98,920 indexed
CVECVE vulnerabilities
98,920 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 8,001–8,050 of 98,920 · page 161 of 1979
| ID | Title | Summary |
|---|---|---|
| CVE-2026-86406 | CVE-2026-86406 CVSS 7.5 | The User Registration & Membership WordPress plugin before 5.2.8 does not check the capability of the user making a membership purchase, and does not validate… |
| CVE-2026-86405 | CVE-2026-86405 CVSS 9.8 | Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signatu… |
| CVE-2026-86404 | CVE-2026-86404 CVSS 8.8 | EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject() uses ObjectInputStreamWithClassLoader, which implemen… |
| CVE-2026-8637 | CVE-2026-8637 CVSS 7.8 | A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to exec… |
| CVE-2026-86362 | CVE-2026-86362 CVSS 8.2dell | Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially… |
| CVE-2026-86361 | CVE-2026-86361 CVSS 8.2dell | Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with … |
| CVE-2026-86360 | CVE-2026-86360 CVSS 9.6dell | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An una… |
| CVE-2026-8636 | CVE-2026-8636 CVSS 5.5ibm | IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from… |
| CVE-2026-86359 | CVE-2026-86359 CVSS 8.5 | Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could p… |
| CVE-2026-86358 | CVE-2026-86358 CVSS 6.5dell | Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent netw… |
| CVE-2026-86351 | CVE-2026-86351 CVSS 6.1misp-project | Affected versions of MISP validate the user-configurable homepage by checking only whether the supplied path begins with /. That check is insufficient because … |
| CVE-2026-86350 | CVE-2026-86350 CVSS 9.1 | Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41… |
| CVE-2026-8635 | CVE-2026-8635 CVSS 9.9langflow | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary s… |
| CVE-2026-86349 | CVE-2026-86349 CVSS 4.3mattermost | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.8, 10.11.x <= 10.11.22 fail to limit the nesting depth in the server-side Markdown parse… |
| CVE-2026-86348 | CVE-2026-86348 CVSS 4.3mattermost | Mattermost versions <=11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a po… |
| CVE-2026-86347 | CVE-2026-86347 CVSS 6.5misp-project | Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry for templates/uploadFile used the wild… |
| CVE-2026-86345 | CVE-2026-86345 CVSS 9.0 | A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an o… |
| CVE-2026-86344 | CVE-2026-86344 CVSS 7.5 | A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage… |
| CVE-2026-86342 | CVE-2026-86342 CVSS 4.3misp-project | Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality. The preview performed correlation lookups against a… |
| CVE-2026-86341 | CVE-2026-86341 CVSS 4.4gitlab | GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain cond… |
| CVE-2026-8634 | CVE-2026-8634 CVSS 9.1 | Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allows attackers with access to a malicious or compromised repository to … |
| CVE-2026-86338 | CVE-2026-86338 | Ash field_policies are documented to protect against filter-based information disclosure: when a field the actor may not see is referenced in a filter, it is r… |
| CVE-2026-86335 | CVE-2026-86335 CVSS 6.3 | Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images fr… |
| CVE-2026-86334 | CVE-2026-86334 CVSS 4.2 | Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allow… |
| CVE-2026-86332 | CVE-2026-86332 CVSS 6.5 | A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the … |
| CVE-2026-86330 | CVE-2026-86330 CVSS 7.2 | An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api. This component is responsible for managing the M… |
| CVE-2026-8633 | CVE-2026-8633 CVSS 9.8ibm | IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liber… |
| CVE-2026-86326 | CVE-2026-86326 | An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic aut… |
| CVE-2026-86325 | CVE-2026-86325 | A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length valid… |
| CVE-2026-86321 | CVE-2026-86321 CVSS 5.3 | A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this issue is the function JsonLoader.fromURL of the file src/main/java/com/git… |
| CVE-2026-86320 | CVE-2026-86320 CVSS 7.8 | A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious… |
| CVE-2026-8632 | CVE-2026-8632 CVSS 7.8hp | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of priv… |
| CVE-2026-86319 | CVE-2026-86319 CVSS 5.3 | A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/ja… |
| CVE-2026-86318 | CVE-2026-86318 CVSS 5.3 | A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. E… |
| CVE-2026-86317 | CVE-2026-86317 CVSS 5.3 | A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc… |
| CVE-2026-86315 | CVE-2026-86315 CVSS 6.2 | An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to… |
| CVE-2026-86314 | CVE-2026-86314 CVSS 6.2 | Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote attacker to cause an … |
| CVE-2026-86313 | CVE-2026-86313 CVSS 7.8 | Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue affects Walrus: af80e665ea49d9003695a66502f841ed1d8397e7. |
| CVE-2026-86311 | CVE-2026-86311 CVSS 6.4 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Shortcode Attributes in al… |
| CVE-2026-86310 | CVE-2026-86310 CVSS 6.3 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_edit1.php. S… |
| CVE-2026-8631 | CVE-2026-8631 CVSS 9.8hp | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of priv… |
| CVE-2026-86309 | CVE-2026-86309 CVSS 6.3 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_searchfrm.php. This manipulation o… |
| CVE-2026-86308 | CVE-2026-86308 CVSS 5.3 | A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknow… |
| CVE-2026-86307 | CVE-2026-86307 CVSS 4.3 | A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerabili… |
| CVE-2026-86306 | CVE-2026-86306 CVSS 7.3 | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part… |
| CVE-2026-86305 | CVE-2026-86305 CVSS 7.3 | A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue … |
| CVE-2026-86304 | CVE-2026-86304 CVSS 9.8 | MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust … |
| CVE-2026-86303 | CVE-2026-86303 CVSS 7.3 | A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. E… |
| CVE-2026-86302 | CVE-2026-86302 CVSS 5.3 | A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql… |
| CVE-2026-86301 | CVE-2026-86301 CVSS 3.5 | A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php … |