NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-3379 A vulnerability has been found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipul... 2026-03-01 8.8 NETWORK HIGH NVD
CVE-2026-3378 A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the ... 2026-03-01 8.8 NETWORK HIGH NVD
CVE-2026-3377 A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Perfor... 2026-03-01 8.8 NETWORK HIGH NVD
CVE-2026-3376 A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromSafeMacFilter of the file /goform... 2026-02-28 8.8 NETWORK HIGH NVD
CVE-2026-28562 wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql(... 2026-02-28 8.2 NETWORK HIGH NVD
CVE-2026-28561 wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent JavaScript via forum descript... 2026-02-28 5.5 NETWORK MEDIUM NVD
CVE-2026-28560 wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data output into an inline script ... 2026-02-28 5.5 NETWORK MEDIUM NVD
CVE-2026-28559 wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve private and unapproved forum topics... 2026-02-28 5.3 NETWORK MEDIUM NVD
CVE-2026-28558 wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars ... 2026-02-28 6.4 NETWORK MEDIUM NVD
CVE-2026-28557 wpForo Forum 2.4.14 contains a missing capability check vulnerability that allows authenticated users to trigger bulk wpForo usergroup reassignment vi... 2026-02-28 6.5 NETWORK MEDIUM NVD
CVE-2026-28556 wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to move, merge, or split any forum topic via ... 2026-02-28 5.4 NETWORK MEDIUM NVD
CVE-2026-28555 wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to close or reopen any forum topic via the wp... 2026-02-28 4.3 NETWORK MEDIUM NVD
CVE-2026-28554 wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to approve or unapprove any forum post via th... 2026-02-28 4.3 NETWORK MEDIUM NVD
CVE-2026-3010 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System ... 2026-02-28 9.3 NETWORK CRITICAL NVD
CVE-2026-2844 Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects Ti... 2026-02-28 9.3 NETWORK CRITICAL NVD