94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,201–4,250 of 94,138 · page 85 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90970 | CVE-2026-90970 CVSS 9.9 | GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2… |
| CVE-2026-9097 | CVE-2026-9097 CVSS 9.8 | Casdoor versions 2.362.0 and earlier do not verify that a JWT used for token exchange is still active. The GetTokenExchangeToken() function in object/token_oau… |
| CVE-2026-90969 | CVE-2026-90969 CVSS 6.5 | Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authenticated user lacking the view-password p… |
| CVE-2026-90961 | CVE-2026-90961 | The LdapAuth and LinOTPAuth authentication plugins in MISP contain an authentication bypass vulnerability. Both LdapAuthenticate and LinOTPAuthenticate replace… |
| CVE-2026-9096 | CVE-2026-9096 CVSS 7.5 | Casdoor versions 2.362.0 and earlier do not enforce SAML assertion time bounds. The gosaml2 library reports all time-validation results, including NotOnOrAfter… |
| CVE-2026-90959 | CVE-2026-90959 CVSS 8.1 | A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' parameter that allows users with file repository privileges t… |
| CVE-2026-90957 | CVE-2026-90957 | Affected versions of MISP serve uploaded SVG images inline without a restrictive browser sandbox. The commit explains that SVG files are XML documents rather… |
| CVE-2026-90955 | CVE-2026-90955 | Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is desi… |
| CVE-2026-90953 | CVE-2026-90953 CVSS 4.3 | The Image Optimizer WordPress plugin before 1.7.7 does not enforce its intended capability check on several of its read REST routes, allowing any authenticate… |
| CVE-2026-90952 | CVE-2026-90952 CVSS 5.3 | The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthentica… |
| CVE-2026-90951 | CVE-2026-90951 CVSS 3.7 | The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing some… |
| CVE-2026-90950 | CVE-2026-90950 CVSS 5.3 | The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the … |
| CVE-2026-90949 | CVE-2026-90949 CVSS 7.8 | A flaw was found in GIMP's PSP (Paint Shop Pro) file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a mi… |
| CVE-2026-90948 | CVE-2026-90948 CVSS 7.8 | A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation … |
| CVE-2026-90947 | CVE-2026-90947 CVSS 7.8 | A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light … |
| CVE-2026-90946 | CVE-2026-90946 CVSS 7.5 | DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as … |
| CVE-2026-90945 | CVE-2026-90945 CVSS 9.8 | Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthen… |
| CVE-2026-90944 | CVE-2026-90944 CVSS 8.2 | Krayin CRM through 2.2.6 exposes the POST /admin/mail/inbound-parse endpoint without authentication, allowing unauthenticated attackers to inject arbitrary ema… |
| CVE-2026-90943 | CVE-2026-90943 CVSS 8.7 | parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users t… |
| CVE-2026-90942 | CVE-2026-90942 CVSS 9.6 | Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoints, allowing organiz… |
| CVE-2026-90941 | CVE-2026-90941 CVSS 4.3 | novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to e… |
| CVE-2026-90940 | CVE-2026-90940 CVSS 5.3 | novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows anonymous attackers to… |
| CVE-2026-9094 | CVE-2026-9094 CVSS 9.8 | Casdoor versions 2.362.0 and earlier contain a vulnerability enabling cross-organization token exchange. The GetTokenExchangeToken function in object/token_oau… |
| CVE-2026-90939 | CVE-2026-90939 CVSS 6.5 | novel-plus through 5.3.3 contains an information disclosure vulnerability in the /sys/user/list endpoint that lacks proper permission annotations. Authenticate… |
| CVE-2026-90938 | CVE-2026-90938 CVSS 8.6 | LangBot's plugin runtime (pip package langbot_plugin) through 0.4.17 starts a debug WebSocket server on 0.0.0.0:5401 (/plugin/ws) whose authentication is gated… |
| CVE-2026-90937 | CVE-2026-90937 CVSS 9.9 | froxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing authenticated customers to inject arbitrary nginx or Apa… |
| CVE-2026-90936 | CVE-2026-90936 CVSS 4.3 | Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global s… |
| CVE-2026-90935 | CVE-2026-90935 CVSS 4.3 | Froxlor before 2.3.7 fails to validate the mysql_server parameter against a customer's allowed_mysqlserver allowlist in the Mysqls.add API command. Attackers c… |
| CVE-2026-90934 | CVE-2026-90934 CVSS 4.3 | EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read … |
| CVE-2026-90933 | CVE-2026-90933 CVSS 7.1 | laradashboard through 1.2.2 contains a missing authorization vulnerability in the Local License API endpoints that allows any authenticated user to read, overw… |
| CVE-2026-90932 | CVE-2026-90932 CVSS 7.2 | LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService … |
| CVE-2026-90931 | CVE-2026-90931 CVSS 5.4 | LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permi… |
| CVE-2026-90930 | CVE-2026-90930 CVSS 6.8 | File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing auth… |
| CVE-2026-9093 | CVE-2026-9093 CVSS 9.8 | In Casdoor versions 2.362.0 and earlier, the SAML service provider implementation does not validate the AudienceRestriction element in SAML assertions. The bui… |
| CVE-2026-90929 | CVE-2026-90929 CVSS 8.1 | File Browser versions >= 2.5.0 and <= 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint (resourcePostHandler in http/resource.go). … |
| CVE-2026-90928 | CVE-2026-90928 CVSS 6.5 | File Browser through 2.63.23 contains a memory exhaustion vulnerability in the subtitle conversion endpoint that loads entire subtitle files into memory withou… |
| CVE-2026-90927 | CVE-2026-90927 CVSS 6.5 | filebrowser through 2.63.23 fails to limit WebSocket message size in the /api/command handler before checking permissions, allowing authenticated users to buff… |
| CVE-2026-90926 | CVE-2026-90926 CVSS 8.8 | Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM all… |
| CVE-2026-90925 | CVE-2026-90925 CVSS 7.1 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd.… |
| CVE-2026-90924 | CVE-2026-90924 CVSS 9.8 | Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usern… |
| CVE-2026-90923 | CVE-2026-90923 CVSS 6.5 | The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete… |
| CVE-2026-90922 | CVE-2026-90922 CVSS 5.3 | The Paid Membership Subscriptions WordPress plugin before 3.0.9 does not verify that the amount and currency reported by the payment provider match the pendin… |
| CVE-2026-90921 | CVE-2026-90921 CVSS 7.5 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in te… |
| CVE-2026-90920 | CVE-2026-90920 CVSS 9.8 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation. |
| CVE-2026-9092 | CVE-2026-9092 CVSS 9.1 | Casdoor versions 2.362.0 and earlier contain a vulnerability involving unverified email binding that may enable account takeover. The getExistUserByBindingRule… |
| CVE-2026-90919 | CVE-2026-90919 CVSS 9.8 | LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint that passes th… |
| CVE-2026-90918 | CVE-2026-90918 CVSS 5.3joomla | Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The mail template feature lacks an escaping mechanism, causi… |
| CVE-2026-90917 | CVE-2026-90917 CVSS 5.3joomla | Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unautho… |
| CVE-2026-90916 | CVE-2026-90916 CVSS 2.7joomla | Joomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows … |
| CVE-2026-90915 | CVE-2026-90915 CVSS 6.5joomla | Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of the cache … |