112,666 indexed
CVECVE vulnerabilities
112,666 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 13,201–13,250 of 112,666 · page 265 of 2254
| ID | Title | Summary |
|---|---|---|
| CVE-2026-81518 | CVE-2026-81518 CVSS 7.5mongodb | When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require… |
| CVE-2026-81517 | CVE-2026-81517 CVSS 7.5mongodb | An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough routine connection log activity to exhau… |
| CVE-2026-81516 | CVE-2026-81516 CVSS 7.5 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, ConsulDisc… |
| CVE-2026-81515 | CVE-2026-81515 CVSS 7.5 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, EurekaDisc… |
| CVE-2026-8151 | CVE-2026-8151 CVSS 5.4 | The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF checks in its settings page, allowing attackers to trick a logged-… |
| CVE-2026-81508 | CVE-2026-81508 CVSS 4.3 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btc_a2dp_sink_handle_inc_me… |
| CVE-2026-81507 | CVE-2026-81507 CVSS 6.5 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ESP-IDF BlueDroid L2CAP configuratio… |
| CVE-2026-81505 | CVE-2026-81505 | Convoy is a cloud native webhooks gateway. Prior to 26.6.8, Convoy's GET /api/v1/projects/{projectID}/sources/{sourceID} endpoint authorizes access to the proj… |
| CVE-2026-81491 | CVE-2026-81491 CVSS 7.3 | A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_notes/teleport_notes/sync_notes/project_folder of the file … |
| CVE-2026-81490 | CVE-2026-81490 CVSS 7.7mongodb | A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by definin… |
| CVE-2026-8149 | CVE-2026-8149 | A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Li… |
| CVE-2026-81486 | CVE-2026-81486 CVSS 5.3 | A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function read_context of the file src/index.ts of the comp… |
| CVE-2026-81485 | CVE-2026-81485 CVSS 5.3 | A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file s… |
| CVE-2026-81481 | CVE-2026-81481 CVSS 7.5dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu… |
| CVE-2026-81480 | CVE-2026-81480 CVSS 7.2dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote … |
| CVE-2026-81479 | CVE-2026-81479 CVSS 5.8dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local acce… |
| CVE-2026-81478 | CVE-2026-81478 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker wit… |
| CVE-2026-81477 | CVE-2026-81477 CVSS 7.2dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote a… |
| CVE-2026-81476 | CVE-2026-81476 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command In… |
| CVE-2026-81475 | CVE-2026-81475 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated att… |
| CVE-2026-81474 | CVE-2026-81474 CVSS 7.8dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local acc… |
| CVE-2026-81473 | CVE-2026-81473 CVSS 8.1 | Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could… |
| CVE-2026-8147 | CVE-2026-8147 CVSS 8.1lfprojects | In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any aut… |
| CVE-2026-81469 | CVE-2026-81469 CVSS 7.8 | Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local acces… |
| CVE-2026-81468 | CVE-2026-81468 CVSS 9.1dell | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera… |
| CVE-2026-81467 | CVE-2026-81467 CVSS 9.8dell | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera… |
| CVE-2026-81455 | CVE-2026-81455 CVSS 8.6 | Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated atta… |
| CVE-2026-81453 | CVE-2026-81453 CVSS 6.5dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu… |
| CVE-2026-81452 | CVE-2026-81452 CVSS 7.0 | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local acce… |
| CVE-2026-8145 | CVE-2026-8145 CVSS 5.4 | The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in all version… |
| CVE-2026-81447 | CVE-2026-81447 CVSS 6.8dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with a… |
| CVE-2026-81446 | CVE-2026-81446 CVSS 7.4dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with… |
| CVE-2026-81445 | CVE-2026-81445 CVSS 7.2dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remo… |
| CVE-2026-81443 | CVE-2026-81443 CVSS 6.4dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with r… |
| CVE-2026-81442 | CVE-2026-81442 CVSS 8.1dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remot… |
| CVE-2026-81441 | CVE-2026-81441 CVSS 4.0dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated att… |
| CVE-2026-81440 | CVE-2026-81440 CVSS 7.3dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remo… |
| CVE-2026-81439 | CVE-2026-81439 CVSS 3.7dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote acce… |
| CVE-2026-81438 | CVE-2026-81438 CVSS 3.7dell | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated a… |
| CVE-2026-81433 | CVE-2026-81433 | A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent n… |
| CVE-2026-81432 | CVE-2026-81432 CVSS 4.3 | The JetStyleManager for Gutenberg WordPress plugin before 1.3.9 does not have CSRF protection on some of its AJAX actions, allowing attackers to make a logged-… |
| CVE-2026-81431 | CVE-2026-81431 CVSS 7.2 | The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration… |
| CVE-2026-81429 | CVE-2026-81429 CVSS 7.1 | The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise t… |
| CVE-2026-81428 | CVE-2026-81428 CVSS 6.5 | The WC Vendors WordPress plugin before 2.7.2.1 does not verify ownership or the object type of user-supplied IDs when saving product variations, allowing auth… |
| CVE-2026-81427 | CVE-2026-81427 CVSS 4.3 | The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, … |
| CVE-2026-81426 | CVE-2026-81426 CVSS 4.3 | The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attacke… |
| CVE-2026-81424 | CVE-2026-81424 CVSS 5.3 | The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the author… |
| CVE-2026-81423 | CVE-2026-81423 CVSS 4.3 | The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attacker… |
| CVE-2026-81421 | CVE-2026-81421 CVSS 7.3 | A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component raw_sentry_api. The … |
| CVE-2026-81420 | CVE-2026-81420 CVSS 8.6 | The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX acti… |