94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,451–4,500 of 94,138 · page 90 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90601 | CVE-2026-90601 CVSS 7.3 | A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. … |
| CVE-2026-90600 | CVE-2026-90600 CVSS 6.3 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulat… |
| CVE-2026-9060 | CVE-2026-9060 CVSS 3.5 | The Store Locator WordPress plugin before 1.6.6 does not sanitize and escape one of its settings before storing it and outputting it on the Store Locator WordP… |
| CVE-2026-90599 | CVE-2026-90599 CVSS 4.3 | A flaw has been found in Rizwan17 inventory-management-system up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. This affects an unknown function of the file incl… |
| CVE-2026-90598 | CVE-2026-90598 CVSS 6.3 | A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function … |
| CVE-2026-90597 | CVE-2026-90597 CVSS 6.3 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/sup_e… |
| CVE-2026-90596 | CVE-2026-90596 CVSS 6.5 | A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytes_per_row of the file src/image/image_raw… |
| CVE-2026-90595 | CVE-2026-90595 CVSS 6.3 | A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file ac… |
| CVE-2026-90594 | CVE-2026-90594 CVSS 6.3 | A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of t… |
| CVE-2026-90593 | CVE-2026-90593 CVSS 7.3 | A vulnerability was determined in embedded-graphics up to 0.8.2. This affects the function ImageRaw::draw_sub_image of the file src/image/image_raw.rs. Executi… |
| CVE-2026-9059 | CVE-2026-9059 | NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the 'orderby' parameter on the REST API endpoints '/imagely/v1/galleri… |
| CVE-2026-90584 | CVE-2026-90584 CVSS 5.3 | A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draf… |
| CVE-2026-90583 | CVE-2026-90583 CVSS 4.3 | A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the fi… |
| CVE-2026-90582 | CVE-2026-90582 CVSS 5.3 | A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo E… |
| CVE-2026-90581 | CVE-2026-90581 CVSS 6.3 | A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2. This issue affects the function MainController.autoUpdate of the file /adminPage/main/autoUpd… |
| CVE-2026-90580 | CVE-2026-90580 CVSS 6.3flowiseai | A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/eval… |
| CVE-2026-9058 | CVE-2026-9058 | For untrusted certificates that contain the "Authority Information Access - caIssuers URI" extension, Szafir SDK will automatically download the parent CA cert… |
| CVE-2026-90579 | CVE-2026-90579 CVSS 7.3 | A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function _authorize_http_key of the file core/cat/factory/custo… |
| CVE-2026-90578 | CVE-2026-90578 CVSS 5.3 | A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf_list_count of the file utils/list.c of the component MP4Box. Executing … |
| CVE-2026-90577 | CVE-2026-90577 CVSS 5.3 | A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field of the file scenegraph/base_scenegraph.c … |
| CVE-2026-90576 | CVE-2026-90576 CVSS 3.3 | A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gf_node_list_add_child of the file scenegraph/base_scenegraph.c of … |
| CVE-2026-90575 | CVE-2026-90575 CVSS 3.7 | A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the component Login Success Han… |
| CVE-2026-90574 | CVE-2026-90574 CVSS 6.3 | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emp_transac.php?action=… |
| CVE-2026-90573 | CVE-2026-90573 CVSS 3.3 | A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_sg_mfurl_del of the file scenegraph/vrml_tools.c of the componen… |
| CVE-2026-90572 | CVE-2026-90572 CVSS 4.7 | A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micr… |
| CVE-2026-90571 | CVE-2026-90571 CVSS 4.3 | A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/mai… |
| CVE-2026-90570 | CVE-2026-90570 CVSS 2.4 | A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This issue affects the function AdminGoodsService.validate of the file lit… |
| CVE-2026-9057 | CVE-2026-9057 CVSS 8.2 | A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio up… |
| CVE-2026-90569 | CVE-2026-90569 CVSS 2.4 | A flaw has been found in linlinjava litemall 1.5.0/1.6.0/1.7.0/1.8.0. This vulnerability affects the function AdminTopicController.validate of the file litemal… |
| CVE-2026-90568 | CVE-2026-90568 CVSS 3.5 | A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resourc… |
| CVE-2026-90567 | CVE-2026-90567 CVSS 3.5 | A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/s… |
| CVE-2026-90566 | CVE-2026-90566 CVSS 7.3 | A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the fu… |
| CVE-2026-90565 | CVE-2026-90565 CVSS 5.3 | A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of … |
| CVE-2026-90564 | CVE-2026-90564 CVSS 3.5 | A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/c… |
| CVE-2026-90563 | CVE-2026-90563 CVSS 3.5 | A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipula… |
| CVE-2026-90562 | CVE-2026-90562 CVSS 8.1 | LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoin… |
| CVE-2026-90561 | CVE-2026-90561 CVSS 8.7 | Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component t… |
| CVE-2026-90560 | CVE-2026-90560 CVSS 8.2 | zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments … |
| CVE-2026-9056 | CVE-2026-9056 CVSS 5.4 | A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS p… |
| CVE-2026-90559 | CVE-2026-90559 CVSS 7.5 | snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is … |
| CVE-2026-90558 | CVE-2026-90558 CVSS 9.8 | sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. A… |
| CVE-2026-90557 | CVE-2026-90557 CVSS 6.1 | Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit acti… |
| CVE-2026-90556 | CVE-2026-90556 CVSS 7.8 | Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist lengths exceeding the fix… |
| CVE-2026-90555 | CVE-2026-90555 CVSS 6.5vllm | vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks.… |
| CVE-2026-90554 | CVE-2026-90554 CVSS 6.2vllm | vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In na… |
| CVE-2026-90553 | CVE-2026-90553 CVSS 7.8vllm | vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loa… |
| CVE-2026-90552 | CVE-2026-90552 CVSS 4.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the Playlists_schedules/list.json.php and Live/cale… |
| CVE-2026-90551 | CVE-2026-90551 CVSS 5.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the video_from_program API endpoint, allowing unaut… |
| CVE-2026-90550 | CVE-2026-90550 CVSS 5.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to check user authorization in the PlayerSkins mediaSession.json.php endpoint before … |
| CVE-2026-9055 | CVE-2026-9055 CVSS 9.8 | The Booking for Appointments and Events Calendar – Amelia (Premium) plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is… |