漏洞列表

CVE-2026-41940 · 2026-07-14 · pending_review

WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control …

CVE-2024-21413 · 2026-07-15 · pending_review

Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and o…

CVE-2023-7101 · 2026-07-15 · pending_review

Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings wi…

CVE-2023-45249 · 2026-07-15 · pending_review

Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.

CVE-2021-38646 · 2026-07-15 · pending_review

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

CVE-2021-27059 · 2026-07-18 · pending_review

Microsoft Office contains an unspecified vulnerability that allows for remote code execution.

CVE-2020-8467 · 2026-07-18 · pending_review

Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution.

CVE-2020-25213 · 2026-07-18 · pending_review

WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.

CVE-2019-9978 · 2026-07-18 · pending_review

WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.

CVE-2019-18187 · 2026-07-18 · pending_review

Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.

CVE-2019-1297 · 2026-07-15 · pending_review

A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.

CVE-2019-11708 · 2026-07-15 · pending_review

Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.

CVE-2018-4990 · 2026-07-15 · pending_review

Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.

CVE-2018-20250 · 2026-07-18 · pending_review

WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution

CVE-2018-0802 · 2026-07-18 · pending_review

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is…

CVE-2018-0798 · 2026-07-18 · pending_review

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is…

CVE-2017-8570 · 2026-07-18 · pending_review

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.

CVE-2017-11882 · 2026-07-18 · pending_review

Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user.

CVE-2017-11826 · 2026-07-18 · pending_review

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in…

CVE-2017-0262 · 2026-07-18 · pending_review

A remote code execution vulnerability exists in Microsoft Office.

CVE-2017-0261 · 2026-07-18 · pending_review

Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.

CVE-2017-0199 · 2026-07-18 · pending_review

Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.

CVE-2016-7193 · 2026-07-18 · pending_review

Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.

CVE-2016-3235 · 2026-07-18 · pending_review

Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote…

CVE-2015-1641 · 2026-07-18 · pending_review

Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user.

CVE-2014-1761 · 2026-07-18 · pending_review

Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.

CVE-2013-0640 · 2026-07-18 · pending_review

An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.

CVE-2012-2539 · 2026-07-15 · pending_review

Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.

CVE-2012-1856 · 2026-07-18 · pending_review

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.

CVE-2010-3333 · 2026-07-18 · pending_review

A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.

CVE-2010-2572 · 2026-07-15 · pending_review

Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.

CVE-2010-0188 · 2026-07-18 · pending_review

Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.

CVE-2009-3953 · 2026-07-15 · pending_review

Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.

CVE-2009-0556 · 2026-07-14 · pending_review

Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers …

CVE-2009-0238 · 2026-07-14 · pending_review

Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed o…

CVE-2008-2992 · 2026-07-18 · pending_review

Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.

CVE-2007-0671 · 2026-07-15 · pending_review

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a mali…

CVE-2017-20251 · 2026-07-21 · draft

WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes through the WordPress RES…

CVE-2026-13439 · 2026-07-21 · auto

The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using th…

CVE-2026-13446 · 2026-07-21 · auto

IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encrypti…

CVE-2026-63030 · 2026-07-21 · pending_review

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker …

CVE-2026-60137 · 2026-07-21 · pending_review

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input …

CVE-2024-23564 · 2026-07-17 · auto

HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from the server and redirect them to their own email address by manipulating the server…

CVE-2026-9810 · 2026-07-17 · auto

The AI Copilot WordPress plugin before 1.5.4 does not bind OAuth access tokens to a WordPress user, and accepts any valid token as an administrator session, allowing unauthenticated attackers who complete the public OAu…

CVE-2026-15982 · 2026-07-17 · auto

The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing…

CVE-2026-14956 · 2026-07-21 · auto

The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper validation of the fieldIds parameter in the Pro Forms registration action,…

CVE-2026-62378 · 2026-07-17 · auto

RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Console components/object/preview-modal.tsx and components/object/pdf-viewer.tsx extension-based PDF …

CVE-2026-4729 · 2026-07-15 · auto

Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.…

CVE-2026-4721 · 2026-07-15 · auto

Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort …

CVE-2026-4720 · 2026-07-15 · auto

Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could …