Archive
14 November 2026
Vulnerabilities first published on this day (UTC), newest first.
← October 2026
2026
/
November
/14
10 results · Clear filters · Feed
-
High 7.7
In FRRouting, bgpd accepts a Tunnel Encapsulation attribute (type 23) whose outer TLV length does not match the length …
-
High 8.2
Kingston FURY CTRL RGB Control Software IOCTL NTIOLib_X64.sys exposed ioctl with insufficient access control
A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The impacted element is an unknown function in the library NTIOLib_X64.sys of the component IOCTL Handler. Performing a manipulation results in exposed ioctl with insufficien…
-
High 7.2
The Multi Step for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'multipart …
-
High 7.2
The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site …
-
High 8.8
The MemberDash plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.8.7. …
-
High 7.1
Frappe india-payroll before 16.0.4 contains a missing authorization vulnerability in the get_employee_details, compute_…
-
High 7.1
Ettercap through 0.8.5.1 contains a heap out-of-bounds read vulnerability in dissector_socks() in src/dissectors/ec_soc…
-
High 7.1
Ettercap through 0.8.5.1 contains a heap out-of-bounds read vulnerability in dissector_mountd() in src/dissectors/ec_mo…
-
High 8.7
Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO in Cervantes version v1…
-
High 7.1
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vul…