Search Results (389454 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-13359 2026-09-09 7.2 High
The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload executes in the context of an administrator's browser session when they visit the plugin's message manager page at /wp-admin/admin.php?page=cntctfrmtdb_manager, making it possible to compromise administrator-level sessions via a simple unauthenticated contact form submission.
CVE-2026-87036 2026-09-09 8.1 High
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87021 2026-09-09 7.2 High
Tanium addressed an unauthorized code execution vulnerability in Comply.
CVE-2026-87023 2026-09-09 8.5 High
Tanium addressed a path traversal vulnerability in Comply.
CVE-2026-87084 2026-09-09 7.7 High
Tanium addressed a server-side request forgery vulnerability in Enforce.
CVE-2026-87048 2026-09-09 5.4 Medium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87034 2026-09-09 8.3 High
Tanium addressed a SQL injection vulnerability in Comply.
CVE-2026-87073 2026-09-09 6.5 Medium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87032 2026-09-09 4.3 Medium
Tanium addressed an information disclosure vulnerability in Tanium Server.
CVE-2026-87072 2026-09-09 7.1 High
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87035 2026-09-09 4.3 Medium
Tanium addressed an information disclosure vulnerability in Comply.
CVE-2026-87033 2026-09-09 5.4 Medium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-14892 2026-09-09 4.3 Medium
Tanium addressed an improper access controls vulnerability in Tanium Server.
CVE-2026-87030 2026-09-09 8.5 High
Tanium addressed a path traversal vulnerability in Comply.
CVE-2026-87046 2026-09-09 4.3 Medium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87025 2026-09-09 5.4 Medium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87075 2026-09-09 8.1 High
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87047 2026-09-09 6.3 Medium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87019 2026-09-09 4.3 Medium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-14505 2026-09-09 6.6 Medium
Tanium addressed a path traversal vulnerability in Tanium Data Service.