106,194 indexed
CVECVE vulnerabilities
106,194 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 11,501–11,550 of 106,194 · page 231 of 2124
| ID | Title | Summary |
|---|---|---|
| CVE-2026-82186 | CVE-2026-82186 CVSS 4.1 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with ad… |
| CVE-2026-82185 | CVE-2026-82185 CVSS 4.3 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated … |
| CVE-2026-82184 | CVE-2026-82184 CVSS 5.3 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that doe… |
| CVE-2026-82183 | CVE-2026-82183 CVSS 8.1 | The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthentica… |
| CVE-2026-82182 | CVE-2026-82182 CVSS 4.1 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not sanitise a user supplied list of identifiers before using it in a SQL query,… |
| CVE-2026-82181 | CVE-2026-82181 CVSS 5.5 | Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive informa… |
| CVE-2026-82180 | CVE-2026-82180 | In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.50… |
| CVE-2026-8218 | CVE-2026-8218 CVSS 2.4 | A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affected element is an unknown function of the file /inventory/purchase_return_save. … |
| CVE-2026-8217 | CVE-2026-8217 CVSS 6.3 | A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component R… |
| CVE-2026-82165 | CVE-2026-82165 CVSS 5.5 | Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker … |
| CVE-2026-82164 | CVE-2026-82164 CVSS 7.1 | Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attac… |
| CVE-2026-82163 | CVE-2026-82163 CVSS 5.5 | Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local ac… |
| CVE-2026-82162 | CVE-2026-82162 CVSS 7.4dell | Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remo… |
| CVE-2026-8216 | CVE-2026-8216 CVSS 7.3 | A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function iasServerRemoteInterface.doAction of the… |
| CVE-2026-82157 | CVE-2026-82157 CVSS 8.3 | Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with a… |
| CVE-2026-82153 | CVE-2026-82153 CVSS 2.2 | Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical ac… |
| CVE-2026-8215 | CVE-2026-8215 CVSS 5.3 | A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This vulnerability affects the function iasRequestFileEvent of the compo… |
| CVE-2026-8214 | CVE-2026-8214 CVSS 5.3 | A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects the function doAction of the component RMI Interface. The manipu… |
| CVE-2026-8213 | CVE-2026-8213 CVSS 5.3osgeo | A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of th… |
| CVE-2026-82127 | CVE-2026-82127 CVSS 3.5 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them w… |
| CVE-2026-82126 | CVE-2026-82126 CVSS 2.7 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema gene… |
| CVE-2026-82125 | CVE-2026-82125 CVSS 5.3 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before ret… |
| CVE-2026-82124 | CVE-2026-82124 CVSS 5.3 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the … |
| CVE-2026-82123 | CVE-2026-82123 CVSS 6.5 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & Logic. |
| CVE-2026-8212 | CVE-2026-8212 CVSS 5.3osgeo | A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Execu… |
| CVE-2026-82112 | CVE-2026-82112 CVSS 3.5 | A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component code_task_fi… |
| CVE-2026-82111 | CVE-2026-82111 CVSS 4.3 | A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component… |
| CVE-2026-82110 | CVE-2026-82110 CVSS 9.6ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during… |
| CVE-2026-8211 | CVE-2026-8211 CVSS 4.7 | A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this issue is the function update of the file org/codelibs/fess/app/web/admin/design/Ad… |
| CVE-2026-82108 | CVE-2026-82108 CVSS 8.8ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special ele… |
| CVE-2026-82107 | CVE-2026-82107 CVSS 9.6ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to… |
| CVE-2026-82103 | CVE-2026-82103 CVSS 9.6ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive informa… |
| CVE-2026-82101 | CVE-2026-82101 CVSS 9.6ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. |
| CVE-2026-82100 | CVE-2026-82100 CVSS 9.6ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. |
| CVE-2026-8210 | CVE-2026-8210 CVSS 5.3 | A security vulnerability has been detected in aandrew-me tgpt up to 2.11.1 on Linux/macOS. Affected by this vulnerability is the function helper.Update of the … |
| CVE-2026-82099 | CVE-2026-82099 CVSS 8.8ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special ele… |
| CVE-2026-82098 | CVE-2026-82098 CVSS 8.8ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special… |
| CVE-2026-82097 | CVE-2026-82097 CVSS 8.8ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to a Server-Side Request Forgery (SSRF) v… |
| CVE-2026-82096 | CVE-2026-82096 CVSS 8.8ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special… |
| CVE-2026-82095 | CVE-2026-82095 CVSS 8.8ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special ele… |
| CVE-2026-82094 | CVE-2026-82094 CVSS 7.1ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a p… |
| CVE-2026-82093 | CVE-2026-82093 CVSS 8.8ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted da… |
| CVE-2026-82092 | CVE-2026-82092 CVSS 8.8ibm | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulne… |
| CVE-2026-82090 | CVE-2026-82090 | Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bri… |
| CVE-2026-8209 | CVE-2026-8209 | Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .… |
| CVE-2026-82089 | CVE-2026-82089 | The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView. |
| CVE-2026-82082 | CVE-2026-82082 CVSS 9.8 | NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute th… |
| CVE-2026-82081 | CVE-2026-82081 CVSS 6.4 | wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export. |
| CVE-2026-8208 | CVE-2026-8208 | Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing inte… |
| CVE-2026-82079 | CVE-2026-82079 CVSS 8.4 | A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execu… |