94,138 indexed

CVECVE vulnerabilities

94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 4,301–4,350 of 94,138 · page 87 of 1883

IDTitleSummary
CVE-2026-90842CVE-2026-90842
CVSS 3.7
A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/mo…
CVE-2026-90841CVE-2026-90841
CVSS 7.3
A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ap…
CVE-2026-90840CVE-2026-90840
CVSS 7.3
A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin…
CVE-2026-9084CVE-2026-9084MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing local user account based on the email claim when the local accou…
CVE-2026-90839CVE-2026-90839Rejected reason: this is rejected
CVE-2026-90835CVE-2026-90835
CVSS 3.5
A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Pag…
CVE-2026-90831CVE-2026-90831
CVSS 5.3gnu
A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component EL…
CVE-2026-90830CVE-2026-90830
CVSS 5.3gnu
A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Se…
CVE-2026-9083CVE-2026-9083
CVSS 4.9redhat
A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a…
CVE-2026-90829CVE-2026-90829
CVSS 5.3gnu
A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROU…
CVE-2026-90828CVE-2026-90828
CVSS 5.3gnu
A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component…
CVE-2026-90827CVE-2026-90827
CVSS 3.3
A vulnerability was identified in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/base_scenegraph.c of the component MP4Bo…
CVE-2026-90826CVE-2026-90826
CVSS 2.8
A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gf_node_del of the file scenegraph/base_scenegraph.c of the component MP…
CVE-2026-90825CVE-2026-90825
CVSS 3.3
A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the co…
CVE-2026-90824CVE-2026-90824
CVSS 3.3
A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegraph/dom_events.c of the component MP4Box…
CVE-2026-90823CVE-2026-90823
CVSS 9.8
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_p…
CVE-2026-90822CVE-2026-90822
CVSS 9.8
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed d…
CVE-2026-90820CVE-2026-90820
CVSS 4.3
A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks …
CVE-2026-9082Drupal Core SQL Injection Vulnerability
KEVCVSS 9.8Drupal
Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with…
CVE-2026-90819CVE-2026-90819
CVSS 7.3
A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file s…
CVE-2026-90818CVE-2026-90818
CVSS 4.3
A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the function OpenClawConfigSync.buildBrowser…
CVE-2026-90817CVE-2026-90817
CVSS 9.8
An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user …
CVE-2026-90816CVE-2026-90816
CVSS 4.3
A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Perfor…
CVE-2026-90815CVE-2026-90815
CVSS 6.3
A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup_3x3 of the file libavfilter/vf_convo…
CVE-2026-90814CVE-2026-90814
CVSS 6.3
A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github…
CVE-2026-90813CVE-2026-90813
CVSS 4.3
A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permission…
CVE-2026-90812CVE-2026-90812
CVSS 4.3
A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilit…
CVE-2026-90811CVE-2026-90811
CVSS 3.3
A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury…
CVE-2026-90810CVE-2026-90810
CVSS 6.3
A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function PermissionManager.checkShellCommand of…
CVE-2026-9081CVE-2026-9081
CVSS 7.1langflow
IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the validate_model_provider_key(…
CVE-2026-90809CVE-2026-90809
CVSS 7.3
A vulnerability was identified in HKUDS nanobot up to 0.2.1. The affected element is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/a…
CVE-2026-90808CVE-2026-90808
CVSS 6.3
A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/agent/tools/s…
CVE-2026-90807CVE-2026-90807
CVSS 6.3
A vulnerability was found in nanocoai NanoClaw up to 2.1.17. This issue affects the function forwardAttachedFiles of the file src/modules/agent-to-agent/agent-…
CVE-2026-90806CVE-2026-90806
CVSS 6.3
A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file backend/cases/bulk_vi…
CVE-2026-90805CVE-2026-90805
CVSS 7.3
A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file …
CVE-2026-90804CVE-2026-90804
CVSS 4.8gnu
A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the…
CVE-2026-90803CVE-2026-90803
CVSS 5.3gnu
A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf…
CVE-2026-90802CVE-2026-90802
CVSS 4.4gnu
A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes…
CVE-2026-90801CVE-2026-90801
CVSS 5.3gnu
A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation …
CVE-2026-9080CVE-2026-9080
CVSS 7.3haxx
Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-free vulnerability, where libcurl attempts to store …
CVE-2026-90796CVE-2026-90796
CVSS 6.3
A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipul…
CVE-2026-90795CVE-2026-90795
CVSS 4.3
A vulnerability was determined in itsourcecode Loan Management System 1.0. The impacted element is an unknown function of the file navbar.php. Executing a mani…
CVE-2026-90794CVE-2026-90794
CVSS 6.3
A vulnerability was found in GPAC up to f1219cde. The affected element is the function gf_sg_script_load of the file scenegraph/vrml_tools.c of the component M…
CVE-2026-90793CVE-2026-90793
CVSS 5.4
A vulnerability has been found in GPAC up to f1219cde. Impacted is the function gf_node_get_name of the file scenegraph/base_scenegraph.c of the component MP4B…
CVE-2026-90792CVE-2026-90792
CVSS 4.3
A flaw has been found in GPAC up to f1219cde. This issue affects the function gf_node_list_get_child of the file scenegraph/base_scenegraph.c of the component …
CVE-2026-90791CVE-2026-90791
CVSS 6.3
A vulnerability was detected in GPAC up to f1219cde. This vulnerability affects the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the…
CVE-2026-90790CVE-2026-90790
CVSS 6.3
A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3. This affects the function _dispatch_notification of the file src/a2a/server/ta…
CVE-2026-9079CVE-2026-9079
CVSS 9.8haxx
libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for s…
CVE-2026-90789CVE-2026-90789
CVSS 7.3
A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Execut…
CVE-2026-90788CVE-2026-90788
CVSS 4.7
A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/a…
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.