98,920 indexed
CVECVE vulnerabilities
98,920 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 8,101–8,150 of 98,920 · page 163 of 1979
| ID | Title | Summary |
|---|---|---|
| CVE-2026-86253 | CVE-2026-86253 CVSS 5.9 | h3 (npm package) versions <= 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic(). On Node.js deployments, event.url.pathname is not normalized,… |
| CVE-2026-86252 | CVE-2026-86252 CVSS 5.3 | h3 versions before 1.15.9 fail to sanitize carriage return characters in EventStream data and comment fields, allowing attackers to inject arbitrary SSE events… |
| CVE-2026-86251 | CVE-2026-86251 CVSS 5.9 | h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-enc… |
| CVE-2026-86250 | CVE-2026-86250 CVSS 7.5 | h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie values in setChunkedCookie() and deleteChunkedCookie() funct… |
| CVE-2026-8625 | CVE-2026-8625 CVSS 6.4 | The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (C… |
| CVE-2026-86248 | CVE-2026-86248 CVSS 9.8 | CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat. This issue affects Apache… |
| CVE-2026-86247 | CVE-2026-86247 CVSS 7.4apache | Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurat… |
| CVE-2026-86246 | CVE-2026-86246 CVSS 9.1apache | Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOT… |
| CVE-2026-86245 | CVE-2026-86245 CVSS 6.3 | A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_… |
| CVE-2026-86244 | CVE-2026-86244 CVSS 4.3 | A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta. Affected is the function register/login of the file application/index/contro… |
| CVE-2026-86243 | CVE-2026-86243 CVSS 7.5apache | Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affect… |
| CVE-2026-86242 | CVE-2026-86242 CVSS 8.1 | Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL through unauthenticated POST /api/plugins when management authen… |
| CVE-2026-86241 | CVE-2026-86241 CVSS 4.3 | A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file environments/prod/backend/config/main-local.php of … |
| CVE-2026-86240 | CVE-2026-86240 CVSS 4.7 | A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of th… |
| CVE-2026-8624 | CVE-2026-8624 CVSS 6.1 | The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and includi… |
| CVE-2026-86239 | CVE-2026-86239 CVSS 5.3 | A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/Ued… |
| CVE-2026-86238 | CVE-2026-86238 CVSS 4.3 | A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the comp… |
| CVE-2026-86237 | CVE-2026-86237 CVSS 5.3 | A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the function test_default_model of the file sdk/src/openagents/sd… |
| CVE-2026-86236 | CVE-2026-86236 CVSS 6.3 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/pro_transac.php?ac… |
| CVE-2026-86235 | CVE-2026-86235 CVSS 6.3 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/pos_transac.php?action=add. Th… |
| CVE-2026-86234 | CVE-2026-86234 CVSS 6.3 | A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust_transac.php?action=add. The m… |
| CVE-2026-86233 | CVE-2026-86233 CVSS 6.3 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pa… |
| CVE-2026-86232 | CVE-2026-86232 CVSS 6.3 | A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/su… |
| CVE-2026-86231 | CVE-2026-86231 CVSS 3.7 | A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.j… |
| CVE-2026-8623 | CVE-2026-8623 CVSS 6.4 | The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (c… |
| CVE-2026-86228 | CVE-2026-86228 CVSS 4.3 | A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the function exportXls of the file jeecg-boot/jeecg-boot-module… |
| CVE-2026-86227 | CVE-2026-86227 CVSS 3.1 | A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulatio… |
| CVE-2026-86226 | CVE-2026-86226 CVSS 3.5 | A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php.… |
| CVE-2026-86225 | CVE-2026-86225 CVSS 7.3 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysqli_query of the file… |
| CVE-2026-86224 | CVE-2026-86224 CVSS 7.3 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqli_query of the file /admin/modal_add_prod… |
| CVE-2026-86223 | CVE-2026-86223 CVSS 7.3 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqli_query of the file /admin/modal_add_coursea.… |
| CVE-2026-86222 | CVE-2026-86222 CVSS 7.3 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqli_query of the file /admin/modal_add_cou… |
| CVE-2026-86221 | CVE-2026-86221 CVSS 7.3 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqli_query of the file /admin/modal_add_c… |
| CVE-2026-86220 | CVE-2026-86220 CVSS 7.3 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqli_query of the file /admin/moda… |
| CVE-2026-8622 | CVE-2026-8622 CVSS 6.1 | The Image Sizes on Demand plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Server Variable in all versions up to, and includin… |
| CVE-2026-86219 | CVE-2026-86219 CVSS 9.8 | Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step. server_start gene… |
| CVE-2026-86218 | N-able N-central Static Code Injection Vulnerability KEVCVSS 9.8N-able | N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution. |
| CVE-2026-86217 | CVE-2026-86217 CVSS 5.3 | A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hotel_db%20(1).sql of t… |
| CVE-2026-86216 | CVE-2026-86216 CVSS 4.3 | A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0. This impacts an unknown function of the file /ht/details.… |
| CVE-2026-86215 | CVE-2026-86215 CVSS 4.3 | A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the compo… |
| CVE-2026-86214 | CVE-2026-86214 CVSS 7.3 | A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the… |
| CVE-2026-86213 | CVE-2026-86213 CVSS 7.3 | A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli_query of the file Front-end/university.php of the compo… |
| CVE-2026-86212 | CVE-2026-86212 CVSS 4.3 | A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper aut… |
| CVE-2026-86211 | CVE-2026-86211 CVSS 7.3 | A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file index.php of the component Login. Executing… |
| CVE-2026-86210 | CVE-2026-86210 CVSS 7.3 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality … |
| CVE-2026-8621 | CVE-2026-8621 CVSS 8.8 | Crabbox prior to v0.12.0 contains an authentication bypass vulnerability that allows non-admin shared-token callers to impersonate other owners or organization… |
| CVE-2026-86209 | CVE-2026-86209 CVSS 7.3 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /delete_user.php. This mani… |
| CVE-2026-86208 | CVE-2026-86208 CVSS 7.3 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /delete_teacher.php. … |
| CVE-2026-86207 | CVE-2026-86207 | An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs |
| CVE-2026-86206 | CVE-2026-86206 | A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026… |