103,766 indexed

CVECVE vulnerabilities

103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 9,751–9,800 of 103,766 · page 196 of 2076

IDTitleSummary
CVE-2026-84165CVE-2026-84165A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow a…
CVE-2026-8416CVE-2026-8416
CVSS 8.8concretecms
Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file addFavoriteFolder($id). The Concrete CMS se…
CVE-2026-84154CVE-2026-84154
CVSS 9.9
A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an att…
CVE-2026-84153CVE-2026-84153
CVSS 6.3
A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavev…
CVE-2026-84151CVE-2026-84151
CVSS 3.5
The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowin…
CVE-2026-84150CVE-2026-84150
CVSS 5.4
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route ma…
CVE-2026-8415CVE-2026-8415
CVSS 8.8concretecms
Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorder. The Concrete CMS sec…
CVE-2026-84149CVE-2026-84149This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote a…
CVE-2026-84148CVE-2026-84148This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker c…
CVE-2026-84147CVE-2026-84147This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated…
CVE-2026-84146CVE-2026-84146
CVSS 5.3
The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.8 does not perform any capability or post-status check before rendering a WooCommerce …
CVE-2026-84145CVE-2026-84145
CVSS 7.5mozilla
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or …
CVE-2026-84144CVE-2026-84144
CVSS 7.5mozilla
Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevan…
CVE-2026-84143CVE-2026-84143
CVSS 9.8mozilla
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or …
CVE-2026-84142CVE-2026-84142
CVSS 9.8mozilla
Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume th…
CVE-2026-84141CVE-2026-84141
CVSS 9.8mozilla
Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84140CVE-2026-84140
CVSS 9.8mozilla
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-8414CVE-2026-8414
CVSS 8.8concretecms
Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate. The Concrete CMS security team g…
CVE-2026-84139CVE-2026-84139
CVSS 6.1mozilla
Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84138CVE-2026-84138
CVSS 6.5mozilla
Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84137CVE-2026-84137
CVSS 4.3mozilla
Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84136CVE-2026-84136
CVSS 6.1mozilla
Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84135CVE-2026-84135
CVSS 9.8mozilla
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-84134CVE-2026-84134
CVSS 9.8mozilla
Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84133CVE-2026-84133
CVSS 9.8mozilla
Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird…
CVE-2026-84132CVE-2026-84132
CVSS 7.5mozilla
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.…
CVE-2026-84131CVE-2026-84131
CVSS 8.8mozilla
Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Fir…
CVE-2026-84130CVE-2026-84130
CVSS 7.5mozilla
Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.…
CVE-2026-8413CVE-2026-8413
CVSS 8.8concretecms
Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/design. The Concrete CMS security team …
CVE-2026-84129CVE-2026-84129
CVSS 9.8mozilla
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84128CVE-2026-84128
CVSS 8.8mozilla
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84127CVE-2026-84127
CVSS 4.3mozilla
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-84126CVE-2026-84126
CVSS 4.3mozilla
Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84125CVE-2026-84125
CVSS 5.4mozilla
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84124CVE-2026-84124
CVSS 5.4mozilla
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderb…
CVE-2026-84123CVE-2026-84123
CVSS 8.8mozilla
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, …
CVE-2026-84122CVE-2026-84122
CVSS 5.4mozilla
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 1…
CVE-2026-84121CVE-2026-84121
CVSS 9.6mozilla
Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firef…
CVE-2026-84120CVE-2026-84120
CVSS 5.4mozilla
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbir…
CVE-2026-8412CVE-2026-8412
CVSS 8.8concretecms
Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cache. The Concrete CMS security team …
CVE-2026-84119CVE-2026-84119
CVSS 9.6mozilla
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Fir…
CVE-2026-84118CVE-2026-84118
CVSS 5.4mozilla
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84117CVE-2026-84117
CVSS 8.8mozilla
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-84115CVE-2026-84115
CVSS 8.3
A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh…
CVE-2026-84114CVE-2026-84114
CVSS 6.3
A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentic…
CVE-2026-84113CVE-2026-84113
CVSS 4.1
The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users s…
CVE-2026-84111CVE-2026-84111
CVSS 7.3
A flaw has been found in Chanjet CRM up to 20260707. This issue affects some unknown processing of the file jxf_dump_table.php. This manipulation of the argume…
CVE-2026-84110CVE-2026-84110
CVSS 5.3
A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. This vulnerability affects unknown code of the component OTP Validation. The manipulat…
CVE-2026-8411CVE-2026-8411
CVSS 8.8concretecms
Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete. The Concrete CMS security team …
CVE-2026-84109CVE-2026-84109
CVSS 6.3
A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/webmainAction.php. Exe…
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.