104,345 indexed
CVECVE vulnerabilities
104,345 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 11,051–11,100 of 104,345 · page 222 of 2087
| ID | Title | Summary |
|---|---|---|
| CVE-2026-82737 | CVE-2026-82737 | Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later reads of it by submitting a vector wit… |
| CVE-2026-82736 | CVE-2026-82736 | Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string value that violates it… |
| CVE-2026-82735 | CVE-2026-82735 | Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to force an expensive regular expression to run on input that a length co… |
| CVE-2026-82734 | CVE-2026-82734 | Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to submit a non-finite decimal value that bypasses numer… |
| CVE-2026-82733 | CVE-2026-82733 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal ap… |
| CVE-2026-82732 | CVE-2026-82732 | Improper Input Validation vulnerability in ash-project ash_typescript allows a remote attacker to submit argument values outside a declared allowlist or bound … |
| CVE-2026-82731 | CVE-2026-82731 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ash-project ash_typescript allows an attacker who controls a path-parameter value to redir… |
| CVE-2026-82730 | CVE-2026-82730 | Incorrect Authorization vulnerability in ash-project ash_typescript allows an unauthorized RPC caller to read attribute values that Ash field policies denied. … |
| CVE-2026-82729 | CVE-2026-82729 | Inefficient Algorithmic Complexity vulnerability in elixir-mint mint allows a remote HTTP server to exhaust CPU on the client host and cause a denial of servic… |
| CVE-2026-82728 | CVE-2026-82728 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cau… |
| CVE-2026-82727 | CVE-2026-82727 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire raw submitted param map into an excepti… |
| CVE-2026-82726 | CVE-2026-82726 | Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select the tenant an Ash application uses, or degrade the request, … |
| CVE-2026-82725 | CVE-2026-82725 | Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an attacker who controls filter form parameters filter across re… |
| CVE-2026-82724 | CVE-2026-82724 | Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access ch… |
| CVE-2026-82723 | CVE-2026-82723 | Insertion of Sensitive Information into Log File vulnerability in team-alembic AshAuthentication allows disclosure of user password digests to readers of the a… |
| CVE-2026-82722 | CVE-2026-82722 | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any client that can reach the admin LiveView exhaust the BEAM … |
| CVE-2026-82720 | CVE-2026-82720 CVSS 5.9nlnetlabs | NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. Duri… |
| CVE-2026-82717 | CVE-2026-82717 CVSS 9.8nlnetlabs | In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compila… |
| CVE-2026-82716 | CVE-2026-82716 CVSS 4.6 | The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the suppor… |
| CVE-2026-82715 | CVE-2026-82715 CVSS 7.9 | Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Di… |
| CVE-2026-82712 | CVE-2026-82712 CVSS 8.8 | Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform… |
| CVE-2026-82710 | CVE-2026-82710 | Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage_rules allows a malicious package publisher to inject terminal … |
| CVE-2026-82708 | CVE-2026-82708 CVSS 6.5 | The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could s… |
| CVE-2026-82703 | CVE-2026-82703 CVSS 6.6 | A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component asp_setPi… |
| CVE-2026-82702 | CVE-2026-82702 CVSS 6.6 | A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component asp_WlanMP Endpoint. Such … |
| CVE-2026-82701 | CVE-2026-82701 CVSS 7.3 | A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the… |
| CVE-2026-82700 | CVE-2026-82700 CVSS 4.3 | A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php o… |
| CVE-2026-82699 | CVE-2026-82699 CVSS 2.7 | A flaw has been found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This impacts an unknown function of the file aca.s… |
| CVE-2026-82698 | CVE-2026-82698 CVSS 5.3 | A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the fil… |
| CVE-2026-82697 | CVE-2026-82697 CVSS 3.7 | A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the f… |
| CVE-2026-82696 | CVE-2026-82696 CVSS 6.3 | A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_searchfrm.php… |
| CVE-2026-82695 | CVE-2026-82695 CVSS 10.0 | A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The … |
| CVE-2026-82694 | CVE-2026-82694 CVSS 10.0 | A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web … |
| CVE-2026-82693 | CVE-2026-82693 CVSS 10.0 | A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web… |
| CVE-2026-82692 | CVE-2026-82692 CVSS 9.9 | A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsi_mgr.cgi. Performing a manipula… |
| CVE-2026-82691 | CVE-2026-82691 CVSS 9.1 | A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the f… |
| CVE-2026-82690 | CVE-2026-82690 CVSS 9.1 | A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve_mgr.cg… |
| CVE-2026-82689 | CVE-2026-82689 CVSS 9.9 | A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_m… |
| CVE-2026-82688 | CVE-2026-82688 CVSS 9.1 | A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-b… |
| CVE-2026-82685 | CVE-2026-82685 | Authorization Bypass Through User-Controlled Key vulnerability in team-alembic AshAuthentication allows an authenticated attacker to overwrite and confirm anot… |
| CVE-2026-82684 | CVE-2026-82684 CVSS 8.1 | Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attacker to extract syst… |
| CVE-2026-82681 | CVE-2026-82681 | Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's string primary key rewrite the target o… |
| CVE-2026-82680 | CVE-2026-82680 CVSS 8.8 | A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /load_file.cgi of the component Multipart Handler. Executi… |
| CVE-2026-8268 | CVE-2026-8268 CVSS 4.3open5gs | A vulnerability has been found in Open5GS up to 2.7.7. This issue affects the function OpenAPI_list_create of the component SMF. Such manipulation leads to den… |
| CVE-2026-82679 | CVE-2026-82679 CVSS 6.3 | A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/… |
| CVE-2026-82678 | CVE-2026-82678 CVSS 4.7 | A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of the file dmAdminPlugin/modules/dmConsol… |
| CVE-2026-82677 | CVE-2026-82677 CVSS 2.4 | A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Su… |
| CVE-2026-82673 | CVE-2026-82673 | Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allows writing attacker-controlled bytes to… |
| CVE-2026-82672 | CVE-2026-82672 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchr… |
| CVE-2026-82671 | CVE-2026-82671 CVSS 3.4 | A vulnerability has been found in IObit Unlocker 1.3.0.12. This vulnerability affects the function ZwTerminateProcess in the library IObitUnlocker.sys of the c… |