104,345 indexed
CVECVE vulnerabilities
104,345 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 11,201–11,250 of 104,345 · page 225 of 2087
| ID | Title | Summary |
|---|---|---|
| CVE-2026-82567 | CVE-2026-82567 CVSS 6.3 | The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is access… |
| CVE-2026-82566 | CVE-2026-82566 CVSS 8.8 | The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client c… |
| CVE-2026-82564 | CVE-2026-82564 | Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller of an identity-configured tool to update or destroy record… |
| CVE-2026-82563 | CVE-2026-82563 CVSS 7.6 | An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status r… |
| CVE-2026-82562 | CVE-2026-82562 CVSS 3.7 | ### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) … |
| CVE-2026-82561 | CVE-2026-82561 CVSS 6.5apache | Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering… |
| CVE-2026-82560 | CVE-2026-82560 CVSS 7.5 | Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. … |
| CVE-2026-8256 | CVE-2026-8256 CVSS 2.4 | A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown code of the file /accounts/mr-save. Such m… |
| CVE-2026-82556 | CVE-2026-82556 CVSS 6.3 | A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/is_migrate_allowed.go… |
| CVE-2026-82555 | CVE-2026-82555 CVSS 3.7 | A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAuth of the file /web_cste/cgi-bin/cstecg… |
| CVE-2026-82554 | CVE-2026-82554 CVSS 4.3 | A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add_customer.php. This manipulation of the a… |
| CVE-2026-82553 | CVE-2026-82553 CVSS 6.3 | A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysq… |
| CVE-2026-82552 | CVE-2026-82552 CVSS 4.3 | A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/n… |
| CVE-2026-82551 | CVE-2026-82551 CVSS 5.3 | A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_handlers.c of the component NGSetup Handle… |
| CVE-2026-82550 | CVE-2026-82550 CVSS 5.3 | A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a man… |
| CVE-2026-8255 | CVE-2026-8255 CVSS 2.4 | A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventory/add_new_customer. This manipulation c… |
| CVE-2026-82549 | CVE-2026-82549 CVSS 8.3 | A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulati… |
| CVE-2026-82548 | CVE-2026-82548 CVSS 5.3 | A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This man… |
| CVE-2026-82547 | CVE-2026-82547 CVSS 6.5 | A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Regis… |
| CVE-2026-82546 | CVE-2026-82546 CVSS 6.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store … |
| CVE-2026-82545 | CVE-2026-82545 CVSS 6.3 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/sup_searchfrm.php. The manipu… |
| CVE-2026-82544 | CVE-2026-82544 CVSS 4.3 | A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function reset_user_password of the file wger/gym/views/gym.py of the com… |
| CVE-2026-82543 | CVE-2026-82543 CVSS 7.3 | A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update_file_usage of the file apps/base/views.py of the c… |
| CVE-2026-82542 | CVE-2026-82542 CVSS 10.0 | A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of th… |
| CVE-2026-82541 | CVE-2026-82541 CVSS 6.3 | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pag… |
| CVE-2026-82540 | CVE-2026-82540 CVSS 6.3 | A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_searchfrm.php. The manip… |
| CVE-2026-8254 | CVE-2026-8254 CVSS 2.4 | A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functionality of the file /inventory/sales_sa… |
| CVE-2026-82539 | CVE-2026-82539 CVSS 9.1 | A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MA… |
| CVE-2026-82538 | CVE-2026-82538 CVSS 8.8 | ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTT… |
| CVE-2026-82537 | CVE-2026-82537 CVSS 8.8 | Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mism… |
| CVE-2026-82536 | CVE-2026-82536 CVSS 8.8 | Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands… |
| CVE-2026-82535 | CVE-2026-82535 CVSS 6.1 | Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payl… |
| CVE-2026-82533 | CVE-2026-82533 CVSS 9.6 | DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by… |
| CVE-2026-82531 | CVE-2026-82531 CVSS 8.1 | Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never restored during extends:/multi-compo… |
| CVE-2026-82530 | CVE-2026-82530 CVSS 5.3 | IP2Location Country Blocker plugin for WordPress before 2.45.0 contains an access control bypass vulnerability that allows unauthenticated remote attackers to … |
| CVE-2026-8253 | CVE-2026-8253 CVSS 2.4 | A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchas… |
| CVE-2026-82527 | CVE-2026-82527 CVSS 7.5 | R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks search query by manipul… |
| CVE-2026-82526 | CVE-2026-82526 CVSS 9.8 | R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the … |
| CVE-2026-82525 | CVE-2026-82525 CVSS 5.5 | Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attackers to read arbitrary files from the host filesys… |
| CVE-2026-82524 | CVE-2026-82524 CVSS 7.2 | UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the Tiny… |
| CVE-2026-82522 | CVE-2026-82522 CVSS 5.4 | libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploit… |
| CVE-2026-82521 | CVE-2026-82521 CVSS 5.3 | parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of p… |
| CVE-2026-82520 | CVE-2026-82520 CVSS 7.5 | parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automat… |
| CVE-2026-8252 | CVE-2026-8252 CVSS 4.3open5gs | A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function smf_nsmf_handle_create_data_in_hsmf of the component SMF. Executing a manipulat… |
| CVE-2026-82519 | CVE-2026-82519 CVSS 4.3 | Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization check vulnerability that allows authenticated low-privileged attacker… |
| CVE-2026-82514 | CVE-2026-82514 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-8251 | CVE-2026-8251 CVSS 4.3open5gs | A vulnerability was found in Open5GS up to 2.7.7. This impacts the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the compo… |
| CVE-2026-8250 | CVE-2026-8250 CVSS 4.3open5gs | A vulnerability has been found in Open5GS up to 2.7.7. This affects the function smf_n4_build_qos_flow_to_modify_list of the file /src/smf/n4-build.c of the co… |
| CVE-2026-8249 | CVE-2026-8249 CVSS 4.3open5gs | A flaw has been found in Open5GS up to 2.7.7. The impacted element is the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of th… |
| CVE-2026-82488 | CVE-2026-82488 CVSS 3.5 | A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown code of the component User Management. The manipulation of the … |