96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 6,701–6,750 of 96,609 · page 135 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-8806 | CVE-2026-8806 | Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attack… |
| CVE-2026-88059 | CVE-2026-88059 CVSS 4.0angular | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, … |
| CVE-2026-88058 | CVE-2026-88058 CVSS 6.1angular | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, … |
| CVE-2026-88057 | CVE-2026-88057 CVSS 6.1angular | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, … |
| CVE-2026-88056 | CVE-2026-88056 CVSS 9.1angular | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, … |
| CVE-2026-88055 | CVE-2026-88055 CVSS 5.5 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager … |
| CVE-2026-88054 | CVE-2026-88054 CVSS 5.5tesseract-ocr | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks b… |
| CVE-2026-88053 | CVE-2026-88053 CVSS 7.8tesseract-ocr | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses… |
| CVE-2026-88052 | CVE-2026-88052 CVSS 7.8tesseract-ocr | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count… |
| CVE-2026-88051 | CVE-2026-88051 CVSS 7.8tesseract-ocr | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independ… |
| CVE-2026-88050 | CVE-2026-88050 CVSS 5.5tesseract-ocr | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length_ but accepts … |
| CVE-2026-8805 | CVE-2026-8805 | Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP module FX5-EIP versions … |
| CVE-2026-88049 | CVE-2026-88049 CVSS 5.5tesseract-ocr | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and Ne… |
| CVE-2026-88048 | CVE-2026-88048 CVSS 7.1tesseract-ocr | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserial… |
| CVE-2026-88047 | CVE-2026-88047 CVSS 7.8tesseract-ocr | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of … |
| CVE-2026-88046 | CVE-2026-88046 CVSS 5.3 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject pare… |
| CVE-2026-88045 | CVE-2026-88045 CVSS 7.5 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.75.0 until 1.75.1, the serve S3 streamed m… |
| CVE-2026-88044 | CVE-2026-88044 CVSS 9.1 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC inte… |
| CVE-2026-8804 | CVE-2026-8804 | Puppet resource_api (shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x) does not preserve the sensitive flag on parameters defined via the r… |
| CVE-2026-88038 | CVE-2026-88038 CVSS 4.8 | cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2 the library validates the cookie name … |
| CVE-2026-88037 | CVE-2026-88037 CVSS 6.4 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `title` attribute of the `bt_bb_service` shortcode in all versi… |
| CVE-2026-88036 | CVE-2026-88036 CVSS 8.3mongodb | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file ide… |
| CVE-2026-88035 | CVE-2026-88035 CVSS 4.7mongodb | A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past … |
| CVE-2026-88034 | CVE-2026-88034 CVSS 8.3mongodb | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can cause a caller-supplied structured file i… |
| CVE-2026-88033 | CVE-2026-88033 CVSS 8.3mongodb | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file … |
| CVE-2026-88032 | CVE-2026-88032 CVSS 5.9mongodb | A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted… |
| CVE-2026-88031 | CVE-2026-88031 CVSS 8.1mongodb | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file id… |
| CVE-2026-88030 | CVE-2026-88030 CVSS 8.3mongodb | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file … |
| CVE-2026-88029 | CVE-2026-88029 CVSS 8.3mongodb | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured fil… |
| CVE-2026-88028 | CVE-2026-88028 CVSS 6.5mongodb | Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB integration for Laravel can cause a caller-… |
| CVE-2026-88027 | CVE-2026-88027 CVSS 7.1mongodb | Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a c… |
| CVE-2026-88026 | CVE-2026-88026 CVSS 6.5mongodb | Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# Driver can cause a caller-supplied chara… |
| CVE-2026-88025 | CVE-2026-88025 CVSS 8.3mongodb | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cause a caller-supplied structured file id… |
| CVE-2026-88024 | CVE-2026-88024 CVSS 8.3mongodb | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file … |
| CVE-2026-88023 | CVE-2026-88023 CVSS 8.3mongodb | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file … |
| CVE-2026-88022 | CVE-2026-88022 CVSS 7.7mongodb | Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an array supplied to an explicit equality filt… |
| CVE-2026-88021 | CVE-2026-88021 CVSS 7.1 | Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not au… |
| CVE-2026-88020 | CVE-2026-88020 CVSS 6.1 | Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to rout… |
| CVE-2026-88018 | CVE-2026-88018 CVSS 9.8rclone | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with … |
| CVE-2026-88017 | CVE-2026-88017 CVSS 7.3rclone | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy driv… |
| CVE-2026-88016 | CVE-2026-88016 CVSS 7.1rclone | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --l… |
| CVE-2026-88015 | CVE-2026-88015 CVSS 5.3rclone | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or li… |
| CVE-2026-88014 | CVE-2026-88014 CVSS 6.3rclone | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend… |
| CVE-2026-88013 | CVE-2026-88013 CVSS 3.7rclone | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attach… |
| CVE-2026-88012 | CVE-2026-88012 CVSS 5.3traefik | Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints do not apply entryPoints..transport.res… |
| CVE-2026-88011 | CVE-2026-88011 CVSS 8.1traefik | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-supplied dot-form header such as X.Auth… |
| CVE-2026-88010 | CVE-2026-88010 | Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewares/auth/basic_auth.go constructs the Ba… |
| CVE-2026-8801 | CVE-2026-8801 CVSS 3.5progress | Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer: before 2025.0.8, from 2025.1.0 before 2… |
| CVE-2026-88009 | CVE-2026-88009 CVSS 8.2traefik | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores i… |
| CVE-2026-88008 | CVE-2026-88008 CVSS 9.1traefik | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Connection header req… |