106,194 indexed
CVECVE vulnerabilities
106,194 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 12,001–12,050 of 106,194 · page 241 of 2124
| ID | Title | Summary |
|---|---|---|
| CVE-2026-81532 | CVE-2026-81532 CVSS 8.8mongodb | A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exce… |
| CVE-2026-81531 | CVE-2026-81531 | An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible aft… |
| CVE-2026-81530 | CVE-2026-81530 CVSS 5.6mongodb | A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management credential material supplied by the app… |
| CVE-2026-8153 | CVE-2026-8153 CVSS 9.8 | OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands tha… |
| CVE-2026-81529 | CVE-2026-81529 CVSS 7.1mongodb | Improper neutralization of delimiters in connection-URL construction allows connection-option injection in the MongoDB C# Driver. When an application passes un… |
| CVE-2026-81528 | CVE-2026-81528 CVSS 5.4mongodb | A MongoDB C# driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a repl… |
| CVE-2026-81527 | CVE-2026-81527 CVSS 6.5mongodb | A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C# Driver, in both aggregation expression and qu… |
| CVE-2026-81526 | CVE-2026-81526 CVSS 6.5mongodb | The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server… |
| CVE-2026-81525 | CVE-2026-81525 CVSS 8.1mongodb | The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct… |
| CVE-2026-81524 | CVE-2026-81524 CVSS 5.4mongodb | A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the dri… |
| CVE-2026-81523 | CVE-2026-81523 CVSS 4.4mongodb | A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted with… |
| CVE-2026-81522 | CVE-2026-81522 CVSS 8.1mongodb | A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An applicatio… |
| CVE-2026-81521 | CVE-2026-81521 CVSS 6.5mongodb | The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping… |
| CVE-2026-81520 | CVE-2026-81520 CVSS 7.5mongodb | A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-base… |
| CVE-2026-8152 | CVE-2026-8152 | Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting (XSS) attack. When Unblu Spark is deployed with… |
| CVE-2026-81518 | CVE-2026-81518 CVSS 7.5mongodb | When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require… |
| CVE-2026-81517 | CVE-2026-81517 CVSS 7.5mongodb | An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough routine connection log activity to exhau… |
| CVE-2026-81516 | CVE-2026-81516 CVSS 7.5 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, ConsulDisc… |
| CVE-2026-81515 | CVE-2026-81515 CVSS 7.5 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, EurekaDisc… |
| CVE-2026-8151 | CVE-2026-8151 CVSS 5.4 | The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF checks in its settings page, allowing attackers to trick a logged-… |
| CVE-2026-81508 | CVE-2026-81508 CVSS 4.3 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btc_a2dp_sink_handle_inc_me… |
| CVE-2026-81507 | CVE-2026-81507 CVSS 6.5 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ESP-IDF BlueDroid L2CAP configuratio… |
| CVE-2026-81505 | CVE-2026-81505 | Convoy is a cloud native webhooks gateway. Prior to 26.6.8, Convoy's GET /api/v1/projects/{projectID}/sources/{sourceID} endpoint authorizes access to the proj… |
| CVE-2026-81491 | CVE-2026-81491 CVSS 7.3 | A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_notes/teleport_notes/sync_notes/project_folder of the file … |
| CVE-2026-81490 | CVE-2026-81490 CVSS 7.7mongodb | A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by definin… |
| CVE-2026-8149 | CVE-2026-8149 | A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Li… |
| CVE-2026-81486 | CVE-2026-81486 CVSS 5.3 | A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function read_context of the file src/index.ts of the comp… |
| CVE-2026-81485 | CVE-2026-81485 CVSS 5.3 | A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file s… |
| CVE-2026-81481 | CVE-2026-81481 CVSS 7.5dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu… |
| CVE-2026-81480 | CVE-2026-81480 CVSS 7.2dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote … |
| CVE-2026-81479 | CVE-2026-81479 CVSS 5.8dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local acce… |
| CVE-2026-81478 | CVE-2026-81478 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker wit… |
| CVE-2026-81477 | CVE-2026-81477 CVSS 7.2dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote a… |
| CVE-2026-81476 | CVE-2026-81476 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command In… |
| CVE-2026-81475 | CVE-2026-81475 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated att… |
| CVE-2026-81474 | CVE-2026-81474 CVSS 7.8dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local acc… |
| CVE-2026-81473 | CVE-2026-81473 CVSS 8.1 | Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could… |
| CVE-2026-8147 | CVE-2026-8147 CVSS 8.1lfprojects | In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any aut… |
| CVE-2026-81469 | CVE-2026-81469 CVSS 7.8 | Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local acces… |
| CVE-2026-81468 | CVE-2026-81468 CVSS 9.1dell | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera… |
| CVE-2026-81467 | CVE-2026-81467 CVSS 9.8dell | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera… |
| CVE-2026-81455 | CVE-2026-81455 CVSS 8.6 | Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated atta… |
| CVE-2026-81453 | CVE-2026-81453 CVSS 6.5dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu… |
| CVE-2026-81452 | CVE-2026-81452 CVSS 7.0 | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local acce… |
| CVE-2026-8145 | CVE-2026-8145 CVSS 5.4 | The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in all version… |
| CVE-2026-81447 | CVE-2026-81447 CVSS 6.8dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with a… |
| CVE-2026-81446 | CVE-2026-81446 CVSS 7.4dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with… |
| CVE-2026-81445 | CVE-2026-81445 CVSS 7.2dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remo… |
| CVE-2026-81443 | CVE-2026-81443 CVSS 6.4dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with r… |
| CVE-2026-81442 | CVE-2026-81442 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remot… |