94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,351–4,400 of 94,138 · page 88 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90787 | CVE-2026-90787 CVSS 7.3 | A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of … |
| CVE-2026-90786 | CVE-2026-90786 CVSS 5.3 | A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function align_order_members of the file src/compiler/semantics.c of the compo… |
| CVE-2026-90785 | CVE-2026-90785 CVSS 5.3 | A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyze_struct of the file src/compiler/semantics.c of the component Struc… |
| CVE-2026-90784 | CVE-2026-90784 CVSS 5.3 | A vulnerability has been found in Dvidelabs flatcc up to 0.6.3. The impacted element is the function fb_clear_parser of the file src/Compiler/semantics.c. The … |
| CVE-2026-90783 | CVE-2026-90783 CVSS 7.8 | MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic.… |
| CVE-2026-90782 | CVE-2026-90782 CVSS 5.3 | S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataCh… |
| CVE-2026-90781 | CVE-2026-90781 CVSS 4.4 | alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when pars… |
| CVE-2026-90780 | CVE-2026-90780 CVSS 7.5 | SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content… |
| CVE-2026-9078 | CVE-2026-9078 CVSS 5.4mozilla | Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RT… |
| CVE-2026-90779 | CVE-2026-90779 CVSS 7.5 | SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm … |
| CVE-2026-90778 | CVE-2026-90778 CVSS 7.5 | SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more… |
| CVE-2026-90777 | CVE-2026-90777 CVSS 8.8 | ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-suppli… |
| CVE-2026-90776 | CVE-2026-90776 CVSS 7.5 | Nodemailer versions 9.1.0 through 10.0.4 contain a quadratic time complexity vulnerability in the addressparser component when parsing email addresses with RFC… |
| CVE-2026-90775 | CVE-2026-90775 CVSS 6.5 | PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attacker… |
| CVE-2026-90774 | CVE-2026-90774 CVSS 7.5 | rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape… |
| CVE-2026-90773 | CVE-2026-90773 CVSS 3.2 | procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute pro… |
| CVE-2026-90772 | CVE-2026-90772 CVSS 7.6 | Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem c… |
| CVE-2026-90771 | CVE-2026-90771 CVSS 3.7 | joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error cod… |
| CVE-2026-90770 | CVE-2026-90770 CVSS 8.8 | Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function that interpolates user-supplied monitor addresses directly into sh… |
| CVE-2026-9077 | CVE-2026-9077 CVSS 8.5langflow | IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server confi… |
| CVE-2026-90769 | CVE-2026-90769 CVSS 7.7 | Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to … |
| CVE-2026-90768 | CVE-2026-90768 CVSS 8.1 | CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analyses submitted by oth… |
| CVE-2026-90767 | CVE-2026-90767 CVSS 6.5 | Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add() endpoint, allowing customers to inject arbitrary lines into a… |
| CVE-2026-9076 | CVE-2026-9076 CVSS 7.5openssl | Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher … |
| CVE-2026-9074 | CVE-2026-9074 CVSS 9.1ibm | IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functiona… |
| CVE-2026-9073 | CVE-2026-9073 CVSS 6.2redhat | A flaw was found in foreman-mcp-server. This component utilizes two distinct logging mechanisms that can expose sensitive session and authentication data. One … |
| CVE-2026-9072 | CVE-2026-9072 CVSS 8.1ibm | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in componen… |
| CVE-2026-90716 | CVE-2026-90716 CVSS 5.5 | A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parse_number_expression of the file src/compiler/gravity_parser.c o… |
| CVE-2026-90715 | CVE-2026-90715 CVSS 7.3 | A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity_json.c of the co… |
| CVE-2026-90714 | CVE-2026-90714 CVSS 6.3 | A weakness has been identified in marcobambini Gravity up to 0.9.7. The impacted element is an unknown function of the file src/utils/gravity_json.c of the com… |
| CVE-2026-90713 | CVE-2026-90713 CVSS 3.3 | A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/sr… |
| CVE-2026-90712 | CVE-2026-90712 CVSS 4.3 | A vulnerability was identified in Gitlawb openclaude up to 0.30.0. Impacted is the function waitForCallback of the file src/services/api/xaiOAuthCallback.ts of… |
| CVE-2026-90711 | CVE-2026-90711 CVSS 9.1 | proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions … |
| CVE-2026-90710 | CVE-2026-90710 CVSS 7.3 | A vulnerability was determined in taisan tarzan-cms 1.0.0. This issue affects the function openConnection of the file com/tarzan/cms/modules/admin/service/biz/… |
| CVE-2026-9071 | CVE-2026-9071 CVSS 7.5ibm | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, c… |
| CVE-2026-90709 | CVE-2026-90709 CVSS 4.7 | A security vulnerability has been detected in Yot CMS up to 3.3.1. Affected by this issue is the function eval of the file modsys/console/admin.php of the comp… |
| CVE-2026-90708 | CVE-2026-90708 CVSS 7.3 | A weakness has been identified in Yot CMS up to 3.3.1. Affected by this vulnerability is the function Login of the file global.php of the component Cookie Hand… |
| CVE-2026-90707 | CVE-2026-90707 CVSS 8.3 | A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amf_nnrf_try_old_amf_discovery_fallback of the file src/amf/nnrf-handler.c… |
| CVE-2026-90706 | CVE-2026-90706 CVSS 6.6 | A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of the file /boafrm/formWsc. The manipulation of the argument targe… |
| CVE-2026-90705 | CVE-2026-90705 CVSS 6.6 | A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Tab… |
| CVE-2026-90704 | CVE-2026-90704 CVSS 6.6 | A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulati… |
| CVE-2026-90703 | CVE-2026-90703 CVSS 9.1 | A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulatio… |
| CVE-2026-90702 | CVE-2026-90702 CVSS 9.1 | A flaw has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm/formDiskFormat. This manipulation of the argument partitio… |
| CVE-2026-90701 | CVE-2026-90701 CVSS 7.3 | A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is an unknown… |
| CVE-2026-90700 | CVE-2026-90700 CVSS 6.3 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_edit1.php. Su… |
| CVE-2026-90699 | CVE-2026-90699 CVSS 9.9 | A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub_41E60C of the file /boafrm/formPinManageSetup. This manipulation o… |
| CVE-2026-90698 | CVE-2026-90698 CVSS 5.3 | A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_tex… |
| CVE-2026-90697 | CVE-2026-90697 CVSS 4.3 | A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the… |
| CVE-2026-90696 | CVE-2026-90696 CVSS 3.5 | A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/product… |
| CVE-2026-90695 | CVE-2026-90695 CVSS 3.5 | A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendor… |