103,766 indexed
CVECVE vulnerabilities
103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 8,701–8,750 of 103,766 · page 175 of 2076
| ID | Title | Summary |
|---|---|---|
| CVE-2026-85530 | CVE-2026-85530 CVSS 8.1 | The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor's e-mail address between the value it stores and the value it later uses t… |
| CVE-2026-85529 | CVE-2026-85529 CVSS 5.3gitlab | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain c… |
| CVE-2026-85528 | CVE-2026-85528 CVSS 5.3 | Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login… |
| CVE-2026-85526 | CVE-2026-85526 CVSS 9.9 | Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or… |
| CVE-2026-85525 | CVE-2026-85525 CVSS 7.4 | Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCS… |
| CVE-2026-85523 | CVE-2026-85523 CVSS 8.8 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Information Technologies Industry and Trad… |
| CVE-2026-85522 | CVE-2026-85522 CVSS 5.3 | A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/cluster_… |
| CVE-2026-85520 | CVE-2026-85520 | Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated a… |
| CVE-2026-85517 | CVE-2026-85517 CVSS 5.3 | A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle_management.sql of the co… |
| CVE-2026-85516 | CVE-2026-85516 CVSS 7.3 | A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performin… |
| CVE-2026-85515 | CVE-2026-85515 | In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integ… |
| CVE-2026-85514 | CVE-2026-85514 CVSS 6.3 | A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of t… |
| CVE-2026-85513 | CVE-2026-85513 CVSS 6.3 | A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_user_query_param_is_provided of the file … |
| CVE-2026-85512 | CVE-2026-85512 CVSS 7.3 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session… |
| CVE-2026-85511 | CVE-2026-85511 CVSS 4.2 | A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter… |
| CVE-2026-8551 | CVE-2026-8551 CVSS 8.8 | Use after free in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execut… |
| CVE-2026-85509 | CVE-2026-85509 CVSS 9.8 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested. |
| CVE-2026-85508 | CVE-2026-85508 CVSS 9.8 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subco… |
| CVE-2026-85507 | CVE-2026-85507 CVSS 9.8 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to d… |
| CVE-2026-85506 | CVE-2026-85506 CVSS 9.8 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to … |
| CVE-2026-85505 | CVE-2026-85505 CVSS 7.5 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC pro… |
| CVE-2026-85504 | CVE-2026-85504 CVSS 9.8 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-commo… |
| CVE-2026-85501 | CVE-2026-85501 CVSS 5.3nlnetlabs | Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service w… |
| CVE-2026-85500 | CVE-2026-85500 | Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory… |
| CVE-2026-85499 | CVE-2026-85499 | Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept role and monitoring-proxy functionality.… |
| CVE-2026-85497 | CVE-2026-85497 CVSS 9.8 | CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient resistance to offline cracking… |
| CVE-2026-85496 | CVE-2026-85496 CVSS 8.8 | The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unaut… |
| CVE-2026-85494 | CVE-2026-85494 CVSS 7.5 | Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initi… |
| CVE-2026-85493 | CVE-2026-85493 | Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended t… |
| CVE-2026-85492 | CVE-2026-85492 CVSS 6.1 | The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for WordPress is vulnerable to DOM-Based … |
| CVE-2026-85491 | CVE-2026-85491 CVSS 8.8 | Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on … |
| CVE-2026-85490 | CVE-2026-85490 CVSS 8.8broadcom | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal s… |
| CVE-2026-8549 | CVE-2026-8549 CVSS 8.8 | Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. … |
| CVE-2026-85489 | CVE-2026-85489 CVSS 8.8broadcom | An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to… |
| CVE-2026-85488 | CVE-2026-85488 CVSS 7.8broadcom | Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read … |
| CVE-2026-85487 | CVE-2026-85487 CVSS 8.8broadcom | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network cou… |
| CVE-2026-85486 | CVE-2026-85486 CVSS 8.0broadcom | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form,… |
| CVE-2026-85485 | CVE-2026-85485 CVSS 6.1 | HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wra… |
| CVE-2026-85484 | CVE-2026-85484 CVSS 6.1 | HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, Che… |
| CVE-2026-85483 | CVE-2026-85483 | Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. … |
| CVE-2026-8548 | CVE-2026-8548 CVSS 8.3 | Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform… |
| CVE-2026-85479 | CVE-2026-85479 CVSS 5.3 | The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker c… |
| CVE-2026-85478 | CVE-2026-85478 CVSS 3.5 | A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring auth… |
| CVE-2026-85476 | CVE-2026-85476 | Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. U… |
| CVE-2026-85475 | CVE-2026-85475 CVSS 7.2 | A flaw was found in the Ansible Automation Platform automation controller. The external logging (rsyslog) configuration is generated by interpolating user-cont… |
| CVE-2026-85473 | CVE-2026-85473 CVSS 5.3 | The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition o… |
| CVE-2026-85471 | CVE-2026-85471 CVSS 6.4 | A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Requ… |
| CVE-2026-85469 | CVE-2026-85469 CVSS 8.0 | A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream `Noelware/docker-manifest-action` used in the release … |
| CVE-2026-85458 | CVE-2026-85458 | Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height. |
| CVE-2026-85457 | CVE-2026-85457 CVSS 8.1 | IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow. |