103,766 indexed
CVECVE vulnerabilities
103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 9,651–9,700 of 103,766 · page 194 of 2076
| ID | Title | Summary |
|---|---|---|
| CVE-2026-84290 | CVE-2026-84290 CVSS 5.1ibm | IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_N… |
| CVE-2026-8429 | CVE-2026-8429 CVSS 8.8 | SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context… |
| CVE-2026-84289 | CVE-2026-84289 CVSS 4.3 | A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function list_tools of the file tools/mcp_tool.py of the co… |
| CVE-2026-84288 | CVE-2026-84288 CVSS 4.3 | A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acp_adapter/session.py of… |
| CVE-2026-84287 | CVE-2026-84287 CVSS 4.3 | A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/api_server.py of … |
| CVE-2026-84286 | CVE-2026-84286 | ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious mo… |
| CVE-2026-84285 | CVE-2026-84285 CVSS 8.8 | An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the s… |
| CVE-2026-84284 | CVE-2026-84284 CVSS 5.3gitlab | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain c… |
| CVE-2026-84283 | CVE-2026-84283 | Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file m… |
| CVE-2026-84282 | CVE-2026-84282 CVSS 6.5 | A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin version 9.12. The /apps/onlyoffice/ajax/settings/addres… |
| CVE-2026-84281 | CVE-2026-84281 CVSS 7.2 | The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta in all versions … |
| CVE-2026-84280 | CVE-2026-84280 CVSS 7.2 | The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter in all versions u… |
| CVE-2026-8428 | CVE-2026-8428 CVSS 8.8concretecms | Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but the corresponding do_update() method i… |
| CVE-2026-84279 | CVE-2026-84279 CVSS 7.2 | The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'output_format' parameter in all versions up to, and inclu… |
| CVE-2026-84278 | CVE-2026-84278 CVSS 7.2ibm | IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privile… |
| CVE-2026-84276 | CVE-2026-84276 CVSS 7.5ibm | IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network ac… |
| CVE-2026-84275 | CVE-2026-84275 CVSS 7.5ibm | IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerab… |
| CVE-2026-84274 | CVE-2026-84274 CVSS 6.5ibm | IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive cre… |
| CVE-2026-84272 | CVE-2026-84272 CVSS 9.8ibm | IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker coul… |
| CVE-2026-84271 | CVE-2026-84271 CVSS 7.8ibm | IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vul… |
| CVE-2026-84270 | CVE-2026-84270 CVSS 4.3 | A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.c trusts the data length returned by th… |
| CVE-2026-8427 | CVE-2026-8427 CVSS 8.8concretecms | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id). The Concrete CMS… |
| CVE-2026-84269 | CVE-2026-84269 CVSS 6.5 | A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the siz… |
| CVE-2026-84268 | CVE-2026-84268 CVSS 8.8 | A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length that… |
| CVE-2026-84267 | CVE-2026-84267 CVSS 4.3 | A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read_string() to allocate a buffer with a certain length… |
| CVE-2026-84261 | CVE-2026-84261 CVSS 8.8 | The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint befor… |
| CVE-2026-84260 | CVE-2026-84260 CVSS 8.8 | The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before… |
| CVE-2026-8426 | CVE-2026-8426 CVSS 8.8concretecms | Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/prepare_remote_upgrade/<remoteMPID>. An atta… |
| CVE-2026-84259 | CVE-2026-84259 CVSS 8.8 | The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outpu… |
| CVE-2026-84258 | CVE-2026-84258 CVSS 8.8 | The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before o… |
| CVE-2026-84256 | CVE-2026-84256 | An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary com… |
| CVE-2026-84254 | CVE-2026-84254 CVSS 9.8 | The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, a… |
| CVE-2026-84253 | CVE-2026-84253 CVSS 9.8 | The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, an… |
| CVE-2026-84252 | CVE-2026-84252 CVSS 9.8 | The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does… |
| CVE-2026-84251 | CVE-2026-84251 CVSS 9.8 | The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and … |
| CVE-2026-84250 | CVE-2026-84250 CVSS 8.4ibm | IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local a… |
| CVE-2026-84249 | CVE-2026-84249 CVSS 9.8ibm | IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critic… |
| CVE-2026-84247 | CVE-2026-84247 CVSS 8.1ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. |
| CVE-2026-84246 | CVE-2026-84246 CVSS 8.1ibm | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-84245 | CVE-2026-84245 CVSS 7.8ibm | IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this vul… |
| CVE-2026-84244 | CVE-2026-84244 CVSS 9.3ibm | IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An… |
| CVE-2026-84241 | CVE-2026-84241 CVSS 8.1ibm | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization. |
| CVE-2026-8424 | CVE-2026-8424 CVSS 4.3 | The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or i… |
| CVE-2026-84239 | CVE-2026-84239 CVSS 7.6ibm | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special element… |
| CVE-2026-84238 | CVE-2026-84238 CVSS 9.8 | Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions. |
| CVE-2026-84235 | CVE-2026-84235 | A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The devic… |
| CVE-2026-84233 | CVE-2026-84233 CVSS 7.0 | A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workflow invok… |
| CVE-2026-84232 | CVE-2026-84232 CVSS 5.4 | A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type (e.g., te… |
| CVE-2026-84230 | CVE-2026-84230 CVSS 7.5ibm | IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized… |
| CVE-2026-8423 | CVE-2026-8423 CVSS 4.3 | The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to mis… |