112,666 indexed

CVECVE vulnerabilities

112,666 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 14,201–14,250 of 112,666 · page 285 of 2254

IDTitleSummary
CVE-2026-79996CVE-2026-79996
CVSS 7.2
The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated us…
CVE-2026-79995CVE-2026-79995
CVSS 4.3
The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the…
CVE-2026-79994CVE-2026-79994The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the p…
CVE-2026-79993CVE-2026-79993
CVSS 7.5apache
The `deleteContainer` opcode (0x14/20) is processed without verifying the caller's ACL permissions, allowing any authenticated client to delete specific znodes…
CVE-2026-79992CVE-2026-79992
CVSS 7.8
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP conca…
CVE-2026-79991CVE-2026-79991Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing throughArgumentManagerprepareArguments(),…
CVE-2026-79990CVE-2026-79990Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing throughArgumentManagerprepareArguments(),…
CVE-2026-79989CVE-2026-79989The vulnerability allows any authenticated user to change their own password without providing the current password or having an active elevated session. It al…
CVE-2026-79988CVE-2026-79988The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading to authenticated RCE similar to previous…
CVE-2026-79987CVE-2026-79987
CVSS 8.8
A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker.
CVE-2026-79986CVE-2026-79986
CVSS 7.4
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. This issue affects Apach…
CVE-2026-79985CVE-2026-79985
CVSS 7.4
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component. This issue affects Apache Camel:…
CVE-2026-79984CVE-2026-79984
CVSS 7.4
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component. This issue affects Apache …
CVE-2026-79983CVE-2026-79983
CVSS 7.4
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. This issue affects Apache Camel:…
CVE-2026-79975CVE-2026-79975
CVSS 5.5dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vuln…
CVE-2026-79974CVE-2026-79974
CVSS 6.4dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerabilit…
CVE-2026-79973CVE-2026-79973
CVSS 6.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Unsynchronized Access to Shared Data…
CVE-2026-79972CVE-2026-79972
CVSS 7.2dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special E…
CVE-2026-79971CVE-2026-79971
CVSS 5.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitization of Custom Spec…
CVE-2026-79970CVE-2026-79970
CVSS 5.6dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Verification of Cryptograph…
CVE-2026-79969CVE-2026-79969
CVSS 5.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Res…
CVE-2026-79968CVE-2026-79968
CVSS 5.6dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Ra…
CVE-2026-79967CVE-2026-79967
CVSS 5.6dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vuln…
CVE-2026-79966CVE-2026-79966
CVSS 3.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information i…
CVE-2026-79965CVE-2026-79965
CVSS 5.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State D…
CVE-2026-79964CVE-2026-79964
CVSS 5.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Escape, M…
CVE-2026-79963CVE-2026-79963
CVSS 7.4dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Ch…
CVE-2026-79962CVE-2026-79962
CVSS 5.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Res…
CVE-2026-79961CVE-2026-79961
CVSS 5.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical F…
CVE-2026-79960CVE-2026-79960
CVSS 7.1gitea
When a push was authenticated with a deploy key, Gitea recorded the repository owner as the pusher, so permission checks in the push hook pipeline evaluated th…
CVE-2026-79959CVE-2026-79959
CVSS 6.8
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or …
CVE-2026-79957CVE-2026-79957
CVSS 8.1
ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the req…
CVE-2026-79954CVE-2026-79954NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the Security Association use…
CVE-2026-79952CVE-2026-79952
CVSS 5.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Encoding or Escaping of Out…
CVE-2026-79950CVE-2026-79950
CVSS 7.5dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulner…
CVE-2026-7995CVE-2026-7995
CVSS 8.8
Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML …
CVE-2026-79947CVE-2026-79947
CVSS 5.5dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special E…
CVE-2026-79946CVE-2026-79946
CVSS 5.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Alternate…
CVE-2026-79945CVE-2026-79945
CVSS 5.5dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special E…
CVE-2026-79944CVE-2026-79944
CVSS 3.4dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerabili…
CVE-2026-79943CVE-2026-79943
CVSS 4.8dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate w…
CVE-2026-79942CVE-2026-79942
CVSS 3.4dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privilege…
CVE-2026-79941CVE-2026-79941
CVSS 5.3dell
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special E…
CVE-2026-79940CVE-2026-79940
CVSS 5.9
Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated …
CVE-2026-79939CVE-2026-79939
CVSS 5.8dell
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local…
CVE-2026-79938CVE-2026-79938
CVSS 7.6dell
Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could …
CVE-2026-79921CVE-2026-79921amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process …
CVE-2026-79920CVE-2026-79920
CVSS 9.9
Ajenti is a Linux & BSD modular server admin panel. Prior to version 2.2.16, any authenticated user can call /api/core/tasks/start to enqueue InstallPlugin, Un…
CVE-2026-7992CVE-2026-7992
CVSS 8.8
Insufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to e…
CVE-2026-79919CVE-2026-79919
CVSS 6.3
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LD_PRELOAD sandbox can invoke ctypes.…
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.