110,684 indexed
CVECVE vulnerabilities
110,684 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 12,751–12,800 of 110,684 · page 256 of 2214
| ID | Title | Summary |
|---|---|---|
| CVE-2026-81091 | CVE-2026-81091 CVSS 8.6 | The proxy middleware in mcp-use's inspector forwards requests to a destination the caller names. mountMcpProxy in libraries/typescript/packages/inspector/src/s… |
| CVE-2026-81090 | CVE-2026-81090 CVSS 7.2 | The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing at… |
| CVE-2026-8108 | CVE-2026-8108 CVSS 7.8fujielectric | The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions. |
| CVE-2026-81052 | CVE-2026-81052 CVSS 6.8dell | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical acc… |
| CVE-2026-81051 | CVE-2026-81051 CVSS 6.6dell | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physi… |
| CVE-2026-81049 | CVE-2026-81049 CVSS 4.4dell | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could… |
| CVE-2026-81048 | CVE-2026-81048 CVSS 9.6dell | Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A… |
| CVE-2026-81046 | CVE-2026-81046 CVSS 9.4dell | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could pote… |
| CVE-2026-81036 | CVE-2026-81036 CVSS 8.1 | Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuration. The validation routine in crate… |
| CVE-2026-81035 | CVE-2026-81035 CVSS 8.1 | Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, w… |
| CVE-2026-81034 | CVE-2026-81034 CVSS 6.5 | Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose s… |
| CVE-2026-81033 | CVE-2026-81033 CVSS 5.3 | Automatisch reveals whether an address is registered through the response to its forgot-password request. The controller at packages/backend/src/controllers/in… |
| CVE-2026-81032 | CVE-2026-81032 CVSS 9.8 | NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp… |
| CVE-2026-81031 | CVE-2026-81031 CVSS 7.2 | IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controll… |
| CVE-2026-81030 | CVE-2026-81030 CVSS 6.5 | Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mage_ai/api/resources/BrowserItemResource… |
| CVE-2026-81029 | CVE-2026-81029 CVSS 8.1 | OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback request para… |
| CVE-2026-81028 | CVE-2026-81028 CVSS 4.9 | ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries. The c… |
| CVE-2026-81027 | CVE-2026-81027 CVSS 8.5 | one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix o… |
| CVE-2026-81026 | CVE-2026-81026 CVSS 4.8 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before … |
| CVE-2026-81022 | CVE-2026-81022 CVSS 5.3 | The SupportCandy WordPress plugin before 3.5.3 does not validate a submitted per-ticket authorization code before disclosing the real code to the requester, a… |
| CVE-2026-81021 | CVE-2026-81021 CVSS 5.3 | The SupportCandy WordPress plugin before 3.5.3 does not perform an authorization check on one of its support-ticket attachment download paths, allowing unauth… |
| CVE-2026-81020 | CVE-2026-81020 CVSS 7.4wolfssl | wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TL… |
| CVE-2026-81019 | CVE-2026-81019 CVSS 7.4wolfssl | wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every … |
| CVE-2026-81018 | CVE-2026-81018 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support als… |
| CVE-2026-81017 | CVE-2026-81017 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carrie… |
| CVE-2026-81016 | CVE-2026-81016 CVSS 7.7 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amd_stb_s2d_init() di… |
| CVE-2026-81015 | CVE-2026-81015 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amd_pmc_probe() regi… |
| CVE-2026-81014 | CVE-2026-81014 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() sk_store() and … |
| CVE-2026-81013 | CVE-2026-81013 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empty password write validate_password_inp… |
| CVE-2026-81012 | CVE-2026-81012 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() hp_get_stri… |
| CVE-2026-81011 | CVE-2026-81011 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type pa… |
| CVE-2026-81010 | CVE-2026-81010 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: honor task_work cancellation io_waitid_cb() may run through the fallback… |
| CVE-2026-81009 | CVE-2026-81009 | In the Linux kernel, the following vulnerability has been resolved: io_uring/query: cap user size passed to copy_struct_to_user io_handle_query_entry() clamp… |
| CVE-2026-81008 | CVE-2026-81008 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc_get() and of_icc_get_by_index() In of_icc_get_by_… |
| CVE-2026-81007 | CVE-2026-81007 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fields before validat… |
| CVE-2026-81006 | CVE-2026-81006 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi_add_smi() creates the nr_users … |
| CVE-2026-81005 | CVE-2026-81005 | In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration try_smi_init() allocates… |
| CVE-2026-81004 | CVE-2026-81004 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an … |
| CVE-2026-81003 | CVE-2026-81003 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingress device afiucv_hs_rcv() selects a so… |
| CVE-2026-81002 | CVE-2026-81002 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdp_convert_zc_to_xdp_frame() clones an XSK packet into a… |
| CVE-2026-81001 | CVE-2026-81001 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_sync() slip_devs[] stores bare net_device pointers and tak… |
| CVE-2026-81000 | CVE-2026-81000 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and … |
| CVE-2026-8100 | CVE-2026-8100 | Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue … |
| CVE-2026-80999 | CVE-2026-80999 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO rtl83xx_reset_assert() and… |
| CVE-2026-80998 | CVE-2026-80998 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed do… |
| CVE-2026-80997 | CVE-2026-80997 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX queue after runtime resume ipa_start_xmit() unconditionall… |
| CVE-2026-80996 | CVE-2026-80996 | In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modif… |
| CVE-2026-80995 | CVE-2026-80995 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp_route_lookup() mctp_route_lookup(… |
| CVE-2026-80994 | CVE-2026-80994 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes t… |
| CVE-2026-80993 | CVE-2026-80993 | In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylink_inband_caps In phylink_inband_ca… |