CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Critical Authentication Bypass in Vvveb CMS Password Reset (CVE-2026-110799)
[Affected Scope] All websites and e-commerce stores running Vvveb CMS versions prior to 1.0.8.7
[Impact] Remote attackers can bypass authentication to reset any user's password, leading to full account takeover including administrative privileges.
[Mitigation] Immediately upgrade Vvveb CMS to version 1.0.8.7 or later.
GitLab CE/EE Account Takeover via Password Reset Vulnerability (CVE-2023-7028) Security Advisory
[Affected Scope] GitLab CE/EE versions 16.1 to 16.7.1 (prior to 16.1.6, 16.2.9, 16.3.7, 16.4.5, 16.5.6, 16.6.4, and 16.7.2)
[Impact] An unauthenticated remote attacker can trigger password reset emails to be sent to an arbitrary, unverified email address, leading to complete account takeover.
[Mitigation] Immediately upgrade GitLab instances to the patched versions (16.1.6, 16.2.9, 16.3.7, 16.4.5, 16.5.6, 16.6.4, 16.7.2 or later) and enforce Multi-Factor Authentication (MFA).