104,345 indexed
CVECVE vulnerabilities
104,345 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 11,001–11,050 of 104,345 · page 221 of 2087
| ID | Title | Summary |
|---|---|---|
| CVE-2026-82787 | CVE-2026-82787 CVSS 9.8 | Missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an affected product may be operated by a … |
| CVE-2026-82786 | CVE-2026-82786 CVSS 6.3 | Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. If this vulnerability is exploited, sensitive informa… |
| CVE-2026-82785 | CVE-2026-82785 CVSS 4.3 | Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted request created and sent… |
| CVE-2026-82784 | CVE-2026-82784 CVSS 6.5 | Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. An attacker may execute a REST API wi… |
| CVE-2026-82783 | CVE-2026-82783 CVSS 4.2 | Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker with physical access to the product may… |
| CVE-2026-82782 | CVE-2026-82782 CVSS 4.3 | Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a deni… |
| CVE-2026-82781 | CVE-2026-82781 CVSS 5.4 | Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user… |
| CVE-2026-82780 | CVE-2026-82780 CVSS 8.8 | Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker… |
| CVE-2026-82779 | CVE-2026-82779 CVSS 8.8 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series. If this vulnerability is exploi… |
| CVE-2026-82778 | CVE-2026-82778 CVSS 4.3 | An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthen… |
| CVE-2026-82777 | CVE-2026-82777 CVSS 8.8 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series. If this vulnerability is explo… |
| CVE-2026-82776 | CVE-2026-82776 CVSS 6.1 | Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user'… |
| CVE-2026-82775 | CVE-2026-82775 CVSS 4.3 | An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL… |
| CVE-2026-82774 | CVE-2026-82774 CVSS 8.8 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Contr… |
| CVE-2026-82773 | CVE-2026-82773 CVSS 6.1 | Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary… |
| CVE-2026-82772 | CVE-2026-82772 CVSS 8.8 | Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary… |
| CVE-2026-82771 | CVE-2026-82771 CVSS 5.4 | Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user'… |
| CVE-2026-82770 | CVE-2026-82770 CVSS 8.8 | Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitr… |
| CVE-2026-82769 | CVE-2026-82769 CVSS 5.4 | Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in us… |
| CVE-2026-82768 | CVE-2026-82768 CVSS 8.1 | Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker w… |
| CVE-2026-82767 | CVE-2026-82767 CVSS 5.2 | Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. |
| CVE-2026-82766 | CVE-2026-82766 CVSS 8.8 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is exploited, an arbi… |
| CVE-2026-82765 | CVE-2026-82765 CVSS 8.1 | Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the serve… |
| CVE-2026-82764 | CVE-2026-82764 CVSS 4.3 | Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, … |
| CVE-2026-82763 | CVE-2026-82763 CVSS 5.4 | Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script ma… |
| CVE-2026-82762 | CVE-2026-82762 CVSS 8.8 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 seri… |
| CVE-2026-82761 | CVE-2026-82761 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its … |
| CVE-2026-82760 | CVE-2026-82760 | Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversize… |
| CVE-2026-82759 | CVE-2026-82759 | Use of a One-Way Hash with a Predictable Salt vulnerability in team-alembic AshAuthentication allows readers of the audit store to recover the client IP addres… |
| CVE-2026-82758 | CVE-2026-82758 | Improper Authentication vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to register OAuth clients even when Dy… |
| CVE-2026-82757 | CVE-2026-82757 | Server-Side Request Forgery (SSRF) vulnerability in ash-project ash_authentication_oauth2_server allows an attacker who controls a client metadata URL and its … |
| CVE-2026-82756 | CVE-2026-82756 | Improper Encoding or Escaping of Output vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to inject arbitrary au… |
| CVE-2026-82755 | CVE-2026-82755 | Use of Cache Containing Sensitive Information vulnerability in ash-project ash_authentication_oauth2_server allows a shared HTTP cache to serve one tenant's OA… |
| CVE-2026-82754 | CVE-2026-82754 | Improper Protection of Alternate Path vulnerability in ash-project ash_authentication_oauth2_server exposes the state-changing OAuth endpoints under an uninten… |
| CVE-2026-82753 | CVE-2026-82753 | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to exhaus… |
| CVE-2026-82752 | CVE-2026-82752 | Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to store a value of arbitrary size in an attribute whose… |
| CVE-2026-82751 | CVE-2026-82751 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored pay… |
| CVE-2026-82750 | CVE-2026-82750 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored pay… |
| CVE-2026-82749 | CVE-2026-82749 | Incorrect Authorization vulnerability in ash-project ash widens a relationship's parent(...) scoping filter to match unintended records when the referenced par… |
| CVE-2026-82748 | CVE-2026-82748 | Incorrect Authorization vulnerability in ash-project ash authorizes an aggregate under one read action while computing it under another, so an aggregate can ru… |
| CVE-2026-82747 | CVE-2026-82747 | Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an access_type :r… |
| CVE-2026-82746 | CVE-2026-82746 | Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies through the atomic path of Ash.update_m… |
| CVE-2026-82745 | CVE-2026-82745 | Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer is used, because n… |
| CVE-2026-82744 | CVE-2026-82744 | Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run… |
| CVE-2026-82743 | CVE-2026-82743 | Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits … |
| CVE-2026-82742 | CVE-2026-82742 | Uncontrolled Resource Consumption vulnerability in ash-project ash lets an attacker exhaust node memory by matching a filter that spans multiple to-many relati… |
| CVE-2026-82741 | CVE-2026-82741 | Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type tag of an Ash.Type.Union value that us… |
| CVE-2026-82740 | CVE-2026-82740 | Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested {:array, {:array, type}} attribute, … |
| CVE-2026-82739 | CVE-2026-82739 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who f… |
| CVE-2026-82738 | CVE-2026-82738 | Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by storing a non-version-7 UUID in an Ash.… |