110,684 indexed
CVECVE vulnerabilities
110,684 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 12,551–12,600 of 110,684 · page 252 of 2214
| ID | Title | Summary |
|---|---|---|
| CVE-2026-81490 | CVE-2026-81490 CVSS 7.7mongodb | A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by definin… |
| CVE-2026-8149 | CVE-2026-8149 | A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Li… |
| CVE-2026-81486 | CVE-2026-81486 CVSS 5.3 | A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function read_context of the file src/index.ts of the comp… |
| CVE-2026-81485 | CVE-2026-81485 CVSS 5.3 | A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file s… |
| CVE-2026-81481 | CVE-2026-81481 CVSS 7.5dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu… |
| CVE-2026-81480 | CVE-2026-81480 CVSS 7.2dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote … |
| CVE-2026-81479 | CVE-2026-81479 CVSS 5.8dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local acce… |
| CVE-2026-81478 | CVE-2026-81478 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker wit… |
| CVE-2026-81477 | CVE-2026-81477 CVSS 7.2dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote a… |
| CVE-2026-81476 | CVE-2026-81476 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command In… |
| CVE-2026-81475 | CVE-2026-81475 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated att… |
| CVE-2026-81474 | CVE-2026-81474 CVSS 7.8dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local acc… |
| CVE-2026-81473 | CVE-2026-81473 CVSS 8.1 | Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could… |
| CVE-2026-8147 | CVE-2026-8147 CVSS 8.1lfprojects | In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any aut… |
| CVE-2026-81469 | CVE-2026-81469 CVSS 7.8 | Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local acces… |
| CVE-2026-81468 | CVE-2026-81468 CVSS 9.1dell | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera… |
| CVE-2026-81467 | CVE-2026-81467 CVSS 9.8dell | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera… |
| CVE-2026-81455 | CVE-2026-81455 CVSS 8.6 | Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated atta… |
| CVE-2026-81453 | CVE-2026-81453 CVSS 6.5dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu… |
| CVE-2026-81452 | CVE-2026-81452 CVSS 7.0 | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local acce… |
| CVE-2026-8145 | CVE-2026-8145 CVSS 5.4 | The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in all version… |
| CVE-2026-81447 | CVE-2026-81447 CVSS 6.8dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with a… |
| CVE-2026-81446 | CVE-2026-81446 CVSS 7.4dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with… |
| CVE-2026-81445 | CVE-2026-81445 CVSS 7.2dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remo… |
| CVE-2026-81443 | CVE-2026-81443 CVSS 6.4dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with r… |
| CVE-2026-81442 | CVE-2026-81442 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remot… |
| CVE-2026-81441 | CVE-2026-81441 CVSS 4.0dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated att… |
| CVE-2026-81440 | CVE-2026-81440 CVSS 7.3dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remo… |
| CVE-2026-81439 | CVE-2026-81439 CVSS 3.7dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote acce… |
| CVE-2026-81438 | CVE-2026-81438 CVSS 3.7dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated a… |
| CVE-2026-81433 | CVE-2026-81433 | A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent n… |
| CVE-2026-81432 | CVE-2026-81432 CVSS 4.3 | The JetStyleManager for Gutenberg WordPress plugin before 1.3.9 does not have CSRF protection on some of its AJAX actions, allowing attackers to make a logged-… |
| CVE-2026-81431 | CVE-2026-81431 CVSS 7.2 | The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration… |
| CVE-2026-81429 | CVE-2026-81429 CVSS 7.1 | The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise t… |
| CVE-2026-81428 | CVE-2026-81428 CVSS 6.5 | The WC Vendors WordPress plugin before 2.7.2.1 does not verify ownership or the object type of user-supplied IDs when saving product variations, allowing auth… |
| CVE-2026-81427 | CVE-2026-81427 CVSS 4.3 | The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, … |
| CVE-2026-81426 | CVE-2026-81426 CVSS 4.3 | The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attacke… |
| CVE-2026-81424 | CVE-2026-81424 CVSS 5.3 | The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the author… |
| CVE-2026-81423 | CVE-2026-81423 CVSS 4.3 | The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attacker… |
| CVE-2026-81421 | CVE-2026-81421 CVSS 7.3 | A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component raw_sentry_api. The … |
| CVE-2026-81420 | CVE-2026-81420 CVSS 8.6 | The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX acti… |
| CVE-2026-8141 | CVE-2026-8141 CVSS 7.2 | The Ajax Load More - Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'taxonomy_include_children' parameter in all versions up… |
| CVE-2026-81404 | CVE-2026-81404 CVSS 7.1 | The IPGP Visitors Origin WordPress plugin before 1.6 does not sanitise or escape user input before reflecting it back in the HTTP response, allowing unauthenti… |
| CVE-2026-81402 | CVE-2026-81402 CVSS 9.8 | The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, … |
| CVE-2026-81401 | CVE-2026-81401 CVSS 5.5microsoft | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81400 | CVE-2026-81400 CVSS 5.5microsoft | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-8140 | CVE-2026-8140 CVSS 6.5concretecms | Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/install/download/<remoteId>. The download() method … |
| CVE-2026-81399 | CVE-2026-81399 CVSS 5.5microsoft | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81398 | CVE-2026-81398 CVSS 7.8microsoft | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81397 | CVE-2026-81397 CVSS 7.8microsoft | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |