98,920 indexed
CVECVE vulnerabilities
98,920 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 8,051–8,100 of 98,920 · page 162 of 1979
| ID | Title | Summary |
|---|---|---|
| CVE-2026-86300 | CVE-2026-86300 CVSS 7.3 | A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes impro… |
| CVE-2026-8630 | CVE-2026-8630 CVSS 6.1 | justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS) vulnerability in the serialization of raw-text elements such as <st… |
| CVE-2026-86299 | CVE-2026-86299 CVSS 9.9 | A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the componen… |
| CVE-2026-86298 | CVE-2026-86298 CVSS 7.3 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /delete_subject.php. P… |
| CVE-2026-86297 | CVE-2026-86297 CVSS 8.1 | A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel_set_params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c … |
| CVE-2026-86296 | CVE-2026-86296 CVSS 10.0 | A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udh… |
| CVE-2026-86295 | CVE-2026-86295 CVSS 8.3 | A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The mani… |
| CVE-2026-86294 | CVE-2026-86294 CVSS 4.3 | A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-setti… |
| CVE-2026-86293 | CVE-2026-86293 CVSS 6.5 | A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.p… |
| CVE-2026-86292 | CVE-2026-86292 CVSS 7.3 | A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component Use… |
| CVE-2026-86291 | CVE-2026-86291 CVSS 6.3 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/us_edit1.php. Su… |
| CVE-2026-86290 | CVE-2026-86290 CVSS 7.3 | A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?action=save_category. … |
| CVE-2026-8629 | CVE-2026-8629 CVSS 8.1 | Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users with shared visibility-only access to obtain Code, WebVNC, and Egress … |
| CVE-2026-86289 | CVE-2026-86289 CVSS 4.3 | A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. P… |
| CVE-2026-86288 | CVE-2026-86288 CVSS 6.3 | A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nn_modules/qlinear/tritonv2.p… |
| CVE-2026-86287 | CVE-2026-86287 CVSS 7.5 | Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers o… |
| CVE-2026-86285 | CVE-2026-86285 CVSS 4.3 | A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Con… |
| CVE-2026-86284 | CVE-2026-86284 CVSS 5.3 | A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnera… |
| CVE-2026-86283 | CVE-2026-86283 | MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performed a secondary query of member events by UUID without applying the cal… |
| CVE-2026-86282 | CVE-2026-86282 CVSS 7.3 | A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of t… |
| CVE-2026-86281 | CVE-2026-86281 CVSS 4.3 | A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performi… |
| CVE-2026-86280 | CVE-2026-86280 CVSS 5.3 | A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file ci… |
| CVE-2026-8628 | CVE-2026-8628 CVSS 6.1 | The EntreDroppers plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 1.1.2 due t… |
| CVE-2026-86279 | CVE-2026-86279 CVSS 6.3 | A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of … |
| CVE-2026-86278 | CVE-2026-86278 CVSS 4.3 | A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the f… |
| CVE-2026-86277 | CVE-2026-86277 CVSS 7.3 | A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file del… |
| CVE-2026-86276 | CVE-2026-86276 CVSS 7.3 | A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file d… |
| CVE-2026-86275 | CVE-2026-86275 CVSS 5.3 | A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register … |
| CVE-2026-86274 | CVE-2026-86274 CVSS 5.3 | A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1. This affects the function ExAutenticacaoController.autenticar… |
| CVE-2026-86273 | CVE-2026-86273 CVSS 7.3 | A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno.getUrl of the file sigaex/src/main/jav… |
| CVE-2026-86272 | CVE-2026-86272 CVSS 7.3 | A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /… |
| CVE-2026-86271 | CVE-2026-86271 CVSS 4.7 | A vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the file src/Backend/FluentCMS.Services/Permissions/PermissionMa… |
| CVE-2026-86270 | CVE-2026-86270 CVSS 6.3 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/settings_edit.php… |
| CVE-2026-8627 | CVE-2026-8627 CVSS 6.1 | The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1… |
| CVE-2026-86269 | CVE-2026-86269 CVSS 6.3 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/emp_edit1.php. This manipu… |
| CVE-2026-86268 | CVE-2026-86268 CVSS 7.3 | A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file User_Login.php. The manipulation of the … |
| CVE-2026-86267 | CVE-2026-86267 CVSS 6.3 | A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the … |
| CVE-2026-86265 | CVE-2026-86265 CVSS 6.3 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/us… |
| CVE-2026-86264 | CVE-2026-86264 CVSS 4.3 | A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file ssm_pro/src/main/java/cn/… |
| CVE-2026-86263 | CVE-2026-86263 CVSS 7.3 | A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.cancelOrder o… |
| CVE-2026-86262 | CVE-2026-86262 CVSS 7.3 | A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects the function updateOrderSta1/upd… |
| CVE-2026-86261 | CVE-2026-86261 CVSS 7.3 | A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file s… |
| CVE-2026-86260 | CVE-2026-86260 CVSS 6.5 | A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function modifyPassWord … |
| CVE-2026-8626 | CVE-2026-8626 CVSS 6.1 | The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.5.2 due to in… |
| CVE-2026-86259 | CVE-2026-86259 CVSS 7.5 | OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadat… |
| CVE-2026-86258 | CVE-2026-86258 CVSS 5.9 | nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can_show() that uses string-prefix comparison instead of proper path validat… |
| CVE-2026-86257 | CVE-2026-86257 CVSS 5.4 | wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export endpoint, allowing any gym member to inject spreadsheet formulas… |
| CVE-2026-86256 | CVE-2026-86256 CVSS 5.4 | wger before 2.6 (affected versions <= 2.5.0) contains an open redirect vulnerability in the trainer_login view (wger/core/views/user.py). After a trainer enter… |
| CVE-2026-86255 | CVE-2026-86255 CVSS 6.5 | wger before 2.5 fails to validate the maximum duration of routine date ranges, allowing authenticated users to create routines spanning arbitrarily long period… |
| CVE-2026-86254 | CVE-2026-86254 CVSS 6.8 | wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py where three views retain the original gym-scope check using … |