103,766 indexed
CVECVE vulnerabilities
103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 8,801–8,850 of 103,766 · page 177 of 2076
| ID | Title | Summary |
|---|---|---|
| CVE-2026-85401 | CVE-2026-85401 CVSS 6.3 | A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanager… |
| CVE-2026-85400 | CVE-2026-85400 | Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configuration:set, and configuration:show comm… |
| CVE-2026-8540 | CVE-2026-8540 CVSS 8.8 | Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
| CVE-2026-85399 | CVE-2026-85399 CVSS 7.3 | A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file… |
| CVE-2026-85398 | CVE-2026-85398 CVSS 7.3 | A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of… |
| CVE-2026-85397 | CVE-2026-85397 CVSS 7.3 | A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulati… |
| CVE-2026-85396 | CVE-2026-85396 CVSS 7.5 | rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly validate extraction paths using prefix compar… |
| CVE-2026-85395 | CVE-2026-85395 CVSS 7.1 | UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass permission checks. … |
| CVE-2026-85394 | CVE-2026-85394 CVSS 9.1 | python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefi… |
| CVE-2026-85393 | CVE-2026-85393 CVSS 7.5 | node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed… |
| CVE-2026-85392 | CVE-2026-85392 CVSS 4.3 | Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint that allows authenticated attackers to… |
| CVE-2026-85391 | CVE-2026-85391 CVSS 9.8 | Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any ac… |
| CVE-2026-85390 | CVE-2026-85390 CVSS 7.1 | Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenance-window, notification, and check-deletion routes, allowing read-only users to … |
| CVE-2026-85389 | CVE-2026-85389 CVSS 6.5 | Worklenz before 3.0.0 fails to verify task ownership by organization when resolving task-scoped API endpoints, allowing authenticated users to access another t… |
| CVE-2026-85388 | CVE-2026-85388 CVSS 8.1 | Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitra… |
| CVE-2026-85387 | CVE-2026-85387 CVSS 7.1concretecms | Concrete CMS before 9.5.4 re-authorized OAuth REST API requests from the bearer token alone and did not re-check the state of the account the token had been is… |
| CVE-2026-85386 | CVE-2026-85386 CVSS 6.1concretecms | Concrete CMS before 9.5.4 did not sanitize XML and XSLT documents uploaded through a public Form Block file-upload question. Plain XML uploads were validated b… |
| CVE-2026-85385 | CVE-2026-85385 CVSS 9.6concretecms | Concrete CMS below 9.5.4 did not validate the user timezone value (uTimezone) on write and rendered it without output encoding on the Dashboard user management… |
| CVE-2026-85384 | CVE-2026-85384 | A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when proce… |
| CVE-2026-85383 | CVE-2026-85383 CVSS 6.3 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_del.php. Executing a m… |
| CVE-2026-85382 | CVE-2026-85382 CVSS 4.3 | A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Impacted is the function htmls… |
| CVE-2026-85381 | CVE-2026-85381 CVSS 5.3 | A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affec… |
| CVE-2026-85380 | CVE-2026-85380 CVSS 7.3 | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects t… |
| CVE-2026-85379 | CVE-2026-85379 CVSS 7.3 | A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the functi… |
| CVE-2026-85378 | CVE-2026-85378 CVSS 7.3 | A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is th… |
| CVE-2026-85377 | CVE-2026-85377 CVSS 7.8 | Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85376 | CVE-2026-85376 CVSS 7.8 | Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85375 | CVE-2026-85375 CVSS 7.8 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85374 | CVE-2026-85374 CVSS 5.5 | Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. |
| CVE-2026-85373 | CVE-2026-85373 CVSS 7.8 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85372 | CVE-2026-85372 CVSS 7.0 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85371 | CVE-2026-85371 CVSS 8.1 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85370 | CVE-2026-85370 CVSS 7.0 | Use after free in WebDAV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85369 | CVE-2026-85369 CVSS 8.2 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85368 | CVE-2026-85368 CVSS 7.8 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85367 | CVE-2026-85367 CVSS 7.0 | Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85366 | CVE-2026-85366 CVSS 7.8 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85365 | CVE-2026-85365 CVSS 7.0 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85364 | CVE-2026-85364 CVSS 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85363 | CVE-2026-85363 CVSS 8.8 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-85362 | CVE-2026-85362 CVSS 7.0 | Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85361 | CVE-2026-85361 CVSS 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85360 | CVE-2026-85360 CVSS 7.0microsoft | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85359 | CVE-2026-85359 CVSS 7.8 | Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85358 | CVE-2026-85358 CVSS 7.8 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85357 | CVE-2026-85357 CVSS 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate p… |
| CVE-2026-85356 | CVE-2026-85356 CVSS 7.8 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85355 | CVE-2026-85355 CVSS 7.0 | Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85354 | CVE-2026-85354 CVSS 7.0 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85353 | CVE-2026-85353 CVSS 7.5 | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |