112,666 indexed
CVECVE vulnerabilities
112,666 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 14,301–14,350 of 112,666 · page 287 of 2254
| ID | Title | Summary |
|---|---|---|
| CVE-2026-79817 | CVE-2026-79817 CVSS 5.5 | A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploitation could allow … |
| CVE-2026-79816 | CVE-2026-79816 CVSS 6.3 | A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-si… |
| CVE-2026-79815 | CVE-2026-79815 CVSS 6.5 | A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. S… |
| CVE-2026-79814 | CVE-2026-79814 CVSS 6.7 | An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privi… |
| CVE-2026-79813 | CVE-2026-79813 CVSS 6.7 | A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged local user to execute … |
| CVE-2026-79812 | CVE-2026-79812 CVSS 6.1 | A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an authenticated … |
| CVE-2026-79811 | CVE-2026-79811 CVSS 7.2 | A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL … |
| CVE-2026-79810 | CVE-2026-79810 CVSS 7.2 | Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attac… |
| CVE-2026-7981 | CVE-2026-7981 CVSS 8.1 | Out of bounds read in Codecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory … |
| CVE-2026-79809 | CVE-2026-79809 CVSS 7.3 | An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an … |
| CVE-2026-79808 | CVE-2026-79808 CVSS 7.8 | A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to exe… |
| CVE-2026-79807 | CVE-2026-79807 CVSS 7.8 | A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to e… |
| CVE-2026-79806 | CVE-2026-79806 CVSS 7.8 | A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user … |
| CVE-2026-79805 | CVE-2026-79805 CVSS 9.8 | An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain fi… |
| CVE-2026-79804 | CVE-2026-79804 CVSS 7.3 | A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affected by this issue is some unknown funct… |
| CVE-2026-79803 | CVE-2026-79803 CVSS 8.8 | A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escala… |
| CVE-2026-79802 | CVE-2026-79802 CVSS 8.8 | A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to sup… |
| CVE-2026-79801 | CVE-2026-79801 CVSS 9.8 | A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote at… |
| CVE-2026-79800 | CVE-2026-79800 CVSS 8.8 | An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privi… |
| CVE-2026-7980 | CVE-2026-7980 CVSS 8.8 | Use after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
| CVE-2026-79799 | CVE-2026-79799 CVSS 8.8 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site… |
| CVE-2026-79798 | CVE-2026-79798 CVSS 9.9 | SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to c… |
| CVE-2026-79797 | CVE-2026-79797 CVSS 8.8 | An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality … |
| CVE-2026-79796 | CVE-2026-79796 CVSS 9.8 | Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to c… |
| CVE-2026-79794 | CVE-2026-79794 CVSS 9.1 | A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL inj… |
| CVE-2026-79793 | CVE-2026-79793 CVSS 4.3 | A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumit… |
| CVE-2026-79792 | CVE-2026-79792 CVSS 5.6 | A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp_download of the file src/transcribe_anything/ytldp_download.py… |
| CVE-2026-79788 | CVE-2026-79788 CVSS 7.1 | In Dradis Community Edition, the ProvidersController and AgentsController gate their admin_required before_action on `defined?(Dradis::Pro)`, a constant that i… |
| CVE-2026-79787 | CVE-2026-79787 CVSS 9.8 | Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user ident… |
| CVE-2026-79786 | CVE-2026-79786 CVSS 7.1 | Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation, allowing attackers to … |
| CVE-2026-79785 | CVE-2026-79785 CVSS 5.9 | X-AnyLabeling's model downloader disabled TLS certificate verification. download_with_retry in anylabeling/services/auto_labeling/model.py built a context with… |
| CVE-2026-79784 | CVE-2026-79784 CVSS 8.8 | Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class in vocos/pretrained.py takes the class… |
| CVE-2026-79783 | CVE-2026-79783 CVSS 3.6 | rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/s… |
| CVE-2026-79782 | CVE-2026-79782 CVSS 3.1 | rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can inter… |
| CVE-2026-79781 | CVE-2026-79781 CVSS 6.5 | rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in… |
| CVE-2026-79780 | CVE-2026-79780 CVSS 5.3 | rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved acro… |
| CVE-2026-7978 | CVE-2026-7978 CVSS 8.1 | Inappropriate implementation in Companion in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to perform OS-level privilege escalation via… |
| CVE-2026-79779 | CVE-2026-79779 CVSS 5.3 | rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over pl… |
| CVE-2026-79778 | CVE-2026-79778 CVSS 5.3 | rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transp… |
| CVE-2026-79777 | CVE-2026-79777 CVSS 2.7 | rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, modu… |
| CVE-2026-79776 | CVE-2026-79776 CVSS 5.3 | rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can a… |
| CVE-2026-79775 | CVE-2026-79775 CVSS 6.5 | rclone versions >= v1.72.0 and <= v1.74.4 (fixed in v1.75.0) contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which… |
| CVE-2026-79774 | CVE-2026-79774 CVSS 8.4 | Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\\Twig\\SecurityPolicy that allows authenticated b… |
| CVE-2026-79773 | CVE-2026-79773 CVSS 4.9 | Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authenticated users with cms.manage_assets … |
| CVE-2026-79772 | CVE-2026-79772 CVSS 5.3nokogiri | Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of … |
| CVE-2026-79771 | CVE-2026-79771 CVSS 5.3nokogiri | Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can… |
| CVE-2026-79770 | CVE-2026-79770 CVSS 7.5nokogiri | Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identif… |
| CVE-2026-79769 | CVE-2026-79769 CVSS 5.5 | Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bounds) memory read in the protected internal Node#initialize_copy_with_args helper behind N… |
| CVE-2026-79768 | CVE-2026-79768 CVSS 5.3apache | Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir dire… |
| CVE-2026-79767 | CVE-2026-79767 CVSS 5.5 | Gardener implements the automated management and operation of Kubernetes clusters as a service. Prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverb… |