 · auto
The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to upd…
CVE-2026-103768 · 2026-10-16 · auto
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient f…
CVE-2026-109515 · 2026-10-16 · auto
The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the `sub…
CVE-2026-109219 · 2026-10-16 · auto
The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.4 via the mbw_file_upload function. This is due to missing file extension validation on the attacker-su…
CVE-2026-104798 · 2026-10-16 · auto
The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.8.7. The public `mcs` GET parameter is reflected into post content unsanitized…
CVE-2021-35942 · 2026-10-14 · auto
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial …
CVE-2026-97749 · 2026-10-14 · auto
Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-97016 · 2026-10-14 · auto
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-100758 · 2026-10-14 · auto
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2025-9321 · 2026-10-11 · auto
The WPCasa plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.4.1. This is due to insufficient input validation and restriction on the 'api_requests' function. This makes it poss…
CVE-2026-107645 · 2026-10-11 · auto
The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_registration() AJAX handler explicitly disabling Dokan's vendor-…
CVE-2026-104732 · 2026-10-11 · auto
The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_action()` performs no server-side check — v…
CVE-2026-81797 · 2026-10-11 · auto
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.