94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,501–4,550 of 94,138 · page 91 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90549 | CVE-2026-90549 CVSS 5.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to properly authorize access to the videosAndroid.json.php endpoint, allowing unauthe… |
| CVE-2026-90548 | CVE-2026-90548 CVSS 5.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the ImageGallery list.json.php endpoint, allowing una… |
| CVE-2026-90547 | CVE-2026-90547 CVSS 5.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the Bookmark plugin getBookmarks.json.php endpoint, a… |
| CVE-2026-90546 | CVE-2026-90546 CVSS 4.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the like.json.php endpoint, allowing logged-i… |
| CVE-2026-90545 | CVE-2026-90545 CVSS 4.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the commentAddNew.json.php endpoint, allowing… |
| CVE-2026-90544 | CVE-2026-90544 CVSS 4.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the videoAddViewCount.json.php endpoint befor… |
| CVE-2026-90543 | CVE-2026-90543 CVSS 5.3 | WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier, with the Live plugin enabled, contains a missing authentication vulnerability in pl… |
| CVE-2026-90542 | CVE-2026-90542 CVSS 5.4 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate that logged-in users can access live schedules before creating reminders … |
| CVE-2026-90541 | CVE-2026-90541 CVSS 5.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to require authentication in the plugin/TopMenu/menus.json.php endpoint, allowing una… |
| CVE-2026-90540 | CVE-2026-90540 CVSS 4.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate watch permissions in the playListAddVideo.json.php endpoint when adding v… |
| CVE-2026-9054 | CVE-2026-9054 | An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic. |
| CVE-2026-90539 | CVE-2026-90539 CVSS 5.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authentication vulnerability in the plugin/TopMenu/menuItems.json.php en… |
| CVE-2026-90538 | CVE-2026-90538 CVSS 5.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in playlistsFromUser.json.php that allows un… |
| CVE-2026-90537 | CVE-2026-90537 CVSS 8.2 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugin/Scheduler/sendEmail.json.php that … |
| CVE-2026-90536 | CVE-2026-90536 CVSS 5.3 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to authorize access to the adsInfo API endpoint, allowing unauthenticated attackers t… |
| CVE-2026-90535 | CVE-2026-90535 CVSS 7.5flowiseai | Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/abort endpoint that accepts user-supplie… |
| CVE-2026-90534 | CVE-2026-90534 CVSS 6.5flowiseai | Flowise is a low-code platform for building LLM applications. In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name endpoint is mounte… |
| CVE-2026-90533 | CVE-2026-90533 CVSS 6.5flowiseai | Flowise before 3.1.4 contains a broken access control vulnerability in GET /api/v1/organizationuser that allows any authenticated organization member to retrie… |
| CVE-2026-9053 | CVE-2026-9053 | Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and t… |
| CVE-2026-90529 | CVE-2026-90529 CVSS 3.5 | A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/… |
| CVE-2026-90528 | CVE-2026-90528 CVSS 3.5 | A flaw has been found in TDuckApp tduck-platform up to 5.3. Affected by this vulnerability is an unknown functionality of the file tduck-front/src/views/form/w… |
| CVE-2026-90527 | CVE-2026-90527 CVSS 4.3 | A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue o… |
| CVE-2026-90526 | CVE-2026-90526 CVSS 7.3 | A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/save_c… |
| CVE-2026-90525 | CVE-2026-90525 CVSS 6.3 | A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/cust_pos_trans.php. Executin… |
| CVE-2026-90524 | CVE-2026-90524 CVSS 7.3 | A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unkn… |
| CVE-2026-90523 | CVE-2026-90523 CVSS 7.3 | A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown f… |
| CVE-2026-90522 | CVE-2026-90522 CVSS 7.3 | A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass o… |
| CVE-2026-90521 | CVE-2026-90521 CVSS 6.3 | A vulnerability was found in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. This issue affects some unknown processin… |
| CVE-2026-90520 | CVE-2026-90520 CVSS 6.3 | A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown c… |
| CVE-2026-9052 | CVE-2026-9052 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-90519 | CVE-2026-90519 CVSS 6.3 | A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. T… |
| CVE-2026-90518 | CVE-2026-90518 CVSS 6.3 | A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation… |
| CVE-2026-90517 | CVE-2026-90517 CVSS 5.3 | A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The … |
| CVE-2026-90516 | CVE-2026-90516 CVSS 7.3 | A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/pay_r… |
| CVE-2026-90515 | CVE-2026-90515 CVSS 7.3 | A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/… |
| CVE-2026-90514 | CVE-2026-90514 CVSS 7.3 | A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save_stud.ph… |
| CVE-2026-90513 | CVE-2026-90513 CVSS 6.5 | A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of t… |
| CVE-2026-90511 | CVE-2026-90511 CVSS 6.3 | A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file sr… |
| CVE-2026-90510 | CVE-2026-90510 CVSS 8.3 | A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file orion-visor-… |
| CVE-2026-9051 | CVE-2026-9051 CVSS 9.1 | There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypa… |
| CVE-2026-90509 | CVE-2026-90509 CVSS 7.3 | A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApi… |
| CVE-2026-90508 | CVE-2026-90508 CVSS 3.4 | A security flaw has been discovered in Chengdu Qilu Technology Ludashi 6.1026.4715.714. Affected by this vulnerability is the function MessageNotifyCallback in… |
| CVE-2026-90507 | CVE-2026-90507 CVSS 6.3 | A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function get_surge_subscription of th… |
| CVE-2026-90506 | CVE-2026-90506 CVSS 5.0 | A vulnerability was determined in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This impacts an unknown function of the component Sav… |
| CVE-2026-90505 | CVE-2026-90505 CVSS 5.0 | A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affects the function doUpdateLicenseKey. The manipula… |
| CVE-2026-90504 | CVE-2026-90504 CVSS 7.3 | A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the function authorized. The … |
| CVE-2026-90503 | CVE-2026-90503 CVSS 2.3 | A flaw has been found in Chengdu Qilu Technology Ludashi 6.1026.4715.714. The affected element is the function sub_11008 in the library ComputerZ_x64.sys. Exec… |
| CVE-2026-90502 | CVE-2026-90502 CVSS 3.5 | A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generat… |
| CVE-2026-90501 | CVE-2026-90501 CVSS 6.3 | A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such … |
| CVE-2026-90500 | CVE-2026-90500 CVSS 6.3 | A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component… |