94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,401–4,450 of 94,138 · page 89 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90694 | CVE-2026-90694 CVSS 3.5 | A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customers_handler.php of the… |
| CVE-2026-90693 | CVE-2026-90693 CVSS 9.9 | A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Prim… |
| CVE-2026-90692 | CVE-2026-90692 CVSS 9.9 | A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The mani… |
| CVE-2026-90691 | CVE-2026-90691 CVSS 8.3 | A security vulnerability has been detected in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is the function FileOpera… |
| CVE-2026-90690 | CVE-2026-90690 CVSS 7.3 | A weakness has been identified in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The affected element is the function subprocess.Popen of t… |
| CVE-2026-90689 | CVE-2026-90689 CVSS 8.8 | A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of… |
| CVE-2026-90688 | CVE-2026-90688 CVSS 6.5 | A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Suc… |
| CVE-2026-90687 | CVE-2026-90687 CVSS 6.3 | A vulnerability was determined in GPAC up to f1219cde. This vulnerability affects the function gf_node_changed_internal of the file scenegraph/base_scenegraph.… |
| CVE-2026-90686 | CVE-2026-90686 CVSS 5.3 | A vulnerability was found in GPAC up to f1219cde. This affects the function gf_bt_report of the file scene_manager/loader_bt.c of the component MP4Box. The man… |
| CVE-2026-90685 | CVE-2026-90685 CVSS 2.8 | A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsr_exec_command_list of the file laser/lsr_dec.c of the componen… |
| CVE-2026-90684 | CVE-2026-90684 CVSS 2.8 | A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field_count of the file scenegraph/base_scenegraph.c o… |
| CVE-2026-90683 | CVE-2026-90683 CVSS 3.3 | A vulnerability was detected in GPAC up to f1219cde. Affected is the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the component MP4B… |
| CVE-2026-90682 | CVE-2026-90682 CVSS 5.3 | A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component … |
| CVE-2026-90681 | CVE-2026-90681 CVSS 3.3 | A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This mani… |
| CVE-2026-90680 | CVE-2026-90680 CVSS 9.9 | A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings… |
| CVE-2026-90679 | CVE-2026-90679 CVSS 4.3 | Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeo… |
| CVE-2026-90678 | CVE-2026-90678 CVSS 7.5 | An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with Q… |
| CVE-2026-9067 | CVE-2026-9067 CVSS 9.1 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not … |
| CVE-2026-90668 | CVE-2026-90668 CVSS 7.5 | The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial… |
| CVE-2026-9066 | CVE-2026-9066 CVSS 6.1 | The WP Compress WordPress plugin before 7.10.04 does not validate the value of a query parameter that controls the asset CDN host before using it to build the… |
| CVE-2026-90651 | CVE-2026-90651 CVSS 8.1 | Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the api_ssl_verif… |
| CVE-2026-90650 | CVE-2026-90650 CVSS 7.2 | The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Stripe Webhook event object 'id' in all versions up to, a… |
| CVE-2026-9065 | CVE-2026-9065 | SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameters ('model_name', 'model_id', 'integration_id', 'provider') … |
| CVE-2026-90648 | CVE-2026-90648 | wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does … |
| CVE-2026-90647 | CVE-2026-90647 CVSS 7.4 | ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 T… |
| CVE-2026-9064 | CVE-2026-9064 CVSS 7.5redhat | A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per L… |
| CVE-2026-90623 | CVE-2026-90623 CVSS 3.7 | A weakness has been identified in andreashappe cochise up to 0.4.1. Affected is the function asyncssh.connect of the file src/cochise/ssh_connection.py of the … |
| CVE-2026-90622 | CVE-2026-90622 CVSS 3.3 | A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWG_TABLE of the file src/dwg.spec of the component Layer Encoding. Perfo… |
| CVE-2026-90621 | CVE-2026-90621 CVSS 6.3 | A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function ssh_run_command of the file src/hackingBuddyGPT/extensions/ssh… |
| CVE-2026-90620 | CVE-2026-90620 CVSS 7.3 | A vulnerability was determined in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is an unknown function of the file he… |
| CVE-2026-9062 | CVE-2026-9062 CVSS 3.4 | The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administra… |
| CVE-2026-90619 | CVE-2026-90619 CVSS 7.3 | A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrike_serv… |
| CVE-2026-90618 | CVE-2026-90618 CVSS 7.3 | A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.execute_command of… |
| CVE-2026-90617 | CVE-2026-90617 CVSS 7.3 | A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function run_task of the … |
| CVE-2026-90616 | CVE-2026-90616 CVSS 7.4 | In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code e… |
| CVE-2026-90615 | CVE-2026-90615 CVSS 4.3 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Suc… |
| CVE-2026-90614 | CVE-2026-90614 CVSS 6.3 | A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/co… |
| CVE-2026-90613 | CVE-2026-90613 CVSS 3.3 | A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl_GetSampleInfos of the file isomedia/stbl_read.c… |
| CVE-2026-90612 | CVE-2026-90612 CVSS 3.3 | A vulnerability was identified in GPAC up to f1219cde. Affected is the function gf_sm_dump_command_list of the file scene_manager/scene_dump.c of the component… |
| CVE-2026-90611 | CVE-2026-90611 CVSS 3.3 | A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt_parse_element of the file scene_manager/loader_xmt.c of the component MP4B… |
| CVE-2026-90610 | CVE-2026-90610 CVSS 3.3 | A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4… |
| CVE-2026-9061 | CVE-2026-9061 CVSS 3.5 | The Store Locator WordPress plugin before 1.6.9 does not sanitize and escape store logo metadata before storing it and outputting it on the Store Locator WordP… |
| CVE-2026-90609 | CVE-2026-90609 CVSS 3.3 | A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml_tools.c of the component MP4Box.… |
| CVE-2026-90608 | CVE-2026-90608 CVSS 9.9 | A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component bo… |
| CVE-2026-90607 | CVE-2026-90607 CVSS 9.9 | A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the compone… |
| CVE-2026-90606 | CVE-2026-90606 CVSS 9.9 | A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file /boafrm/formIpv6Set… |
| CVE-2026-90605 | CVE-2026-90605 CVSS 9.9 | A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the … |
| CVE-2026-90604 | CVE-2026-90604 CVSS 3.5 | A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manip… |
| CVE-2026-90603 | CVE-2026-90603 CVSS 7.3 | A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/uplo… |
| CVE-2026-90602 | CVE-2026-90602 CVSS 3.5 | A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file I… |