NVD公開月 2026-02
4,808 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2018-25157 | Deferred | 未確認 | CWE-79 | Phraseanet 4.0.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through crafted file names during document uploads |
| CVE-2018-25158 | Deferred | 未確認 | CWE-434 | Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module. Attacker |
| CVE-2018-25160 | Analyzed | 未確認 | CWE-20 | HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend. For |
| CVE-2019-25260 | Deferred | 未確認 | CWE-89 | OXID eShop versions 6.x prior to 6.3.4 contains a SQL injection vulnerability in the 'sorting' parameter that allows attackers to insert malicious database content. Attackers can e |
| CVE-2019-25261 | Analyzed | 未確認 | CWE-428 | AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially inject malicious executables. Attacker |
| CVE-2019-25263 | Deferred | 未確認 | CWE-79 | Zendesk SweetHawk Survey 1.6 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through support ticket submissions. Attacker |
| CVE-2019-25264 | Deferred | 未確認 | CWE-79 | Snipe-IT 4.7.5 contains a persistent cross-site scripting vulnerability that allows authorized users to upload malicious SVG files with embedded JavaScript. Attackers can craft SVG |
| CVE-2019-25265 | Deferred | 未確認 | CWE-79 | Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the admin edit groups section. Attackers can inject malicious Ja |
| CVE-2019-25266 | Deferred | 未確認 | CWE-428 | Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated |
| CVE-2019-25267 | Analyzed | 未確認 | CWE-428 | Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers c |
| CVE-2019-25269 | Deferred | 未確認 | CWE-428 | Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inject and execute malici |
| CVE-2019-25271 | Deferred | 未確認 | CWE-428 | NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. Attackers can exploit the unquoted path to inject and |
| CVE-2019-25272 | Deferred | 未確認 | CWE-428 | TexasSoft CyberPlanet 6.4.131 contains an unquoted service path vulnerability in the CCSrvProxy service that allows local attackers to execute arbitrary code. Attackers can exploit |
| CVE-2019-25273 | Deferred | 未確認 | CWE-428 | Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the EasyRedirect service that allows local attackers to potentially execute arbitrary code. Attackers can ex |
| CVE-2019-25274 | Deferred | 未確認 | CWE-428 | ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local attackers to potentially execute arbitrary code. Attackers can |
| CVE-2019-25275 | Deferred | 未確認 | CWE-428 | BartVPN 1.2.2 contains an unquoted service path vulnerability in the BartVPNService that allows local attackers to potentially execute arbitrary code with elevated system privilege |
| CVE-2019-25276 | Deferred | 未確認 | CWE-428 | Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentially execute code with e |
| CVE-2019-25281 | Deferred | 未確認 | CWE-428 | NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows local users to potentially execute arbitrary code. Attackers ca |
| CVE-2019-25283 | Deferred | 未確認 | CWE-428 | Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can place m |
| CVE-2019-25285 | Deferred | 未確認 | CWE-428 | Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execute code with elevated |
| CVE-2019-25286 | Deferred | 未確認 | CWE-428 | GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService that allows local attackers to potentially execute arbitrary code with elevated privileges. Attacke |
| CVE-2019-25287 | Deferred | 未確認 | CWE-428 | Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService that allows local users to potentially execute code with eleva |
| CVE-2019-25288 | Deferred | 未確認 | CWE-428 | Wacom WTabletService 6.6.7-3 contains an unquoted service path vulnerability that allows local attackers to execute malicious code with elevated privileges. Attackers can insert an |
| CVE-2019-25292 | Deferred | 未確認 | CWE-428 | Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attack |
| CVE-2019-25293 | Deferred | 未確認 | CWE-428 | BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service that allows local attackers to potentially execute arbitrary co |
| CVE-2019-25294 | Modified | 未確認 | CWE-79 | html5_snmp 1.11 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through the 'Remark' parameter in add_router_operation.ph |
| CVE-2019-25298 | Modified | 未確認 | CWE-89 | html5_snmp 1.11 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through Router_ID and Router_IP parameters. Attackers can exploi |
| CVE-2019-25299 | Deferred | 未確認 | CWE-89 | RimbaLinux AhadPOS 1.11 contains a SQL injection vulnerability in the 'alamatCustomer' parameter that allows attackers to manipulate database queries through crafted POST requests. |
| CVE-2019-25300 | Deferred | 未確認 | CWE-89 | thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean- |
| CVE-2019-25301 | Deferred | 未確認 | CWE-79 | Millhouse-Project 1.414 contains a persistent cross-site scripting vulnerability in the comment submission functionality that allows attackers to inject malicious scripts. Attacker |
| CVE-2019-25302 | Deferred | 未確認 | CWE-428 | Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code with elevated privileges |
| CVE-2019-25303 | Deferred | 未確認 | CWE-89 | TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can expl |
| CVE-2019-25304 | Deferred | 未確認 | CWE-428 | SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elevated privileges. Atta |
| CVE-2019-25305 | Deferred | 未確認 | CWE-428 | JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbapi service running with LocalSystem privileges. Attackers can exploit the unquoted path containing sp |
| CVE-2019-25306 | Deferred | 未確認 | CWE-428 | BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can e |
| CVE-2019-25307 | Deferred | 未確認 | CWE-428 | WorkgroupMail 7.5.1 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attacker |
| CVE-2019-25308 | Analyzed | 未確認 | CWE-428 | Mikogo 5.2.2.150317 contains an unquoted service path vulnerability in the Mikogo-Service Windows service configuration. Attackers can exploit the unquoted path to inject and execu |
| CVE-2019-25309 | Deferred | 未確認 | CWE-428 | Zilab Remote Console Server 3.2.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. |
| CVE-2019-25310 | Deferred | 未確認 | CWE-428 | ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service that allows local attackers to potentially execute arbitrary code |
| CVE-2019-25311 | Analyzed | 未確認 | CWE-79 | thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple server data input fields. Attacker |
| CVE-2019-25312 | Modified | 未確認 | CWE-79 | InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated attackers to inject malicious scripts. Attackers can submit |
| CVE-2019-25313 | Deferred | 未確認 | CWE-352 | FlexNet Publisher 11.12.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can cra |
| CVE-2019-25314 | Deferred | 未確認 | Yoast Duplicate-Post WordPress Plugin 3.2.3 contains a persistent cross-site scripting vulnerability in plugin settings parameters. Attackers can inject malicious scripts into titl | |
| CVE-2019-25315 | Deferred | 未確認 | CWE-79 | WordPress Server Log Viewer 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unfiltered log file paths. Attack |
| CVE-2019-25316 | Deferred | 未確認 | CWE-79 | GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the event title parameter. Attackers |
| CVE-2019-25317 | Analyzed | 未確認 | CWE-79 | Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into timesheet descriptions. Attackers can insert SVG-based XSS p |
| CVE-2019-25318 | Deferred | 未確認 | CWE-121 | AVS Audio Converter 9.1.2.600 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by manipulating the output folder text input. Attackers can cr |
| CVE-2019-25319 | Deferred | 未確認 | CWE-121 | Domain Quester Pro 6.02 contains a stack overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. |
| CVE-2019-25320 | Deferred | 未確認 | CWE-89 | E Learning Script 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard without valid credentials by manipulating login parameters. Atta |
| CVE-2019-25321 | Analyzed | 未確認 | CWE-121 | FTP Navigator 8.03 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Attackers ca |
| CVE-2019-25322 | Deferred | 未確認 | CWE-798 | Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials. Attackers can access the device by u |
| CVE-2019-25323 | Deferred | 未確認 | CWE-79 | Heatmiser Netmonitor v3.03 contains an HTML injection vulnerability in the outputSetup.htm page that allows attackers to inject malicious HTML code through the outputtitle paramete |
| CVE-2019-25324 | Deferred | 未確認 | CWE-79 | RICOH Web Image Monitor 1.09 contains an HTML injection vulnerability in the address configuration CGI script that allows attackers to inject malicious HTML code. Attackers can exp |
| CVE-2019-25325 | Deferred | 未確認 | CWE-89 | Thrive Smart Home 1.1 contains an SQL injection vulnerability in the checklogin.php endpoint that allows unauthenticated attackers to bypass authentication by manipulating the 'use |
| CVE-2019-25326 | Analyzed | 未確認 | CWE-120 | ipPulse 1.92 contains a denial of service vulnerability that allows local attackers to crash the application by providing an oversized input in the Enter Key field. Attackers can g |
| CVE-2019-25327 | Deferred | 未確認 | CWE-122 | Prime95 version 29.8 build 6 contains a buffer overflow vulnerability in the user ID input field that allows remote attackers to execute arbitrary code. Attackers can craft a malic |
| CVE-2019-25328 | Deferred | 未確認 | CWE-121 | XnConvert 1.82 contains a denial of service vulnerability in its registration code input field that allows attackers to crash the application. Attackers can generate a 9000-byte bu |
| CVE-2019-25329 | Analyzed | 未確認 | CWE-121 | FTP Navigator 8.03 contains a denial of service vulnerability that allows attackers to crash the application by overwriting Structured Exception Handler (SEH) with malicious input. |
| CVE-2019-25330 | Deferred | 未確認 | CWE-121 | SurfOffline Professional 2.2.0.103 contains a structured exception handler (SEH) overflow vulnerability that allows attackers to crash the application by manipulating the project n |
| CVE-2019-25331 | Deferred | 未確認 | CWE-121 | AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attacke |
| CVE-2019-25332 | Deferred | 未確認 | CWE-121 | FTP Commander Pro 8.03 contains a local stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting the EIP register through a custom command input. |
| CVE-2019-25333 | Deferred | 未確認 | CWE-22 | Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths. Atta |
| CVE-2019-25334 | Analyzed | 未確認 | CWE-121 | Product Key Explorer 4.2.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by overflowing the registration name input field. Attac |
| CVE-2019-25335 | Deferred | 未確認 | CWE-89 | PRO-7070 Hazır Profesyonel Web Sitesi version 1.0 contains an authentication bypass vulnerability in the administration panel login page. Attackers can bypass authentication by usi |
| CVE-2019-25336 | Analyzed | 未確認 | CWE-121 | SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious paylo |
| CVE-2019-25337 | Deferred | 未確認 | CWE-203 | OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint. Attackers can send craft |
| CVE-2019-25338 | Modified | 未確認 | CWE-204 | DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit d |
| CVE-2019-25339 | Deferred | 未確認 | CWE-121 | GHIA CamIP 1.2 for iOS contains a denial of service vulnerability in the password input field that allows attackers to crash the application. Attackers can paste a 33-character buf |
| CVE-2019-25340 | Analyzed | 未確認 | CWE-121 | SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attac |
| CVE-2019-25341 | Deferred | 未確認 | CWE-121 | iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a s |
| CVE-2019-25342 | Deferred | 未確認 | CWE-770 | Centova Cast 3.2.12 contains a denial of service vulnerability that allows attackers to overwhelm the system by repeatedly calling the database export API endpoint. Attackers can t |
| CVE-2019-25343 | Deferred | 未確認 | CWE-732 | NextVPN 4.10 contains an insecure file permissions vulnerability that allows local users to modify executable files with full access rights. Attackers can replace system executable |
| CVE-2019-25344 | Analyzed | 未確認 | CWE-732 | Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replac |
| CVE-2019-25345 | Deferred | 未確認 | CWE-428 | Realtek IIS Codec Service 6.4.10041.133 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code. Attackers can exploit the |
| CVE-2019-25346 | Modified | 未確認 | CWE-89 | TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter. Attackers can inject malicious SQL |
| CVE-2019-25347 | Modified | 未確認 | CWE-89 | thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL c |
| CVE-2019-25348 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2019-25349 | Deferred | 未確認 | CWE-120 | ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to crash the application by inputting an oversized buffer in the Servername field. Attacke |
| CVE-2019-25350 | Deferred | 未確認 | CWE-770 | XMedia Recode 3.4.8.6 contains a denial of service vulnerability that allows attackers to crash the application by loading a specially crafted .m3u playlist file. Attackers can cre |
| CVE-2019-25351 | Deferred | 未確認 | CWE-862 | Centova Cast 3.2.11 contains a file download vulnerability that allows authenticated attackers to retrieve arbitrary system files through the server.copyfile API endpoint. Attacker |
| CVE-2019-25352 | Deferred | 未確認 | CWE-22 | Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Attackers can use |
| CVE-2019-25353 | Deferred | 未確認 | CWE-120 | Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the application. Attackers can overwrit |
| CVE-2019-25354 | Deferred | 未確認 | CWE-120 | iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the camera ID input field. Attackers can paste a 257-c |
| CVE-2019-25355 | Analyzed | 未確認 | CWE-22 | gSOAP 2.8 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP path traversal techniques. Attackers can re |
| CVE-2019-25356 | Deferred | 未確認 | CWE-79 | Bematech (formerly Logic Controls, now Elgin) MP-4200 TH printer contains a cross-site scripting vulnerability in the admin configuration page. Attackers can inject malicious scrip |
| CVE-2019-25357 | Deferred | 未確認 | CWE-121 | Control Center PRO 6.2.9 contains a stack-based buffer overflow vulnerability in the user creation module's username field that allows attackers to overwrite Structured Exception H |
| CVE-2019-25358 | Deferred | 未確認 | CWE-1282 | FileOptimizer 14.00.2524 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the FileOptimizer32.ini configuration file. Attac |
| CVE-2019-25359 | Deferred | 未確認 | CWE-352 | SD.NET RIM versions before 4.7.3c contain a SQL injection vulnerability that allows attackers to inject malicious SQL statements through POST parameters 'idtyp' and 'idgremium'. At |
| CVE-2019-25360 | Analyzed | 未確認 | CWE-121 | Aida64 Engineer 6.10.5200 contains a buffer overflow vulnerability in the CSV logging configuration that allows attackers to execute malicious code by crafting a specially designed |
| CVE-2019-25361 | Deferred | 未確認 | CWE-121 | Ayukov NFTP client 1.71 contains a buffer overflow vulnerability in the SYST command handling that allows remote attackers to execute arbitrary code. Attackers can send a specially |
| CVE-2019-25362 | Analyzed | 未確認 | CWE-787 | WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license code |
| CVE-2019-25363 | Analyzed | 未確認 | CWE-121 | WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to crash the application by providing an oversized license input. Attacker |
| CVE-2019-25364 | Analyzed | 未確認 | CWE-121 | MailCarrier 2.51 contains a buffer overflow vulnerability in the POP3 USER command that allows remote attackers to execute arbitrary code. Attackers can send a crafted oversized bu |
| CVE-2019-25365 | Deferred | 未確認 | CWE-121 | ChaosPro 2.0 contains a buffer overflow vulnerability in the configuration file path handling that allows attackers to execute arbitrary code by overwriting the Structured Exceptio |
| CVE-2019-25366 | Deferred | 未確認 | CWE-89 | microASP Portal+ CMS contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the explode_tre |
| CVE-2019-25367 | Deferred | 未確認 | CWE-79 | ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html) through search, user management, and API |
| CVE-2019-25368 | Analyzed | 未確認 | CWE-79 | OPNsense 19.1 contains multiple cross-site scripting vulnerabilities in the diag_backup.php endpoint that allow attackers to inject malicious scripts through multiple parameters in |
| CVE-2019-25369 | Analyzed | 未確認 | CWE-79 | OPNsense 19.1 contains a stored cross-site scripting vulnerability in the system_advanced_sysctl.php endpoint that allows attackers to inject persistent malicious scripts via the t |
| CVE-2019-25370 | Analyzed | 未確認 | CWE-79 | OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input through multiple parameters. Att |
| CVE-2019-25371 | Analyzed | 未確認 | CWE-79 | OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting insufficient input validation |
| CVE-2019-25372 | Analyzed | 未確認 | CWE-79 | OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting insufficient input validation |
| CVE-2019-25373 | Analyzed | 未確認 | CWE-79 | OPNsense 19.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the category param |
| CVE-2019-25374 | Analyzed | 未確認 | CWE-79 | OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting the passthrough_networks parameter in vpn_ipse |
| CVE-2019-25375 | Analyzed | 未確認 | CWE-79 | OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the mailserve |
| CVE-2019-25376 | Analyzed | 未確認 | CWE-79 | OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted payloads through the i |
| CVE-2019-25377 | Analyzed | 未確認 | CWE-79 | OPNsense 19.1 contains a reflected cross-site scripting vulnerability in the system_advanced_sysctl.php endpoint that allows attackers to inject malicious scripts via the value par |
| CVE-2019-25378 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple cross-site scripting vulnerabilities in the proxy.cgi endpoint that allow attackers to inject malicious scripts th |
| CVE-2019-25379 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow attackers to inject mali |
| CVE-2019-25380 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dhcp.cgi script that allow attackers to inject malicious scr |
| CVE-2019-25381 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to inject malicious sc |
| CVE-2019-25382 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipul |
| CVE-2019-25383 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the apcupsd.cgi script that allow attackers to inject malicious |
| CVE-2019-25384 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script that allow attackers to inject malicious s |
| CVE-2019-25385 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the MACHIN |
| CVE-2019-25386 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dmzholes.cgi script that allow attackers to inject malicious |
| CVE-2019-25387 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitt |
| CVE-2019-25388 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitt |
| CVE-2019-25389 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipul |
| CVE-2019-25390 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the interfaces.cgi script that allow attackers to inject malicio |
| CVE-2019-25391 | Deferred | 未確認 | CWE-89 | Ashop Shopping Cart Software contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through the blacklistitemid parameter. Att |
| CVE-2019-25392 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipul |
| CVE-2019-25393 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploit |
| CVE-2019-25394 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the modem.cgi script that allow attackers to inject malicious scrip |
| CVE-2019-25395 | Analyzed | 未確認 | CWE-79 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious |
| CVE-2019-25396 | Analyzed | 未確認 | CWE-79 | IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to inject malicious scripts through POST p |
| CVE-2019-25397 | Analyzed | 未確認 | CWE-79 | IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to inject malicious scripts through unvali |
| CVE-2019-25398 | Analyzed | 未確認 | CWE-79 | IPFire 2.21 Core Update 127 contains multiple cross-site scripting vulnerabilities in the ovpnmain.cgi script that allow attackers to inject malicious scripts through VPN configura |
| CVE-2019-25399 | Analyzed | 未確認 | CWE-79 | IPFire 2.21 Core Update 127 contains multiple stored cross-site scripting vulnerabilities in the extrahd.cgi script that allow attackers to inject malicious scripts through the FS, |
| CVE-2019-25400 | Analyzed | 未確認 | CWE-79 | IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers to inject malicious scripts through mult |
| CVE-2019-25401 | Deferred | 未確認 | CWE-400 | Bematech (formerly Logic Controls, now Elgin) MP-4200 TH printer contains a denial of service vulnerability in the admin configuration page. Remote attackers can send crafted POST |
| CVE-2019-25402 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to |
| CVE-2019-25403 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the c |
| CVE-2019-25404 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input through |
| CVE-2019-25405 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the newLicense para |
| CVE-2019-25406 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the organization parameter. Att |
| CVE-2019-25407 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the backup sched |
| CVE-2019-25408 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the netmask_addr |
| CVE-2019-25409 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the destination parameter. Atta |
| CVE-2019-25410 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through the source and destination parameters. |
| CVE-2019-25411 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the GATEWAY_GREEN parameter. At |
| CVE-2019-25412 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input through the NTP |
| CVE-2019-25413 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the ID paramete |
| CVE-2019-25414 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the ID paramete |
| CVE-2019-25415 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the hotspot_ |
| CVE-2019-25416 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input through the device |
| CVE-2019-25417 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the protocol par |
| CVE-2019-25418 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the FWADDRESSES |
| CVE-2019-25419 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the schedule endpoi |
| CVE-2019-25420 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the snat endpoin |
| CVE-2019-25421 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains multiple cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the policyfw endpoint. Attackers can subm |
| CVE-2019-25422 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the vpnfw endpoint. Attackers can submit POST requ |
| CVE-2019-25423 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts th |
| CVE-2019-25424 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the EXCEPTIO |
| CVE-2019-25425 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the VIRUS_ADMIN |
| CVE-2019-25426 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the dnsmasq endp |
| CVE-2019-25427 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispyware |
| CVE-2019-25428 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the openvpn_users endpoint that allow attackers to inject malicious scripts through P |
| CVE-2019-25429 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the openvpn_adva |
| CVE-2019-25430 | Analyzed | 未確認 | CWE-79 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to |
| CVE-2019-25431 | Deferred | 未確認 | CWE-89 | delpino73 Blue-Smiley-Organizer 1.32 contains an SQL injection vulnerability in the datetime parameter that allows unauthenticated attackers to manipulate database queries. Attacke |
| CVE-2019-25432 | Deferred | 未確認 | CWE-89 | Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters. Attackers can sub |
| CVE-2019-25433 | Deferred | 未確認 | CWE-89 | XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attack |
| CVE-2019-25434 | Analyzed | 未確認 | CWE-121 | SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name |
| CVE-2019-25435 | Analyzed | 未確認 | CWE-121 | Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arbitrary code b |
| CVE-2019-25436 | Analyzed | 未確認 | CWE-303 | Sricam DeviceViewer 3.12.0.1 contains a password change security bypass vulnerability that allows authenticated users to change passwords without proper validation of the old passw |
| CVE-2019-25437 | Deferred | 未確認 | CWE-121 | Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively lo |
| CVE-2019-25438 | Modified | 未確認 | CWE-89 | LabCollector 5.423 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through POST p |
| CVE-2019-25439 | Deferred | 未確認 | CWE-89 | NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the Referer HTTP header fiel |
| CVE-2019-25440 | Deferred | 未確認 | CWE-89 | WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prod_id parameter. Atta |
| CVE-2019-25441 | Analyzed | 未確認 | CWE-78 | thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the run_command |
| CVE-2019-25442 | Modified | 未確認 | CWE-89 | Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. At |
| CVE-2019-25443 | Deferred | 未確認 | CWE-89 | Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attacker |
| CVE-2019-25444 | Modified | 未確認 | CWE-89 | Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parame |
| CVE-2019-25445 | Analyzed | 未確認 | CWE-79 | Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter. Att |
| CVE-2019-25446 | Deferred | 未確認 | CWE-89 | DIGIT CENTRIS ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the datum1, datum2, KID |
| CVE-2019-25447 | Analyzed | 未確認 | CWE-352 | OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious requests to endp |
| CVE-2019-25448 | Analyzed | 未確認 | CWE-79 | OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with script payloads in the n |
| CVE-2019-25449 | Analyzed | 未確認 | CWE-79 | OrientDB 3.0.17 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted JSON payloads to the document endpoi |
| CVE-2019-25450 | Modified | 未確認 | CWE-89 | Dolibarr ERP/CRM 10.0.1 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through POST paramet |
| CVE-2019-25451 | Modified | 未確認 | CWE-918 | phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests. Attackers can |
| CVE-2019-25452 | Modified | 未確認 | CWE-89 | Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers to execute arbitrary |
| CVE-2019-25453 | Analyzed | 未確認 | CWE-79 | phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter. Atta |
| CVE-2019-25454 | Modified | 未確認 | CWE-79 | phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. At |
| CVE-2019-25455 | Modified | 未確認 | CWE-89 | Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter. |
| CVE-2019-25456 | Modified | 未確認 | CWE-89 | Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET paramete |
| CVE-2019-25457 | Modified | 未確認 | CWE-89 | Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'oz' array parame |
| CVE-2019-25458 | Modified | 未確認 | CWE-89 | Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters |
| CVE-2019-25459 | Modified | 未確認 | CWE-89 | Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters. Attac |
| CVE-2019-25460 | Modified | 未確認 | CWE-89 | Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' G |
| CVE-2019-25461 | Analyzed | 未確認 | CWE-89 | Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' p |
| CVE-2019-25462 | Deferred | 未確認 | CWE-89 | Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'klima' param |
| CVE-2019-25489 | Analyzed | 未確認 | CWE-89 | Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hosting_id parameter. Att |
| CVE-2019-25490 | Analyzed | 未確認 | CWE-89 | Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter. Attackers |
| CVE-2019-25491 | Analyzed | 未確認 | CWE-89 | Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter. Attacke |
| CVE-2019-25492 | Analyzed | 未確認 | CWE-89 | Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter. Attacker |
| CVE-2019-25493 | Analyzed | 未確認 | CWE-89 | Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter. Attacke |
| CVE-2019-25494 | Analyzed | 未確認 | CWE-89 | Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL syntax into u |
| CVE-2019-25495 | Analyzed | 未確認 | CWE-89 | osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviews_id paramete |
| CVE-2019-25496 | Analyzed | 未確認 | CWE-89 | osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the products_id paramet |
| CVE-2019-25497 | Analyzed | 未確認 | CWE-89 | osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. |
| CVE-2020-37037 | Deferred | 未確認 | CWE-428 | Avast SecureLine 5.5.522.0 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploi |
| CVE-2020-37045 | Deferred | 未確認 | CWE-428 | Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows local users to potentially execute arbitrary code. Attackers |
| CVE-2020-37047 | Deferred | 未確認 | CWE-428 | Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privil |
| CVE-2020-37048 | Deferred | 未確認 | CWE-428 | Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated privile |
| CVE-2020-37055 | Deferred | 未確認 | CWE-428 | SpyHunter 4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the |
| CVE-2020-37061 | Deferred | 未確認 | CWE-428 | BOOTP Turbo 2.0.1214 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers ca |
| CVE-2020-37062 | Deferred | 未確認 | CWE-428 | DHCP Turbo 4.61298 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attacker |
| CVE-2020-37063 | Deferred | 未確認 | CWE-428 | TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploi |
| CVE-2020-37064 | Deferred | 未確認 | CWE-428 | EPSON EasyMP Network Projection 2.81 contains an unquoted service path vulnerability in the EMP_NSWLSV service that allows local users to potentially execute arbitrary code. Attack |
| CVE-2020-37065 | Deferred | 未確認 | CWE-120 | StreamRipper32 version 2.6 contains a buffer overflow vulnerability in the Station/Song Section that allows attackers to overwrite memory by manipulating the SongPattern input. Att |
| CVE-2020-37066 | Deferred | 未確認 | CWE-121 | GoldWave 5.70 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting malicious input in the File Open URL dialog. Attackers can genera |
| CVE-2020-37067 | Deferred | 未確認 | CWE-770 | Filetto 1.0 FTP server contains a denial of service vulnerability in the FEAT command processing that allows attackers to crash the service. Attackers can send an oversized FEAT co |
| CVE-2020-37068 | Analyzed | 未確認 | CWE-120 | Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the LIST command that allows attackers to overwrite system registers. Attackers can send an oversized buf |
| CVE-2020-37069 | Analyzed | 未確認 | CWE-120 | Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buf |
| CVE-2020-37070 | Deferred | 未確認 | CWE-120 | CloudMe 1.11.2 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code through crafted network packets. Attackers can exploit the vulnerabil |
| CVE-2020-37071 | Deferred | 未確認 | CWE-502 | CraftCMS 3 vCard Plugin 1.0.0 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary PHP code through a crafted payload. Attackers can |
| CVE-2020-37072 | Analyzed | 未確認 | CWE-79 | Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST parameter that allows attackers to inject malicious scripts. Attackers can submit c |
| CVE-2020-37073 | Analyzed | 未確認 | CWE-434 | Victor CMS 1.0 contains an authenticated file upload vulnerability that allows administrators to upload PHP files with arbitrary content through the user_image parameter. Attackers |
| CVE-2020-37074 | Deferred | 未確認 | CWE-120 | Remote Desktop Audit 2.3.0.157 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code during the Add Computers Wizard file import process. Attacke |
| CVE-2020-37075 | Deferred | 未確認 | CWE-120 | LanSend 3.2 contains a buffer overflow vulnerability in the Add Computers Wizard file import functionality that allows remote attackers to execute arbitrary code. Attackers can cra |
| CVE-2020-37076 | Analyzed | 未確認 | CWE-89 | Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate database queries. Attackers can exploit |
| CVE-2020-37077 | Deferred | 未確認 | CWE-22 | Booked Scheduler 2.7.7 contains a directory traversal vulnerability in the manage_email_templates.php script that allows authenticated administrators to access unauthorized files. |
| CVE-2020-37078 | Deferred | 未確認 | CWE-73 | i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerability in the import module that allows authenticated attackers to delete arbitrary files by manipulating the delete_ |
| CVE-2020-37079 | Analyzed | 未確認 | CWE-352 | Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that allows attackers to delete admin users. A |
| CVE-2020-37080 | Deferred | 未確認 | CWE-73 | webTareas 2.0.p8 contains a file deletion vulnerability in the print_layout.php administration component that allows authenticated attackers to delete arbitrary files. Attackers ca |
| CVE-2020-37081 | Deferred | 未確認 | CWE-89 | Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calendar.php that allow attackers to inject malicious SQL commands |
| CVE-2020-37082 | Analyzed | 未確認 | CWE-552 | webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without authentication. Attackers can directly ac |
| CVE-2020-37083 | Deferred | 未確認 | CWE-89 | PHP AddressBook 9.0.0.1 contains a time-based blind SQL injection vulnerability that allows remote attackers to manipulate database queries through the 'id' parameter. Attackers ca |
| CVE-2020-37084 | Analyzed | 未確認 | CWE-434 | School ERP Pro 1.0 contains a remote code execution vulnerability that allows authenticated admin users to upload arbitrary PHP files as profile photos by bypassing file extension |
| CVE-2020-37085 | Deferred | 未確認 | CWE-770 | VirtualTablet Server 3.0.2 contains a denial of service vulnerability that allows attackers to crash the service by sending oversized string payloads through the Thrift protocol. A |
| CVE-2020-37086 | Deferred | 未確認 | CWE-22 | Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. |
| CVE-2020-37087 | Deferred | 未確認 | CWE-79 | Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts by manipulating the oldPa |
| CVE-2020-37088 | Analyzed | 未確認 | CWE-22 | School ERP Pro 1.0 contains a file disclosure vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the 'document' parameter in download.php. |
| CVE-2020-37089 | Analyzed | 未確認 | CWE-89 | School ERP Pro 1.0 contains a SQL injection vulnerability in the 'es_messagesid' parameter that allows attackers to manipulate database queries through GET requests. Attackers can |
| CVE-2020-37090 | Analyzed | 未確認 | CWE-434 | School ERP Pro 1.0 contains a file upload vulnerability that allows students to upload arbitrary PHP files to the messaging system. Attackers can upload malicious PHP scripts throu |
| CVE-2020-37091 | Deferred | 未確認 | CWE-352 | Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft m |
| CVE-2020-37092 | Deferred | 未確認 | CWE-798 | Netis E1+ version 1.2.32533 contains a hardcoded root account vulnerability that allows unauthenticated attackers to access the device with predefined credentials. Attackers can le |
| CVE-2020-37093 | Deferred | 未確認 | CWE-201 | Netis E1+ 1.2.32533 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve WiFi passwords through the netcore_get.cgi endpoint. Attacker |
| CVE-2020-37094 | Modified | 未確認 | CWE-303 | EspoCRM 5.7.0 prior to 5.9.0 contains an authentication token reuse vulnerability that allows authenticated attackers to bypass two-factor authentication by exploiting token-to-pas |
| CVE-2020-37095 | Deferred | 未確認 | CWE-121 | Cyberoam Authentication Client 2.1.2.7 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler ( |
| CVE-2020-37096 | Analyzed | 未確認 | CWE-352 | Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into |
| CVE-2020-37097 | Analyzed | 未確認 | CWE-522 | Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencrypt_wiz.asp file. Attackers can access the |
| CVE-2020-37098 | Deferred | 未確認 | CWE-428 | Disk Sorter Enterprise 12.4.16 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can |
| CVE-2020-37099 | Deferred | 未確認 | CWE-428 | Disk Savvy Enterprise 12.3.18 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute arbitrary code. Attack |
| CVE-2020-37100 | Analyzed | 未確認 | CWE-428 | Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can |
| CVE-2020-37101 | Deferred | 未確認 | CWE-428 | VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious executables into the service binary path. Attackers can exploit th |
| CVE-2020-37102 | Deferred | 未確認 | CWE-428 | Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbitrary code. Attacker |
| CVE-2020-37103 | Analyzed | 未確認 | CWE-79 | DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML files with executable scripts through journal tools. Attack |
| CVE-2020-37104 | Analyzed | 未確認 | CWE-538 | ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by predicting backup filename patterns. Attacke |
| CVE-2020-37105 | Deferred | 未確認 | CWE-89 | PMB 5.6 contains a SQL injection vulnerability in the administration download script that allows authenticated attackers to execute arbitrary SQL commands through the 'logid' param |
| CVE-2020-37106 | Deferred | 未確認 | CWE-352 | Business Live Chat Software 1.0 contains a cross-site request forgery vulnerability that allows attackers to change user account roles without authentication. Attackers can craft a |
| CVE-2020-37107 | Deferred | 未確認 | CWE-120 | Core FTP LE 2.2 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the account field with a large buffer. Attackers can create |
| CVE-2020-37108 | Deferred | 未確認 | CWE-89 | PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product_detail.php that allows remote attackers to manipulate database queries. Attackers ca |
| CVE-2020-37109 | Deferred | 未確認 | CWE-120 | aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attac |
| CVE-2020-37110 | Analyzed | 未確認 | CWE-89 | 60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attacke |
| CVE-2020-37111 | Analyzed | 未確認 | CWE-79 | 60CycleCMS 2.5.2 contains a cross-site scripting (XSS) vulnerability in news.php that allows attackers to inject malicious scripts through GET parameters. Attackers can craft malic |
| CVE-2020-37112 | Analyzed | 未確認 | CWE-89 | GUnet OpenEclass 1.7.3 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through unvalidated parameters. Attackers c |
| CVE-2020-37113 | Analyzed | 未確認 | CWE-434 | GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files. By renaming a PHP file to .php3 or .PhP, an attacker can upload a web |
| CVE-2020-37114 | Analyzed | 未確認 | CWE-200 | GUnet OpenEclass 1.7.3 allows unauthenticated and authenticated users to access sensitive information, including system information, application version, and other students' upload |
| CVE-2020-37115 | Analyzed | 未確認 | CWE-256 | GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and passwords without encryption. This vulnerability ex |
| CVE-2020-37116 | Analyzed | 未確認 | CWE-284 | GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access phpMyAdmin and, after uploadin |
| CVE-2020-37117 | Analyzed | 未確認 | CWE-434 | jizhiCMS 1.6.7 contains a file download vulnerability in the admin plugins update endpoint that allows authenticated administrators to download arbitrary files. Attackers can explo |
| CVE-2020-37118 | Deferred | 未確認 | CWE-352 | P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user interaction. Attackers can c |
| CVE-2020-37119 | Analyzed | 未確認 | CWE-121, CWE-787 | Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can cr |
| CVE-2020-37120 | Deferred | 未確認 | CWE-121 | Rubo DICOM Viewer 2.0 contains a buffer overflow vulnerability in the DICOM server name input field that allows attackers to overwrite Structured Exception Handler (SEH). Attackers |
| CVE-2020-37121 | Deferred | 未確認 | CWE-121 | CODE::BLOCKS 16.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler with crafted Unicode charact |
| CVE-2020-37122 | Deferred | 未確認 | CWE-121 | SpotFTP-FTP Password Recover 2.4.8 contains a denial of service vulnerability that allows attackers to crash the application by generating a large buffer overflow. Attackers can cr |
| CVE-2020-37123 | Deferred | 未確認 | CWE-78 | Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitiz |
| CVE-2020-37124 | Deferred | 未確認 | CWE-121 | B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) with crafted input. Attacker |
| CVE-2020-37125 | Analyzed | 未確認 | CWE-78 | Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /goform/mp endpoint. A |
| CVE-2020-37126 | Deferred | 未確認 | CWE-121 | Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler (SEH) registers. |
| CVE-2020-37127 | Deferred | 未確認 | CWE-121 | Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcp_release utility that allows attackers to cause a denial of service by supplying excessive input. Attackers |
| CVE-2020-37128 | Deferred | 未確認 | CWE-121 | ZOC Terminal 7.25.5 contains a script processing vulnerability that allows local attackers to crash the application by loading a maliciously crafted REXX script file. Attackers can |
| CVE-2020-37129 | Deferred | 未確認 | CWE-276 | Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can replace the service e |
| CVE-2020-37130 | Analyzed | 未確認 | CWE-120 | Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious p |
| CVE-2020-37131 | Analyzed | 未確認 | CWE-120 | Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting a specially crafted registration |
| CVE-2020-37132 | Analyzed | 未確認 | CWE-121, CWE-787 | UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to crash the application. Attackers can pa |
| CVE-2020-37133 | Analyzed | 未確認 | CWE-121, CWE-787 | UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash the application. Attackers can paste an |
| CVE-2020-37134 | Deferred | 未確認 | CWE-770 | UltraVNC Viewer 1.2.4.0 contains a denial of service vulnerability that allows attackers to crash the application by manipulating VNC Server input. Attackers can generate a malform |
| CVE-2020-37135 | Deferred | 未確認 | CWE-798 | AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the defaul |
| CVE-2020-37136 | Deferred | 未確認 | CWE-121 | ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers to crash the application. Attackers can overwrite the priva |
| CVE-2020-37137 | Analyzed | 未確認 | CWE-94, CWE-95 | PHP-Fusion 9.03.50 contains a remote code execution vulnerability in the 'add_panel_form()' function that allows attackers to execute arbitrary code through an eval() function with |
| CVE-2020-37138 | Deferred | 未確認 | CWE-121 | 10-Strike Network Inventory Explorer 9.03 contains a buffer overflow vulnerability in the file import functionality that allows remote attackers to execute arbitrary code. Attacker |
| CVE-2020-37139 | Deferred | 未確認 | CWE-770 | Odin Secure FTP Expert 7.6.3 contains a local denial of service vulnerability that allows attackers to crash the application by manipulating site information fields. Attackers can |
| CVE-2020-37140 | Analyzed | 未確認 | CWE-787 | Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating file open functional |
| CVE-2020-37141 | Deferred | 未確認 | CWE-89 | AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' parameter in /mo |
| CVE-2020-37142 | Deferred | 未確認 | CWE-121 | 10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting SEH r |
| CVE-2020-37143 | Deferred | 未確認 | CWE-770 | ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the password input field. Attackers can ove |
| CVE-2020-37144 | Deferred | 未確認 | CWE-352 | Exagate SYSGuard 6001 contains a cross-site request forgery vulnerability that allows attackers to create unauthorized admin accounts through a crafted HTML form. Attackers can tri |
| CVE-2020-37145 | Deferred | 未確認 | CWE-352 | HRSALE 1.1.8 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized administrative users through the employee registration form. Attackers ca |
| CVE-2020-37146 | Deferred | 未確認 | CWE-306 | ACE Security WiP-90113 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration files. Attackers can ac |
| CVE-2020-37147 | Deferred | 未確認 | CWE-89 | ATutor 2.2.4 contains a SQL injection vulnerability in the admin user deletion page that allows authenticated attackers to manipulate database queries through the 'id' parameter. A |
| CVE-2020-37148 | Deferred | 未確認 | CWE-79 | P5 FNIP-8x16A/FNIP-4xSH versions 1.0.20 and 1.0.11 suffer from a stored cross-site scripting vulnerability. Input passed to several GET/POST parameters is not properly sanitized be |
| CVE-2020-37149 | Analyzed | 未確認 | CWE-352 | Edimax EW-7438RPn-v3 Mini 1.27 is vulnerable to cross-site request forgery (CSRF) that can lead to command execution. An attacker can trick an authenticated user into submitting a |
| CVE-2020-37150 | Analyzed | 未確認 | CWE-201 | Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode, which discloses the Wi-Fi SSID and security key. Attackers ca |
| CVE-2020-37151 | Analyzed | 未確認 | CWE-89 | phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmc_username parameter that allows attackers to manipulate database queries. Attacker |
| CVE-2020-37152 | Analyzed | 未確認 | CWE-79 | PHP-Fusion 9.03.50 panels.php is vulnerable to cross-site scripting (XSS) via the 'panel_content' POST parameter. The application fails to properly sanitize user input before rende |
| CVE-2020-37153 | Analyzed | 未確認 | CWE-79 | ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can explo |
| CVE-2020-37154 | Deferred | 未確認 | CWE-89 | eLection 2.0 contains an authenticated SQL injection vulnerability in the candidate management endpoint that allows attackers to manipulate database queries through the 'id' parame |
| CVE-2020-37155 | Deferred | 未確認 | CWE-120 | Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can ge |
| CVE-2020-37156 | Deferred | 未確認 | CWE-288 | BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerabi |
| CVE-2020-37157 | Deferred | 未確認 | CWE-306 | DBPower C300 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive credentials through an unprotected configuratio |
| CVE-2020-37158 | Modified | 未確認 | CWE-352, CWE-640 | AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can c |
| CVE-2020-37159 | Deferred | 未確認 | CWE-121 | Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature |
| CVE-2020-37160 | Deferred | 未確認 | CWE-276 | SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users ca |
| CVE-2020-37161 | Analyzed | 未確認 | CWE-121 | Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious pay |
| CVE-2020-37162 | Analyzed | 未確認 | CWE-122 | Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key input that allows attackers to execute arbitrary code by overwriting memory. Attacker |
| CVE-2020-37163 | Deferred | 未確認 | CWE-89 | QuickDate 1.3.2 contains a SQL injection vulnerability that allows remote attackers to manipulate database queries through the '_located' parameter in the find_matches endpoint. At |
| CVE-2020-37164 | Analyzed | 未確認 | CWE-120 | AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate |
| CVE-2020-37165 | Analyzed | 未確認 | CWE-120 | AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate |
| CVE-2020-37166 | Analyzed | 未確認 | CWE-120 | AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the u |
| CVE-2020-37167 | Deferred | 未確認 | ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode functio | |
| CVE-2020-37170 | Analyzed | 未確認 | CWE-120 | TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy address configuration that allows local attackers to crash the application. Attackers can over |
| CVE-2020-37171 | Analyzed | 未確認 | CWE-120 | TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration that allows local attackers to crash the application. Attackers can ove |
| CVE-2020-37172 | Analyzed | 未確認 | CWE-640 | AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can c |
| CVE-2020-37173 | Analyzed | 未確認 | CWE-359 | AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can |
| CVE-2020-37175 | Deferred | 未確認 | CWE-120 | P2PWIFICAM2 for iOS 10.4.1 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the Camera ID input field. Attackers can paste |
| CVE-2020-37176 | Deferred | 未確認 | CWE-121 | Torrent 3GP Converter 1.51 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Atta |
| CVE-2020-37177 | Deferred | 未確認 | CWE-121 | BOOTP Turbo 2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Structured Exception Handler (SEH). Attackers can gener |
| CVE-2020-37178 | Deferred | 未確認 | CWE-94 | KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dragging and dro |
| CVE-2020-37179 | Deferred | 未確認 | CWE-120 | APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can gener |
| CVE-2020-37180 | Deferred | 未確認 | CWE-120 | GTalk Password Finder 2.2.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can gene |
| CVE-2020-37181 | Deferred | 未確認 | CWE-121 | Torrent FLV Converter 1.51 Build 117 contains a stack overflow vulnerability that allows attackers to overwrite Structured Exception Handler (SEH) through a malicious registration |
| CVE-2020-37182 | Deferred | 未確認 | CWE-121 | Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. Attackers can exploit |
| CVE-2020-37183 | Deferred | 未確認 | CWE-121 | Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler |
| CVE-2020-37184 | Deferred | 未確認 | CWE-121 | Allok Video Converter 4.6.1217 contains a stack overflow vulnerability in the License Name input field that allows attackers to execute arbitrary code. Attackers can craft a specia |
| CVE-2020-37185 | Deferred | 未確認 | CWE-120 | Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a |
| CVE-2020-37186 | Deferred | 未確認 | CWE-94 | Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipu |
| CVE-2020-37187 | Deferred | 未確認 | CWE-120 | SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-chara |
| CVE-2020-37188 | Deferred | 未確認 | CWE-120 | SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer |
| CVE-2020-37189 | Deferred | 未確認 | CWE-120 | TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can generate a 1000-chara |
| CVE-2020-37190 | Deferred | 未確認 | CWE-120 | Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trig |
| CVE-2020-37191 | Deferred | 未確認 | CWE-120 | Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers |
| CVE-2020-37192 | Deferred | 未確認 | CWE-611 | MSN Password Recovery 1.30 contains an XML external entity injection vulnerability that allows attackers to read local system files through crafted XML input. Attackers can exploit |
| CVE-2020-37193 | Deferred | 未確認 | CWE-120 | ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciously crafted input. Attackers can create a |
| CVE-2020-37194 | Deferred | 未確認 | CWE-120 | Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly long registration key. Attackers can gene |
| CVE-2020-37195 | Deferred | 未確認 | CWE-120 | BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-ch |
| CVE-2020-37196 | Analyzed | 未確認 | CWE-120 | Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oversized registration key. Attackers can |
| CVE-2020-37197 | Analyzed | 未確認 | CWE-120 | Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can gene |
| CVE-2020-37198 | Deferred | 未確認 | CWE-121 | Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. A |
| CVE-2020-37199 | Analyzed | 未確認 | CWE-120 | NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character b |
| CVE-2020-37200 | Analyzed | 未確認 | CWE-121 | NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the application by supplying oversized input. Attacker |
| CVE-2020-37201 | Analyzed | 未確認 | CWE-120 | NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the application. Attackers can generate a 1000-charac |
| CVE-2020-37202 | Deferred | 未確認 | CWE-120 | NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a |
| CVE-2020-37203 | Deferred | 未確認 | CWE-120 | Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the registration code input. Attackers can |
| CVE-2020-37204 | Analyzed | 未確認 | CWE-120 | RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character |
| CVE-2020-37205 | Analyzed | 未確認 | CWE-120 | RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Attackers can generate a |
| CVE-2020-37206 | Analyzed | 未確認 | CWE-120 | ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-ch |
| CVE-2020-37207 | Analyzed | 未確認 | CWE-120 | SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-charac |
| CVE-2020-37208 | Analyzed | 未確認 | CWE-787 | SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character |
| CVE-2020-37209 | Analyzed | 未確認 | CWE-120 | SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-charac |
| CVE-2020-37210 | Analyzed | 未確認 | CWE-120 | SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer |
| CVE-2020-37211 | Analyzed | 未確認 | CWE-120 | SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can gener |
| CVE-2020-37212 | Analyzed | 未確認 | CWE-120 | SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-characte |
| CVE-2020-37213 | Deferred | 未確認 | CWE-120 | TextCrawler Pro 3.1.1 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized buffer in the license key field. Attackers c |
| CVE-2020-37214 | Deferred | 未確認 | CWE-22 | Voyager 1.3.0 contains a directory traversal vulnerability that allows attackers to access sensitive system files by manipulating the asset path parameter. Attackers can exploit th |
| CVE-2020-37215 | Deferred | 未確認 | CWE-120 | MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in the registration cod |
| CVE-2021-26381 | Deferred | 未確認 | CWE-770 | Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially resultin |
| CVE-2021-26410 | Deferred | 未確認 | CWE-822 | Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer t |
| CVE-2021-35402 | Deferred | 未確認 | CWE-78 | PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status). |
| CVE-2021-4456 | Analyzed | 未確認 | CWE-704 | Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact. The functions `addr2cidr` and `cidrlookup` may return lead |
| CVE-2021-47856 | Deferred | 未確認 | CWE-79 | Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script cod |
| CVE-2021-47885 | Deferred | 未確認 | CWE-79 | Multiple payment terminal versions contain non-persistent cross-site scripting vulnerabilities in billing and payment information input fields. Attackers can inject malicious scrip |
| CVE-2021-47908 | Deferred | 未確認 | CWE-79 | Ultimate POS 4.4 contains a persistent cross-site scripting vulnerability in the product name parameter that allows remote attackers to inject malicious scripts. Attackers can expl |
| CVE-2021-47909 | Deferred | 未確認 | CWE-89 | Mult-E-Cart Ultimate 2.4 contains multiple SQL injection vulnerabilities in inventory, customer, vendor, and order modules. Remote attackers with privileged vendor or admin roles c |
| CVE-2021-47911 | Deferred | 未確認 | CWE-79 | Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, user |
| CVE-2021-47912 | Analyzed | 未確認 | CWE-79 | PHP Melody version 3.0 contains multiple non-persistent cross-site scripting vulnerabilities in categories, import, and user import files. Attackers can inject malicious scripts th |
| CVE-2021-47913 | Analyzed | 未確認 | CWE-79 | PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privileged users to inject malicious scripts. Attackers can exploit the WYSI |
| CVE-2021-47914 | Analyzed | 未確認 | CWE-79 | PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script co |
| CVE-2021-47915 | Analyzed | 未確認 | CWE-89 | PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject malicious SQL commands. Attackers can ex |
| CVE-2021-47916 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2021-47917 | Analyzed | 未確認 | CWE-79 | Simple CMS 2.1 contains a persistent cross-site scripting vulnerability in user input parameters that allows remote attackers to inject malicious script code. Attackers can exploit |
| CVE-2021-47918 | Analyzed | 未確認 | CWE-89 | Simple CMS 2.1 contains a remote SQL injection vulnerability that allows privileged attackers to inject unfiltered SQL commands in the users module. Attackers can exploit unvalidat |
| CVE-2021-47919 | Analyzed | 未確認 | CWE-79 | Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter. Attackers can inject malicious script code through a GET request |
| CVE-2021-47920 | Deferred | 未確認 | CWE-79 | WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the fi |
| CVE-2021-47921 | Deferred | 未確認 | CWE-22 | Free Photo & Video Vault 0.0.2 contains a directory traversal web vulnerability that allows remote attackers to manipulate application path requests and access sensitive system fil |
| CVE-2022-41650 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Paul Custom Content by Country (by Shield Security) custom-content-by-country.This issue affects Custom Content by Country (by Shield Securit |
| CVE-2022-50797 | Deferred | 未確認 | CWE-79 | Stripe Green Downloads Wordpress Plugin 2.03 contains a persistent cross-site scripting vulnerability allowing remote attackers to inject malicious scripts in button label fields. |
| CVE-2022-50940 | Deferred | 未確認 | CWE-79 | Knap Advanced PHP Login 3.1.3 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious script code in the name parameter. Attackers |
| CVE-2022-50941 | Deferred | 未確認 | CWE-79 | BootCommerce 3.2.1 contains persistent input validation vulnerabilities that allow remote attackers to inject malicious script code through guest order checkout input fields. Attac |
| CVE-2022-50942 | Deferred | 未確認 | CWE-79 | Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers |
| CVE-2022-50950 | Deferred | 未確認 | CWE-22 | Webile 1.0.1 contains a directory traversal vulnerability that allows remote attackers to manipulate file system paths without authentication. Attackers can exploit path manipulati |
| CVE-2022-50951 | Deferred | 未確認 | CWE-79 | WiFi File Transfer 1.0.8 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through file and folder names. Attac |
| CVE-2022-50952 | Deferred | 未確認 | CWE-79 | Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Name Profile input. Attackers can inject malicious script code |
| CVE-2022-50975 | Deferred | 未確認 | CWE-346 | An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled. |
| CVE-2022-50976 | Deferred | 未確認 | CWE-1288 | A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB. |
| CVE-2022-50977 | Deferred | 未確認 | CWE-306 | An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via HTTP. |
| CVE-2022-50978 | Deferred | 未確認 | CWE-306 | An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP). |
| CVE-2022-50979 | Deferred | 未確認 | CWE-306 | An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485). |
| CVE-2022-50980 | Deferred | 未確認 | CWE-306 | A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN. |
| CVE-2022-50981 | Deferred | 未確認 | CWE-306 | An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced. |
| CVE-2023-20514 | Deferred | 未確認 | CWE-233 | Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environm |
| CVE-2023-20548 | Analyzed | 未確認 | CWE-367 | A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or |
| CVE-2023-20601 | Deferred | 未確認 | CWE-129 | Improper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds memory, potentially resulting in a denial-of-service condition. |
| CVE-2023-31313 | Deferred | 未確認 | CWE-441 | An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages to the system management unit (SMU) pot |
| CVE-2023-31323 | Deferred | 未確認 | CWE-843 | Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to |
| CVE-2023-31324 | Analyzed | 未確認 | CWE-367 | A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) |
| CVE-2023-31364 | Deferred | 未確認 | CWE-119 | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially cau |
| CVE-2023-38005 | Analyzed | 未確認 | CWE-284 | IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could allow an authenticated user to perform unauthorized tasks due to improper access controls. |
| CVE-2023-38010 | Analyzed | 未確認 | CWE-209 | IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system. |
| CVE-2023-38017 | Analyzed | 未確認 | CWE-209 | IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionalit |
| CVE-2023-38265 | Analyzed | 未確認 | CWE-548 | IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks aga |
| CVE-2023-38281 | Analyzed | 未確認 | CWE-209 | IBM Cloud Pak System does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a use |
| CVE-2023-45291 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2023-54343 | Deferred | 未確認 | CWE-79 | QWE DL 2.0.1 mobile web application contains a persistent input validation vulnerability allowing remote attackers to inject malicious script code through path parameter manipulati |
| CVE-2023-6763 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2024-10938 | Deferred | 未確認 | CWE-506 | The OVRI Payment plugin for WordPress contains malicious .htaccess files in version 1.7.0. The files contain directives to prevent the execution of certain scripts while allowing e |
| CVE-2024-1524 | Analyzed | 未確認 | CWE-290 | When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider (IDP) there is a risk that a local user store user's information may be replaced d |
| CVE-2024-21953 | Deferred | 未確認 | CWE-1284 | Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity. |
| CVE-2024-21961 | Deferred | 未確認 | CWE-119 | Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual machine to potentially perform a denial |
| CVE-2024-2356 | Deferred | 未確認 | CWE-29 | A Local File Inclusion (LFI) vulnerability exists in the '/reinstall_extension' endpoint of the parisneo/lollms-webui application, specifically within the `name` parameter of the ` |
| CVE-2024-26477 | Analyzed | 未確認 | CWE-200 | An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the api parameter of the oauth, amazon_sns, export endpoints. |
| CVE-2024-26478 | Analyzed | 未確認 | CWE-200 | An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the /api/users endpoint. |
| CVE-2024-26479 | Analyzed | 未確認 | CWE-200 | An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the Command execution function. |
| CVE-2024-26480 | Modified | 未確認 | CWE-200 | An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the admin parameter. |
| CVE-2024-31118 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Proje |
| CVE-2024-34154 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2024-34157 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2024-34438 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.19. |
| CVE-2024-36310 | Deferred | 未確認 | CWE-124 | Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of con |
| CVE-2024-36311 | Deferred | 未確認 | CWE-367 | A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read |
| CVE-2024-36316 | Deferred | 未確認 | CWE-190 | The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service |
| CVE-2024-36319 | Deferred | 未確認 | CWE-1191 | Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW r |
| CVE-2024-36320 | Deferred | 未確認 | CWE-190 | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability |
| CVE-2024-36324 | Deferred | 未確認 | CWE-787 | Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution. |
| CVE-2024-36355 | Deferred | 未確認 | CWE-787 | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting in |
| CVE-2024-39724 | Deferred | 未確認 | CWE-770 | IBM Db2 Big SQL on Cloud Pak for Data versions 7.6 (on CP4D 4.8), 7.7 (on CP4D 5.0), and 7.8 (on CP4D 5.1) do not properly limit the allocation of system resources. An authenticate |
| CVE-2024-40685 | Deferred | 未確認 | CWE-352 | IBM Operations Analytics – Log Analysis versions 1.3.5.0 through 1.3.8.3 and IBM SmartCloud Analytics – Log Analysis are vulnerable to a cross-site request forgery (CSRF) vulnerabi |
| CVE-2024-4147 | Analyzed | 未確認 | CWE-1220 | In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to delete prompts created in other organizations through ID manipulatio |
| CVE-2024-43178 | Analyzed | 未確認 | CWE-327 | IBM Concert 1.0.0 through 2.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
| CVE-2024-43181 | Analyzed | 未確認 | CWE-613 | IBM Concert 1.0.0 through 2.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. |
| CVE-2024-43228 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in SecuPress SecuPress Free secupress.This issue affects SecuPress Free: from n/a through <= 2.2.5.3. |
| CVE-2024-48928 | Analyzed | 未確認 | CWE-330 | Piwigo is an open source photo gallery application for the web. In versions on the 14.x branch, when installing, the secret_key configuration parameter is set to MD5(RAND()) in MyS |
| CVE-2024-50452 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Stored XSS.This |
| CVE-2024-50555 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.This issue aff |
| CVE-2024-50617 | Analyzed | 未確認 | CWE-285 | Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow attackers to download unauthorized files. An authenticated user can easi |
| CVE-2024-50618 | Analyzed | 未確認 | CWE-308 | A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to bypass a protection mechanism. When the sys |
| CVE-2024-50619 | Analyzed | 未確認 | CWE-269 | Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to escalate their access levels. A low-privileged authenticated u |
| CVE-2024-50620 | Analyzed | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage components in CIPPlanner CIPAce before 9.17. An authorized user ca |
| CVE-2024-51451 | Analyzed | 未確認 | CWE-644 | IBM Concert 1.0.0 through 2.1.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various |
| CVE-2024-51915 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This |
| CVE-2024-52334 | Deferred | 未確認 | CWE-261 | A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07). The affected application does not encrypt the passwords properly. This could allow an attacke |
| CVE-2024-52387 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Stored XSS.This |
| CVE-2024-5386 | Analyzed | 未確認 | CWE-1125 | In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. A user with a 'viewer' role can exploit this vulnerability to hijac |
| CVE-2024-54192 | Deferred | 未確認 | CWE-400 | An issue inTcpreplay v4.5.1 allows a local attacker to cause a denial of service via a crafted file to the tcpedit_dlt_getplugin function at src/tcpedit/plugins/dlt_utils.c. |
| CVE-2024-54222 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue affects Seraphinite |
| CVE-2024-54263 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Talemy Spirit Framework allows PHP Local File Inclusion.Thi |
| CVE-2024-55270 | Analyzed | 未確認 | CWE-89 | phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter. |
| CVE-2024-55271 | Analyzed | 未確認 | CWE-352 | A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User |
| CVE-2024-56208 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in desertthemes NewsMash newsmash allows Stored XSS.This issue affects NewsMash: |
| CVE-2024-56373 | Analyzed | 未確認 | CWE-94 | DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context, which they should nor |
| CVE-2024-56807 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access, they can then exploit the vulnerability to obtain |
| CVE-2024-56808 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access who have also gained a user account, they can then e |
| CVE-2024-58041 | Analyzed | 未確認 | CWE-338 | Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source |
| CVE-2024-5986 | Deferred | 未確認 | CWE-73 | A vulnerability in h2oai/h2o-3 version 3.46.0.1 allows remote attackers to write arbitrary data to any file on the server. This is achieved by exploiting the `/3/Parse` endpoint to |
| CVE-2025-0012 | Deferred | 未確認 | CWE-1260 | Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged attacker corrupt or partially infer SMM |
| CVE-2025-0029 | Deferred | 未確認 | CWE-390 | Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writes, potentially resulting in a loss of SE |
| CVE-2025-0031 | Deferred | 未確認 | CWE-416 | A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent pot |
| CVE-2025-0577 | Deferred | 未確認 | CWE-331 | An insufficient entropy vulnerability was found in glibc. The getrandom and arc4random family of functions may return predictable randomness if these functions are called again aft |
| CVE-2025-0976 | Analyzed | 未確認 | CWE-532 | Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager.This issue affects Hitachi Ops Center API Configuration Manager: f |
| CVE-2025-10010 | Modified | 未確認 | CWE-353 | The CPSD CryptoPro Secure Disk application boots a small Linux operating system to perform user authentication before using BitLocker to decrypt the Windows partition. The system i |
| CVE-2025-10174 | Deferred | 未確認 | CWE-319 | Cleartext Transmission of Sensitive Information vulnerability in Pan Software & Information Technologies Ltd. PanCafe Pro allows Flooding. This issue affects PanCafe Pro: from < 3 |
| CVE-2025-10256 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return value of av_malloc_array() in t |
| CVE-2025-10258 | Modified | 未確認 | CWE-89 | Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information. |
| CVE-2025-10279 | Analyzed | 未確認 | CWE-379 | In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777). This vulnerability allows a |
| CVE-2025-10314 | Deferred | 未確認 | CWE-276 | Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2 allows a local attacker to execute arbitrary code w |
| CVE-2025-10463 | Deferred | 未確認 | CWE-287 | Improper Authentication vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows Authentication Abuse. This issue affects Senseway: through 09 |
| CVE-2025-10464 | Deferred | 未確認 | CWE-312, CWE-922 | Insecure Storage of Sensitive Information vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows Retrieve Embedded Sensitive Data. This issu |
| CVE-2025-10465 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Sensaway allows Upload a Web Shell to a Web Server. T |
| CVE-2025-10753 | Deferred | 未確認 | CWE-862 | The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to missing capabi |
| CVE-2025-10878 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL inje |
| CVE-2025-10912 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Saastech Cleaning and Internet Services Inc. TemizlikYolda allows Manipulating User-Controlled Variables. This is |
| CVE-2025-10913 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saastech Cleaning and Internet Services Inc. TemizlikYolda allows Cross |
| CVE-2025-10969 | Modified | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Blind SQL |
| CVE-2025-10970 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc. Talentics allows Blind SQL Injection. This issue affects |
| CVE-2025-10990 | Deferred | 未確認 | CWE-1333 | A flaw was found in REXML. A remote attacker could exploit inefficient regular expression (regex) parsing when processing hex numeric character references (&#x...;) in XML document |
| CVE-2025-11004 | Deferred | 未確認 | CWE-79 | The Simplicity Device Manager Tool has a Reflected XSS (Cross-site-scripting) vulnerability in several API endpoints. The attacker needs to be on the same network to execute this a |
| CVE-2025-11142 | Analyzed | 未確認 | CWE-78 | The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with |
| CVE-2025-11165 | Analyzed | 未確認 | CWE-89 | A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileges to bypass class and package restricti |
| CVE-2025-11173 | Deferred | 未確認 | Vulnerability in Wikimedia Foundation OATHAuth. This vulnerability is associated with program files src/Special/OATHManage.Php. This issue affects OATHAuth: from * before 1.39.14, | |
| CVE-2025-11185 | Deferred | 未確認 | CWE-79 | The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cmplz-accept-link shortcode in all versions up to, and i |
| CVE-2025-11242 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Teknolist Computer Systems Software Publishing Industry and Trade Inc. Okulistik allows Server Side Request Forgery. This issue |
| CVE-2025-11251 | Modified | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows SQL Inject |
| CVE-2025-11252 | Modified | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Signum Technology Promotion and Training Inc. Windesk.Fm allows SQL Injection. |
| CVE-2025-11261 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-11381 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-11382 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-11383 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-11384 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-11537 | Deferred | 未確認 | CWE-117 | A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined 'long' pattern), sensitive headers including Author |
| CVE-2025-11547 | Analyzed | 未確認 | CWE-532 | AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user. |
| CVE-2025-11563 | Analyzed | 未確認 | CWE-22 | URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it. This f |
| CVE-2025-11598 | Deferred | 未確認 | CWE-359 | In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal information in the minimized app window, even after the login sessio |
| CVE-2025-11706 | Deferred | 未確認 | CWE-79 | The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the dbstatus parameter in all versions up to, and including, 3.0.2 due to insuffici |
| CVE-2025-11725 | Deferred | 未確認 | CWE-862 | The Aruba HiSpeed Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the multiple functions in all versions up to, |
| CVE-2025-11730 | Deferred | 未確認 | CWE-78 | A post‑authentication command injection vulnerability in the Dynamic DNS (DDNS) configuration CLI command in Zyxel ATP series firmware versions from V5.35 through V5.41, USG FLEX s |
| CVE-2025-11737 | Deferred | 未確認 | CWE-79 | The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vkExUnit_sns_title' parameter in all versions up to, and including, 9.11 |
| CVE-2025-11754 | Deferred | 未確認 | CWE-862 | The GDPR Cookie Consent plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'gdpr/v1/settings' REST API endpoint in all versi |
| CVE-2025-11845 | Analyzed | 未確認 | CWE-476 | A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firm |
| CVE-2025-11846 | Analyzed | 未確認 | CWE-476 | A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware v |
| CVE-2025-11847 | Analyzed | 未確認 | CWE-476 | A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versio |
| CVE-2025-11848 | Analyzed | 未確認 | CWE-476 | A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware version |
| CVE-2025-11950 | Modified | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected X |
| CVE-2025-12027 | Deferred | 未確認 | CWE-862 | The Mesmerize Companion plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the "openPageInCustomizer" and "open |
| CVE-2025-12037 | Deferred | 未確認 | CWE-79 | The WP 404 Auto Redirect to Similar Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.5 due to ins |
| CVE-2025-12059 | Deferred | 未確認 | CWE-538 | Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly |
| CVE-2025-12062 | Deferred | 未確認 | CWE-22 | The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inclu |
| CVE-2025-12063 | Analyzed | 未確認 | CWE-639 | An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions. |
| CVE-2025-12071 | Deferred | 未確認 | CWE-639 | The Frontend User Notes plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.0 via the 'funp_ajax_modify_notes' AJAX end |
| CVE-2025-12073 | Analyzed | 未確認 | CWE-918 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions, could have |
| CVE-2025-12074 | Deferred | 未確認 | CWE-200 | The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'context_blog_modal_popup' due to insufficient restri |
| CVE-2025-12075 | Deferred | 未確認 | CWE-862 | The Order Splitter for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wos_troubleshooting' AJAX endpoint in |
| CVE-2025-12081 | Deferred | 未確認 | CWE-862 | The ACF Photo Gallery Field plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the "acf_photo_gallery_edit_save" function |
| CVE-2025-12107 | Modified | 未確認 | CWE-77, CWE-94 | The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This a |
| CVE-2025-12116 | Deferred | 未確認 | CWE-79 | The Drift theme for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and including, 1.5.0 due to insufficient input sanitization and |
| CVE-2025-12117 | Deferred | 未確認 | CWE-79 | The Renden theme for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and including, 1.8.1 due to insufficient input sanitization an |
| CVE-2025-12122 | Deferred | 未確認 | CWE-78 | The Popup Box – Easily Create WordPress Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode in all versions up to, and i |
| CVE-2025-12131 | Analyzed | 未確認 | CWE-20, CWE-617 | A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service. |
| CVE-2025-12150 | Analyzed | 未確認 | CWE-347 | A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the configured attestation policy and register untrusted or forged a |
| CVE-2025-12159 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_raw_content shortcode in all versions up to, and including, 5.4.8 due |
| CVE-2025-12172 | Deferred | 未確認 | CWE-352 | The Mailchimp List Subscribe Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. This is due to missing or incorrect |
| CVE-2025-12343 | Analyzed | 未確認 | CWE-415 | A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() function, where a task object is |
| CVE-2025-12356 | Deferred | 未確認 | CWE-862 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_change_ticket_s |
| CVE-2025-12375 | Deferred | 未確認 | CWE-918 | The Printful Integration for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.11 via the advanced size chart |
| CVE-2025-1242 | Deferred | 未確認 | CWE-798 | The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may |
| CVE-2025-12448 | Deferred | 未確認 | CWE-79 | The Smartsupp – live chat, AI shopping assistant and chatbots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code' parameter in all versions up to, and |
| CVE-2025-12451 | Deferred | 未確認 | CWE-79 | The Easy SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 4.0 due to insufficient input sani |
| CVE-2025-12474 | Analyzed | 未確認 | CWE-908 | A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-i |
| CVE-2025-12500 | Deferred | 未確認 | CWE-434 | The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to unauthenticated limited file upload in all versions up to, and including, 7.8.1. |
| CVE-2025-12575 | Analyzed | 未確認 | CWE-918 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have all |
| CVE-2025-12679 | Analyzed | 未確認 | CWE-312 | A vulnerability in Brocade SANnav before 2.4.0b prints the Password-Based Encryption (PBE) key in plaintext in the system audit log file. The vulnerability could allow a remote a |
| CVE-2025-12680 | Analyzed | 未確認 | CWE-256, CWE-312 | Brocade SANnav before Brocade SANnav 2.4.0b logs database passwords in clear text in the standby SANnav server, after disaster recovery failover. The vulnerability could allow a r |
| CVE-2025-12699 | Deferred | 未確認 | CWE-538 | The ZOLL ePCR IOS application reflects unsanitized user input into a WebView. Attacker-controlled strings placed into PCR fields (run number, incident, call sign, notes) are interp |
| CVE-2025-12707 | Deferred | 未確認 | CWE-89 | The Library Management System plugin for WordPress is vulnerable to SQL Injection via the 'bid' parameter in all versions up to, and including, 3.2.1 due to insufficient escaping o |
| CVE-2025-1272 | Deferred | 未確認 | CWE-306 | The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gai |
| CVE-2025-12755 | Deferred | 未確認 | CWE-117 | IBM MQ Operator (SC2 v3.2.0–3.8.1, LTS v2.0.0–2.0.29) and IBM‑supplied MQ Advanced container images (across affected SC2, CD, and LTS 9.3.x–9.4.x releases) contain a vulnerability |
| CVE-2025-12757 | Analyzed | 未確認 | CWE-22 | An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to. |
| CVE-2025-12772 | Analyzed | 未確認 | CWE-312 | Brocade SANnav before 2.4.0b logs the Brocade Fabric OS Switch admin password on the SANnav support save logs. When OOM occurs on a Brocade SANnav server, the call stack trace for |
| CVE-2025-12773 | Analyzed | 未確認 | CWE-209 | A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. |
| CVE-2025-12774 | Analyzed | 未確認 | CWE-312 | A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access to |
| CVE-2025-12803 | Deferred | 未確認 | CWE-80 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin 'bt_bb_tabs' shortcode in all versions up to, and including, 5.5.1 due to ins |
| CVE-2025-12811 | Deferred | 未確認 | CWE-444 | Improper Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Delinea Inc. Cloud Suite and Privileged Access Service. If you're not using the latest Server S |
| CVE-2025-12812 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Delinea Inc. Cloud Suite and Privileged Access Service. Remediation: This issue is fixed i |
| CVE-2025-12821 | Deferred | 未確認 | CWE-352 | The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 0.2.5.6 to 0.2.5.9. This is due to missing or incorrect nonce validation on the newsblo |
| CVE-2025-12845 | Deferred | 未確認 | CWE-862 | The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to unauthorized access of data that leads to privilege escalati |
| CVE-2025-12882 | Deferred | 未確認 | CWE-269 | The Clasifico Listing plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0. This is due to the plugin allowing users who are registering |
| CVE-2025-12884 | Deferred | 未確認 | CWE-284 | The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 2.0.14. This is due to the plugin not properly |
| CVE-2025-12975 | Deferred | 未確認 | CWE-862 | The CTX Feed – WooCommerce Product Feed Manager plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the woo_feed_p |
| CVE-2025-12981 | Deferred | 未確認 | CWE-269 | The Listee theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.6. This is due to a broken validation check in the bundled listee-cor |
| CVE-2025-13002 | Modified | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cro |
| CVE-2025-13004 | Modified | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Manipulating User-Controlled Variables. This |
| CVE-2025-13048 | Deferred | 未確認 | CWE-79 | The StatCounter – Free Real Time Visitor Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user's Nickname in all versions up to, and including, 2.1.0 |
| CVE-2025-13064 | Analyzed | 未確認 | CWE-248 | A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible |
| CVE-2025-13079 | Deferred | 未確認 | CWE-1241 | The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4 |
| CVE-2025-13091 | Deferred | 未確認 | CWE-15 | The Shopire theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the shopire_admin_install_plugin() function in all versions |
| CVE-2025-13096 | Analyzed | 未確認 | CWE-918 | IBM Business Automation Workflow containers V25.0.0 through V25.0.0-IF007, V24.0.1 - V24.0.1-IF007, V24.0.0 - V24.0.0-IF007 and IBM Business Automation Workflow traditional V25.0.0 |
| CVE-2025-13108 | Analyzed | 未確認 | CWE-226 | IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources. |
| CVE-2025-13113 | Deferred | 未確認 | CWE-200 | The Web Accessibility by accessiBe plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11. This is due to the `accessibe_re |
| CVE-2025-13192 | Deferred | 未確認 | CWE-89 | The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to generic SQL Injection via the multiple |
| CVE-2025-13327 | Analyzed | 未確認 | CWE-1286 | A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Pack |
| CVE-2025-13333 | Analyzed | 未確認 | CWE-358 | IBM WebSphere Application Server 9.0, and 8.5 could provide weaker than expected security during system administration of security settings. |
| CVE-2025-13348 | Deferred | 未確認 | CWE-862 | An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially craft |
| CVE-2025-13375 | Deferred | 未確認 | CWE-250 | IBM Common Cryptographic Architecture (CCA) 7.5.52 and 8.4.82 could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system. |
| CVE-2025-13379 | Analyzed | 未確認 | CWE-89 | IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, m |
| CVE-2025-13391 | Deferred | 未確認 | CWE-862 | The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability c |
| CVE-2025-13413 | Deferred | 未確認 | CWE-352 | The Country Blocker for AdSense plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation |
| CVE-2025-13416 | Deferred | 未確認 | CWE-862 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized user suspension due to a missing capability check on the pm_deactivate_us |
| CVE-2025-13431 | Deferred | 未確認 | CWE-89 | The SlimStat Analytics plugin for WordPress is vulnerable to time-based SQL Injection via the ‘args’ parameter in all versions up to, and including, 5.3.1 due to insufficient escap |
| CVE-2025-13438 | Deferred | 未確認 | CWE-352 | The Page Title, Description & Open Graph Updater plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.02. This is due to missing |
| CVE-2025-13463 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Grid component in all versions up to, and including, 5.5.3 due to insufficient |
| CVE-2025-13473 | Analyzed | 未確認 | CWE-208 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. The `django.contrib.auth.handlers.modwsgi.check_password()` function for authentication via ` |
| CVE-2025-13491 | Deferred | 未確認 | CWE-426 | IBM App Connect Enterprise Certified Container CD: 11.2.0 through 11.6.0, 12.1.0 through 12.19.0 and 12.0 LTS: 12.0.0 through 12.0.19 could allow an attacker to access sensitive fi |
| CVE-2025-13523 | Analyzed | 未確認 | CWE-79 | Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows authenticated Confluence users with malic |
| CVE-2025-13563 | Deferred | 未確認 | CWE-269 | The Lizza LMS Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'lizza_lms_pro_register_user_front_end' |
| CVE-2025-13587 | Deferred | 未確認 | CWE-20 | The Two Factor (2FA) Authentication via Email plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 1.9.8. This is because the SS |
| CVE-2025-13590 | Modified | 未確認 | CWE-434 | A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location within the deployment via a system REST API. Successful uploads may lead |
| CVE-2025-13602 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2025-13603 | Deferred | 未確認 | CWE-862 | The WP AUDIO GALLERY plugin for WordPress is vulnerable to Unauthorized Arbitrary File Read in all versions up to, and including, 2.0. This is due to insufficient capability checks |
| CVE-2025-13612 | Deferred | 未確認 | CWE-79 | The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `aigpl-gallery-album` shortcode in all versions up to, |
| CVE-2025-13617 | Deferred | 未確認 | CWE-79 | The Apollo13 Framework Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘a13_alt_link’ parameter in all versions up to, and including, 1.9.8 due |
| CVE-2025-13648 | Analyzed | 未確認 | CWE-79 | An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is required) who has the vulnerable software could introduce arbitrary |
| CVE-2025-13649 | Analyzed | 未確認 | CWE-79 | An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulner |
| CVE-2025-13650 | Analyzed | 未確認 | CWE-79 | An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulnerab |
| CVE-2025-13651 | Analyzed | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web Application Fingerprinting of sensitive data. This issue affects Zeus |
| CVE-2025-13671 | Analyzed | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session |
| CVE-2025-13672 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Reflected XSS. The vulnerab |
| CVE-2025-13673 | Deferred | 未確認 | CWE-89 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to SQL Injection via the 'coupon_code' parameter in all versions up to, and including, 3.9.6 |
| CVE-2025-13681 | Deferred | 未確認 | CWE-22 | The BFG Tools – Extension Zipper plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.7. This is due to insufficient input validation on t |
| CVE-2025-13689 | Analyzed | 未確認 | CWE-434 | IBM DataStage on Cloud Pak for Data could allow an authenticated user to execute arbitrary commands and gain access to sensitive information due to unrestricted file uploads. |
| CVE-2025-13691 | Analyzed | 未確認 | CWE-497 | IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used to impersonate other users in the system. |
| CVE-2025-13727 | Deferred | 未確認 | CWE-79 | The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, |
| CVE-2025-13732 | Deferred | 未確認 | CWE-79 | The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting |
| CVE-2025-13738 | Deferred | 未確認 | CWE-79 | The Easy Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ez-toc` shortcode in all versions up to, and including, 2.0.78 due to |
| CVE-2025-13776 | Analyzed | 未確認 | CWE-798 | Multiple Finka programs use hard-coded Firebird database credentials (shared across all instances of this software). A malicious attacker in local network who knows default credent |
| CVE-2025-13818 | Analyzed | 未確認 | CWE-367 | Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent |
| CVE-2025-13821 | Analyzed | 未確認 | CWE-200 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to sanitize sensitive data in WebSocket messages which allows authenticated users to exfiltrate pass |
| CVE-2025-13842 | Deferred | 未確認 | CWE-639 | The Breadcrumb NavXT plugin for WordPress is vulnerable to authorization bypass through user-controlled key in versions up to and including 7.5.0. This is due to the Gutenberg bloc |
| CVE-2025-13851 | Deferred | 未確認 | CWE-269 | The Buyent Classified plugin for WordPress (bundled with Buyent theme) is vulnerable to privilege escalation via user registration in all versions up to, and including, 1.0.7. This |
| CVE-2025-13864 | Deferred | 未確認 | CWE-862 | The Breeze - WordPress Cache Plugin plugin for WordPress is vulnerable to unauthorized cache clearing in all versions up to, and including, 2.2.21. This is due to the REST API endp |
| CVE-2025-13867 | Analyzed | 未確認 | CWE-1284 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due |
| CVE-2025-13881 | Deferred | 未確認 | CWE-266 | A flaw was found in Keycloak Admin API. This vulnerability allows an administrator with limited privileges to retrieve sensitive custom attributes via the /unmanagedAttributes endp |
| CVE-2025-13930 | Deferred | 未確認 | CWE-862 | The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 7.8.5. This is due to the |
| CVE-2025-13933 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-12500. Reason: This candidate is a reservation duplicate of CVE-2025-12500. Notes: All CVE user | |
| CVE-2025-13942 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system |
| CVE-2025-13943 | Analyzed | 未確認 | CWE-78 | A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticated |
| CVE-2025-13959 | Deferred | 未確認 | CWE-79 | The Filestack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'filepicker' shortcode in all versions up to, and including, 2.0.8 due to insuffici |
| CVE-2025-13965 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-12500. Reason: This candidate is a reservation duplicate of CVE-2025-12500. Notes: All CVE user | |
| CVE-2025-13973 | Deferred | 未確認 | CWE-200 | The StickEasy Protected Contact Form plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.0.2. The plugin stores spam dete |
| CVE-2025-14009 | Modified | 未確認 | CWE-94 | A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The _unzip_iter function in nltk/downloader.py uses zipfile.extractall() with |
| CVE-2025-14014 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Acces |
| CVE-2025-14040 | Deferred | 未確認 | CWE-79 | The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Call to Action' custom fields in all versions up to, and |
| CVE-2025-14055 | Deferred | 未確認 | CWE-125, CWE-191 | An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet. |
| CVE-2025-14067 | Deferred | 未確認 | CWE-862 | The Easy Form Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX actions in all versions up to, and includ |
| CVE-2025-14076 | Deferred | 未確認 | CWE-79 | The iXML – Google XML sitemap generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'iXML_email' parameter in all versions up to, and including, 0. |
| CVE-2025-14079 | Deferred | 未確認 | CWE-862 | The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to miss |
| CVE-2025-14103 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthorized us |
| CVE-2025-14142 | Deferred | 未確認 | CWE-79 | The Electric Enquiries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button' parameter of the electric-enquiry shortcode in all versions up to, and inc |
| CVE-2025-14149 | Deferred | 未確認 | CWE-79 | The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Scroller widget box link attribute in all vers |
| CVE-2025-14150 | Deferred | 未確認 | CWE-497 | IBM webMethods Integration (on prem) - Integration Server 10.15 through IS_10.15_Core_Fix2411.1 to IS_11.1_Core_Fix8 IBM webMethods Integration could disclose sensitive user inform |
| CVE-2025-14167 | Deferred | 未確認 | CWE-352 | The Remove Post Type Slug plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to incorrect nonce validation lo |
| CVE-2025-14270 | Deferred | 未確認 | CWE-862 | The OneClick Chat to Order plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.0.9. This is due to the plugin not properly verifying that |
| CVE-2025-14274 | Deferred | 未確認 | CWE-79 | The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border Hero widget's Button Link field in versions up to 2.0.1. This |
| CVE-2025-14282 | Deferred | 未確認 | CWE-266 | A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, |
| CVE-2025-14289 | Analyzed | 未確認 | CWE-80 | IBM webMethods Integration Server 12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web |
| CVE-2025-14294 | Deferred | 未確認 | CWE-306 | The Razorpay for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getCouponList() function in all versio |
| CVE-2025-14339 | Deferred | 未確認 | CWE-862 | The weMail - Email Marketing, Lead Generation, Optin Forms, Email Newsletters, A/B Testing, and Automation plugin for WordPress is vulnerable to unauthorized form deletion in all v |
| CVE-2025-14340 | Deferred | 未確認 | CWE-79 | Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator to change the admin pa |
| CVE-2025-14342 | Deferred | 未確認 | CWE-862 | The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the sq_ajax_uninstall function in all ve |
| CVE-2025-14343 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft Technology Ltd. E-Commerce Product allows Reflected XSS. Thi |
| CVE-2025-14349 | Modified | 未確認 | CWE-267, CWE-306 | Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Prope |
| CVE-2025-14350 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validate team membership when processing channel mentions which allows authenticated use |
| CVE-2025-14357 | Deferred | 未確認 | CWE-862 | The Mega Store Woocommerce theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the setup_widgets() function in core/includes |
| CVE-2025-14427 | Deferred | 未確認 | CWE-862 | The Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability |
| CVE-2025-14444 | Deferred | 未確認 | CWE-345 | The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to payment bypass due to insufficient verification |
| CVE-2025-14445 | Deferred | 未確認 | CWE-79 | The Image Hotspot by DevVN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hotspot_content' custom field meta in all versions up to, and including, 1.2.9 |
| CVE-2025-14452 | Deferred | 未確認 | CWE-79 | The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3_fname' parameter in all versions up to, and including, 3.7.5 due to insu |
| CVE-2025-14461 | Deferred | 未確認 | CWE-862 | The Xendit Payment plugin for WordPress is vulnerable to unauthorized order status manipulation in all versions up to, and including, 6.0.2. This is due to the plugin exposing a pu |
| CVE-2025-14511 | Analyzed | 未確認 | CWE-1284 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated |
| CVE-2025-14541 | Deferred | 未確認 | CWE-94 | The Lucky Wheel Giveaway plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.22 via the conditional_tags parameter. This is due to |
| CVE-2025-14547 | Deferred | 未確認 | CWE-191 | An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a |
| CVE-2025-14550 | Analyzed | 未確認 | CWE-407 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `ASGIRequest` allows a remote attacker to cause a potential denial-of-service via a crafted r |
| CVE-2025-14560 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have |
| CVE-2025-14573 | Analyzed | 未確認 | CWE-862 | Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restric |
| CVE-2025-14577 | Analyzed | 未確認 | CWE-306 | Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection. An unauthenticated remote attacker is able to execute arbitrary PHP commands by sending specially crafted r |
| CVE-2025-14592 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have |
| CVE-2025-14594 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have |
| CVE-2025-14608 | Deferred | 未確認 | CWE-862 | The WP Last Modified Info plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.5. This is due to the plugin not validati |
| CVE-2025-14689 | Analyzed | 未確認 | CWE-1284 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralizatio |
| CVE-2025-14740 | Deferred | 未確認 | CWE-732 | Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling of the C:\ProgramData\DockerDesktop directory. The installe |
| CVE-2025-14742 | Deferred | 未確認 | CWE-639 | The WP Recipe Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_search_recipes' and 'ajax_get_recipe' functions |
| CVE-2025-14778 | Deferred | 未確認 | CWE-266 | A flaw was found in Keycloak. A significant Broken Access Control vulnerability exists in the UserManagedPermissionService (UMA Protection API). When updating or deleting a UMA pol |
| CVE-2025-14799 | Deferred | 未確認 | CWE-843 | The Brevo - Email, SMS, Web Push, Chat, and more. plugin for WordPress is vulnerable to authorization bypass due to type juggling in all versions up to, and including, 3.3.0. This |
| CVE-2025-14831 | Deferred | 未確認 | CWE-407 | A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious ce |
| CVE-2025-14851 | Deferred | 未確認 | CWE-79 | The YaMaps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `yamap` shortcode parameters in all versions up to, and including, 0.6.40 due to |
| CVE-2025-14852 | Deferred | 未確認 | CWE-352 | The MDirector Newsletter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.8. This is due to missing nonce verification on |
| CVE-2025-14864 | Deferred | 未確認 | CWE-862 | The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing c |
| CVE-2025-14873 | Deferred | 未確認 | CWE-352 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.5. Th |
| CVE-2025-14876 | Deferred | 未確認 | CWE-770 | A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory all |
| CVE-2025-14892 | Deferred | 未確認 | The Prime Listing Manager WordPress plugin through 1.1 allows an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthor | |
| CVE-2025-14895 | Deferred | 未確認 | CWE-862 | The PopupKit plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.2.0. This is due to the plugin not properly verifying that a user is |
| CVE-2025-14905 | Deferred | 未確認 | CWE-122 | A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because |
| CVE-2025-14914 | Analyzed | 未確認 | CWE-22 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive containing path traversal sequences resulting in an overwri |
| CVE-2025-14963 | Undergoing Analysis | 未確認 | CWE-20 | A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bri |
| CVE-2025-14983 | Deferred | 未確認 | CWE-79 | The Advanced Custom Fields: Font Awesome Field plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 5.0.1 due to insufficient input sani |
| CVE-2025-15027 | Deferred | 未確認 | CWE-269 | The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to updat |
| CVE-2025-15030 | Deferred | 未確認 | CWE-269 | The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by |
| CVE-2025-15041 | Deferred | 未確認 | CWE-862 | The BackWPup – WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capa |
| CVE-2025-15080 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric MELSEC iQ-R Series R08PCPU, R16PCPU, R32PCPU, and R120PCPU allows an unauthenticated attacke |
| CVE-2025-15096 | Deferred | 未確認 | CWE-639 | The 'Videospirecore Theme Plugin' plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.6. This is due to the pl |
| CVE-2025-15100 | Deferred | 未確認 | CWE-269 | The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to updat |
| CVE-2025-15147 | Deferred | 未確認 | CWE-639 | The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includin |
| CVE-2025-15157 | Deferred | 未確認 | CWE-862 | The Starfish Review Generation & Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a miss |
| CVE-2025-15260 | Deferred | 未確認 | CWE-862 | The MyRewards – Loyalty Points and Rewards for WooCommerce plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 5.6.1. This is due to t |
| CVE-2025-15267 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_accordion_item shortcode in all versions up to, and including, 5.6.1 |
| CVE-2025-15268 | Deferred | 未確認 | CWE-89 | The Infility Global plugin for WordPress is vulnerable to unauthenticated SQL Injection via the 'infility_get_data' API action in all versions up to, and including, 2.14.46. This i |
| CVE-2025-15285 | Deferred | 未確認 | CWE-862 | The SEO Flow by LupsOnline plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the checkBlogAuthentication() and checkCateg |
| CVE-2025-15289 | Analyzed | 未確認 | CWE-862 | Tanium addressed an improper access controls vulnerability in Interact. |
| CVE-2025-15310 | Analyzed | 未確認 | CWE-59 | Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools. |
| CVE-2025-15311 | Analyzed | 未確認 | CWE-150 | Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance. |
| CVE-2025-15312 | Analyzed | 未確認 | CWE-116 | Tanium addressed an improper output sanitization vulnerability in Tanium Appliance. |
| CVE-2025-15313 | Analyzed | 未確認 | CWE-59 | Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS. |
| CVE-2025-15314 | Analyzed | 未確認 | CWE-59 | Tanium addressed an arbitrary file deletion vulnerability in end-user-cx. |
| CVE-2025-15315 | Analyzed | 未確認 | CWE-88 | Tanium addressed a local privilege escalation vulnerability in Tanium Module Server. |
| CVE-2025-15316 | Analyzed | 未確認 | CWE-88 | Tanium addressed a local privilege escalation vulnerability in Tanium Server. |
| CVE-2025-15317 | Analyzed | 未確認 | CWE-770 | Tanium addressed an uncontrolled resource consumption vulnerability in Tanium Server. |
| CVE-2025-15318 | Analyzed | 未確認 | CWE-59 | Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools. |
| CVE-2025-15319 | Analyzed | 未確認 | CWE-59 | Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools. |
| CVE-2025-15320 | Analyzed | 未確認 | CWE-605 | Tanium addressed a denial of service vulnerability in Tanium Client. |
| CVE-2025-15321 | Analyzed | 未確認 | CWE-426, CWE-863 | Tanium addressed an improper input validation vulnerability in Tanium Appliance. |
| CVE-2025-15323 | Analyzed | 未確認 | CWE-295 | Tanium addressed an improper certificate validation vulnerability in Tanium Appliance. |
| CVE-2025-15324 | Analyzed | 未確認 | CWE-59 | Tanium addressed a documentation issue in Engage. |
| CVE-2025-15325 | Analyzed | 未確認 | CWE-89 | Tanium addressed an improper input validation vulnerability in Discover. |
| CVE-2025-15326 | Analyzed | 未確認 | CWE-862 | Tanium addressed an improper access controls vulnerability in Patch. |
| CVE-2025-15327 | Analyzed | 未確認 | CWE-862 | Tanium addressed an improper access controls vulnerability in Deploy. |
| CVE-2025-15328 | Analyzed | 未確認 | CWE-59 | Tanium addressed an improper link resolution before file access vulnerability in Enforce. |
| CVE-2025-15329 | Analyzed | 未確認 | CWE-201 | Tanium addressed an information disclosure vulnerability in Threat Response. |
| CVE-2025-15330 | Analyzed | 未確認 | CWE-862 | Tanium addressed an improper input validation vulnerability in Deploy. |
| CVE-2025-15331 | Analyzed | 未確認 | CWE-459 | Tanium addressed an uncontrolled resource consumption vulnerability in Connect. |
| CVE-2025-15332 | Analyzed | 未確認 | CWE-532 | Tanium addressed an information disclosure vulnerability in Threat Response. |
| CVE-2025-15333 | Analyzed | 未確認 | CWE-276 | Tanium addressed an information disclosure vulnerability in Threat Response. |
| CVE-2025-15334 | Analyzed | 未確認 | CWE-276 | Tanium addressed an information disclosure vulnerability in Threat Response. |
| CVE-2025-15335 | Analyzed | 未確認 | CWE-276 | Tanium addressed an information disclosure vulnerability in Threat Response. |
| CVE-2025-15336 | Analyzed | 未確認 | CWE-276 | Tanium addressed an incorrect default permissions vulnerability in Performance. |
| CVE-2025-15337 | Analyzed | 未確認 | CWE-276 | Tanium addressed an incorrect default permissions vulnerability in Patch. |
| CVE-2025-15338 | Analyzed | 未確認 | CWE-276 | Tanium addressed an incorrect default permissions vulnerability in Partner Integration. |
| CVE-2025-15339 | Analyzed | 未確認 | CWE-276 | Tanium addressed an incorrect default permissions vulnerability in Discover. |
| CVE-2025-15340 | Analyzed | 未確認 | CWE-276 | Tanium addressed an incorrect default permissions vulnerability in Comply. |
| CVE-2025-15341 | Analyzed | 未確認 | CWE-276 | Tanium addressed an incorrect default permissions vulnerability in Benchmark. |
| CVE-2025-15342 | Analyzed | 未確認 | CWE-863 | Tanium addressed an improper access controls vulnerability in Reputation. |
| CVE-2025-15343 | Analyzed | 未確認 | CWE-276 | Tanium addressed an incorrect default permissions vulnerability in Enforce. |
| CVE-2025-15368 | Deferred | 未確認 | CWE-98 | The SportsPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.7.26 via shortcodes 'template_name' attribute. This makes it poss |
| CVE-2025-15386 | Deferred | 未確認 | The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack due to flawed regex replacement rules that can be abused by po | |
| CVE-2025-15395 | Analyzed | 未確認 | CWE-863 | IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions b |
| CVE-2025-15396 | Deferred | 未確認 | CWE-79 | The Library Viewer WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting w |
| CVE-2025-15400 | Deferred | 未確認 | CWE-862 | The OpenPix for WooCommerce WordPress plugin through 2.13.3 allows any authenticated user to trigger AJAX actions that reset payment gateway configuration options without capabilit |
| CVE-2025-15440 | Deferred | 未確認 | CWE-79 | The iONE360 configurator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Form Parameters in all versions up to, and including, 2.0.57 due to insu |
| CVE-2025-15476 | Deferred | 未確認 | CWE-862 | The The Bucketlister plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the bucketlister_do_admin_ajax() function in all v |
| CVE-2025-15477 | Deferred | 未確認 | CWE-89 | The Bucketlister plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode `category` and `id` attributes in all versions up to, and including, 0.1.5 due to in |
| CVE-2025-15482 | Deferred | 未確認 | CWE-200 | The Chapa Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.3 via 'chapa_proceed |
| CVE-2025-15483 | Deferred | 未確認 | CWE-79 | The Link Hopper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hop_name’ parameter in all versions up to, and including, 2.5 due to insufficient input s |
| CVE-2025-15487 | Deferred | 未確認 | CWE-22 | The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticate |
| CVE-2025-15491 | Deferred | 未確認 | CWE-22 | The Post Slides WordPress plugin through 1.0.1 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authentica |
| CVE-2025-15498 | Deferred | 未確認 | CWE-89 | Pro3W CMS if vulnerable to SQL injection attacks. Improper neutralization of input provided into a login form allows an unauthenticated attacker to bypass authentication and gain a |
| CVE-2025-15507 | Deferred | 未確認 | CWE-862 | The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_sync_usage() function in a |
| CVE-2025-15508 | Deferred | 未確認 | CWE-200 | The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the get_frontend_settings() |
| CVE-2025-15509 | Analyzed | 未確認 | CWE-306 | The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage. |
| CVE-2025-15520 | Deferred | 未確認 | The RegistrationMagic WordPress plugin before 6.0.7.2 checks nonces but not capabilities, allowing for the disclosure of some sensitive data to subscribers and above. | |
| CVE-2025-15524 | Deferred | 未確認 | CWE-862 | The Gallery by FooGallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax_get_gallery_info() function in all version |
| CVE-2025-15551 | Modified | 未確認 | CWE-95 | The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly |
| CVE-2025-15555 | Modified | 未確認 | CWE-119, CWE-121, CWE-787 | A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component |
| CVE-2025-15556 | Analyzed | 掲載 | CWE-494 | Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cry |
| CVE-2025-15557 | Analyzed | 未確認 | CWE-295 | An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network segment to intercept and modify encrypted d |
| CVE-2025-15559 | Analyzed | 未確認 | CWE-78 | An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime. The server API call to generate and download the WorkTime client from |
| CVE-2025-15560 | Analyzed | 未確認 | CWE-89 | An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL queries. If the Firebird backend is used, |
| CVE-2025-15561 | Analyzed | 未確認 | CWE-269 | An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges on the local system to NT Authority\SYSTEM. A malicious executable must be named |
| CVE-2025-15562 | Analyzed | 未確認 | CWE-79 | The server API endpoint /report/internet/urls reflects received data into the HTML response without applying proper encoding or filtering. This allows an attacker to execute arbitr |
| CVE-2025-15563 | Analyzed | 未確認 | CWE-862 | Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server. No authorization check is applied here. |
| CVE-2025-15564 | Analyzed | 未確認 | CWE-369, CWE-404 | A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads t |
| CVE-2025-15566 | Deferred | 未確認 | CWE-20 | A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. T |
| CVE-2025-15567 | Analyzed | 未確認 | CWE-306 | Insufficient protection mechanisms in the Health Module may lead to partial information disclosure. |
| CVE-2025-15569 | Deferred | 未確認 | CWE-426, CWE-427 | A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows. The impacted element is the function get_system_dpi of the file platform/x11/win_main.c. This manipulation causes un |
| CVE-2025-15570 | Modified | 未確認 | CWE-119, CWE-416 | A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. At |
| CVE-2025-15571 | Analyzed | 未確認 | CWE-404, CWE-476 | A security vulnerability has been detected in ckolivas lrzip up to 0.651. This vulnerability affects the function ucompthread of the file stream.c. Such manipulation leads to null |
| CVE-2025-15572 | Analyzed | 未確認 | CWE-401, CWE-404 | A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally |
| CVE-2025-15573 | Deferred | 未確認 | CWE-295 | The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (mqtt001.solaxcloud.com, TCP 8883). This all |
| CVE-2025-15574 | Deferred | 未確認 | CWE-330 | When connecting to the Solax Cloud MQTT server the username is the "registration number", which is the 10 character string printed on the SolaX Power Pocket device / the QR code on |
| CVE-2025-15575 | Deferred | 未確認 | CWE-494 | The firmware update functionality does not verify the authenticity of the supplied firmware update files. This allows attackers to flash malicious firmware update files on the devi |
| CVE-2025-15577 | Analyzed | 未確認 | CWE-22 | An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older. |
| CVE-2025-15578 | Analyzed | 未確認 | CWE-338 | Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time (which is available from HTTP response headers), a |
| CVE-2025-15579 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection. The vulnerability could lead to remote code execution, denial of service, |
| CVE-2025-15581 | Deferred | 未確認 | CWE-287 | Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploitation could result in |
| CVE-2025-15582 | Analyzed | 未確認 | CWE-285, CWE-639 | A security flaw has been discovered in detronetdip E-commerce 1.0.0. The impacted element is the function Delete/Update of the component Product Management Module. Performing a man |
| CVE-2025-15583 | Analyzed | 未確認 | CWE-79, CWE-94 | A weakness has been identified in detronetdip E-commerce 1.0.0. This affects the function get_safe_value of the file utility/function.php. Executing a manipulation can lead to cros |
| CVE-2025-15585 | Deferred | 未確認 | CWE-89 | Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to u |
| CVE-2025-15586 | Deferred | 未確認 | CWE-287 | OGP-Website installs prior git commit 52f865a4fba763594453068acf8fa9e3fc38d663 are affected by a type juggling flaw which if exploited can result in authentication bypass without k |
| CVE-2025-15589 | Analyzed | 未確認 | CWE-22 | A vulnerability was determined in MuYuCMS 2.7. Affected is the function delete_dir_file of the file application/admin/controller/Template.php of the component Template Management P |
| CVE-2025-1787 | Modified | 未確認 | CWE-346 | Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to g |
| CVE-2025-1789 | Modified | 未確認 | CWE-276 | Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected sy |
| CVE-2025-1790 | Deferred | 未確認 | CWE-250 | Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges on the affected syst |
| CVE-2025-1823 | Analyzed | 未確認 | CWE-770 | IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using specially crafted SQL query that consumes excess memory resource |
| CVE-2025-1924 | Analyzed | 未確認 | CWE-191, CWE-787 | A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets, a DoS attack may cau |
| CVE-2025-20007 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-20038 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-20066 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-20070 | Deferred | 未確認 | CWE-754 | Improper conditions check for the Intel(R) Optane(TM) PMem management software before versions CR_MGMT_02.00.00.4052, CR_MGMT_03.00.00.0538 within Ring 3: User Applications may all |
| CVE-2025-20078 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-20080 | Deferred | 未確認 | CWE-476 | Null pointer dereference in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability within Ring 0: Kernel may allow a denial of service. Network adversary with an un |
| CVE-2025-20089 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-20098 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-20106 | Deferred | 未確認 | CWE-427 | Uncontrolled search path in some software installer for some VTune(TM) Profiler software and Intel(R) oneAPI Base Toolkits before version 2025.0. within Ring 3: User Applications m |
| CVE-2025-20107 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-20110 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-2134 | Analyzed | 未確認 | CWE-410 | IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling. |
| CVE-2025-22453 | Deferred | 未確認 | CWE-20 | Improper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0.12 within Ring 3: User Applications may allow an escalation of privilege. System so |
| CVE-2025-22845 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-22849 | Deferred | 未確認 | CWE-276 | Incorrect default permissions for the Intel(R) Optane(TM) PMem management software before versions CR_MGMT_01.00.00.3584, CR_MGMT_02.00.00.4052, CR_MGMT_03.00.00.0538 within Ring 3 |
| CVE-2025-22873 | Analyzed | 未確認 | CWE-23 | It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../". For example, Root.Open("../") would open the parent directory of the |
| CVE-2025-22885 | Deferred | 未確認 | CWE-119 | Improper buffer restrictions in the firmware for the TDX Module may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexi |
| CVE-2025-2418 | Deferred | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows Phishing. This issue affects Web Application Firewall |
| CVE-2025-24300 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-24321 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-24492 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-24518 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-24524 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-24851 | Analyzed | 未確認 | CWE-248 | Uncaught exception in the firmware for some 100GbE Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS may allow a denial of service. Syste |
| CVE-2025-25049 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-25058 | Deferred | 未確認 | CWE-665 | Improper initialization for some ESXi kernel mode driver for the Intel(R) Ethernet 800-Series before version 2.2.2.0 (esxi 8.0) & 2.2.3.0 (esxi 9.0) within Ring 1: Device Drive |
| CVE-2025-25210 | Deferred | 未確認 | CWE-20 | Improper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0.12 within Ring 3: User Applications may allow an escalation of privilege. System so |
| CVE-2025-26471 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-27243 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in the firmware for some Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS may allow a denial of service. System soft |
| CVE-2025-27251 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-27535 | Analyzed | 未確認 | CWE-782 | Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet Connection E825-C. before version NVM ver. 3.84 within Ring 0: Bare Metal OS may allow a d |
| CVE-2025-27550 | Analyzed | 未確認 | CWE-497 | IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server. |
| CVE-2025-27555 | Modified | 未確認 | CWE-532 | Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sens |
| CVE-2025-27560 | Deferred | 未確認 | CWE-835 | Loop with unreachable exit condition ('infinite loop') for some Intel(R) Platform within Ring 0: Kernel may allow a denial of service. System software adversary with a privileged u |
| CVE-2025-27569 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-27572 | Deferred | 未確認 | Exposure of sensitive information during transient execution for some TDX within Ring 0: Hypervisor may allow an information disclosure. Authorized adversary with a privileged user | |
| CVE-2025-27573 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-27708 | Deferred | 未確認 | CWE-125 | Out-of-bounds read in the firmware for some Intel(R) Converged Security and Management Engine (CSME) Firmware (FW) within Ring 0: Kernel may allow an information disclosure. System |
| CVE-2025-27898 | Analyzed | 未確認 | CWE-613 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 does not invalidate session after a timeout which could allow an authenticated user to impersonate another user on the system. |
| CVE-2025-27899 | Analyzed | 未確認 | CWE-526 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that could aid in further attacks against the system. |
| CVE-2025-27900 | Analyzed | 未確認 | CWE-601 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a spec |
| CVE-2025-27901 | Analyzed | 未確認 | CWE-644 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to HTTP header injection, caused by improper validation of inp |
| CVE-2025-27903 | Analyzed | 未確認 | CWE-319 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data in a cleartext communication channel that could allow an atta |
| CVE-2025-27904 | Analyzed | 未確認 | CWE-352 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to cross-site request forgery which could allow an attacker to |
| CVE-2025-27928 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-27940 | Deferred | 未確認 | CWE-125 | Out-of-bounds read for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclosure. Software side channel adversary with a privileged user c |
| CVE-2025-27941 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-29867 | Deferred | 未確認 | CWE-843 | Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Office 2022, Hanco |
| CVE-2025-29869 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-29939 | Deferred | 未確認 | CWE-284 | Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initiali |
| CVE-2025-29946 | Deferred | 未確認 | CWE-1301 | Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in gue |
| CVE-2025-29948 | Deferred | 未確認 | CWE-1260 | Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-S |
| CVE-2025-29949 | Deferred | 未確認 | CWE-787 | Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds to corrupt Secure DRA |
| CVE-2025-29950 | Deferred | 未確認 | CWE-1274 | Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution. |
| CVE-2025-29951 | Deferred | 未確認 | CWE-121 | A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and arbitrary code executi |
| CVE-2025-29952 | Deferred | 未確認 | CWE-457 | Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in |
| CVE-2025-30266 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a d |
| CVE-2025-30269 | Analyzed | 未確認 | CWE-134 | A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerabi |
| CVE-2025-30276 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corr |
| CVE-2025-30410 | Deferred | 未確認 | CWE-306 | Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before buil |
| CVE-2025-30411 | Analyzed | 未確認 | CWE-1390 | Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acroni |
| CVE-2025-30412 | Analyzed | 未確認 | CWE-1390 | Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acroni |
| CVE-2025-30416 | Analyzed | 未確認 | CWE-862 | Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis |
| CVE-2025-30508 | Deferred | 未確認 | CWE-285 | Improper authorization in the Intel(R) Quick Assist Technology for some Intel(R) Platforms within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with |
| CVE-2025-30513 | Deferred | 未確認 | CWE-362 | Race condition for some TDX Module within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity a |
| CVE-2025-30517 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-31145 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-31358 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-31364 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-31648 | Deferred | 未確認 | CWE-229 | Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user com |
| CVE-2025-31655 | Deferred | 未確認 | CWE-276 | Incorrect default permissions for some Intel(R) Battery Life Diagnostic Tool within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary |
| CVE-2025-31942 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-31944 | Deferred | 未確認 | CWE-362 | Race condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Authorized adversary with a privileged user combined with a high c |
| CVE-2025-31990 | Deferred | 未確認 | CWE-770 | Rate limiting for certain API calls is not being enforced, making HCL Velocity vulnerable to Denial of Service (DoS) attacks. An attacker could flood the system with a large numbe |
| CVE-2025-32003 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in the firmware for some 100GbE Intel(R) Ethernet Network Adapter E810 before version cvl fw 1.7.6, cpk 1.3.7 within Ring 0: Bare Metal OS may allow a denial of |
| CVE-2025-32007 | Deferred | 未確認 | CWE-125 | Out-of-bounds read for some TDX before version tdx module 1.5.24 within Ring 0: Hypervisor may allow an information disclosure. Authorized adversary with a privileged user combined |
| CVE-2025-32008 | Deferred | 未確認 | CWE-787 | Out-of-bounds write in the firmware for the Intel(R) AMT and Intel(R) Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with |
| CVE-2025-32009 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-32058 | Deferred | 未確認 | CWE-121 | The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interface through a custom protocol. There is |
| CVE-2025-32059 | Deferred | 未確認 | CWE-121 | The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary valid |
| CVE-2025-32060 | Deferred | 未確認 | CWE-347 | The system suffers from the absence of a kernel module signature verification. If an attacker can execute commands on behalf of root user (due to additional vulnerabilities), then |
| CVE-2025-32061 | Deferred | 未確認 | CWE-121 | The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary valid |
| CVE-2025-32062 | Deferred | 未確認 | CWE-121 | The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary valid |
| CVE-2025-32063 | Deferred | 未確認 | CWE-306 | There is a misconfiguration vulnerability inside the Infotainment ECU manufactured by BOSCH. The vulnerability happens during the startup phase of a specific systemd service, and a |
| CVE-2025-32082 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-32085 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-32090 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-32092 | Analyzed | 未確認 | CWE-277 | Insecure inherited permissions for some Intel(R) Graphics Software before version 25.30.1702.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged s |
| CVE-2025-32355 | Analyzed | 未確認 | CWE-918 | Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs |
| CVE-2025-32393 | Analyzed | 未確認 | CWE-770 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6 |
| CVE-2025-32452 | Deferred | 未確認 | CWE-427 | Uncontrolled search path for some AI Playground before version 2.6.1 beta within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary wit |
| CVE-2025-32453 | Analyzed | 未確認 | CWE-276 | Incorrect default permissions for some Intel(R) Graphics Driver software within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary wit |
| CVE-2025-32467 | Deferred | 未確認 | CWE-457 | Use of uninitialized variable for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclosure. Authorized adversary with a privileged user c |
| CVE-2025-32733 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-32734 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-32735 | Deferred | 未確認 | CWE-754 | Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authen |
| CVE-2025-32739 | Analyzed | 未確認 | CWE-754 | Improper conditions check in some firmware for some Intel(R) Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged softwa |
| CVE-2025-33030 | Deferred | 未確認 | CWE-754 | Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with |
| CVE-2025-33042 | Analyzed | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Ap |
| CVE-2025-33081 | Analyzed | 未確認 | CWE-312 | IBM Concert 1.0.0 through 2.1.0 stores potentially sensitive information in log files that could be read by a local user. |
| CVE-2025-33088 | Analyzed | 未確認 | CWE-732 | IBM Concert 1.0.0 through 2.1.0 could allow a local user with specific knowledge about the system's architecture to escalate their privileges due to incorrect file permissions for |
| CVE-2025-33089 | Analyzed | 未確認 | CWE-798 | IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information or perform unauthorized actions due to the use of hard coded user credentials. |
| CVE-2025-33101 | Analyzed | 未確認 | CWE-244 | IBM Concert 1.0.0 through 2.1.0 could allow an attacker to obtain sensitive information using man in the middle techniques due to improper clearing of heap memory. |
| CVE-2025-33124 | Analyzed | 未確認 | CWE-131 | IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size. |
| CVE-2025-33130 | Analyzed | 未確認 | CWE-120 | IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on |
| CVE-2025-33135 | Deferred | 未確認 | CWE-79 | IBM Financial Transaction Manager for ACH Services and Check Services for Multi-Platform 3.0.0.0 through 3.0.5.4 Interim Fix 027 IBM Financial Transaction Manager for Check Service |
| CVE-2025-33179 | Analyzed | 未確認 | CWE-266 | NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command. A successful exploit of this vu |
| CVE-2025-33180 | Analyzed | 未確認 | CWE-77 | NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability |
| CVE-2025-33181 | Analyzed | 未確認 | CWE-77 | NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability |
| CVE-2025-33236 | Analyzed | 未確認 | CWE-94 | NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability might lead to code |
| CVE-2025-33239 | Analyzed | 未確認 | CWE-94 | NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lea |
| CVE-2025-33240 | Analyzed | 未確認 | CWE-94 | NVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might l |
| CVE-2025-33241 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file. A successful exploit of this vulnerability |
| CVE-2025-33243 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments. A successful exploit of this vulnerability might lea |
| CVE-2025-33245 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, esca |
| CVE-2025-33246 | Analyzed | 未確認 | CWE-77 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a configur |
| CVE-2025-33249 | Analyzed | 未確認 | CWE-77 | NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection. A succe |
| CVE-2025-33250 | Analyzed | 未確認 | CWE-94 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial |
| CVE-2025-33251 | Analyzed | 未確認 | CWE-94 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial |
| CVE-2025-33252 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial |
| CVE-2025-33253 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of |
| CVE-2025-3525 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have, under certain circumstance |
| CVE-2025-35960 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-35961 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-35962 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-35976 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-35992 | Deferred | 未確認 | CWE-754 | Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authen |
| CVE-2025-35993 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-35997 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-35998 | Deferred | 未確認 | CWE-1220, CWE-1299 | Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some Intel(R) Platforms within Ring 0: Kernel may allow an escalation of p |
| CVE-2025-35999 | Deferred | 未確認 | CWE-732 | Incorrect permission assignment for critical resource for some System Firmware Update Utility (SysFwUpdt) for Intel(R) Server Boards and Intel(R) Server Systems Based before versio |
| CVE-2025-36018 | Analyzed | 未確認 | CWE-352 | IBM Concert 1.0.0 through 2.1.0 for Z hub component is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmit |
| CVE-2025-36019 | Analyzed | 未確認 | CWE-79 | IBM Concert 1.0.0 through 2.1.0 for Z hub framework is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code |
| CVE-2025-36033 | Analyzed | 未確認 | CWE-79 | IBM Engineering Lifecycle Management - Global Configuration Management 7.0.3 through 7.0.3 Interim Fix 017, and 7.1.0 through 7.1.0 Interim Fix 004 IBM Global Configuration Managem |
| CVE-2025-36094 | Analyzed | 未確認 | CWE-1284 | IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 could allow an authent |
| CVE-2025-36183 | Analyzed | 未確認 | CWE-434 | IBM watsonx.data 2.2 through 2.2.1 IBM Lakehouse could allow a privileged user to upload malicious files that could be executed server to modify limited files or data. |
| CVE-2025-36194 | Analyzed | 未確認 | CWE-1262 | IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific s |
| CVE-2025-36238 | Analyzed | 未確認 | CWE-497 | IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sen |
| CVE-2025-36243 | Analyzed | 未確認 | CWE-918 | IBM Concert 1.0.0 through 2.1.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potenti |
| CVE-2025-36247 | Analyzed | 未確認 | CWE-611 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 is vulnerable to an XML external entity injection (XXE) attack whe |
| CVE-2025-36253 | Analyzed | 未確認 | CWE-759 | IBM Concert 1.0.0 through 2.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
| CVE-2025-36348 | Analyzed | 未確認 | CWE-209 | IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7 |
| CVE-2025-36376 | Analyzed | 未確認 | CWE-613 | IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the syste |
| CVE-2025-36377 | Analyzed | 未確認 | CWE-613 | IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the syste |
| CVE-2025-36379 | Analyzed | 未確認 | CWE-326 | IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informa |
| CVE-2025-36425 | Analyzed | 未確認 | CWE-256 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to obtain sensitive information |
| CVE-2025-36436 | Analyzed | 未確認 | CWE-79 | IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 is vulnerable to stor |
| CVE-2025-36511 | Deferred | 未確認 | CWE-276 | Incorrect default permissions for some Intel(R) Memory and Storage Tool before version 2.5.2 within Ring 3: User Applications may allow an escalation of privilege. System software |
| CVE-2025-36517 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36522 | Deferred | 未確認 | CWE-276 | Incorrect default permissions for some Intel(R) Chipset Software before version 10.1.20266.8668 or later. within Ring 3: User Applications may allow an escalation of privilege. Sys |
| CVE-2025-36523 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36524 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36526 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36532 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36534 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36538 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36542 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36545 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36552 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36597 | Deferred | 未確認 | CWE-22 | Dell Avamar, versions prior to 19.12 with patch 338905, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Security. A |
| CVE-2025-36598 | Deferred | 未確認 | CWE-22 | Dell Avamar, versions prior to 19.12 with patch 338905, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Security. A |
| CVE-2025-40538 | Analyzed | 未確認 | CWE-269 | A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privi |
| CVE-2025-40539 | Analyzed | 未確認 | CWE-704 | A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requir |
| CVE-2025-40540 | Analyzed | 未確認 | CWE-704 | A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requir |
| CVE-2025-40541 | Analyzed | 未確認 | CWE-639, CWE-704 | An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account. |
| CVE-2025-40587 | Deferred | 未確認 | CWE-79 | A vulnerability has been identified in Polarion V2404 (All versions < V2404.5), Polarion V2410 (All versions < V2410.2). The affected application allows arbitrary JavaScript code b |
| CVE-2025-40697 | Deferred | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in '/index.php' in Lewe WebMeasure, which allows remote attackers to execute arbitrary code through the 'page' parameter. This vu |
| CVE-2025-40701 | Deferred | 未確認 | CWE-79 | Reflected Cross-Site Scripting vulnerability in SOTESHOP, version 8.3.4. THis vulnerability allows an attacker execute JavaScript code in the victim's browser when a malicious URL |
| CVE-2025-40905 | Analyzed | 未確認 | CWE-338 | WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. |
| CVE-2025-40932 | Analyzed | 未確認 | CWE-338, CWE-340 | Apache::SessionX versions through 2.01 for Perl create insecure session id. Apache::SessionX generates session ids insecurely. The default session id generator in Apache::SessionX |
| CVE-2025-40986 | Deferred | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in PideTuCita. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a mali |
| CVE-2025-41002 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in Infoticketing. This vulnerability allows an unauthenticated attacker to retrieve, create, update, and delete the database by sending a POST request |
| CVE-2025-41023 | Deferred | 未確認 | CWE-287 | An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability allows an attacker to bypass authentication mechanisms. Once inside the web applicat |
| CVE-2025-41065 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability type in LUNA software v7.5.5.6. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by inyectin |
| CVE-2025-41085 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability type in Apidog in the version 2.7.15, where SVG image uploads are not properly sanitized. This allows attackers to embed malicious |
| CVE-2025-41117 | Modified | 未確認 | CWE-79 | Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entere |
| CVE-2025-43403 | Modified | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26. An app may be able to access |
| CVE-2025-43417 | Modified | 未確認 | CWE-22 | A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access user-sensi |
| CVE-2025-43537 | Modified | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2. Restoring a maliciously crafted backup |
| CVE-2025-4521 | Deferred | 未確認 | CWE-285 | The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the idonate_donor_ |
| CVE-2025-46290 | Modified | 未確認 | CWE-693, CWE-703 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Ta |
| CVE-2025-46300 | Modified | 未確認 | CWE-119 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS |
| CVE-2025-46301 | Modified | 未確認 | CWE-119 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS |
| CVE-2025-46302 | Modified | 未確認 | CWE-119 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS |
| CVE-2025-46303 | Modified | 未確認 | CWE-119 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS |
| CVE-2025-46304 | Modified | 未確認 | CWE-400 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS |
| CVE-2025-46305 | Modified | 未確認 | CWE-119 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS |
| CVE-2025-46310 | Modified | 未確認 | CWE-269 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26. An attacker with root privileges may b |
| CVE-2025-46320 | Analyzed | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully a |
| CVE-2025-46651 | Analyzed | 未確認 | CWE-918 | Tiny File Manager through 2.6 contains a server-side request forgery (SSRF) vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attack |
| CVE-2025-47205 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl |
| CVE-2025-47209 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a d |
| CVE-2025-47358 | Analyzed | 未確認 | CWE-416 | Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently. |
| CVE-2025-47359 | Analyzed | 未確認 | CWE-416 | Memory Corruption when multiple threads simultaneously access a memory free API. |
| CVE-2025-47363 | Analyzed | 未確認 | CWE-190 | Memory corruption when calculating oversized partition sizes without proper checks. |
| CVE-2025-47364 | Analyzed | 未確認 | CWE-190 | Memory corruption while calculating offset from partition start point. |
| CVE-2025-47366 | Analyzed | 未確認 | CWE-749 | Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input. |
| CVE-2025-47397 | Analyzed | 未確認 | CWE-401 | Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors. |
| CVE-2025-47398 | Analyzed | 未確認 | CWE-416 | Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers. |
| CVE-2025-47399 | Analyzed | 未確認 | CWE-120 | Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters. |
| CVE-2025-47402 | Analyzed | 未確認 | CWE-125, CWE-126 | Transient DOS when processing a received frame with an excessively large authentication information element. |
| CVE-2025-47904 | Modified | 未確認 | CWE-494 | Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5. |
| CVE-2025-47911 | Analyzed | 未確認 | The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides | |
| CVE-2025-47915 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2025-48019 | Analyzed | 未確認 | CWE-617 | A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software st |
| CVE-2025-48020 | Analyzed | 未確認 | CWE-617 | A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software st |
| CVE-2025-48021 | Analyzed | 未確認 | CWE-191 | A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software st |
| CVE-2025-48022 | Analyzed | 未確認 | CWE-130 | A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software st |
| CVE-2025-48023 | Analyzed | 未確認 | CWE-617 | A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software st |
| CVE-2025-48503 | Deferred | 未確認 | CWE-427 | A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. |
| CVE-2025-48508 | Deferred | 未確認 | CWE-1245 | Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual machine to control reset operation potentially causing host |
| CVE-2025-48509 | Deferred | 未確認 | CWE-665 | Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a l |
| CVE-2025-48514 | Deferred | 未確認 | CWE-1220 | Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confiden |
| CVE-2025-48515 | Deferred | 未確認 | CWE-190 | Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting i |
| CVE-2025-48517 | Deferred | 未確認 | CWE-1220 | Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SE |
| CVE-2025-48518 | Deferred | 未確認 | CWE-787 | Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service. |
| CVE-2025-48722 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a d |
| CVE-2025-48723 | Analyzed | 未確認 | CWE-120, CWE-122 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or cr |
| CVE-2025-48724 | Analyzed | 未確認 | CWE-120, CWE-122 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or cr |
| CVE-2025-48725 | Analyzed | 未確認 | CWE-120, CWE-121 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerabili |
| CVE-2025-4960 | Deferred | 未確認 | CWE-863 | The com.epson.InstallNavi.helper tool, deployed with the EPSON printer driver installer, contains a local privilege escalation vulnerability due to multiple flaws in its implementa |
| CVE-2025-50180 | Analyzed | 未確認 | CWE-918 | esm.sh is a no-build content delivery network (CDN) for web development. In version 136, esm.sh is vulnerable to a full-response SSRF, allowing an attacker to retrieve information |
| CVE-2025-50857 | Deferred | 未確認 | CWE-22 | ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload |
| CVE-2025-52436 | Analyzed | 未確認 | CWE-79 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSand |
| CVE-2025-52533 | Deferred | 未確認 | CWE-1191 | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity. |
| CVE-2025-52534 | Deferred | 未確認 | CWE-1284 | Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity. |
| CVE-2025-52536 | Deferred | 未確認 | CWE-1231 | Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity. |
| CVE-2025-52541 | Deferred | 未確認 | CWE-427 | A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. |
| CVE-2025-52603 | Analyzed | 未確認 | CWE-213 | HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of |
| CVE-2025-52623 | Analyzed | 未確認 | CWE-522 | HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow autocomplete on password fields may lead to unintended storage |
| CVE-2025-52626 | Analyzed | 未確認 | CWE-78 | A Potential Command Injection vulnerability in HCL AION. An This can allow unintended command execution, potentially leading to unauthorized actions on the underlying system.Thi |
| CVE-2025-52627 | Analyzed | 未確認 | CWE-732 | Root File System Not Mounted as Read-Only configuration vulnerability. This can allow unintended modifications to critical system files, potentially increasing the risk of system c |
| CVE-2025-52628 | Analyzed | 未確認 | CWE-1275 | HCL AION is affected by a Cookie with Insecure, Improper, or Missing SameSite vulnerability. This can allow cookies to be sent in cross-site requests, potentially increasing expos |
| CVE-2025-52629 | Analyzed | 未確認 | CWE-1032 | HCL AION is susceptible to Missing Content-Security-Policy. An The absence of a CSP header may increase the risk of cross-site scripting and other content injection attacks by al |
| CVE-2025-52631 | Analyzed | 未確認 | CWE-200 | HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. This can allow insecure connections, potentially exposing the application |
| CVE-2025-52633 | Analyzed | 未確認 | CWE-539 | HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability. It is storing sensitive session data in persistent cookies may increase the risk |
| CVE-2025-52744 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Inpersttion For Theme err-our-team allows Code Injection.This issue affects Inpersttion For T |
| CVE-2025-52868 | Analyzed | 未確認 | CWE-120, CWE-122 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or cr |
| CVE-2025-52869 | Analyzed | 未確認 | CWE-120, CWE-122 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or cr |
| CVE-2025-52870 | Analyzed | 未確認 | CWE-120, CWE-122 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or cr |
| CVE-2025-5319 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DI |
| CVE-2025-53217 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in staviravn AIO WP Builder all-in-one-wp-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AIO |
| CVE-2025-53228 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jezza101 bbpress Simple Advert Units bbpress-simple-advert-units allows Reflec |
| CVE-2025-53231 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevstudio Easy Taxonomy Images easy-taxonomy-images allows Stored XSS.This i |
| CVE-2025-53233 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RylanH Storyform storyform allows Reflected XSS.This issue affects Storyform: |
| CVE-2025-53237 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soflyy WP Wizard Cloak wp-wizard-cloak allows Reflected XSS.This issue affects |
| CVE-2025-5329 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection. This iss |
| CVE-2025-53598 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a d |
| CVE-2025-54146 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a d |
| CVE-2025-54147 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a d |
| CVE-2025-54148 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a d |
| CVE-2025-54149 | Analyzed | 未確認 | CWE-400, CWE-770, CWE-789 | An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to l |
| CVE-2025-54150 | Analyzed | 未確認 | CWE-400, CWE-770, CWE-789 | An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to l |
| CVE-2025-54151 | Analyzed | 未確認 | CWE-400, CWE-770, CWE-789 | An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to l |
| CVE-2025-54152 | Analyzed | 未確認 | CWE-823 | A use of out-of-range pointer offset vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to |
| CVE-2025-54155 | Analyzed | 未確認 | CWE-770 | An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then |
| CVE-2025-54161 | Analyzed | 未確認 | CWE-770 | An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then |
| CVE-2025-54162 | Analyzed | 未確認 | CWE-22, CWE-73 | A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the |
| CVE-2025-54163 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to |
| CVE-2025-54169 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret |
| CVE-2025-54170 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret d |
| CVE-2025-54514 | Deferred | 未確認 | CWE-1189 | Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity. |
| CVE-2025-54519 | Deferred | 未確認 | CWE-427 | A DLL hijacking vulnerability in Doc Nav could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. |
| CVE-2025-54756 | Deferred | 未確認 | CWE-1392 | BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of the device informati |
| CVE-2025-55018 | Modified | 未確認 | CWE-444 | An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7 |
| CVE-2025-55210 | Analyzed | 未確認 | CWE-270 | FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk. Prior to 17.0.5 and 16.0.17, FreePBX module api (PBX API) is vulnerable to privilege escal |
| CVE-2025-55853 | Analyzed | 未確認 | CWE-918 | SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery (SSRF). The PDF converter function does not check if internal or external resources are requested in th |
| CVE-2025-56605 | Deferred | 未確認 | CWE-79 | A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperl |
| CVE-2025-56647 | Deferred | 未確認 | CWE-1385 | npm @farmfe/core before 1.7.6 is Missing Origin Validation in WebSocket. The development (hot module reloading) server does not validate origin when connecting to a WebSocket clien |
| CVE-2025-57529 | Analyzed | 未確認 | CWE-89 | YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthent |
| CVE-2025-57707 | Analyzed | 未確認 | CWE-96 | An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to affect File Station 5. If a remote attacker gains a u |
| CVE-2025-57708 | Analyzed | 未確認 | CWE-770 | An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit th |
| CVE-2025-57709 | Analyzed | 未確認 | CWE-122, CWE-787 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or cr |
| CVE-2025-57710 | Analyzed | 未確認 | CWE-770 | An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then |
| CVE-2025-57711 | Analyzed | 未確認 | CWE-770 | An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then |
| CVE-2025-57713 | Analyzed | 未確認 | CWE-1390 | A weak authentication vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to gain sensitive information. We have alre |
| CVE-2025-5781 | Analyzed | 未確認 | CWE-532 | Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affect |
| CVE-2025-58077 | Modified | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execut |
| CVE-2025-58182 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2025-58184 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2025-58190 | Analyzed | 未確認 | CWE-835 | The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides spec |
| CVE-2025-58340 | Analyzed | 未確認 | CWE-770 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is u |
| CVE-2025-58341 | Analyzed | 未確認 | CWE-770 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is u |
| CVE-2025-58342 | Analyzed | 未確認 | CWE-770 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is u |
| CVE-2025-58343 | Modified | 未確認 | CWE-770 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is u |
| CVE-2025-58344 | Analyzed | 未確認 | CWE-770 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is u |
| CVE-2025-58345 | Modified | 未確認 | CWE-770 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is u |
| CVE-2025-58346 | Modified | 未確認 | CWE-770 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is u |
| CVE-2025-58347 | Modified | 未確認 | CWE-770 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is u |
| CVE-2025-58348 | Modified | 未確認 | CWE-770 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is u |
| CVE-2025-58379 | Analyzed | 未確認 | CWE-250 | Brocade Fabric OS before 9.2.1 has a vulnerability that could allow a local authenticated attacker to reveal command line passwords using commands that may expose higher privilege |
| CVE-2025-58380 | Analyzed | 未確認 | CWE-35 | A vulnerability in Brocade Fabric OS before 9.2.1 could allow an authenticated attacker with admin privileges using the shell command “grep” to modify the path variables and move u |
| CVE-2025-58381 | Analyzed | 未確認 | CWE-35 | A vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an authenticated attacker with admin privileges using the shell commands “source, ping6, sleep, disown, wait to m |
| CVE-2025-58382 | Analyzed | 未確認 | CWE-305 | A vulnerability in the secure configuration of authentication and management services in Brocade Fabric OS before Fabric OS 9.2.1c2 could allow an authenticated, remote attacker |
| CVE-2025-58383 | Analyzed | 未確認 | CWE-250 | A vulnerability in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security control |
| CVE-2025-58455 | Modified | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execut |
| CVE-2025-58466 | Analyzed | 未確認 | CWE-457 | A use of uninitialized variable vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then |
| CVE-2025-58467 | Analyzed | 未確認 | CWE-23 | A relative path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the co |
| CVE-2025-58470 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of |
| CVE-2025-58471 | Analyzed | 未確認 | CWE-770 | An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then |
| CVE-2025-58472 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to |
| CVE-2025-59023 | Analyzed | 未確認 | CWE-294 | Crafted delegations or IP fragments can poison cached delegations in Recursor. |
| CVE-2025-59024 | Analyzed | 未確認 | CWE-345 | Crafted delegations or IP fragments can poison cached delegations in Recursor. |
| CVE-2025-59386 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl |
| CVE-2025-59439 | Analyzed | 未確認 | CWE-400 | An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Regi |
| CVE-2025-59482 | Modified | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execut |
| CVE-2025-59487 | Modified | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execut |
| CVE-2025-59793 | Analyzed | 未確認 | CWE-35 | Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able to upload files. However, the applicati |
| CVE-2025-59818 | Analyzed | 未確認 | CWE-77 | This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file. |
| CVE-2025-59819 | Deferred | 未確認 | CWE-22 | This vulnerability allows authenticated attackers to read an arbitrary file by changing a filepath parameter into an internal system path. |
| CVE-2025-59873 | Deferred | 未確認 | CWE-598 | An information exposure vulnerability exists in Vulnerability in HCL Software ZIE for Web. The application transmits sensitive session tokens and authentication identifiers withi |
| CVE-2025-59902 | Deferred | 未確認 | CWE-79 | HTML injection vulnerability in NICE Chat. This vulnerability allows an attacker to inject and render arbitrary HTML content in email transcripts by modifying the 'firstName' and ' |
| CVE-2025-59903 | Analyzed | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, where uploaded SVG images are not properly sanitized. This allows attackers to embed malicious scripts within SVG files |
| CVE-2025-59904 | Analyzed | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint. This issue allows malicious scripts to be |
| CVE-2025-59905 | Analyzed | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’. This flaw allows the i |
| CVE-2025-59920 | Deferred | 未確認 | CWE-89 | When hours are entered in time@work, version 7.0.5, it performs a query to display the projects assigned to the user. If the query URL is copied and opened in a new browser window, |
| CVE-2025-60035 | Analyzed | 未確認 | CWE-502 | A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows an attacker t |
| CVE-2025-60036 | Analyzed | 未確認 | CWE-502 | A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows an attacker to |
| CVE-2025-60037 | Analyzed | 未確認 | CWE-502 | A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing mali |
| CVE-2025-60038 | Analyzed | 未確認 | CWE-502 | A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing mali |
| CVE-2025-60087 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nenad Obradovic Extensive VC Addons for WPBakery page build |
| CVE-2025-6010 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-60183 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Stored XSS.This issu |
| CVE-2025-60865 | Analyzed | 未確認 | CWE-284 | Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component. |
| CVE-2025-61143 | Modified | 未確認 | CWE-476 | libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c. |
| CVE-2025-61144 | Modified | 未確認 | CWE-119 | libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. |
| CVE-2025-61145 | Modified | 未確認 | CWE-415 | libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c. |
| CVE-2025-61146 | Analyzed | 未確認 | CWE-401 | saitoha libsixel until v1.8.7 was discovered to contain a memory leak via the component malloc_stub.c. |
| CVE-2025-61147 | Analyzed | 未確認 | CWE-120 | strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decoder_context::compute_framedrop_table(). |
| CVE-2025-61506 | Analyzed | 未確認 | CWE-434 | An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upload endpoint. |
| CVE-2025-61634 | Analyzed | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Rest/Handler/PageHTMLHandler.Php. This issue affects MediaWiki: from |
| CVE-2025-61635 | Deferred | 未確認 | Vulnerability in Wikimedia Foundation ConfirmEdit. This vulnerability is associated with program files includes/FancyCaptcha/ApiFancyCaptchaReload.Php. This issue affects ConfirmE | |
| CVE-2025-61636 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-61637 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-61638 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid. This vuln |
| CVE-2025-61639 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/Man |
| CVE-2025-61640 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-61641 | Analyzed | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects MediaWiki: from * before |
| CVE-2025-61642 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-61643 | Analyzed | 未確認 | CWE-212 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifier.Php. This issue affects Medi |
| CVE-2025-61644 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-61645 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-61646 | Analyzed | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. This issue affects MediaWiki: |
| CVE-2025-61647 | Deferred | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Api/Rest/Handler/UserInfoHandler.Php. This issue affects CheckUser: from a |
| CVE-2025-61648 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with p |
| CVE-2025-61649 | Deferred | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser: f |
| CVE-2025-61650 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with p |
| CVE-2025-61651 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with p |
| CVE-2025-61652 | Deferred | 未確認 | CWE-20 | Vulnerability in Wikimedia Foundation DiscussionTools.This issue affects DiscussionTools: from * before 1.43.4, 1.44.1. |
| CVE-2025-61653 | Deferred | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation TextExtracts. This vulnerability is associated with program files includes/ApiQueryExtracts.Php. This issue affects TextExtracts: from * befo |
| CVE-2025-61654 | Deferred | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation Thanks. This vulnerability is associated with program files includes/ThanksQueryHelper.Php. This issue affects Thanks: from * before 1.43.4, |
| CVE-2025-61655 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated wit |
| CVE-2025-61656 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated wit |
| CVE-2025-61657 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with prog |
| CVE-2025-61658 | Analyzed | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager.Php. This issue affects Check |
| CVE-2025-61732 | Modified | 未確認 | CWE-94 | A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary. |
| CVE-2025-61879 | Analyzed | 未確認 | CWE-284, CWE-73 | In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism. |
| CVE-2025-61880 | Analyzed | 未確認 | CWE-502 | In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution. |
| CVE-2025-61917 | Analyzed | 未確認 | CWE-200, CWE-668 | n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe() and Buffer.allocUnsafeSlow() in the task runner allowed u |
| CVE-2025-61944 | Modified | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execut |
| CVE-2025-61969 | Deferred | 未確認 | CWE-732 | Incorrect permission assignment in AMD µProf may allow a local user-privileged attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. |
| CVE-2025-61982 | Deferred | 未確認 | CWE-94 | An arbitrary code execution vulnerability exists in the Code Stream directive functionality of OpenCFD OpenFOAM 2506. A specially crafted OpenFOAM simulation file can lead to arbit |
| CVE-2025-61983 | Modified | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execut |
| CVE-2025-6208 | Deferred | 未確認 | CWE-400 | The `SimpleDirectoryReader` component in `llama_index.core` version 0.12.23 suffers from uncontrolled memory consumption due to a resource management flaw. The vulnerability arises |
| CVE-2025-62183 | Deferred | 未確認 | CWE-79 | Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given ex |
| CVE-2025-62326 | Analyzed | 未確認 | CWE-79 | HCL Digital Experience is susceptible to stored cross-site scripting (XSS) in the administrative user interface which would require elevated privileges to exploit. |
| CVE-2025-62404 | Modified | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execut |
| CVE-2025-62405 | Modified | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execut |
| CVE-2025-62439 | Deferred | 未確認 | CWE-940 | An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7. |
| CVE-2025-62501 | Modified | 未確認 | CWE-322 | SSH Hostkey misconfiguration vulnerability in Archer AX53 and Archer BE3600 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the |
| CVE-2025-62512 | Analyzed | 未確認 | CWE-204 | Piwigo is an open source photo gallery application for the web. In version 15.5.0 and likely earlier 15.x releases, the password reset functionality in Piwigo allows an unauthentic |
| CVE-2025-62599 | Modified | 未確認 | CWE-190, CWE-789 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1, wh |
| CVE-2025-62600 | Modified | 未確認 | CWE-190, CWE-789 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1, wh |
| CVE-2025-62601 | Analyzed | 未確認 | CWE-122, CWE-787 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the securit |
| CVE-2025-62602 | Analyzed | 未確認 | CWE-122, CWE-787 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the securit |
| CVE-2025-62603 | Analyzed | 未確認 | CWE-125 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ParticipantGenericMessage is the DDS Security control-messag |
| CVE-2025-62615 | Analyzed | 未確認 | CWE-918 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6 |
| CVE-2025-62616 | Analyzed | 未確認 | CWE-918 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6 |
| CVE-2025-62673 | Modified | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in Archer AX53 v1.0 and AX12 v1.0 (tdpserver modules) allows adjacent attackers to cause a segmentation fault or potentially execute arbitr |
| CVE-2025-62676 | Analyzed | 未確認 | CWE-59 | An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 |
| CVE-2025-62799 | Analyzed | 未確認 | CWE-122, CWE-787 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, a heap buffer ov |
| CVE-2025-62853 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents o |
| CVE-2025-62854 | Analyzed | 未確認 | CWE-400 | An uncontrolled resource consumption vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to |
| CVE-2025-62855 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the c |
| CVE-2025-62856 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the c |
| CVE-2025-62878 | Deferred | 未確認 | CWE-23 | A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining a |
| CVE-2025-63354 | Modified | 未確認 | CWE-79 | Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject |
| CVE-2025-63372 | Analyzed | 未確認 | CWE-22 | Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functional |
| CVE-2025-63409 | Modified | 未確認 | CWE-284 | Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator cr |
| CVE-2025-63421 | Deferred | 未確認 | CWE-94 | An issue in filosoft Comerc.32 Commercial Invoicing v.16.0.0.3 allows a local attacker to execute arbitrary code via the comeinst.exe file |
| CVE-2025-63624 | Analyzed | 未確認 | CWE-89 | SQL Injection vulnerability in Shandong Kede Electronics Co., Ltd IoT smart water meter monitoring platform v.1.0 allows a remote attacker to execute arbitrary code via the imei_li |
| CVE-2025-63945 | Analyzed | 未確認 | CWE-59 | A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs with elevated privileges. Howev |
| CVE-2025-63946 | Analyzed | 未確認 | CWE-59 | A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges. H |
| CVE-2025-6397 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ankara Hosting Website Design Website Software allows Reflected XSS. T |
| CVE-2025-64074 | Deferred | 未確認 | CWE-22 | A path-traversal vulnerability in the logout functionality of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote attackers to delete arbitrary files on the host by su |
| CVE-2025-64075 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote attackers to bypass authentication and perform admini |
| CVE-2025-64098 | Analyzed | 未確認 | CWE-125, CWE-190 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the securit |
| CVE-2025-64111 | Analyzed | 未確認 | CWE-78 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, due to the insufficient patch for CVE-2024-56731, it's still possible to update files in the .git direc |
| CVE-2025-64157 | Modified | 未確認 | CWE-134 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0 all versi |
| CVE-2025-64175 | Analyzed | 未確認 | CWE-287 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, Gogs’ 2FA recovery code validation does not scope codes by user, enabling cross-account bypass. If an a |
| CVE-2025-64438 | Analyzed | 未確認 | CWE-835 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, a remotely trigg |
| CVE-2025-64487 | Analyzed | 未確認 | CWE-269 | Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to incon |
| CVE-2025-6460 | Deferred | 未確認 | CWE-79 | The Display During Conditional Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 1.2 due |
| CVE-2025-64712 | Analyzed | 未確認 | CWE-22, CWE-73 | The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version |
| CVE-2025-64999 | Modified | 未確認 | CWE-79 | Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicio |
| CVE-2025-65017 | Analyzed | 未確認 | CWE-200, CWE-703 | Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private data exports can lead to data leaks in ca |
| CVE-2025-65077 | Deferred | 未確認 | CWE-22 | A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to ex |
| CVE-2025-65078 | Deferred | 未確認 | CWE-426 | An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to exe |
| CVE-2025-65079 | Deferred | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execu |
| CVE-2025-65080 | Deferred | 未確認 | CWE-843 | A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary |
| CVE-2025-65081 | Deferred | 未確認 | CWE-125 | An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbi |
| CVE-2025-65127 | Deferred | 未確認 | CWE-287 | A lack of session validation in the web API component of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote unauthenticated attackers to access administrative informa |
| CVE-2025-65128 | Deferred | 未確認 | CWE-287 | A missing authentication mechanism in the web management API components of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows unauthenticated attackers on the local network |
| CVE-2025-65480 | Deferred | 未確認 | CWE-78 | An issue was discovered in Pacom Unison Client 5.13.1. Authenticated users can inject malicious scripts in the Report Templates which are executed when certain script conditions ar |
| CVE-2025-65519 | Analyzed | 未確認 | CWE-674 | mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processing. The application fails to validate nesting depth during pa |
| CVE-2025-65715 | Analyzed | 未確認 | CWE-94 | An issue in the code-runner.executorMap setting of Visual Studio Code Extensions Code Runner v0.12.2 allows attackers to execute arbitrary code when opening a crafted workspace. |
| CVE-2025-65716 | Analyzed | 未確認 | CWE-94 | An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file. |
| CVE-2025-65717 | Modified | 未確認 | CWE-200, CWE-601, CWE-79 | An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page. |
| CVE-2025-65753 | Deferred | 未確認 | CWE-295 | An issue in the TLS certification mechanism of Guardian Gryphon v01.06.0006.22 allows attackers to execute commands as root. |
| CVE-2025-65791 | Modified | 未確認 | CWE-78 | ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() function. NOTE: this is disputed |
| CVE-2025-65875 | Analyzed | 未確認 | CWE-434 | An arbitrary file upload vulnerability in the AddFont() function of FPDF v1.86 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file. |
| CVE-2025-6589 | Deferred | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php. This issue affects MediaWiki: >= |
| CVE-2025-6590 | Deferred | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fi |
| CVE-2025-6591 | Deferred | 未確認 | CWE-79 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiFeedContributions.Php. This issue affects MediaWiki: from * be |
| CVE-2025-6592 | Deferred | 未確認 | CWE-284 | Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9 |
| CVE-2025-65923 | Analyzed | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability was discovered within the CSV import mechanism of ERPNext thru 15.88.1 when using the Update Existing Recordsoption. An attacker c |
| CVE-2025-65924 | Modified | 未確認 | CWE-80 | ERPNext thru 15.88.1 does not sanitize or remove certain HTML tags specifically `<a>` hyperlinks in fields that are intended for plain text. Although JavaScript is blocked (prevent |
| CVE-2025-6593 | Deferred | 未確認 | CWE-200 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/user/User.Php. This issue affects MediaWiki: from 1.27.0 before 1.39. |
| CVE-2025-6594 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-6595 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MultimediaViewer.This issue affects MultimediaView |
| CVE-2025-6596 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with prog |
| CVE-2025-6597 | Deferred | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects MediaWiki: from * before 1.3 |
| CVE-2025-65995 | Analyzed | 未確認 | CWE-209 | When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values (such as sec |
| CVE-2025-66274 | Modified | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl |
| CVE-2025-66277 | Analyzed | 未確認 | CWE-59 | A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to traverse the file syst |
| CVE-2025-66278 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents o |
| CVE-2025-66374 | Modified | 未確認 | CWE-269 | CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through policy elevation of an Administration task. |
| CVE-2025-66480 | Analyzed | 未確認 | CWE-22, CWE-434 | Wildfire IM is an instant messaging and real-time audio/video solution. Prior to 1.4.3, a critical vulnerability exists in the im-server component related to the file upload functi |
| CVE-2025-66594 | Analyzed | 未確認 | CWE-209 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed on the error page. This information could be exploited by a |
| CVE-2025-66595 | Analyzed | 未確認 | CWE-352 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to Cross-Site Request Forgery (CSRF). When a user accesses a l |
| CVE-2025-66596 | Analyzed | 未確認 | CWE-601 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate request headers. When an attacker inserts an inva |
| CVE-2025-66597 | Analyzed | 未確認 | CWE-327 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak cryptographic algorithms, potentially allowing an attacker to |
| CVE-2025-66598 | Analyzed | 未確認 | CWE-327 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL/TLS versions, potentially allowing an attacker to decrypt c |
| CVE-2025-66599 | Deferred | 未確認 | CWE-497 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Physical paths could be displayed on web pages. This information could be exploited by an |
| CVE-2025-66600 | Deferred | 未確認 | CWE-358 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker |
| CVE-2025-66601 | Analyzed | 未確認 | CWE-358 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not specify MIME types. When an attacker performs a content sniffing at |
| CVE-2025-66602 | Analyzed | 未確認 | CWE-291 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access by IP address. When a worm that randomly searches for IP ad |
| CVE-2025-66603 | Analyzed | 未確認 | CWE-358 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attacker could potentially use this informa |
| CVE-2025-66604 | Analyzed | 未確認 | CWE-319 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be displayed on the web page. This information could be exploit |
| CVE-2025-66605 | Analyzed | 未確認 | CWE-359 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields on this webpage with the autocomplete attribute enabled, the |
| CVE-2025-66606 | Analyzed | 未確認 | CWE-86 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or ex |
| CVE-2025-66607 | Analyzed | 未確認 | CWE-358 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains an insecure setting. Users could be redirected to malicious |
| CVE-2025-66608 | Analyzed | 未確認 | CWE-29 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted re |
| CVE-2025-66614 | Modified | 未確認 | CWE-20, CWE-295 | Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0-M1 through 9.0.112. The foll |
| CVE-2025-66630 | Analyzed | 未確認 | CWE-338 | Fiber is an Express inspired web framework written in Go. Before 2.52.11, on Go versions prior to 1.24, the underlying crypto/rand implementation can return an error if secure rand |
| CVE-2025-66676 | Analyzed | 未確認 | CWE-400 | An issue in IObit Unlocker v1.3.0.11 allows attackers to cause a Denial of Service (DoS) via a crafted request. |
| CVE-2025-67102 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an authenticated attacker to execute arbitrary SQL commands via the entity parameter. |
| CVE-2025-67135 | Deferred | 未確認 | CWE-294 | Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack. |
| CVE-2025-67186 | Analyzed | 未確認 | CWE-120 | TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firewall.so. The vulnerability occurs becau |
| CVE-2025-67187 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of /lib/cste_modules/firewall. |
| CVE-2025-67188 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /lib/cste_modules/ipv6.so module. The funct |
| CVE-2025-67189 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The urlKeyword parameter is not properly validated, and the fun |
| CVE-2025-67304 | Analyzed | 未確認 | CWE-798 | In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL |
| CVE-2025-67305 | Analyzed | 未確認 | CWE-321 | In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an attac |
| CVE-2025-67432 | Deferred | 未確認 | CWE-121 | A stack overflow in the ZBarcode_Encode function of Monkeybread Software MBS DynaPDF Plugin v21.3.1.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2025-67433 | Deferred | 未確認 | CWE-122 | A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service (DoS) via a crafted DATA packet. |
| CVE-2025-67438 | Analyzed | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability in Sync-in Server before 1.9.3 allows an authenticated attacker to execute arbitrary JavaScript in a victim's browser. By uploadin |
| CVE-2025-67445 | Modified | 未確認 | CWE-400 | TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi. The CGI reads the CONTENT_LENGTH environment variable and allocates memo |
| CVE-2025-67475 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-67476 | Analyzed | 未確認 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/ImportableOldRevisionImporter.Php. This issue affects MediaWik | |
| CVE-2025-67477 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-67478 | Analyzed | 未確認 | Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php. This issue affects CheckUser: from * before 1.39 | |
| CVE-2025-67479 | Deferred | 未確認 | Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Cite. This vulnerability is associated with program files includes/Parser/CoreParserFunctions.Php, includes/Pa | |
| CVE-2025-67480 | Analyzed | 未確認 | CWE-20 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryRevisionsBase.Php. This issue affects MediaWiki: from * b |
| CVE-2025-67481 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-67482 | Deferred | 未確認 | Vulnerability in Wikimedia Foundation Scribunto, Wikimedia Foundation luasandbox. This vulnerability is associated with program files includes/Engines/LuaCommon/lualib/mwInit.Lua, | |
| CVE-2025-67483 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p |
| CVE-2025-67484 | Analyzed | 未確認 | CWE-20 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiFormatXml.Php. This issue affects MediaWiki: from * before 1.3 |
| CVE-2025-67491 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a stored cross-site scripting vulnera |
| CVE-2025-67547 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in uixthemes Konte konte allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Konte: from n/a through <= 2 |
| CVE-2025-67601 | Analyzed | 未確認 | CWE-295 | A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also |
| CVE-2025-67624 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arya Dhiratara Optimize More! – Images optimize-more-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issu |
| CVE-2025-67733 | Modified | 未確認 | CWE-170, CWE-74 | Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the |
| CVE-2025-67752 | Analyzed | 未確認 | CWE-295 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, OpenEMR's HTTP client wrapper (`oeHttp`/`oeHttpRequ |
| CVE-2025-67848 | Analyzed | 未確認 | CWE-280 | A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue ar |
| CVE-2025-67849 | Analyzed | 未確認 | CWE-79 | A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or scri |
| CVE-2025-67850 | Analyzed | 未確認 | CWE-79 | A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expr |
| CVE-2025-67851 | Analyzed | 未確認 | CWE-1236 | A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing mal |
| CVE-2025-67852 | Analyzed | 未確認 | CWE-601 | A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect users to attacker-controlled pages after they have successfu |
| CVE-2025-67853 | Analyzed | 未確認 | CWE-307 | A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email service. This vulnerability allows attackers to more easily enu |
| CVE-2025-67855 | Analyzed | 未確認 | CWE-79 | A flaw was found in mooodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return URL. This vulnerability arises from insu |
| CVE-2025-67856 | Modified | 未確認 | CWE-863 | A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper v |
| CVE-2025-67857 | Analyzed | 未確認 | CWE-201 | A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see inte |
| CVE-2025-67860 | Deferred | 未確認 | CWE-522 | A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing s |
| CVE-2025-67905 | Deferred | 未確認 | CWE-269 | Malwarebytes AdwCleaner before v.8.7.0 runs as Administrator and performs an insecure log file delete operation in which the target location is user-controllable, allowing a non-ad |
| CVE-2025-6792 | Deferred | 未確認 | CWE-306 | The One to one user Chat by WPGuppy plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/guppylite/v2/channel-authori |
| CVE-2025-67969 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in knitpay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Contr |
| CVE-2025-67970 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vertim Schedula schedula-smart-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2025-67971 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja FluentCart fluent-cart allows Reflected XSS.This issue affects F |
| CVE-2025-67972 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zoho ZeptoMail: from n/ |
| CVE-2025-67973 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue |
| CVE-2025-67974 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPa |
| CVE-2025-67975 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in aDirectory aDirectory adirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects aDirectory: from |
| CVE-2025-67977 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe |
| CVE-2025-67978 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FixBD Educare educare allows Reflected XSS.This issue affects Educare: from n/ |
| CVE-2025-67979 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in WesternDeal WPForms Google Sheet Connector gsheetconnector-wpforms allows Code Injection.This issue affec |
| CVE-2025-67980 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issu |
| CVE-2025-67981 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issu |
| CVE-2025-67982 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issu |
| CVE-2025-67984 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in calliko NPS computy nps-computy allows DOM-Based XSS.This issue affects NPS co |
| CVE-2025-67987 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injecti |
| CVE-2025-67988 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean CozyStay cozystay allows PHP Local File Inclusion |
| CVE-2025-67990 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 GMap Targeting gmap-targeting allows Reflected XSS.This issue affec |
| CVE-2025-67991 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Reflected XSS.This issu |
| CVE-2025-67992 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean PatioTime patiotime allows PHP Local File Inclusi |
| CVE-2025-67993 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Atar |
| CVE-2025-67994 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in YayCommerce YayCurrency yaycurrency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayCurrency: f |
| CVE-2025-67995 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1. |
| CVE-2025-67996 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through < 1.2.6. |
| CVE-2025-67997 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through < 1.6.7. |
| CVE-2025-67998 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in kamleshyadav Miraculous Elementor miraculous-el allows Authentication Abuse.This issue affects Miraculous |
| CVE-2025-68000 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimo |
| CVE-2025-68002 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue affects Open |
| CVE-2025-68005 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in themewant Easy Hotel Booking easy-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Hotel |
| CVE-2025-68021 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyT |
| CVE-2025-68022 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in soporteblue Plugin BlueX for WooCommerce bluex-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2025-68023 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Addonify Addonify – Compare Products For WooCommerce addonify-compare-products allows Exploiting Incorrectly Configured Access Control Securi |
| CVE-2025-68024 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Addonify Addonify – WooCommerce Wishlist addonify-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue |
| CVE-2025-68025 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Level |
| CVE-2025-68026 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Niaj Morshed LC Wizard ghl-wizard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LC Wizard: from |
| CVE-2025-68028 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.Thi |
| CVE-2025-68031 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in faraz sms افزونه پیامک حرفه ای فراز اس ام اس farazsms allows Reflected XSS.Thi |
| CVE-2025-68032 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This iss |
| CVE-2025-68037 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atlas Gondal Export Media URLs export-media-urls allows Reflected XSS.This iss |
| CVE-2025-68042 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Travelpayouts Travelpayouts travelpayouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travelpa |
| CVE-2025-68043 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in LottieFiles LottieFiles lottiefiles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LottieFiles: f |
| CVE-2025-68048 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a |
| CVE-2025-68050 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Leadpages Leadpages leadpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leadpages: from n/a |
| CVE-2025-68051 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Shiprocket Shiprocket shiprocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issu |
| CVE-2025-68069 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/ |
| CVE-2025-68121 | Modified | 未確認 | CWE-295 | During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed h |
| CVE-2025-68124 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2025-68125 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2025-68126 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2025-68127 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2025-68128 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2025-68157 | Analyzed | 未確認 | CWE-918 | Webpack is a module bundler. From version 5.49.0 to before 5.104.0, when experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for |
| CVE-2025-68277 | Analyzed | 未確認 | CWE-451 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, when a link is sent via Secure Messaging, clicking |
| CVE-2025-6830 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpoda Türkiye Information Technology Inc. Password Module allows SQL Injection |
| CVE-2025-68406 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of |
| CVE-2025-68458 | Analyzed | 未確認 | CWE-918 | Webpack is a module bundler. From version 5.49.0 to before 5.104.1, when experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resou |
| CVE-2025-68495 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Reflected XSS.This issue affects JetEng |
| CVE-2025-68501 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce allows |
| CVE-2025-68514 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Con |
| CVE-2025-68526 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in A WP Life Modal Popup Box modal-popup-box allows Object Injection.This issue affects Modal Popup Box: from n/a through <= 1.6.1. |
| CVE-2025-68531 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Object Injection.This issue affects |
| CVE-2025-68534 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF fo |
| CVE-2025-68536 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issu |
| CVE-2025-68539 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issu |
| CVE-2025-68541 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in BoldThemes Ippsum ippsum allows Object Injection.This issue affects Ippsum: from n/a through <= 1.2.0. |
| CVE-2025-68542 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vgdevsolutions Checkout Gateway for IRIS checkout-gateway-iris allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2025-68543 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issu |
| CVE-2025-68545 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issu |
| CVE-2025-68549 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Wiguard wiguard allows Upload a Web Shell to a Web Server.This issue affects Wiguard: from n/a through < |
| CVE-2025-68552 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace WooCommerce Coming Soon Product with Countdo |
| CVE-2025-68564 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in sendy Sendy sendy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendy: from n/a through <= 3.4.2 |
| CVE-2025-68621 | Analyzed | 未確認 | CWE-208 | Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. Prior to 0.101.0, a critical timing att |
| CVE-2025-68643 | Modified | 未確認 | CWE-79 | Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account preference parameter. Attackers can exploit this by deploying a |
| CVE-2025-68663 | Analyzed | 未確認 | CWE-287 | Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's WebSocket authentication mechanism that allows suspended us |
| CVE-2025-68686 | Analyzed | 掲載 | CWE-200 | An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7. |
| CVE-2025-68699 | Analyzed | 未確認 | CWE-476 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In version 0.24.6, NanoMQ has a protocol parsing / forwarding inconsistency when handling shared subscriptions |
| CVE-2025-68721 | Modified | 未確認 | CWE-284 | Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access con |
| CVE-2025-68722 | Analyzed | 未確認 | CWE-352 | Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin interface through improper handling of the _s |
| CVE-2025-68723 | Modified | 未確認 | CWE-79 | Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin interface. Three instances exist: (1) the log file name parame |
| CVE-2025-68834 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Saiful Islam Sync Master Sheet – Product Sync with Google Sheet for WooCommerce product-sync-master-sheet allows Exploiting Incorrectly Confi |
| CVE-2025-68837 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly C |
| CVE-2025-68841 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themepul TopperPack – Complete Elementor Addons, Theme & CP |
| CVE-2025-68842 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in totalbounty Widget Logic Visual widget-logic-visual allows Reflected XSS.This |
| CVE-2025-68843 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bas Schuiling FeedWordPress Advanced Filters faf allows Reflected XSS.This iss |
| CVE-2025-68844 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DaleAB Membee Login membees-member-login-widget allows Reflected XSS.This issu |
| CVE-2025-68845 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Reflecte |
| CVE-2025-68846 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paris Holley Asynchronous Javascript asynchronous-javascript allows Reflected |
| CVE-2025-68847 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in itex iSape isape allows Reflected XSS.This issue affects iSape: from n/a throu |
| CVE-2025-68848 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anmari amr cron manager amr-cron-manager allows Reflected XSS.This issue affec |
| CVE-2025-68852 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webmuehle Court Reservation court-reservation allows Reflected XSS.This issue |
| CVE-2025-68853 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through <= 9.1.1. |
| CVE-2025-68854 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in harman79 ID Arrays id-arrays allows DOM-Based XSS.This issue affects ID Arrays |
| CVE-2025-68855 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in themeglow JobBoard Job listing job-board-light allows Retrieve Embedded Sensitive Data.This issue affects JobBoar |
| CVE-2025-68856 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in keeswolters Mopinion Feedback Form mopinion-feedback-form allows DOM-Based XSS |
| CVE-2025-68862 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Murtaza Bhurgri Woo File Dropzone woo-file-dropzone allows Path Traversal.This issue |
| CVE-2025-68863 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zack Katz iContact for Gravity Forms gravity-forms-icontact allows Reflected X |
| CVE-2025-68880 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in peterwsterling Simple Archive Generator simple-archive-generator allows Reflec |
| CVE-2025-68895 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in ahachat AhaChat Messenger Marketing ahachat-messenger-marketing allows Password Recovery Exploitation.This |
| CVE-2025-68930 | Analyzed | 未確認 | CWE-1385 | Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in the `/api/socket` endpoint. The |
| CVE-2025-69011 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKube Cool Tag Cloud cool-tag-cloud allows Stored XSS.This issue affects Cool |
| CVE-2025-69063 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New U |
| CVE-2025-69207 | Analyzed | 未確認 | CWE-639 | Khoj is a self-hostable artificial intelligence app. Prior to 2.0.0-beta.23, an IDOR in the Notion OAuth callback allows an attacker to hijack any user's Notion integration by mani |
| CVE-2025-69208 | Analyzed | 未確認 | CWE-209 | free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Versions prior to 1.4.1 contain an Improper Error |
| CVE-2025-69212 | Analyzed | 未確認 | CWE-78 | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M ( |
| CVE-2025-69213 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, a SQL Injection vulnerability exists in the ajax_complete.p |
| CVE-2025-69214 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an SQL Injection vulnerability exists in the ajax_select.php endp |
| CVE-2025-69215 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, there is a SQL Injection vulnerability in the Stampe Module |
| CVE-2025-69216 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an authenticated SQL injection vulnerability in OpenSTAManager's |
| CVE-2025-69231 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, a stored cross-site scripting vulnerability in the |
| CVE-2025-69232 | Analyzed | 未確認 | CWE-20 | free5GC is an open-source project for 5th generation (5G) mobile core networks. free5GC go-upf versions up to and including 1.2.6, corresponding to free5gc smf up to and including |
| CVE-2025-69247 | Analyzed | 未確認 | CWE-122 | free5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project. Versions prior to 1.2.8 have a Heap-based Buffer Overflow (CWE-1 |
| CVE-2025-69248 | Analyzed | 未確認 | CWE-129 | free5GC is an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 of free5GC's AMF service have a Buffer Overflow vulnerability lea |
| CVE-2025-69250 | Analyzed | 未確認 | CWE-20, CWE-754 | free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, the serv |
| CVE-2025-69251 | Analyzed | 未確認 | CWE-20 | free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, remote a |
| CVE-2025-69252 | Analyzed | 未確認 | CWE-476 | free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 have a NULL |
| CVE-2025-69253 | Analyzed | 未確認 | CWE-209 | free5GC is an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 of the User Data Repository are affected by Improper Error Handli |
| CVE-2025-6927 | Deferred | 未確認 | CWE-22 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php, includes/api/ApiQueryBlocks.Php. |
| CVE-2025-69287 | Deferred | 未確認 | CWE-573 | The BSV Blockchain SDK is a unified TypeScript SDK for developing scalable apps on the BSV Blockchain. Prior to version 2.0.0, a cryptographic vulnerability in the TypeScript SDK's |
| CVE-2025-69294 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in fuelthemes PeakShops peakshops allows Object Injection.This issue affects PeakShops: from n/a through <= 1.5.9. |
| CVE-2025-69295 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Coven Core coven-core allows Blind SQL Injection.This issue affec |
| CVE-2025-69296 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhostPool Aardvark aardvark allows Reflected XSS.This issue affects Aardvark: |
| CVE-2025-69297 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in GhostPool Aardvark Plugin aardvark-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Aardvark |
| CVE-2025-69298 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in GhostPool Gauge gauge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gauge: from n/a through <= 6 |
| CVE-2025-69299 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Laborator Oxygen oxygen allows Server Side Request Forgery.This issue affects Oxygen: from n/a through <= 6.0.8. |
| CVE-2025-69301 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injection.This issue affects PhotoMe: from n/a through <= 5.6.11. |
| CVE-2025-69302 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes DesignThemes Core Features designthemes-core-features allows Refl |
| CVE-2025-69303 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in modeltheme ModelTheme Framework modeltheme-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec |
| CVE-2025-69304 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Allmart allmart-core allows Blind SQL Injection.This issue affect |
| CVE-2025-69305 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Crete Core crete-core allows Blind SQL Injection.This issue affec |
| CVE-2025-69306 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Electio Core electio-core allows Blind SQL Injection.This issue a |
| CVE-2025-69307 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Medinik Core medinik-core allows Blind SQL Injection.This issue a |
| CVE-2025-69308 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Nestbyte Core nestbyte-core allows Blind SQL Injection.This issue |
| CVE-2025-69309 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Saasplate Core saasplate-core allows Blind SQL Injection.This iss |
| CVE-2025-69310 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Woodly Core woodly-core allows Blind SQL Injection.This issue aff |
| CVE-2025-69322 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes PeakShops peakshops allows PHP Local File Inclus |
| CVE-2025-69323 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs Slimstat Analytics wp-slimstat allows Reflected XSS.This issue affe |
| CVE-2025-69324 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Stored XSS.This issue |
| CVE-2025-69325 | Deferred | 未確認 | CWE-35 | Path Traversal: '.../...//' vulnerability in primersoftware Primer MyData for Woocommerce primer-mydata allows Path Traversal.This issue affects Primer MyData for Woocommerce: from |
| CVE-2025-69326 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Reflected XSS.This is |
| CVE-2025-69328 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects B |
| CVE-2025-69329 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Jthemes Prestige prestige allows Object Injection.This issue affects Prestige: from n/a through < 1.4.1. |
| CVE-2025-69330 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Prestige prestige allows Reflected XSS.This issue affects Prestige: fr |
| CVE-2025-69337 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Wolmart Core wolmart-core allows Blind SQL Injection.This issue aff |
| CVE-2025-69365 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Uroan Core uroan-core allows Blind SQL Injection.This issue affec |
| CVE-2025-69366 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Emerce Core emerce-core allows Blind SQL Injection.This issue aff |
| CVE-2025-69367 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GT3themes Oyster - Photography WordPress Theme oyster allows DOM-Based XSS.Thi |
| CVE-2025-69368 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GT3themes SOHO - Photography WordPress Theme soho allows DOM-Based XSS.This is |
| CVE-2025-69370 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through <= 2.5.5. |
| CVE-2025-69371 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in AncoraThemes KindlyCare kindlycare allows Object Injection.This issue affects KindlyCare: from n/a through <= 1.6.1. |
| CVE-2025-69372 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in AncoraThemes SevenHills sevenhills allows Object Injection.This issue affects SevenHills: from n/a through <= 1.6.2. |
| CVE-2025-69373 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 VidoRev vidorev allows PHP Local File Inclusion. |
| CVE-2025-69374 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SolverWp Eleblog – Elementor Blog And Magazine Addons ele-b |
| CVE-2025-69375 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SolverWp Portfolio Builder swp-portfolio allows PHP Local F |
| CVE-2025-69376 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Path Traversal.This issue aff |
| CVE-2025-69377 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Path Traversal.This issue aff |
| CVE-2025-69378 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommer |
| CVE-2025-69379 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish Upload Files Anywhere wp-upload-files-anywhere allows Path Traversal.This i |
| CVE-2025-69380 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish Upload Files Anywhere wp-upload-files-anywhere allows Path Traversal.This i |
| CVE-2025-69381 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vanquish WooCommerce Bulk Product Editor woocommerce-quick-product-editor allows Exploiting Incorrectly Configured Access Control Security Le |
| CVE-2025-69382 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in themesflat Themesflat Elementor themesflat-elementor allows Object Injection.This issue affects Themesflat Elementor: from n/a th |
| CVE-2025-69383 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Agence web Eoxia - Montpellier WP shop wpshop allows PHP Lo |
| CVE-2025-69384 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Timeline Event History timeline-event-history allows Reflected XSS. |
| CVE-2025-69385 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in AgniHD Cartify - WooCommerce Gutenberg WordPress Theme cartify allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2025-69386 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realvirtualmx RVCFDI para Woocommerce rvcfdi-para-woocommerce allows Reflected |
| CVE-2025-69387 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in whatwouldjessedo Simple Retail Menus simple-retail-menus al |
| CVE-2025-69388 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in cliengo Cliengo – Chatbot cliengo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cliengo – Chatbo |
| CVE-2025-69389 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hugh Mungus Visitor Maps Extended Referer Field visitor-maps-extended-referer- |
| CVE-2025-69390 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Business Template Blocks for WPBakery (Visual Composer) Page Builder |
| CVE-2025-69391 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GT3themes Diamond diamond allows Reflected XSS.This issue affects Diamond: fro |
| CVE-2025-69392 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in itex iMoney imoney allows Reflected XSS.This issue affects iMoney: from n/a th |
| CVE-2025-69393 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Jthemes Exzo exzo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exzo: from n/a through <= 1.2.4. |
| CVE-2025-69394 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in cnvrse Cnvrse cnvrse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cn |
| CVE-2025-69395 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Gable gable allows PHP Local File Inclusion.This i |
| CVE-2025-69396 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Splendour splendour allows PHP Local File Inclusio |
| CVE-2025-69397 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tint tint allows PHP Local File Inclusion.This iss |
| CVE-2025-69398 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Plank plank allows PHP Local File Inclusion.This i |
| CVE-2025-69399 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Cobble cobble allows PHP Local File Inclusion.This |
| CVE-2025-69400 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Yokoo yokoo allows PHP Local File Inclusion.This i |
| CVE-2025-69401 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Identity Spoofing.This issue affects WooODT Lite: from n/a through |
| CVE-2025-69402 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX R&F rf allows PHP Local File Inclusion.This issue |
| CVE-2025-69403 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Bravis-Themes Bravis Addons bravis-addons allows Using Malicious Files.This issue affects Bravis Addons: from n/a t |
| CVE-2025-69404 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Extreme Store extremestore allows Object Injection.This issue affects Extreme Store: from n/a through <= 1.5.10. |
| CVE-2025-69405 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Lorem Ipsum | Books & Media Store lorem-ipsum-books-media-store allows Object Injection.This issue affects Lorem Ipsum | |
| CVE-2025-69406 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX FreightCo freightco allows PHP Local File Inclusio |
| CVE-2025-69407 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur struktur allows PHP Local File Inclu |
| CVE-2025-69408 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes HealthFirst healthfirst allows PHP Local File |
| CVE-2025-69409 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes PJ | Life & Business Coaching pj allows PHP Loc |
| CVE-2025-69410 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Belletrist belletrist allows PHP Local File Inc |
| CVE-2025-69429 | Analyzed | 未確認 | CWE-59 | The ORICO NAS CD3510 (version V1.9.12 and below) contains an Incorrect Symlink Follow vulnerability that could be exploited by attackers to leak or tamper with the internal file sy |
| CVE-2025-69430 | Analyzed | 未確認 | CWE-59 | An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 (version equal to or prior to V1.9.12), DM3 (version equal to or prior to V1.9.1 |
| CVE-2025-69431 | Analyzed | 未確認 | CWE-59 | The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, in |
| CVE-2025-69437 | Analyzed | 未確認 | CWE-79 | PublicCMS v5.202506.d and earlier is vulnerable to stored XSS. Uploaded PDFs can contain JavaScript payloads and bypass PDF security checks in the backend CmsFileUtils.java. If a u |
| CVE-2025-69618 | Modified | 未確認 | CWE-22 | An arbitrary file overwrite vulnerability in the file import process of Tarot, Astro & Healing v11.4.0 allows attackers to overwrite critical internal files, potentially leading to |
| CVE-2025-69619 | Modified | 未確認 | CWE-22 | A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage. |
| CVE-2025-69620 | Modified | 未確認 | CWE-22 | A path traversal in Moo Chan Song v4.5.7 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage. |
| CVE-2025-69621 | Deferred | 未確認 | CWE-22 | An arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95 allows attackers to overwrite critical internal files, potentially leading to arbi |
| CVE-2025-69633 | Deferred | 未確認 | CWE-89 | A SQL Injection vulnerability in the Advanced Popup Creator (advancedpopupcreator) module for PrestaShop 1.1.26 through 1.2.6 (Fixed in version 1.2.7) allows remote unauthenticated |
| CVE-2025-69634 | Deferred | 未確認 | CWE-284, CWE-352, CWE-598 | Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE: this is disputed by a |
| CVE-2025-6967 | Deferred | 未確認 | CWE-698 | Execution After Redirect (EAR) vulnerability in Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. CMS allows JSON Hijacking (aka JavaScript Hijacking), Authe |
| CVE-2025-69674 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7_P161006 (Build.0333.250211) allows an attacker to execute arbitrary code via the node_mac, node_opt, opt_param, and doma |
| CVE-2025-69700 | Analyzed | 未確認 | CWE-121 | Tenda FH1203 V2.0.1.6 contains a stack-based buffer overflow vulnerability in the modify_add_client_prio function, which is reachable via the formSetClientPrio CGI handler. |
| CVE-2025-69725 | Deferred | 未確認 | CWE-601 | An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate websit |
| CVE-2025-69752 | Deferred | 未確認 | CWE-639 | An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey |
| CVE-2025-69770 | Deferred | 未確認 | CWE-22 | A zip slip vulnerability in the /DesignTools/SkinList.aspx endpoint of MojoPortal CMS v2.9.0.1 allows attackers to execute arbitrary commands via uploading a crafted zip file. |
| CVE-2025-69771 | Modified | 未確認 | CWE-434 | Cross-Site Scripting (XSS) vulnerability in the subtitle loading function of the asbplayer Chrome Extension version 1.14.0 allows attackers to execute arbitrary JavaScript in the c |
| CVE-2025-69806 | Analyzed | 未確認 | CWE-125 | p2r3 bareiron commit: 8e4d4020d contains an Out-of-bounds Read, which allows unauthenticated remote attackers to get relative information leakage via a packet sent to the server |
| CVE-2025-69807 | Analyzed | 未確認 | CWE-120 | p2r3 Bareiron commit: 8e4d4020d is vulnerable to Buffer Overflow, which allows unauthenticated remote attackers to cause a denial of service via a packet sent to the server. |
| CVE-2025-69848 | Modified | 未確認 | CWE-79 | NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting (XSS) vulnerability exists in versions 2.11.0 through |
| CVE-2025-69871 | Deferred | 未確認 | CWE-362 | A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage() function of the promotion module. The function performs a non-atomic read-check- |
| CVE-2025-69872 | Deferred | 未確認 | CWE-502, CWE-94 | DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code executio |
| CVE-2025-69873 | Deferred | 未確認 | CWE-1333, CWE-400 | ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtim |
| CVE-2025-69874 | Analyzed | 未確認 | CWE-22 | nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers to write arbitrary files outside the intended extraction dire |
| CVE-2025-69875 | Analyzed | 未確認 | CWE-269, CWE-281, CWE-552 | A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling al |
| CVE-2025-69906 | Analyzed | 未確認 | CWE-434 | Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploa |
| CVE-2025-69970 | Analyzed | 未確認 | CWE-1188 | FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The 'secureEnabled' flag is commented out by default, causing the application to |
| CVE-2025-69971 | Modified | 未確認 | CWE-798 | FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js. The application uses a hard-coded secret key to sign and verify JWT Tokens. This allows remo |
| CVE-2025-69981 | Modified | 未確認 | CWE-434 | FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint. The endpoint lacks authentication mechanisms, allowing unauthenticated remote atta |
| CVE-2025-69983 | Modified | 未確認 | CWE-94 | FUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported pro |
| CVE-2025-69985 | Analyzed | 未確認 | CWE-288 | FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). The vulnerability exists in the server/api/jwt-helper.js middleware, wh |
| CVE-2025-70029 | Analyzed | 未確認 | CWE-295 | An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by setting 'rejectUnauthor |
| CVE-2025-70043 | Deferred | 未確認 | CWE-295 | An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUna |
| CVE-2025-70044 | Analyzed | 未確認 | CWE-295 | An issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools-quickcommand 5.0.3. |
| CVE-2025-70045 | Analyzed | 未確認 | CWE-295 | An issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm master. The application disables TLS/SSL certificate validation by setting 'rejectUnaut |
| CVE-2025-70058 | Analyzed | 未確認 | CWE-295 | An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certificate validation by setting 'rejectUnaut |
| CVE-2025-70062 | Analyzed | 未確認 | CWE-352 | PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the 'Add Doctor' module. The application fails to enforce CSRF token valida |
| CVE-2025-70063 | Analyzed | 未確認 | CWE-639 | The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference (IDOR) vulnerability. The application fails to verify that t |
| CVE-2025-70064 | Analyzed | 未確認 | CWE-284 | PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability. A low-privileged user (Patient) can directly access the Administrator Dashboard and all su |
| CVE-2025-70073 | Analyzed | 未確認 | CWE-94 | An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function |
| CVE-2025-70083 | Analyzed | 未確認 | CWE-121 | An issue was discovered in OpenSatKit 2.2.1. The DirName field in the telecommand is provided by the ground segment and must be treated as untrusted input. The program copies DirNa |
| CVE-2025-70084 | Analyzed | 未確認 | CWE-22 | Directory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to sensitive information or delete arbitrary files via crafted value to the FileUtil_GetFileIn |
| CVE-2025-70085 | Analyzed | 未確認 | CWE-121 | An issue was discovered in OpenSatKit 2.2.1. The EventErrStr buffer has a fixed size of 256 bytes. The code uses sprintf to format two filenames (Source1Filename and the string ret |
| CVE-2025-70091 | Analyzed | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in the Customers function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted paylo |
| CVE-2025-70092 | Analyzed | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted paylo |
| CVE-2025-70093 | Analyzed | 未確認 | CWE-77 | An issue in OpenSourcePOS v3.4.1 allows attackers to execute arbitrary code via returning a crafted AJAX response. |
| CVE-2025-70094 | Analyzed | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a c |
| CVE-2025-70095 | Analyzed | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in the item management and sales invoice function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via i |
| CVE-2025-70121 | Analyzed | 未確認 | CWE-125 | An array index out of bounds vulnerability in the AMF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted 5GS Mobile Identity in a NAS Re |
| CVE-2025-70122 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted PFCP Session Modification Request. Th |
| CVE-2025-70123 | Analyzed | 未確認 | CWE-20 | An improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows remote attackers to cause a denial of service. The UPF incorrectly accepts a malformed P |
| CVE-2025-70141 | Modified | 未確認 | CWE-306, CWE-862 | SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization befo |
| CVE-2025-70146 | Modified | 未確認 | CWE-306, CWE-862 | Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized admi |
| CVE-2025-70147 | Modified | 未確認 | CWE-306, CWE-862 | Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information (includ |
| CVE-2025-70148 | Modified | 未確認 | CWE-862 | Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data |
| CVE-2025-70149 | Modified | 未確認 | CWE-89 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter. |
| CVE-2025-70150 | Modified | 未確認 | CWE-862 | CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member re |
| CVE-2025-70151 | Modified | 未確認 | CWE-434 | code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php |
| CVE-2025-70152 | Modified | 未確認 | CWE-89 | code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php. |
| CVE-2025-70296 | Analyzed | 未確認 | CWE-77 | A stored HTML injection vulnerability in the Recipe Notes rendering component in Mealie 3.3.1 allows remote authenticated users to inject arbitrary HTML, resulting in user interfac |
| CVE-2025-70297 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the recipe asset upload and media serving component in Mealie 3.3.1 allows remote authenticated users to inject arbitrary web s |
| CVE-2025-70311 | Analyzed | 未確認 | CWE-89 | JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack. |
| CVE-2025-70314 | Analyzed | 未確認 | CWE-120 | webfsd 1.21 is vulnerable to a Buffer Overflow via a crafted request. This is due to the filename variable |
| CVE-2025-70327 | Analyzed | 未確認 | CWE-400, CWE-88 | TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of the /usr/sbin/lighttpd executable. The ip parameter is retrie |
| CVE-2025-70328 | Analyzed | 未確認 | CWE-78, CWE-94 | TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executable. The host_time parameter is |
| CVE-2025-70329 | Analyzed | 未確認 | CWE-78 | TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable. The vlanVidLan1 (and other vl |
| CVE-2025-70347 | Deferred | 未確認 | CWE-400 | An issue in mquickjs before commit 74b7e (2026-01-15) allows a local attacker to cause a denial of service via a crafted file to the get_mblock_size function at mquickjs.c. |
| CVE-2025-70397 | Modified | 未確認 | CWE-89 | jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter. |
| CVE-2025-70545 | Modified | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability exists in the web management interface of the PPC (Belden) ONT 2K05X router running firmware v1.1.9_206L. The Common Gateway Inter |
| CVE-2025-70559 | Deferred | 未確認 | CWE-502 | pdfminer.six before 20251230 contains an insecure deserialization vulnerability in the CMap loading mechanism. The library uses Python pickle to deserialize CMap cache files withou |
| CVE-2025-70560 | Modified | 未確認 | CWE-502 | Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without |
| CVE-2025-70758 | Deferred | 未確認 | CWE-703 | chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via hea |
| CVE-2025-70791 | Analyzed | 未確認 | CWE-79 | Cross Site Scripting vulnerability in the "/admin/order/abandoned" endpoint of Microweber 2.0.19. An attacker can manipulate the "orderDirection" parameter in a crafted URL and lur |
| CVE-2025-70792 | Analyzed | 未確認 | CWE-79 | Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19. An attacker can manipulate the "rel_id" parameter in a crafted URL and lure a user |
| CVE-2025-70828 | Analyzed | 未確認 | CWE-78 | An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration |
| CVE-2025-70829 | Analyzed | 未確認 | CWE-200 | An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string. |
| CVE-2025-70830 | Deferred | 未確認 | CWE-94 | A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to execute arbitrary code via injecting |
| CVE-2025-70831 | Analyzed | 未確認 | CWE-78 | A Remote Code Execution (RCE) vulnerability was found in Smanga 3.2.7 in the /php/path/rescan.php interface. The application fails to properly sanitize user-supplied input in the m |
| CVE-2025-70833 | Analyzed | 未確認 | CWE-287, CWE-639 | An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully takeover the acc |
| CVE-2025-70841 | Analyzed | 未確認 | CWE-287 | Dokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote attackers to obtain sensitive application configuration data via direct request to /script/.e |
| CVE-2025-70845 | Deferred | 未確認 | CWE-79 | lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) exists in the /setting/ page where the "intro" field is not properly sanitized or escaped. |
| CVE-2025-70846 | Deferred | 未確認 | CWE-79 | lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) on the /tools/Password/add page in the input field password. |
| CVE-2025-70849 | Analyzed | 未確認 | CWE-434, CWE-79 | Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST request to the /store endpoint. The application renders uplo |
| CVE-2025-70866 | Analyzed | 未確認 | CWE-284 | LavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control. An authenticated user with low-level privileges (User role) can directly access the admin backend by logging in throu |
| CVE-2025-70886 | Analyzed | 未確認 | CWE-400 | An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpoint |
| CVE-2025-70954 | Deferred | 未確認 | CWE-476 | A Null Pointer Dereference vulnerability exists in the TON Virtual Machine (TVM) within the TON Blockchain before v2025.06. The issue is located in the execution logic of the INMSG |
| CVE-2025-70955 | Deferred | 未確認 | CWE-674 | A Stack Overflow vulnerability was discovered in the TON Virtual Machine (TVM) before v2024.10. The vulnerability stems from the improper handling of vmstate and continuation jump |
| CVE-2025-70956 | Deferred | 未確認 | CWE-1321 | A State Pollution vulnerability was discovered in the TON Virtual Machine (TVM) before v2025.04. The issue exists in the RUNVM instruction logic (VmState::run_child_vm), which is r |
| CVE-2025-70957 | Deferred | 未確認 | CWE-674 | A Denial of Service (DoS) vulnerability was discovered in the TON Lite Server before v2024.09. The vulnerability arises from the handling of external arguments passed to locally ex |
| CVE-2025-70958 | Analyzed | 未確認 | CWE-79 | Multiple reflected cross-site scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allows attackers to execute arbitrary Javascript in the context of th |
| CVE-2025-70959 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the Jobs module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted paylo |
| CVE-2025-70960 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted pay |
| CVE-2025-70963 | Analyzed | 未確認 | CWE-200, CWE-922 | Gophish <=0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly inside the rendered HTML/JavaScript of the |
| CVE-2025-70981 | Analyzed | 未確認 | CWE-89 | CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter. |
| CVE-2025-70997 | Modified | 未確認 | CWE-284, CWE-863 | A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level. |
| CVE-2025-70998 | Analyzed | 未確認 | CWE-1188 | UTT HiPER 810 / nv810v4 router firmware v1.5.0-140603 was discovered to contain insecure default credentials for the telnet service, possibly allowing a remote attacker to gain roo |
| CVE-2025-71031 | Analyzed | 未確認 | CWE-400 | Water-Melon Melon commit 9df9292 and below is vulnerable to Denial of Service. The HTTP component doesn't have any maximum length. As a result, an excessive request header could ca |
| CVE-2025-7105 | Deferred | 未確認 | CWE-400 | A vulnerability in danny-avila/librechat allows attackers to exploit the unrestricted Fork Function in `/api/convos/fork` to fork numerous contents rapidly. If the forked content i |
| CVE-2025-71056 | Deferred | 未確認 | CWE-290 | Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking attack via spoofing the IP address of an authenticated user. |
| CVE-2025-71057 | Deferred | 未確認 | CWE-287, CWE-345, CWE-384 | Improper session management in D-Link Wireless N 300 ADSL2+ Modem Router DSL-124 ME_1.00 allows attackers to execute a session hijacking attack via spoofing the IP address of an au |
| CVE-2025-71179 | Analyzed | 未確認 | CWE-79 | Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the |
| CVE-2025-71192 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in snd_ac97_controller_register() If ac97_add_adapter() fails, put_device() is t | |
| CVE-2025-71193 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend Enabling runtime PM before attaching the QPHY i | |
| CVE-2025-71194 | Deferred | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type When wait_current_trans() is calle |
| CVE-2025-71195 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap max_register The max_register field is assigned the size of the register m | |
| CVE-2025-71196 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: stm32-usphyc: Fix off by one in probe() The "index" variable is used as an index into the usbphyc->phys[] | |
| CVE-2025-71197 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarms_store The sysfs buffer passed to alarms_store() is allocat | |
| CVE-2025-71198 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection The st_lsm6dsx_acc_channels array | |
| CVE-2025-71199 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver at91_adc_interrupt can call at9 | |
| CVE-2025-71200 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode When operating in HS200 or HS400 ti | |
| CVE-2025-71201 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early read unlock of page with EOF in middle The read result collection for buffered reads seems to |
| CVE-2025-71202 | Modified | 未確認 | CWE-457 | In the Linux kernel, the following vulnerability has been resolved: iommu/sva: invalidate stale IOTLB entries for kernel address space Introduce a new IOMMU interface to flush IO |
| CVE-2025-71203 | Modified | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table indexing under speculation The syscall number is a user-controlled value used to |
| CVE-2025-71204 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in parse_durable_handle_context() When the command is a replay operation and -EN | |
| CVE-2025-71220 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() When ksmbd_iov_pin_rsp() fails, | |
| CVE-2025-71221 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Add proper locking in mmp_pdma_residue() to prev |
| CVE-2025-71222 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: ensure skb headroom before skb_push This avoids occasional skb_under_panic Oops from wl1271_tx_w | |
| CVE-2025-71223 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in smb2_open() When ksmbd_vfs_getattr() fails, the reference count of ksmbd_file | |
| CVE-2025-71224 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ocb: skip rx_no_sta when interface is not joined ieee80211_ocb_rx_no_sta() assumes a valid cha | |
| CVE-2025-71225 | Modified | 未確認 | CWE-362, CWE-367 | In the Linux kernel, the following vulnerability has been resolved: md: suspend array while updating raid_disks via sysfs In raid1_reshape(), freeze_array() is called before modi |
| CVE-2025-71226 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-71227 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't WARN for connections on invalid channels It's not clear (to me) how exactly syzbot manag | |
| CVE-2025-71228 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-71229 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() rtw_core_enable_beacon() reads 4 bytes from an ad | |
| CVE-2025-71230 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hfs: ensure sb->s_fs_info is always cleaned up When hfs was converted to the new mount api a bug was introduce | |
| CVE-2025-71231 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode The local variable 'i' is initialized |
| CVE-2025-71232 | Modified | 未確認 | CWE-401, CWE-772 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error path to fix system crash System crash seen during load/unload test in a loop, |
| CVE-2025-71233 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed w |
| CVE-2025-71234 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add The driver does not set hw->sta_data_size, which ca |
| CVE-2025-71235 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Delay module unload while fabric scan in progress System crash seen during load/unload test in |
| CVE-2025-71236 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate sp before freeing associated memory System crash with the following signature [154563. |
| CVE-2025-71237 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: Fix potential block overflow that cause system hang When a user executes the FITRIM command, an underf | |
| CVE-2025-71240 | Analyzed | 未確認 | CWE-79 | SPIP before 4.2.15 allows Cross-Site Scripting (XSS) via crafted content in HTML code tags. The application does not properly verify JavaScript within code tags, allowing an attack |
| CVE-2025-71241 | Modified | 未確認 | CWE-79 | SPIP before 4.3.6, 4.2.17, and 4.1.20 allows Cross-Site Scripting (XSS) in the private area. The content of the error message displayed by the 'transmettre' API is not properly san |
| CVE-2025-71242 | Modified | 未確認 | CWE-285 | SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized content disclosure in the private area. The application does not properly check authorization when displaying content of a |
| CVE-2025-71243 | Analyzed | 未確認 | CWE-94 | The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vu |
| CVE-2025-71244 | Analyzed | 未確認 | CWE-601 | SPIP before 4.4.5 and 4.3.9 allows an Open Redirect via the login form when used in AJAX mode. An attacker can craft a malicious URL that, when visited by a victim, redirects them |
| CVE-2025-71245 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-71246 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-71247 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-71248 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-71249 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-71250 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-7347 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Dinibh Puzzle Software Solutions Dinibh Patrol Tracking System allows Exploitation of Trusted Identifiers. This i |
| CVE-2025-7432 | Deferred | 未確認 | CWE-331 | DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions. This may allow an attacker to eventually extract secret keys through a DPA attack |
| CVE-2025-7630 | Deferred | 未確認 | CWE-287, CWE-307 | Improper Restriction of Excessive Authentication Attempts, Improper Authentication vulnerability in Doruk Communication and Automation Industry and Trade Inc. Wispotter allows Pass |
| CVE-2025-7631 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tumeva Internet Technologies Software Information Advertising and Consulting S |
| CVE-2025-7636 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS allows SQL |
| CVE-2025-7659 | Analyzed | 未確認 | CWE-346 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated |
| CVE-2025-7706 | Deferred | 未確認 | CWE-306 | Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion. This issue affects L |
| CVE-2025-7708 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Atlas Educational Software Industry Ltd. Co. K12net allows Communication Channel Manipulation. This issue affect |
| CVE-2025-7760 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ofisimo Web-Based Software Technologies Association Web Package Flora a |
| CVE-2025-7799 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. E-Taxpayer Accounting Website allow |
| CVE-2025-8025 | Deferred | 未確認 | CWE-284, CWE-306 | Missing Authentication for Critical Function, Improper Access Control vulnerability in Dinosoft Business Solutions Dinosoft ERP allows Accessing Functionality Not Properly Constrai |
| CVE-2025-8054 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal. The vulnerability could allow an attacker |
| CVE-2025-8055 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery. The vulnerability could allow an attacker to perform blind SSRF to oth |
| CVE-2025-8099 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.8 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions, could have |
| CVE-2025-8303 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EKA Software Computer Information Advertising Services Ltd. Real Estate |
| CVE-2025-8308 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Key Software Solutions Inc. INFOREX- General Information Management Sys |
| CVE-2025-8350 | Deferred | 未確認 | CWE-306, CWE-698 | Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTT |
| CVE-2025-8456 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kod8 Software Technologies Trade Ltd. Co. Kod8 Individual and SME Websi |
| CVE-2025-8461 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: t |
| CVE-2025-8572 | Deferred | 未確認 | CWE-269 | The Truelysell Core plugin for WordPress is vulnerable to privilege escalation in versions less than, or equal to, 1.8.7. This is due to insufficient validation of the user_role pa |
| CVE-2025-8587 | Modified | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows SQL Injecti |
| CVE-2025-8589 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Refl |
| CVE-2025-8590 | Deferred | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Directory Indexing. This issue affec |
| CVE-2025-8668 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Ind |
| CVE-2025-8781 | Deferred | 未確認 | CWE-89 | The Bookster – WordPress Appointment Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘raw’ parameter in all versions up to, and including, 2.1.1 due to i |
| CVE-2025-8860 | Deferred | 未確認 | CWE-212 | A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFI_VARS_REG_BUFFER_SIZE, the .write callback `uefi_vars_write` is invoked. The functio |
| CVE-2025-9062 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in MeCODE Informatics and Engineering Services Ltd. Envanty allows Parameter Injection. This issue affects Envanty: |
| CVE-2025-9120 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited thro |
| CVE-2025-9208 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Stored XSS. The vulnerabili |
| CVE-2025-9292 | Analyzed | 未確認 | CWE-942 | A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the pres |
| CVE-2025-9293 | Analyzed | 未確認 | CWE-295 | A vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS communication. An attacker in a |
| CVE-2025-9572 | Modified | 未確認 | CWE-863 | n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access |
| CVE-2025-9711 | Analyzed | 未確認 | CWE-272 | A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccry |
| CVE-2025-9907 | Analyzed | 未確認 | CWE-200 | A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerability allows exposure of sensitive client credentials and int |
| CVE-2025-9908 | Analyzed | 未確認 | CWE-200 | A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows an authenticated user to gain access to sensitive i |
| CVE-2025-9909 | Analyzed | 未確認 | CWE-647 | A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using |
| CVE-2025-9953 | Deferred | 未確認 | CWE-566 | Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Training Consulting Ltd. Databank Accreditation Software allows SQL Injection. This |
| CVE-2025-9974 | Deferred | 未確認 | CWE-78 | The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to |
| CVE-2025-9986 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vadi Corporate Information Systems Ltd. Co. DIGIKENT allows Excavation. This issue affe |
| CVE-2026-0102 | Analyzed | 未確認 | CWE-359 | Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result |
| CVE-2026-0106 | Modified | 未確認 | CWE-119, CWE-125, CWE-787 | In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution pr |
| CVE-2026-0228 | Deferred | 未確認 | CWE-295 | An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configu |
| CVE-2026-0229 | Deferred | 未確認 | CWE-754 | A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system re |
| CVE-2026-0383 | Analyzed | 未確認 | CWE-78 | A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the h |
| CVE-2026-0391 | Analyzed | 未確認 | CWE-451 | User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-0398 | Analyzed | 未確認 | CWE-770 | Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor. |
| CVE-2026-0399 | Analyzed | 未確認 | CWE-121 | Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint. |
| CVE-2026-0400 | Analyzed | 未確認 | CWE-134 | A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall. |
| CVE-2026-0401 | Analyzed | 未確認 | CWE-476 | A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall. |
| CVE-2026-0402 | Analyzed | 未確認 | CWE-125 | A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall. |
| CVE-2026-0484 | Analyzed | 未確認 | CWE-601, CWE-862 | Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text |
| CVE-2026-0485 | Analyzed | 未確認 | CWE-405 | SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause the Content Management Server (CMS) to crash and automaticall |
| CVE-2026-0486 | Analyzed | 未確認 | CWE-862 | In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulting in disclosure of system information.T |
| CVE-2026-0488 | Analyzed | 未確認 | CWE-862 | An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, wh |
| CVE-2026-0490 | Analyzed | 未確認 | CWE-862 | SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network request to the trusted endpoint that breaks the authentication, which prevents the le |
| CVE-2026-0505 | Analyzed | 未確認 | CWE-79 | The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to |
| CVE-2026-0508 | Analyzed | 未確認 | CWE-601 | The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application. Upon successful exploit |
| CVE-2026-0509 | Analyzed | 未確認 | CWE-862 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authoriz |
| CVE-2026-0521 | Analyzed | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that i |
| CVE-2026-0536 | Analyzed | 未確認 | CWE-787 | A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to ex |
| CVE-2026-0537 | Modified | 未確認 | CWE-787 | A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbi |
| CVE-2026-0538 | Modified | 未確認 | CWE-787 | A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute a |
| CVE-2026-0542 | Deferred | 未確認 | CWE-653 | ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certa |
| CVE-2026-0549 | Deferred | 未確認 | CWE-79 | The Groups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'groups_group_info' shortcode in all versions up to, and including, 3.10.0 due to insu |
| CVE-2026-0550 | Deferred | 未確認 | CWE-79 | The myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mycred_load_coupon' shortcode in all versions up to, and including, 2.9.7.3 due to in |
| CVE-2026-0555 | Deferred | 未確認 | CWE-79 | The Premmerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premmerce_wizard_actions' AJAX endpoint in all versions up to, and including, 1.3.20. This |
| CVE-2026-0556 | Deferred | 未確認 | CWE-79 | The XO Event Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xo_event_field' shortcode in all versions up to, and including, 3.2.10 due |
| CVE-2026-0557 | Deferred | 未確認 | CWE-79 | The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpda_app' shortcode in all versions up to, and including, 5.5.63 due to insuf |
| CVE-2026-0559 | Deferred | 未確認 | CWE-79 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stm_lms_courses_grid_dis |
| CVE-2026-0561 | Deferred | 未確認 | CWE-79 | The Shield Security plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 21.0.8 due to insufficien |
| CVE-2026-0572 | Deferred | 未確認 | CWE-862 | The WebPurify Profanity Filter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'webpurify_save_options' function in |
| CVE-2026-0573 | Analyzed | 未確認 | CWE-601 | An URL redirection vulnerability was identified in GitHub Enterprise Server that allowed attacker-controlled redirects to leak sensitive authorization tokens. The repository_pages |
| CVE-2026-0595 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have |
| CVE-2026-0598 | Deferred | 未確認 | CWE-283 | A security flaw was identified in the Ansible Lightspeed API conversation endpoints that handle AI chat interactions. The APIs do not properly verify whether a conversation identif |
| CVE-2026-0599 | Deferred | 未確認 | CWE-400 | A vulnerability in huggingface/text-generation-inference version 3.3.6 allows unauthenticated remote attackers to exploit unbounded external image fetching during input validation |
| CVE-2026-0617 | Deferred | 未確認 | CWE-79 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer profile fields in all version |
| CVE-2026-0619 | Deferred | 未確認 | CWE-190, CWE-835 | A reachable infinite loop via an integer wraparound is present in Silicon Labs' Matter SDK which allows an attacker to trigger a denial of service. A hard reset is required to reco |
| CVE-2026-0620 | Deferred | 未確認 | CWE-693 | When configured as L2TP/IPSec VPN server, Archer AXE75 V1 may accept connections using L2TP without IPSec protection, even when IPSec is enabled. This allows VPN sessions without |
| CVE-2026-0630 | Modified | 未確認 | CWE-78 | An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(web modules) and Archer AXE75 v1.0 allows adjacent authenticated attacker to execute arbitrary code. Successf |
| CVE-2026-0631 | Modified | 未確認 | CWE-78 | An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1 and AXE75 v1, allowing an adjacent authenticated at |
| CVE-2026-0632 | Deferred | 未確認 | CWE-918 | The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.1.12 via the 'saveDataSource' function. T |
| CVE-2026-0651 | Modified | 未確認 | CWE-22 | A path traversal vulnerability was identified TP-Link Tapo C260 v1, D235 v1, C211 v2 and C520WS v2.6 within the HTTP server’s handling of GET requests. The server performs path nor |
| CVE-2026-0652 | Analyzed | 未確認 | CWE-78 | On TP-Link Tapo C260 v1, command injection vulnerability exists due to improper sanitization in certain POST parameters during configuration synchronization. An authenticated attac |
| CVE-2026-0653 | Modified | 未確認 | CWE-284 | On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization endpoint. This allows |
| CVE-2026-0658 | Deferred | 未確認 | CWE-352 | The Five Star Restaurant Reservations WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform un |
| CVE-2026-0659 | Deferred | 未確認 | CWE-787 | A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage thi |
| CVE-2026-0660 | Modified | 未確認 | CWE-121 | A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to ex |
| CVE-2026-0661 | Modified | 未確認 | CWE-787 | A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbi |
| CVE-2026-0662 | Analyzed | 未確認 | CWE-426 | A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untr |
| CVE-2026-0665 | Deferred | 未確認 | CWE-787 | An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen |
| CVE-2026-0679 | Deferred | 未確認 | CWE-862 | The Fortis for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to an inverted nonce check in the 'check_fortis_notify_response' function in all versions |
| CVE-2026-0681 | Deferred | 未確認 | CWE-79 | The Extended Random Number Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.1 due to insu |
| CVE-2026-0692 | Deferred | 未確認 | CWE-862 | The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is due to the plugin rely |
| CVE-2026-0693 | Deferred | 未確認 | CWE-79 | The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via category descriptions in all versions up to, and including, 1.2.4. Thi |
| CVE-2026-0704 | Modified | 未確認 | CWE-22 | In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentiall |
| CVE-2026-0714 | Analyzed | 未確認 | CWE-319 | A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connect |
| CVE-2026-0715 | Analyzed | 未確認 | CWE-522 | Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with physical access to the dev |
| CVE-2026-0722 | Deferred | 未確認 | CWE-89 | The Shield Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 21.0.8. This is due to the plugin allowing nonce verifica |
| CVE-2026-0724 | Deferred | 未確認 | CWE-79 | The WPlyr Media Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_wplyr_accent_color' parameter in all versions up to, and including, 1.3.0 due to i |
| CVE-2026-0727 | Deferred | 未確認 | CWE-862 | The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.5. This is due to the plugin not properly ve |
| CVE-2026-0735 | Deferred | 未確認 | CWE-79 | The User Language Switch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab_color_picker_language_switch' parameter in all versions up to, and including |
| CVE-2026-0736 | Deferred | 未確認 | CWE-79 | The Chatbot for WordPress by Collect.chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_inpost_head_script[synth_header_script]' post meta field in al |
| CVE-2026-0742 | Deferred | 未確認 | CWE-79 | The Smart Appointment & Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the saab_save_form_data AJAX action in all versions up to, and including, 1.0. |
| CVE-2026-0743 | Deferred | 未確認 | CWE-79 | The WP Content Permission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ohmem-message' parameter in all versions up to, and including, 1.2 due to insuf |
| CVE-2026-0745 | Deferred | 未確認 | CWE-918 | The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.10 due to missing URL validation on the 'downlo |
| CVE-2026-0751 | Deferred | 未確認 | CWE-79 | The Payment Page | Payment Form for Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricing_plan_select_text_font_family' parameter in all version |
| CVE-2026-0752 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that under certain circumstances, could ha |
| CVE-2026-0753 | Deferred | 未確認 | CWE-79 | The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sscf_name' parameter in all versions up to, and including, 1.6.2 due to |
| CVE-2026-0777 | Deferred | 未確認 | CWE-356 | Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xmin |
| CVE-2026-0797 | Modified | 未確認 | CWE-120, CWE-122, CWE-787 | GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-0815 | Deferred | 未確認 | CWE-79 | The Category Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag-image' parameter in all versions up to, and including, 2.0 due to insufficient inp |
| CVE-2026-0816 | Deferred | 未確認 | CWE-89 | The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'delete_id' parameter in all versions up to, and including, 1.5.3 due to ins |
| CVE-2026-0829 | Deferred | 未確認 | CWE-862 | The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the site without any security checks. This lets attackers use the |
| CVE-2026-0845 | Deferred | 未確認 | CWE-862 | The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to unauthorized modification of data that can le |
| CVE-2026-0867 | Deferred | 未確認 | CWE-79 | The Essential Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ew-author, ew-archive, ew-category, ew-page, and ew-menu shortcodes in all |
| CVE-2026-0870 | Deferred | 未確認 | CWE-250 | MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing au |
| CVE-2026-0871 | Analyzed | 未確認 | CWE-266 | A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the "Only administrators can view" setting for unmanaged attributes, allowing them to modif |
| CVE-2026-0872 | Deferred | 未確認 | CWE-295 | Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation. This issue affects SafeNet Age |
| CVE-2026-0873 | Deferred | 未確認 | CWE-1220, CWE-79 | On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity adm |
| CVE-2026-0874 | Analyzed | 未確認 | CWE-787 | A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability |
| CVE-2026-0875 | Analyzed | 未確認 | CWE-787 | A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability t |
| CVE-2026-0909 | Deferred | 未確認 | CWE-639 | The WP ULike plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.8.3.1. This is due to the `wp_ulike_delete_history_api` |
| CVE-2026-0910 | Deferred | 未確認 | CWE-502 | The wpForo Forum plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.13 via deserialization of untrusted input in the 'wpforo_displ |
| CVE-2026-0912 | Deferred | 未確認 | CWE-269 | The Toret Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'trman_save |
| CVE-2026-0921 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-0924 | Modified | 未確認 | CWE-367 | BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCleaner: 1.15. |
| CVE-2026-0926 | Deferred | 未確認 | CWE-98 | The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'parameters[template_name]' parameter. This make |
| CVE-2026-0929 | Deferred | 未確認 | CWE-862 | The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site. |
| CVE-2026-0944 | Analyzed | 未確認 | CWE-754 | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Group invite allows Forceful Browsing.This issue affects Group invite: from 0.0.0 before 2.3.9, from 3. |
| CVE-2026-0945 | Analyzed | 未確認 | CWE-267 | Privilege Defined With Unsafe Actions vulnerability in Drupal Role Delegation allows Privilege Escalation.This issue affects Role Delegation: from 1.3.0 before 1.5.0. |
| CVE-2026-0946 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AT Internet SmartTag allows Cross-Site Scripting (XSS).This issue affec |
| CVE-2026-0947 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AT Internet Piano Analytics allows Cross-Site Scripting (XSS).This issu |
| CVE-2026-0948 | Analyzed | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login allows Privilege Escalation.This issue affects Microsoft Entra ID SSO |
| CVE-2026-0950 | Deferred | 未確認 | CWE-200 | The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.19.17. This |
| CVE-2026-0958 | Analyzed | 未確認 | CWE-436 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated |
| CVE-2026-0969 | Deferred | 未確認 | CWE-94 | The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to insufficient sanitization of MDX content. This vulnerability, CVE-202 |
| CVE-2026-0974 | Deferred | 未確認 | CWE-862 | The Orderable – WordPress Restaurant Online Ordering System and Food Ordering Plugin plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capabil |
| CVE-2026-0980 | Modified | 未確認 | CWE-78 | A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permiss |
| CVE-2026-0996 | Deferred | 未確認 | CWE-79 | The Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AI Form Builder module in all versions up to, and including, 6.1.14 due to a combination |
| CVE-2026-0997 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate the authenticated user when processing {{/p |
| CVE-2026-0998 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate user identity and post ownership in the {{/ |
| CVE-2026-0999 | Analyzed | 未確認 | CWE-303 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validate login method restrictions which allows an authenticated user to bypass SSO-only |
| CVE-2026-1043 | Deferred | 未確認 | CWE-79 | The PostmarkApp Email Integrator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in versions up to, and including, 2.4. This is due to ins |
| CVE-2026-1044 | Deferred | 未確認 | CWE-79 | The Tennis Court Bookings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.7 due to insufficient input |
| CVE-2026-1046 | Analyzed | 未確認 | CWE-939 | Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via |
| CVE-2026-1047 | Deferred | 未確認 | CWE-79 | The salavat counter Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'image_url' parameter in all versions up to, and including, 0.9.5 due to insuff |
| CVE-2026-1055 | Deferred | 未確認 | CWE-79 | The TalkJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.1.15 due to insufficient input sanitization |
| CVE-2026-1058 | Deferred | 未確認 | CWE-79 | The Form Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via hidden field values in all versions up to, and including, 1.15.35. This is due to insufficient |
| CVE-2026-1065 | Deferred | 未確認 | CWE-434 | The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.15.35. This is due to the plugin's default file up |
| CVE-2026-1072 | Deferred | 未確認 | CWE-352 | The Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing nonce validation wh |
| CVE-2026-1080 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab EE affecting all versions from 16.7 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have all |
| CVE-2026-1082 | Deferred | 未確認 | CWE-352 | The TITLE ANIMATOR plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settin |
| CVE-2026-1094 | Analyzed | 未確認 | CWE-1289 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 18.8.4 that could have allowed an authenticated developer to hide specially crafted file chan |
| CVE-2026-1096 | Deferred | 未確認 | CWE-79 | The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'google_map_view' shortcode in all |
| CVE-2026-1104 | Deferred | 未確認 | CWE-862 | The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API |
| CVE-2026-1117 | Deferred | 未確認 | CWE-284 | A vulnerability in the `lollms_generation_events.py` component of parisneo/lollms version 5.9.0 allows unauthenticated access to sensitive Socket.IO events. The `add_events` functi |
| CVE-2026-1164 | Deferred | 未確認 | CWE-79 | The Easy Voice Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 1.2.5 due to insufficient in |
| CVE-2026-1186 | Deferred | 未確認 | CWE-22 | EAP Legislator is vulnerable to Path Traversal in file extraction functionality. Attacker can prepare zipx archive (default file type used by the Legislator application) and choose |
| CVE-2026-1187 | Deferred | 未確認 | CWE-79 | The ZoomifyWP Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'filename' parameter of the 'zoomify' shortcode in all versions up to, and including, 1 |
| CVE-2026-1198 | Deferred | 未確認 | CWE-89 | SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a maliciou |
| CVE-2026-1200 | Deferred | 未確認 | CWE-824 | A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to m |
| CVE-2026-1207 | Modified | 未確認 | CWE-89 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on ``RasterField`` (only implemented on PostGIS) allows remote attackers to in |
| CVE-2026-1210 | Deferred | 未確認 | CWE-79 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_elementor_data' meta field in all versions up to, and including, 3.20.7 d |
| CVE-2026-1215 | Deferred | 未確認 | CWE-352 | The MMA Call Tracking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.15. This is due to missing nonce validation when sa |
| CVE-2026-1216 | Deferred | 未確認 | CWE-79 | The RSS Aggregator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'template' parameter in all versions up to, and including, 5.0.10 due to insufficien |
| CVE-2026-1219 | Deferred | 未確認 | CWE-639 | The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 4.0 to 5.10 via the 'load_t |
| CVE-2026-1226 | Deferred | 未確認 | CWE-94 | CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintended code within the application when maliciously crafted desig |
| CVE-2026-1227 | Deferred | 未確認 | CWE-611 | CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within the EBO system, or d |
| CVE-2026-1228 | Deferred | 未確認 | CWE-639 | The Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versio |
| CVE-2026-1229 | Analyzed | 未確認 | CWE-682 | The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. E |
| CVE-2026-1231 | Deferred | 未確認 | CWE-79 | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `js` Global Settings parameter in all vers |
| CVE-2026-1232 | Deferred | 未確認 | CWE-693 | A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local authenticated user with eleva |
| CVE-2026-1235 | Deferred | 未確認 | CWE-502 | The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow unauthenticated users to perform PHP Object Injection when a suitable g |
| CVE-2026-1241 | Deferred | 未確認 | CWE-288 | The Pelco, Inc. Sarix Professional 3 Series Cameras are vulnerable to an authentication bypass issue in their web management interface. The flaw stems from inadequate enforcement o |
| CVE-2026-1246 | Deferred | 未確認 | CWE-22 | The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Arbitrary File Read via path traversal in the 'loadFile' parameter in all versions up to, and including, 6.4.2 |
| CVE-2026-1249 | Deferred | 未確認 | CWE-918 | The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Server-Side Request Forgery in versions 5.3 to 5.10 via the 'load_lyrics |
| CVE-2026-1252 | Deferred | 未確認 | CWE-79 | The Events Listing Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Event URL' parameter in all versions up to, and including, 1.3.4 due to insuffi |
| CVE-2026-1254 | Deferred | 未確認 | CWE-862 | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.6. This is due to the pl |
| CVE-2026-1258 | Deferred | 未確認 | CWE-89 | The Mail Mint plugin for WordPress is vulnerable to blind SQL Injection via the 'forms', 'automation', 'email/templates', and 'contacts/import/tutorlms/map' API endpoints in all ve |
| CVE-2026-1268 | Deferred | 未確認 | CWE-79 | The Dynamic Widget Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget content field in the Gutenberg editor sidebar in all versions up to, and |
| CVE-2026-1271 | Deferred | 未確認 | CWE-639 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.9.7.2 via the |
| CVE-2026-1277 | Deferred | 未確認 | CWE-601 | The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirect_to' parameter in t |
| CVE-2026-1279 | Deferred | 未確認 | CWE-79 | The Employee Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_title' parameter in the `search_employee_directory` shortcode in all versions |
| CVE-2026-1282 | Analyzed | 未確認 | CWE-80 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated u |
| CVE-2026-1285 | Analyzed | 未確認 | CWE-407 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `django.utils.text.Truncator.chars()` and `Truncator.words()` methods (with `html=True`) and |
| CVE-2026-1287 | Modified | 未確認 | CWE-89 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `FilteredRelation` is subject to SQL injection in column aliases via control characters, usin |
| CVE-2026-1292 | Analyzed | 未確認 | CWE-532 | Tanium addressed an insertion of sensitive information into log file vulnerability in Trends. |
| CVE-2026-1293 | Deferred | 未確認 | CWE-79 | The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the `yoast-schema` block attribute in |
| CVE-2026-1294 | Deferred | 未確認 | CWE-918 | The All In One Image Viewer Block plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.2 due to missing authorization and URL |
| CVE-2026-1296 | Deferred | 未確認 | CWE-601 | The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the ' |
| CVE-2026-1301 | Deferred | 未確認 | CWE-787 | In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and |
| CVE-2026-1303 | Deferred | 未確認 | CWE-862 | The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.2.4. This is due to missing capability checks on the `ma |
| CVE-2026-1304 | Deferred | 未確認 | CWE-79 | The Membership Plugin – Restrict Content for WordPress is vulnerable to Stored Cross-Site Scripting via multiple invoice settings fields in all versions up to, and including, 3.2.1 |
| CVE-2026-1305 | Deferred | 未確認 | CWE-287 | The Japanized for WooCommerce plugin for WordPress is vulnerable to Improper Authentication in versions up to, and including, 2.8.4. This is due to a flawed permission check in the |
| CVE-2026-1306 | Deferred | 未確認 | CWE-434 | The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to |
| CVE-2026-1311 | Deferred | 未確認 | CWE-22 | The Worry Proof Backup plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.2.4 via the backup upload functionality. This makes it possible |
| CVE-2026-1312 | Modified | 未確認 | CWE-89 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `.QuerySet.order_by()` is subject to SQL injection in column aliases containing periods when |
| CVE-2026-1316 | Deferred | 未確認 | CWE-79 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'media[].href' parameter in all versions up to, and including, 5.97.0 |
| CVE-2026-1317 | Deferred | 未確認 | CWE-89 | The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 7.37. This is due to insufficient |
| CVE-2026-1319 | Deferred | 未確認 | CWE-79 | The Robin Image Optimizer – Unlimited Image Optimization & WebP Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Alternative Text' field of a Me |
| CVE-2026-1320 | Deferred | 未確認 | CWE-79 | The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' HTTP header in all versions up to |
| CVE-2026-1333 | Analyzed | 未確認 | CWE-457 | A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desk |
| CVE-2026-1334 | Analyzed | 未確認 | CWE-125 | An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 c |
| CVE-2026-1335 | Analyzed | 未確認 | CWE-787 | An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2026-1337 | Analyzed | 未確認 | CWE-117 | Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treat |
| CVE-2026-1341 | Deferred | 未確認 | CWE-306 | Avation Light Engine Pro exposes its configuration and control interface without any authentication or access control. |
| CVE-2026-1344 | Analyzed | 未確認 | CWE-732 | Tanium addressed an insecure file permissions vulnerability in Enforce Recovery Key Portal. |
| CVE-2026-1355 | Analyzed | 未確認 | CWE-862 | A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload unauthorized content to another user’s repository migration expo |
| CVE-2026-1356 | Deferred | 未確認 | CWE-918 | The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.5.1 via th |
| CVE-2026-1357 | Deferred | 未確認 | CWE-434 | The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. Thi |
| CVE-2026-1358 | Deferred | 未確認 | CWE-434 | Airleader Master versions 6.381 and prior allow for file uploads without restriction to multiple webpages running maximum privileges. This could allow an unauthenticated user to |
| CVE-2026-1367 | Deferred | 未確認 | CWE-89 | Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option. |
| CVE-2026-1368 | Deferred | 未確認 | CWE-287 | The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce verification commented out, allowing unauthenticated attackers to generat |
| CVE-2026-1369 | Deferred | 未確認 | CWE-601 | The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue |
| CVE-2026-1370 | Deferred | 未確認 | CWE-89 | The SIBS woocommerce payment gateway plugin for WordPress is vulnerable to time-based SQL Injection via the ‘referencedId’ parameter in all versions up to, and including, 2.2.0 due |
| CVE-2026-1371 | Deferred | 未確認 | CWE-200 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.5. This is due t |
| CVE-2026-1373 | Deferred | 未確認 | CWE-79 | The Easy Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author_profile_picture_url' parameter in all versions up to, and including, 1.7 due |
| CVE-2026-1375 | Deferred | 未確認 | CWE-639 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object References (IDOR) in all versions up to, and including, 3.9.5. Thi |
| CVE-2026-1387 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user |
| CVE-2026-1388 | Analyzed | 未確認 | CWE-1333 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated |
| CVE-2026-1394 | Deferred | 未確認 | CWE-352 | The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the s |
| CVE-2026-1401 | Deferred | 未確認 | CWE-79 | The Tune Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CSV import in all versions up to, and including, 1.6.3. This is due to insufficient input san |
| CVE-2026-1404 | Deferred | 未確認 | CWE-79 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Script |
| CVE-2026-1405 | Deferred | 未確認 | CWE-434 | The Slider Future plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'slider_future_handle_image_upload' function in all versio |
| CVE-2026-1426 | Deferred | 未確認 | CWE-502 | The Advanced AJAX Product Filters plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.9.6 via deserialization of untrusted input in |
| CVE-2026-1432 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not corre |
| CVE-2026-1434 | Analyzed | 未確認 | CWE-79 | Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a malicious URL that, when opened, causes arbitrary JavaScript to execute in the victim’s br |
| CVE-2026-1435 | Analyzed | 未確認 | CWE-613 | Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of session invalidation after new logins. The application genera |
| CVE-2026-1436 | Analyzed | 未確認 | CWE-639 | Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without |
| CVE-2026-1437 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several |
| CVE-2026-1438 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several |
| CVE-2026-1439 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several |
| CVE-2026-1440 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several |
| CVE-2026-1441 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several |
| CVE-2026-1442 | Analyzed | 未確認 | CWE-321 | Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying attention), the firmware updates m |
| CVE-2026-1447 | Deferred | 未確認 | CWE-352 | The Mail Mint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19.2. This is due to missing nonce validation on the create_o |
| CVE-2026-1452 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-1455 | Deferred | 未確認 | CWE-352 | The Whatsiplus Scheduled Notification for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to m |
| CVE-2026-1456 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denia |
| CVE-2026-1458 | Analyzed | 未確認 | CWE-434, CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have a |
| CVE-2026-1459 | Analyzed | 未確認 | CWE-78 | A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allo |
| CVE-2026-1461 | Deferred | 未確認 | CWE-230 | The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in all versions up to, and including, 4.7.0 via the Stripe webhook handler. This is |
| CVE-2026-1486 | Deferred | 未確認 | CWE-358 | A flaw was found in Keycloak. A vulnerability exists in the jwt-authorization-grant flow where the server fails to verify if an Identity Provider (IdP) is enabled before issuing to |
| CVE-2026-1490 | Deferred | 未確認 | CWE-350 | The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization bypass via reverse DN |
| CVE-2026-1495 | Deferred | 未確認 | CWE-532 | The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI t |
| CVE-2026-1499 | Deferred | 未確認 | CWE-862 | The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing ca |
| CVE-2026-1507 | Deferred | 未確認 | CWE-248 | The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services resulting in a denial-of-service. |
| CVE-2026-1512 | Deferred | 未確認 | CWE-79 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Info Box widget in all |
| CVE-2026-1517 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in iomad up to 5.0. Affected is an unknown function of the component Company Admin Block. Such manipulation leads to sql injection. The attack can be |
| CVE-2026-1518 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. After further review by the Keycloak project and Red Hat, the reported SSRF via client registration/backchannel notification URIs | |
| CVE-2026-1523 | Deferred | 未確認 | CWE-22 | Path Traversal vulnerability in Digitek ADT1100 and Digitek DT950 from PRIMION DIGITEK, S.L.U (Azkoyen Group). This vulnerability allows an attacker to access arbitrary files in th |
| CVE-2026-1529 | Deferred | 未確認 | CWE-347 | A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the organization ID and target email within a legitimate invitation token's JSON Web Token (JW |
| CVE-2026-1530 | Deferred | 未確認 | CWE-295 | A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the |
| CVE-2026-1531 | Deferred | 未確認 | CWE-295 | A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicit |
| CVE-2026-1537 | Deferred | 未確認 | CWE-862 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the load_ |
| CVE-2026-1542 | Deferred | 未確認 | CWE-502 | The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadge |
| CVE-2026-1553 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4. |
| CVE-2026-1554 | Analyzed | 未確認 | CWE-91 | XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication S |
| CVE-2026-1557 | Deferred | 未確認 | CWE-22 | The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter. This makes it possible for unauthen |
| CVE-2026-1558 | Deferred | 未確認 | CWE-639 | The WP Recipe Maker plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to, and including, 10.3.2. This is due to the /wp-json/wp-recipe |
| CVE-2026-1560 | Deferred | 未確認 | CWE-94 | The Custom Block Builder – Lazy Blocks plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.0 via multiple functions in the 'LazyBl |
| CVE-2026-1565 | Deferred | 未確認 | CWE-434 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to incorrec |
| CVE-2026-1568 | Deferred | 未確認 | CWE-287, CWE-347 | Rapid7 InsightVM versions before 8.34.0 contain a signature verification issue on the Assertion Consumer Service (ACS) cloud endpoint that could allow an attacker to gain unauthori |
| CVE-2026-1570 | Deferred | 未確認 | CWE-79 | The Simple Bible Verse via Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `verse` shortcode in all versions up to, and including, 1.1 |
| CVE-2026-1571 | Analyzed | 未確認 | CWE-79 | User-controlled input is reflected into the HTML output without proper encoding on TP-Link Archer C60 v3, allowing arbitrary JavaScript execution via a crafted URL. An attacker cou |
| CVE-2026-1573 | Deferred | 未確認 | CWE-79 | The OMIGO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `omigo_donate_button` shortcode in all versions up to, and including, 3.3 due to insuff |
| CVE-2026-1578 | Deferred | 未確認 | CWE-79 | HP App for Android is potentially vulnerable to cross-site scripting (XSS) when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate |
| CVE-2026-1580 | Deferred | 未確認 | CWE-20 | A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx. This can lea |
| CVE-2026-1581 | Deferred | 未確認 | CWE-89 | The wpForo Forum plugin for WordPress is vulnerable to time-based SQL Injection via the 'wpfob' parameter in all versions up to, and including, 2.4.14 due to insufficient escaping |
| CVE-2026-1582 | Deferred | 未確認 | CWE-200 | The WP All Export plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.14 via the export download endpoint. This is due to |
| CVE-2026-1585 | Deferred | 未確認 | CWE-428 | An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with th |
| CVE-2026-1591 | Analyzed | 未確認 | CWE-79 | Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the upload file list witho |
| CVE-2026-1592 | Analyzed | 未確認 | CWE-79 | Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded into the HTML output, al |
| CVE-2026-1602 | Analyzed | 未確認 | CWE-89 | SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. |
| CVE-2026-1603 | Analyzed | 掲載 | CWE-288, CWE-306 | An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data. |
| CVE-2026-1608 | Deferred | 未確認 | CWE-79 | The Video Onclick plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `youtube` shortcode in all versions up to, and including, 0.4.7 due to insuffic |
| CVE-2026-1611 | Deferred | 未確認 | CWE-79 | The Wikiloops Track Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wikiloops` shortcode in all versions up to, and including, 1.0.1 due |
| CVE-2026-1613 | Deferred | 未確認 | CWE-79 | The Wonka Slide plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `list_class` shortcode in all versions up to, and including, 1.3.3 due to insuffi |
| CVE-2026-1614 | Deferred | 未確認 | CWE-79 | The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘logoTag’ Site Identity block attribute in all version |
| CVE-2026-1615 | Deferred | 未確認 | CWE-94 | Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions. The library relies on the sta |
| CVE-2026-1618 | Modified | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: fr |
| CVE-2026-1619 | Modified | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Ki |
| CVE-2026-1622 | Deferred | 未確認 | CWE-532 | Neo4j Enterprise and Community editions versions prior to 2026.01.3 and 5.26.21 are vulnerable to a potential information disclosure by a user who has ability to access the local l |
| CVE-2026-1626 | Analyzed | 未確認 | CWE-327 | An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they a |
| CVE-2026-1627 | Analyzed | 未確認 | CWE-327 | An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of |
| CVE-2026-1632 | Deferred | 未確認 | CWE-306 | MOMA Seismic Station Version v2.4.2520 and prior exposes its web management interface without requiring authentication, which could allow an unauthenticated attacker to modify conf |
| CVE-2026-1633 | Deferred | 未確認 | CWE-306 | The Synectix LAN 232 TRIO 3-Port serial to ethernet adapter exposes its web management interface without requiring authentication, allowing unauthenticated users to modify critical |
| CVE-2026-1634 | Deferred | 未確認 | CWE-79 | The Subitem AL Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 1.0.0 due |
| CVE-2026-1639 | Deferred | 未確認 | CWE-89 | The Taskbuilder – WordPress Project Management & Task Management plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order' and 'sort_by' parameters in al |
| CVE-2026-1640 | Deferred | 未確認 | CWE-862 | The Taskbuilder – WordPress Project Management & Task Management plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.0.2. This is due |
| CVE-2026-1642 | Analyzed | 未確認 | CWE-345, CWE-349 | A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position |
| CVE-2026-1643 | Deferred | 未確認 | CWE-79 | The MP-Ukagaka plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output es |
| CVE-2026-1646 | Deferred | 未確認 | CWE-79 | The Advance Block Extend plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TitleColor block attribute in the Latest Posts Gutenberg block in all versions up |
| CVE-2026-1649 | Deferred | 未確認 | CWE-79 | The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ce_venue_name' parameter in all versions up to, and including, 1.5.7 due to insuffic |
| CVE-2026-1654 | Deferred | 未確認 | CWE-79 | The Peter's Date Countdown plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 2.0.0 |
| CVE-2026-1655 | Deferred | 未確認 | CWE-862 | The EventPrime plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization checks in all versions up to, and including, 4.2.8.4. This is due t |
| CVE-2026-1656 | Deferred | 未確認 | CWE-862 | The Business Directory Plugin for WordPress is vulnerable to authorization bypass due to a missing authorization check in all versions up to, and including, 6.4.20. This makes it p |
| CVE-2026-1657 | Deferred | 未確認 | CWE-862 | The EventPrime plugin for WordPress is vulnerable to unauthorized image file upload in all versions up to, and including, 4.2.8.4. This is due to the plugin registering the upload_ |
| CVE-2026-1658 | Analyzed | 未確認 | CWE-451 | User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning. The vulnerability could be exploited by a bad |
| CVE-2026-1662 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated |
| CVE-2026-1664 | Deferred | 未確認 | CWE-639 | Summary An Insecure Direct Object Reference has been found to exist in `createHeaderBasedEmailResolver()` function within the Cloudflare Agents SDK. The issue occurs because the ` |
| CVE-2026-1666 | Deferred | 未確認 | CWE-79 | The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'redirect_to' parameter in all versions up to, and including, 3.3.46. This is due |
| CVE-2026-1669 | Modified | 未確認 | CWE-200, CWE-73 | Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files |
| CVE-2026-1670 | Deferred | 未確認 | CWE-306 | The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery email address. |
| CVE-2026-1671 | Deferred | 未確認 | CWE-862 | The Activity Log for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the winter_activity_log_action() function in a |
| CVE-2026-1675 | Deferred | 未確認 | CWE-1188 | The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value fo |
| CVE-2026-1692 | Analyzed | 未確認 | CWE-1385 | A missing origin validation in WebSockets vulnerability affects the GraphicalData web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 1 |
| CVE-2026-1693 | Analyzed | 未確認 | CWE-1390, CWE-477 | The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in v |
| CVE-2026-1694 | Analyzed | 未確認 | CWE-201 | HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue an |
| CVE-2026-1695 | Analyzed | 未確認 | CWE-79 | An XSS vulnerability affects the OAuth web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It might all |
| CVE-2026-1696 | Analyzed | 未確認 | CWE-79 | Some HTTP security headers are not properly set by the web server when sending responses to the client application. |
| CVE-2026-1697 | Analyzed | 未確認 | CWE-1275, CWE-614 | The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included. |
| CVE-2026-1698 | Analyzed | 未確認 | CWE-644 | A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject har |
| CVE-2026-1703 | Deferred | 未確認 | CWE-22 | When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of t |
| CVE-2026-1707 | Modified | 未確認 | CWE-284 | pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-forma |
| CVE-2026-1709 | Modified | 未確認 | CWE-322 | A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vul |
| CVE-2026-1714 | Deferred | 未確認 | CWE-93 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Email Relay Abuse in all versions up to, and |
| CVE-2026-1721 | Deferred | 未確認 | CWE-79 | Summary A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth callback handler. The `error_description` query parameter was directly int |
| CVE-2026-1722 | Deferred | 未確認 | CWE-862 | The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.0. T |
| CVE-2026-1725 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauthenticated user to cause denial |
| CVE-2026-1727 | Deferred | 未確認 | CWE-200 | The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable Google Cloud Storage bucket names. These names were utilized |
| CVE-2026-1729 | Deferred | 未確認 | CWE-306 | The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12. This is due to the plugin not properly verifying a user's iden |
| CVE-2026-1730 | Deferred | 未確認 | CWE-434 | The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'OS_DataHub_Maps_Admin::add_file_and_ext' function in |
| CVE-2026-1731 | Analyzed | 掲載 | CWE-78 | BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending s |
| CVE-2026-1733 | Analyzed | 未確認 | CWE-266, CWE-285, CWE-639 | A vulnerability was identified in Zhong Bang CRMEB up to 5.6.3. This affects the function detail/tidyOrder of the file /api/store_integral/order/detail/:uni. The manipulation of th |
| CVE-2026-1734 | Analyzed | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in Zhong Bang CRMEB up to 5.6.3. This vulnerability affects unknown code of the file crmeb/app/api/controller/v1/CrontabController.php of the co |
| CVE-2026-1735 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Yealink MeetingBar A30 133.321.0.3. This issue affects some unknown processing of the component Diagnostic Handler. This manipulation causes comma |
| CVE-2026-1736 | Analyzed | 未確認 | CWE-617 | A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request of the file /src/sgwc/s11 |
| CVE-2026-1737 | Analyzed | 未確認 | CWE-617 | A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function sgwc_s5c_handle_create_bearer_request of the file /src/sgwc/s5c-handler.c of the component |
| CVE-2026-1738 | Analyzed | 未確認 | CWE-617 | A flaw has been found in Open5GS up to 2.7.6. The impacted element is the function sgwc_tunnel_add of the file /src/sgwc/context.c of the component SGWC. Executing a manipulation o |
| CVE-2026-1739 | Analyzed | 未確認 | CWE-404, CWE-476 | A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the file internal/sbi/processor/smpolicy.go. The manipulation le |
| CVE-2026-1740 | Analyzed | 未確認 | CWE-287 | A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impacts the function httpcon_check_session_url of the file /cgi/timepro.cgi of the component Hidden Hiddenloginsetup In |
| CVE-2026-1741 | Analyzed | 未確認 | CWE-912 | A vulnerability was determined in EFM ipTIME A8004T 14.18.2. Affected is the function httpcon_check_session_url of the file /sess-bin/d.cgi of the component Debug Interface. This m |
| CVE-2026-1742 | Analyzed | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi of the component |
| CVE-2026-1743 | Deferred | 未確認 | CWE-287, CWE-294 | A vulnerability has been found in DJI Mavic Mini, Air, Spark and Mini SE up to 01.00.0500. Affected by this vulnerability is an unknown functionality of the component Enhanced Wi-F |
| CVE-2026-1744 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sp_pppoe_user.js. The manipulation of the argument U |
| CVE-2026-1745 | Analyzed | 未確認 | CWE-352, CWE-862 | A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote ex |
| CVE-2026-1746 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/api/loadDictItemByKeyword of the component Online Report API. |
| CVE-2026-1747 | Analyzed | 未確認 | CWE-288 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have a |
| CVE-2026-1748 | Deferred | 未確認 | CWE-862 | The Invoct – PDF Invoices & Billing for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all |
| CVE-2026-1750 | Deferred | 未確認 | CWE-269 | The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.0.7. This is due to a missing cap |
| CVE-2026-1751 | Analyzed | 未確認 | CWE-862 | A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could have allowed unauthorized edits to merge request approval rul |
| CVE-2026-1754 | Deferred | 未確認 | CWE-79 | The personal-authors-category plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.3 due to insufficient in |
| CVE-2026-1755 | Deferred | 未確認 | CWE-79 | The Menu Icons by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_wp_attachment_image_alt’ post meta in all versions up to, and including, 0.1 |
| CVE-2026-1756 | Deferred | 未確認 | CWE-434 | The WP FOFT Loader plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'WP_FOFT_Loader_Mimes::file_and_ext' function in all ve |
| CVE-2026-1757 | Deferred | 未確認 | CWE-401 | A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain con |
| CVE-2026-1760 | Deferred | 未確認 | CWE-444 | A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connecti |
| CVE-2026-1761 | Deferred | 未確認 | CWE-121 | A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote a |
| CVE-2026-1762 | Deferred | 未確認 | CWE-23 | A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 and prior versions. |
| CVE-2026-1763 | Deferred | 未確認 | CWE-35 | Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions. |
| CVE-2026-1768 | Modified | 未確認 | CWE-863 | A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to access entries.This issue affects Devolutions Server: before 20 |
| CVE-2026-1769 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects Centre |
| CVE-2026-1770 | Deferred | 未確認 | CWE-913 | Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypa |
| CVE-2026-1772 | Analyzed | 未確認 | CWE-280 | RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools lik |
| CVE-2026-1773 | Modified | 未確認 | CWE-184 | IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality |
| CVE-2026-1774 | Deferred | 未確認 | CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability. | |
| CVE-2026-1777 | Deferred | 未確認 | CWE-319 | The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function. A thir |
| CVE-2026-1778 | Deferred | 未確認 | CWE-295 | Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorr |
| CVE-2026-1779 | Deferred | 未確認 | CWE-288 | The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.2. This is due to incorrect authentication in t |
| CVE-2026-1783 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-1785 | Deferred | 未確認 | CWE-352 | The Code Snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.9.4. This is due to missing nonce validation on the cloud |
| CVE-2026-1786 | Deferred | 未確認 | CWE-862 | The Twitter posts to Blog plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'dg_tw_options' function in all versions |
| CVE-2026-1787 | Deferred | 未確認 | CWE-862 | The LearnPress Export Import – WordPress extension for LearnPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'delete_m |
| CVE-2026-1788 | Deferred | 未確認 | CWE-787 | : Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux (QUIC protocol implementation, packet processing module modules) allows : Buffer Manipulation.This |
| CVE-2026-1791 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Hillstone Networks Operation and Maintenance Security Gateway on Linux allows Upload a Web Shell to a Web Server.Th |
| CVE-2026-1792 | Deferred | 未確認 | CWE-79 | The Geo Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL path in all versions up to, and including, 1.0 due to insufficient input sanitization a |
| CVE-2026-1793 | Deferred | 未確認 | CWE-22 | The Element Pack Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in all versions up to, and including, 8.3.17 via the SVG widget and a lack of suffi |
| CVE-2026-1795 | Deferred | 未確認 | CWE-79 | The Address Bar Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL Path in all versions up to, and including, 1.0.0 due to insufficient input sani |
| CVE-2026-1796 | Deferred | 未確認 | CWE-79 | The StyleBidet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 1.0.0 due to insufficient input sanitizat |
| CVE-2026-1801 | Analyzed | 未確認 | CWE-444 | A flaw was found in libsoup, an HTTP client/server library. This HTTP Request Smuggling vulnerability arises from non-RFC-compliant parsing in the soup_filter_input_stream_read_lin |
| CVE-2026-1802 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Ziroom ZHOME A0101 1.0.1.0. This issue affects the function macAddrClone of the file luci\controller\api\zrMacClone.lua. The manipulation of |
| CVE-2026-1803 | Deferred | 未確認 | CWE-1392 | A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the component Dropbear SSH Service. This manipulation causes use of default credent |
| CVE-2026-1804 | Deferred | 未確認 | CWE-79 | The WDES Responsive Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wdes-popup-title' shortcode in all versions up to, and including, 1.3. |
| CVE-2026-1807 | Deferred | 未確認 | CWE-79 | The InteractiveCalculator for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'interactivecalculator' shortcode in all versions up to, |
| CVE-2026-1808 | Deferred | 未確認 | CWE-79 | The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplus_button shortcode i |
| CVE-2026-1809 | Deferred | 未確認 | CWE-79 | The HTML Tag Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1 due to insufficient |
| CVE-2026-1810 | Analyzed | 未確認 | CWE-22 | A vulnerability was detected in bolo-blog bolo-solo up to 2.6.4. The impacted element is the function unpackFilteredZip of the file src/main/java/org/b3log/solo/bolo/prop/BackupSer |
| CVE-2026-1811 | Analyzed | 未確認 | CWE-22 | A flaw has been found in bolo-blog bolo-solo up to 2.6.4. This affects the function importFromMarkdown of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the |
| CVE-2026-1812 | Analyzed | 未確認 | CWE-22 | A vulnerability has been found in bolo-blog bolo-solo up to 2.6.4. This impacts the function importFromCnblogs of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java |
| CVE-2026-1813 | Analyzed | 未確認 | CWE-284, CWE-434 | A vulnerability was found in bolo-blog bolo-solo up to 2.6.4. Affected is an unknown function of the file src/main/java/org/b3log/solo/bolo/pic/PicUploadProcessor.java of the compo |
| CVE-2026-1814 | Deferred | 未確認 | CWE-331 | Rapid7 Nexpose versions 6.4.50 and later are vulnerable to an insufficient entropy issue in the CredentialsKeyStorePassword.generateRandomPassword() method. When updating legacy ke |
| CVE-2026-1819 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Karel Electronics Industry and Trade Inc. ViPort allows Stored XSS. Th |
| CVE-2026-1821 | Deferred | 未確認 | CWE-79 | The Microtango plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'restkey' parameter of the mt_reservation shortcode in all versions up to, and including, 0 |
| CVE-2026-1826 | Deferred | 未確認 | CWE-79 | The OpenPOS Lite – Point of Sale for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter of the order_qrcode shortcode in all ve |
| CVE-2026-1827 | Deferred | 未確認 | CWE-79 | The Flask Micro code-editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's codeflask shortcode in all versions up to, and including, 1.0.0 due t |
| CVE-2026-1831 | Deferred | 未確認 | CWE-862 | The YayMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized plugin installation and activation due to missing capability checks on the 'yaymail_in |
| CVE-2026-1833 | Deferred | 未確認 | CWE-862 | The WaMate Confirm – Order Confirmation plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.0.1. This is due to the plugin not properl |
| CVE-2026-1835 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. This affects an unknown part. The manipulation leads to cross-site request forgery. |
| CVE-2026-1837 | Modified | 未確認 | CWE-770, CWE-787, CWE-805 | A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is c |
| CVE-2026-1841 | Deferred | 未確認 | CWE-79 | The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing |
| CVE-2026-1842 | Deferred | 未確認 | CWE-613 | HyperCloud versions 2.3.5 through 2.6.8 improperly allowed refresh tokens to be used directly for resource access and failed to invalidate previously issued access tokens when a re |
| CVE-2026-1843 | Deferred | 未確認 | CWE-79 | The Super Page Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Activity Log in all versions up to, and including, 5.2.2 due to insufficient input sa |
| CVE-2026-1844 | Deferred | 未確認 | CWE-79 | The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all versions up |
| CVE-2026-1846 | Rejected | 未確認 | Rejected reason: loading template... | |
| CVE-2026-1847 | Analyzed | 未確認 | CWE-770 | Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside t |
| CVE-2026-1848 | Analyzed | 未確認 | CWE-770 | Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resource |
| CVE-2026-1849 | Analyzed | 未確認 | CWE-674 | MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents. The issue arises in recursive functions because the server |
| CVE-2026-1850 | Analyzed | 未確認 | CWE-770 | Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash. |
| CVE-2026-1853 | Deferred | 未確認 | CWE-79 | The BuddyHolis ListSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listsearch' shortcode in all versions up to, and including, 1.1 due to |
| CVE-2026-1857 | Deferred | 未確認 | CWE-918 | The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.6.1. This is due to insufficien |
| CVE-2026-1860 | Deferred | 未確認 | CWE-862 | The Kali Forms plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.8. This is due to the `get_items_permissions_check() |
| CVE-2026-1861 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-1862 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: |
| CVE-2026-1866 | Deferred | 未確認 | CWE-79 | The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in all versions up to, and including, 1.32.0. This is due to th |
| CVE-2026-1868 | Deferred | 未確認 | CWE-1336 | GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions of the AI Gateway from 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18. |
| CVE-2026-1884 | Analyzed | 未確認 | CWE-918 | A weakness has been identified in ZenTao up to 21.7.6-85642. The impacted element is the function fetchHook of the file module/webhook/model.php of the component Webhook Module. Th |
| CVE-2026-1885 | Deferred | 未確認 | CWE-79 | The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1. |
| CVE-2026-1888 | Deferred | 未確認 | CWE-79 | The Docus – YouTube Video Playlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'docusplaylist' shortcode in all versions up to, and including, 1.0.6 d |
| CVE-2026-1892 | Analyzed | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in WeKan up to 8.20. This affects the function setBoardOrgs of the file models/boards.js of the component REST API. Such manipulation of |
| CVE-2026-1893 | Deferred | 未確認 | CWE-79 | The Orbisius Random Name Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_label' parameter in the 'orbisius_random_name_generator' shortcode |
| CVE-2026-1894 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in WeKan up to 8.20. This impacts an unknown function of the file models/checklistItems.js of the component REST API. Performing a manipulation of the |
| CVE-2026-1895 | Modified | 未確認 | CWE-266, CWE-284 | A flaw has been found in WeKan up to 8.20. Affected is the function applyWipLimit of the file models/lists.js of the component Attachment Storage Handler. Executing a manipulation |
| CVE-2026-1896 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in WeKan up to 8.20. Affected by this vulnerability is the function ComprehensiveBoardMigration of the file server/migrations/comprehensiveBoardMigra |
| CVE-2026-1897 | Analyzed | 未確認 | CWE-862, CWE-863 | A vulnerability was found in WeKan up to 8.20. Affected by this issue is some unknown functionality of the file server/methods/positionHistory.js of the component Position-History |
| CVE-2026-1898 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in WeKan up to 8.20. This affects an unknown part of the file packages/wekan-ldap/server/syncUser.js of the component LDAP User Sync. This manipulati |
| CVE-2026-1901 | Deferred | 未確認 | CWE-79 | The QuestionPro Surveys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'questionpro' shortcode in all versions up to, and including, 1.0 due to insuffici |
| CVE-2026-1903 | Deferred | 未確認 | CWE-79 | The Ravelry Designs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout' attribute of the 'sb_ravelry_designs' shortcode in all versions up to, |
| CVE-2026-1904 | Deferred | 未確認 | CWE-79 | The Simple Wp colorfull Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'accordion' shortcode in all versions up to, an |
| CVE-2026-1905 | Deferred | 未確認 | CWE-79 | The Sphere Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in the 'show_sphere_image' shortcode in all versions up to, and inclu |
| CVE-2026-1906 | Deferred | 未確認 | CWE-862 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.0 via the `wpo_ips |
| CVE-2026-1909 | Deferred | 未確認 | CWE-79 | The WaveSurfer-WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's audio shortcode in all versions up to, and including, 2.8.3 due to insufficient |
| CVE-2026-1910 | Deferred | 未確認 | CWE-79 | The UpMenu – Online ordering for restaurants plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lang' attribute of the 'upmenu-menu' shortcode in all versio |
| CVE-2026-1912 | Deferred | 未確認 | CWE-79 | The Citations tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code' parameter in the 'ctdoi' shortcode in all versions up to, and including, 0.3.2 |
| CVE-2026-1915 | Deferred | 未確認 | CWE-79 | The Simple Plyr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poster' parameter in the 'plyr' shortcode in all versions up to, and including, 0.0.1 due |
| CVE-2026-1916 | Deferred | 未確認 | CWE-862 | The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification and loss of data due to missing capability checks and an insecure authentication |
| CVE-2026-1922 | Deferred | 未確認 | CWE-79 | The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ecs-list-events` shortcode `message` attribute in all |
| CVE-2026-1925 | Deferred | 未確認 | CWE-862 | The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'update_template_ |
| CVE-2026-1927 | Deferred | 未確認 | CWE-862 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the greenshift_app_pass_va |
| CVE-2026-1929 | Deferred | 未確認 | CWE-94 | The Advanced Woo Labels plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.37. This is due to the use of `call_user_func_array()` w |
| CVE-2026-1931 | Deferred | 未確認 | CWE-79 | The Rent Fetch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'keyword' parameter in all versions up to, and including, 0.32.4 due to insufficient input |
| CVE-2026-1932 | Deferred | 未確認 | CWE-862 | The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update-appointment |
| CVE-2026-1937 | Deferred | 未確認 | CWE-862 | The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability |
| CVE-2026-1938 | Deferred | 未確認 | CWE-862 | The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized license key deletion due to a missing authorization check on the `/yaymail-license/v1/ |
| CVE-2026-1939 | Deferred | 未確認 | CWE-79 | The Percent to Infograph plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `percent_to_graph` shortcode in all versions up to, and including, 1.0 due to ins |
| CVE-2026-1941 | Deferred | 未確認 | CWE-79 | The WP Event Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_events' shortcode in all versions up to, and including, 1.8.7 due to |
| CVE-2026-1942 | Deferred | 未確認 | CWE-862 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the b2s_curation_dr |
| CVE-2026-1943 | Deferred | 未確認 | CWE-79 | The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 4.3.2 due to insuffi |
| CVE-2026-1944 | Deferred | 未確認 | CWE-862 | The CallbackKiller service widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cbk_save() function in all versio |
| CVE-2026-1953 | Deferred | 未確認 | CWE-79 | Nukegraphic CMS v3.1.2 contains a stored cross-site scripting (XSS) vulnerability in the user profile edit functionality at /ngc-cms/user-edit-profile.php. The application fails to |
| CVE-2026-1959 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'descripción' parameter in the '/loggrodemo/jbrain/MaestraCuentasBancarias' endpoint. |
| CVE-2026-1960 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'Facebook' parameter in '/loggrodemo/jbrain/ConsultaTerceros' endpoint. |
| CVE-2026-1962 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in WeKan up to 8.20. The impacted element is an unknown function of the file server/attachmentMigration.js of the component Attachment Migration. The |
| CVE-2026-1963 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was found in WeKan up to 8.20. This affects an unknown function of the file models/attachments.js of the component Attachment Storage. The manipulation results in i |
| CVE-2026-1964 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the component REST Endpoint. This manipulation causes improper |
| CVE-2026-1966 | Deferred | 未確認 | CWE-522 | YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration view could obtain LDAP |
| CVE-2026-1970 | Analyzed | 未確認 | CWE-601 | A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup. This manipulation of the argument submit-u |
| CVE-2026-1971 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in Edimax BR-6288ACL up to 1.12. Impacted is the function wiz_WISP24gmanual of the file wiz_WISP24gmanual.asp. Such manipulation of the argument manu |
| CVE-2026-1972 | Analyzed | 未確認 | CWE-1392 | A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Performing a manipulation of the argument Username/Password results |
| CVE-2026-1973 | Analyzed | 未確認 | CWE-404, CWE-476 | A vulnerability was determined in Free5GC up to 4.1.0. The impacted element is the function establishPfcpSession of the component SMF. Executing a manipulation can lead to null poi |
| CVE-2026-1974 | Analyzed | 未確認 | CWE-404 | A vulnerability was identified in Free5GC up to 4.1.0. This affects the function ResolveNodeIdToIp of the file internal/sbi/processor/datapath.go of the component SMF. The manipula |
| CVE-2026-1975 | Analyzed | 未確認 | CWE-404, CWE-476 | A security flaw has been discovered in Free5GC up to 4.1.0. This impacts the function identityTriggerType of the file pfcp_reports.go. The manipulation results in null pointer dere |
| CVE-2026-1976 | Analyzed | 未確認 | CWE-404, CWE-476 | A weakness has been identified in Free5GC up to 4.1.0. Affected is the function SessionDeletionResponse of the component SMF. This manipulation causes null pointer dereference. The |
| CVE-2026-1977 | Deferred | 未確認 | CWE-74, CWE-94 | A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61. Affected by this vulnerability is the function eval |
| CVE-2026-1978 | Analyzed | 未確認 | CWE-425 | A vulnerability was detected in kalyan02 NanoCMS up to 0.4. Affected by this issue is some unknown functionality of the file /data/pagesdata.txt of the component User Information H |
| CVE-2026-1979 | Analyzed | 未確認 | CWE-119, CWE-416 | A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can l |
| CVE-2026-1983 | Deferred | 未確認 | CWE-352 | The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing nonce valida |
| CVE-2026-1985 | Deferred | 未確認 | CWE-79 | The Press3D plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 3D Model Gutenberg block in all versions up to, and including, 1.0.2. This is due to the plugi |
| CVE-2026-1987 | Deferred | 未確認 | CWE-639 | The Scheduler Widget plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 0.1.6. This is due to the `scheduler_widget_ajax_s |
| CVE-2026-1988 | Deferred | 未確認 | CWE-98 | The Flexi Product Slider and Grid for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0.5 via the `flexipsg_carousel` |
| CVE-2026-1990 | Deferred | 未確認 | CWE-404, CWE-476 | A security vulnerability has been detected in oatpp up to 1.3.1. This impacts the function oatpp::data::type::ObjectWrapper::ObjectWrapper of the file src/oatpp/data/type/Type.hpp. |
| CVE-2026-1991 | Analyzed | 未確認 | CWE-404, CWE-476 | A vulnerability was detected in libuvc up to 0.0.7. Affected is the function uvc_scan_streaming of the file src/device.c of the component UVC Descriptor Handler. The manipulation r |
| CVE-2026-1994 | Deferred | 未確認 | CWE-269 | The s2Member plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 260127. This is due to the plugin not properly va |
| CVE-2026-1996 | Analyzed | 未確認 | CWE-703 | Certain HP OfficeJet Pro printers may be vulnerable to potential denial of service when the IPP requests are mishandled, failing to establish a TCP connection. |
| CVE-2026-1997 | Analyzed | 未確認 | CWE-346 | Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device re |
| CVE-2026-1998 | Analyzed | 未確認 | CWE-119, CWE-787 | A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation causes memory corruption. The a |
| CVE-2026-1999 | Modified | 未確認 | CWE-863 | An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to merge their own pull request into a repository without having push a |
| CVE-2026-2000 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function apply_config of the file /function/system/basic/bridge_cfg.php of the component Web Management Ba |
| CVE-2026-2001 | Deferred | 未確認 | CWE-862 | The WowRevenue plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'Notice::install_activate_plugin' function in all ver |
| CVE-2026-20010 | Deferred | 未確認 | CWE-805 | A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the LLDP process to restart, |
| CVE-2026-2002 | Deferred | 未確認 | CWE-79 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form_name parameter in all version |
| CVE-2026-2003 | Analyzed | 未確認 | CWE-1287 | Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for |
| CVE-2026-20033 | Deferred | 未確認 | CWE-805 | A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected |
| CVE-2026-20036 | Deferred | 未確認 | CWE-78 | A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with valid administrative privileges to ex |
| CVE-2026-20037 | Deferred | 未確認 | CWE-250 | A vulnerability in the NX-OS CLI privilege levels of Cisco UCS Manager Software could allow an authenticated, local attacker with read-only privileges to modify files and perform u |
| CVE-2026-2004 | Modified | 未確認 | CWE-1287 | Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user |
| CVE-2026-20048 | Deferred | 未確認 | CWE-789 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an authenticated, remote attacker to c |
| CVE-2026-2005 | Modified | 未確認 | CWE-120, CWE-122 | Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18 |
| CVE-2026-20051 | Deferred | 未確認 | CWE-457 | A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching Platforms could allow a |
| CVE-2026-20056 | Deferred | 未確認 | CWE-494 | A vulnerability in the Dynamic Vectoring and Streaming (DVS) Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote a |
| CVE-2026-2006 | Modified | 未確認 | CWE-1285, CWE-129 | Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to ex |
| CVE-2026-2007 | Modified | 未確認 | CWE-120, CWE-122 | Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to |
| CVE-2026-2008 | Undergoing Analysis | 未確認 | CWE-74, CWE-94 | A vulnerability was detected in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a. This vulnerability affects the function eqn_chart of the file fmcp/mpl_mcp/core |
| CVE-2026-2009 | Analyzed | 未確認 | CWE-266, CWE-284 | A flaw has been found in SourceCodester Gas Agency Management System 1.0. This issue affects some unknown processing of the file /gasmark/php_action/createUser.php. Executing a man |
| CVE-2026-20091 | Deferred | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross- |
| CVE-2026-20098 | Analyzed | 未確認 | CWE-434 | A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary files, execute arbitrary command |
| CVE-2026-20099 | Deferred | 未確認 | CWE-78 | A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker with administrative pr |
| CVE-2026-2010 | Analyzed | 未確認 | CWE-266, CWE-285, CWE-639 | A vulnerability has been found in Sanluan PublicCMS up to 4.0.202506.d/5.202506.d/6.202506.d. Impacted is the function Paid of the file publiccms-parent/publiccms-trade/src/main/ja |
| CVE-2026-20107 | Deferred | 未確認 | CWE-1220 | A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, local attacker to cause an affected dev |
| CVE-2026-2011 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /ramonsys/enrollment/controller.php. The manipulati |
| CVE-2026-20111 | Analyzed | 未確認 | CWE-79, CWE-798 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) att |
| CVE-2026-20119 | Deferred | 未確認 | CWE-1287 | A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker |
| CVE-2026-2012 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /ramonsys/facultyloading/index.php. This manip |
| CVE-2026-20122 | Analyzed | 掲載 | CWE-648 | A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vul |
| CVE-2026-20123 | Analyzed | 未確認 | CWE-601 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote att |
| CVE-2026-20126 | Analyzed | 未確認 | CWE-648 | A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges on the underlying operating system. Thi |
| CVE-2026-20127 | Analyzed | 掲載 | CWE-287 | A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalys |
| CVE-2026-20128 | Analyzed | 掲載 | CWE-257 | A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affect |
| CVE-2026-20129 | Analyzed | 未確認 | CWE-287 | A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as a user who h |
| CVE-2026-2013 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Student Management System 1.0. This affects an unknown function of the file /ramonsys/soa/index.php. Such manipulation of the argumen |
| CVE-2026-20133 | Analyzed | 掲載 | CWE-200 | A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due |
| CVE-2026-20137 | Analyzed | 未確認 | CWE-200, CWE-22 | In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.5, 9.3.7, and 9.2.9, and Splunk Cloud Platform versions below 10.1.2507.0, 10.0.2503.9, 9.3.2411.112, and 9.3.2408.122, a lo |
| CVE-2026-20138 | Analyzed | 未確認 | CWE-532 | In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the Splunk `_i |
| CVE-2026-20139 | Analyzed | 未確認 | CWE-400 | In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.8, 9.3.9, and 9.2.12, and Splunk Cloud Platform versions below 10.2.2510.3, 10.1.2507.8, 10.0.2503.9, and 9.3.2411.121, a lo |
| CVE-2026-2014 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /ramonsys/billing/index.php. Performing a manipulati |
| CVE-2026-20141 | Analyzed | 未確認 | CWE-200 | In Splunk Enterprise versions below 10.0.2, 10.0.3, 9.4.8, and 9.3.9, a low-privileged user who does not hold the "admin" Splunk role could access the Splunk Monitoring Console App |
| CVE-2026-20142 | Analyzed | 未確認 | CWE-532 | In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the Splunk `_i |
| CVE-2026-20144 | Analyzed | 未確認 | CWE-532 | In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 10.2.2510.0, 10.1.2507.11, 10.0.2503.9, and 9.3.2411.120, a u |
| CVE-2026-2015 | Modified | 未確認 | CWE-266, CWE-285 | A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatusImportService.php of the component Final Status Import. Exe |
| CVE-2026-2016 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64_decode of the file src/base64.c. The ma |
| CVE-2026-2017 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurityHandler of the file /goform/wx3auth of the component POST Re |
| CVE-2026-2018 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/settings/controller.php. This manipulation of the argument ID |
| CVE-2026-2019 | Deferred | 未確認 | CWE-74 | The Cart All In One For WooCommerce plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.1.21. This is due to insufficient input validation |
| CVE-2026-2022 | Deferred | 未確認 | CWE-862 | The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'rednao_smart_forms_get_campaigns' AJAX action in all ver |
| CVE-2026-2023 | Deferred | 未確認 | CWE-352 | The WP Plugin Info Card plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2.0. This is due to missing nonce validation in the |
| CVE-2026-2024 | Deferred | 未確認 | CWE-89 | The PhotoStack Gallery plugin for WordPress is vulnerable to SQL Injection via the 'postid' parameter in all versions up to, and including, 0.4.1 due to insufficient escaping on th |
| CVE-2026-2026 | Analyzed | 未確認 | CWE-276 | A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of Ser |
| CVE-2026-2027 | Deferred | 未確認 | CWE-79 | The AMP Enhancer – Compatibility Layer for Official AMP Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AMP Custom CSS setting in all versions up to, and |
| CVE-2026-2029 | Deferred | 未確認 | CWE-79 | The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[labb_pricing_item]` shortcode's `title` and `value` attributes in |
| CVE-2026-2032 | Modified | 未確認 | CWE-451 | Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a |
| CVE-2026-2033 | Deferred | 未確認 | CWE-22 | MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in |
| CVE-2026-2034 | Analyzed | 未確認 | CWE-120 | Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal |
| CVE-2026-2035 | Deferred | 未確認 | CWE-78 | Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on af |
| CVE-2026-2036 | Analyzed | 未確認 | CWE-502 | GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst |
| CVE-2026-2037 | Analyzed | 未確認 | CWE-502 | GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta |
| CVE-2026-2038 | Analyzed | 未確認 | CWE-862 | GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of G |
| CVE-2026-2039 | Analyzed | 未確認 | CWE-862 | GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of |
| CVE-2026-2040 | Deferred | 未確認 | CWE-427 | PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affe |
| CVE-2026-20401 | Modified | 未確認 | CWE-617, CWE-754 | In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by th |
| CVE-2026-20402 | Modified | 未確認 | CWE-787 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b |
| CVE-2026-20403 | Modified | 未確認 | CWE-787 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by t |
| CVE-2026-20404 | Modified | 未確認 | CWE-787 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b |
| CVE-2026-20405 | Modified | 未確認 | CWE-617 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by t |
| CVE-2026-20406 | Modified | 未確認 | CWE-754, CWE-770 | In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by th |
| CVE-2026-20407 | Analyzed | 未確認 | CWE-787 | In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges neede |
| CVE-2026-20408 | Analyzed | 未確認 | CWE-122, CWE-787 | In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution p |
| CVE-2026-20409 | Analyzed | 未確認 | CWE-787 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys |
| CVE-2026-2041 | Analyzed | 未確認 | CWE-78 | Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in |
| CVE-2026-20410 | Analyzed | 未確認 | CWE-787 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys |
| CVE-2026-20411 | Analyzed | 未確認 | CWE-416 | In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System pri |
| CVE-2026-20412 | Analyzed | 未確認 | CWE-787 | In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the |
| CVE-2026-20413 | Analyzed | 未確認 | CWE-1285, CWE-787 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys |
| CVE-2026-20414 | Analyzed | 未確認 | CWE-416 | In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System |
| CVE-2026-20415 | Analyzed | 未確認 | CWE-415, CWE-667 | In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. |
| CVE-2026-20417 | Analyzed | 未確認 | CWE-787 | In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Syste |
| CVE-2026-20418 | Analyzed | 未確認 | CWE-787 | In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. |
| CVE-2026-20419 | Modified | 未確認 | CWE-754 | In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no addi |
| CVE-2026-2042 | Analyzed | 未確認 | CWE-78 | Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations o |
| CVE-2026-20420 | Modified | 未確認 | CWE-125 | In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by |
| CVE-2026-20421 | Modified | 未確認 | CWE-125 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b |
| CVE-2026-20422 | Modified | 未確認 | CWE-617 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b |
| CVE-2026-2043 | Analyzed | 未確認 | CWE-78 | Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affe |
| CVE-2026-2044 | Modified | 未確認 | CWE-908 | GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GI |
| CVE-2026-2045 | Modified | 未確認 | CWE-787 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIM |
| CVE-2026-2047 | Modified | 未確認 | CWE-122, CWE-131, CWE-787 | GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation |
| CVE-2026-2048 | Modified | 未確認 | CWE-787 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIM |
| CVE-2026-2054 | Analyzed | 未確認 | CWE-200, CWE-284 | A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. Impacted is an unknown function of the component Wifi Setting Handler. Performing a manipulatio |
| CVE-2026-2055 | Analyzed | 未確認 | CWE-200, CWE-284 | A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown function of the component DHCP Client Information Handler. Execut |
| CVE-2026-2056 | Analyzed | 未確認 | CWE-200, CWE-284 | A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wan_connection_status.asp of th |
| CVE-2026-2057 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /login.php. The manipulation of the argumen |
| CVE-2026-2058 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php o |
| CVE-2026-2059 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /emp_edit1.php. Such manipulation of the a |
| CVE-2026-2060 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Simple Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /simpleblooddonor/editca |
| CVE-2026-20601 | Modified | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keystrokes without user permission. |
| CVE-2026-20602 | Modified | 未確認 | CWE-400 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to cause a denial-o |
| CVE-2026-20603 | Modified | 未確認 | CWE-284 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26.3. An app with root privileges may be able to access private inform |
| CVE-2026-20605 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may |
| CVE-2026-20606 | Modified | 未確認 | CWE-200 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, |
| CVE-2026-20608 | Modified | 未確認 | CWE-120, CWE-770 | This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 2 |
| CVE-2026-20609 | Modified | 未確認 | CWE-125 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, mac |
| CVE-2026-2061 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in D-Link DIR-823X 250416. Affected by this issue is the function sub_424D20 of the file /goform/set_ipv6. Executing a manipulation can lead to os co |
| CVE-2026-20610 | Analyzed | 未確認 | CWE-59 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.3. An app may be able to gain root privileges. |
| CVE-2026-20611 | Modified | 未確認 | CWE-125 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macO |
| CVE-2026-20612 | Modified | 未確認 | CWE-200 | A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to access sensitive user |
| CVE-2026-20614 | Modified | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to gain root pr |
| CVE-2026-20615 | Modified | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS |
| CVE-2026-20616 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. |
| CVE-2026-20617 | Modified | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3 |
| CVE-2026-20618 | Modified | 未確認 | CWE-377 | An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be able to access user-sensitive data. |
| CVE-2026-20619 | Analyzed | 未確認 | CWE-200 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An app may be able to access sensitive user data. |
| CVE-2026-2062 | Analyzed | 未確認 | CWE-404, CWE-476 | A vulnerability was identified in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_modify_bearer_response/sgwc_sxa_handle_session_modification_response of the compone |
| CVE-2026-20620 | Modified | 未確認 | CWE-125 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An attacker may be abl |
| CVE-2026-20621 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, mac |
| CVE-2026-20623 | Modified | 未確認 | CWE-200 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An app may be able to access protected user data. |
| CVE-2026-20624 | Modified | 未確認 | CWE-863 | An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to access sensitiv |
| CVE-2026-20625 | Modified | 未確認 | CWE-22 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, |
| CVE-2026-20626 | Modified | 未確認 | CWE-862 | This issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Tahoe 26.3, visionOS 26.3. A malicious app may be able t |
| CVE-2026-20627 | Modified | 未確認 | CWE-20 | An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, |
| CVE-2026-20628 | Modified | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14 |
| CVE-2026-20629 | Modified | 未確認 | CWE-922 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be able to access user-sensitive data. |
| CVE-2026-2063 | Analyzed | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/set_ac_server of the component Web Management Interface. |
| CVE-2026-20630 | Modified | 未確認 | CWE-277 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to access pro |
| CVE-2026-20634 | Modified | 未確認 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, mac | |
| CVE-2026-20635 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visi |
| CVE-2026-20636 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted |
| CVE-2026-20638 | Analyzed | 未確認 | CWE-284 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3. A user with Live Caller ID app extensions turned off could have identifying infor |
| CVE-2026-2064 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/meusdadod.php of the component Us |
| CVE-2026-20640 | Analyzed | 未確認 | CWE-703 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to iPhone may b |
| CVE-2026-20641 | Modified | 未確認 | CWE-200 | A privacy issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS |
| CVE-2026-20642 | Modified | 未確認 | CWE-284 | An input validation issue was addressed. This issue is fixed in iOS 26.3 and iPadOS 26.3. A person with physical access to an iOS device may be able to access photos from the lock |
| CVE-2026-20644 | Modified | 未確認 | CWE-119, CWE-120, CWE-416, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. |
| CVE-2026-20645 | Modified | 未確認 | CWE-1021 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with p |
| CVE-2026-20646 | Modified | 未確認 | CWE-532 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to read sensitive location information. |
| CVE-2026-20647 | Analyzed | 未確認 | CWE-200 | This issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data. |
| CVE-2026-20648 | Analyzed | 未確認 | CWE-200 | A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to access notifications from ot |
| CVE-2026-20649 | Modified | 未確認 | CWE-377 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. A user may be able to view s |
| CVE-2026-2065 | Analyzed | 未確認 | CWE-287, CWE-306, CWE-862 | A security flaw has been discovered in Flycatcher Toys smART Pixelator 2.0. Affected by this issue is some unknown functionality of the component Bluetooth Low Energy Interface. Pe |
| CVE-2026-20650 | Modified | 未確認 | CWE-400 | A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An atta |
| CVE-2026-20652 | Modified | 未確認 | CWE-120, CWE-400 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. |
| CVE-2026-20653 | Modified | 未確認 | CWE-22 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS |
| CVE-2026-20654 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able |
| CVE-2026-20655 | Modified | 未確認 | CWE-287 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access |
| CVE-2026-20656 | Modified | 未確認 | CWE-285 | A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to access a user's Safa |
| CVE-2026-20658 | Modified | 未確認 | A package validation issue was addressed by blocking the vulnerable package. This issue is fixed in macOS Tahoe 26.3. An app may be able to gain root privileges. | |
| CVE-2026-2066 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpGroupConfig. Executing a manipulation of the argument groupNa |
| CVE-2026-20660 | Modified | 未確認 | CWE-22 | A path handling issue was addressed with improved logic. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Son |
| CVE-2026-20661 | Modified | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access |
| CVE-2026-20662 | Modified | 未確認 | CWE-200 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An attacker with physical access to a locked dev |
| CVE-2026-20663 | Modified | 未確認 | CWE-532 | The issue was resolved by sanitizing logging. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may be able to enumerate a user's installed apps |
| CVE-2026-20666 | Analyzed | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data. |
| CVE-2026-20667 | Modified | 未確認 | CWE-693 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, watchOS 26.3. An app |
| CVE-2026-20669 | Modified | 未確認 | CWE-22 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user |
| CVE-2026-2067 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTimeGroupConfig. The manipulation of |
| CVE-2026-20671 | Modified | 未確認 | CWE-77 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Ta |
| CVE-2026-20673 | Modified | 未確認 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. Turning off "Loa | |
| CVE-2026-20674 | Modified | 未確認 | CWE-200 | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view s |
| CVE-2026-20675 | Modified | 未確認 | CWE-125, CWE-77 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS |
| CVE-2026-20676 | Modified | 未確認 | CWE-400 | This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A website may be able to |
| CVE-2026-20677 | Modified | 未確認 | CWE-362, CWE-367 | A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS |
| CVE-2026-20678 | Modified | 未確認 | CWE-200 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may be able to access sen |
| CVE-2026-2068 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/formSyslogConf. The manipulation of the argument ServerIp resul |
| CVE-2026-20680 | Modified | 未確認 | CWE-200 | The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoi |
| CVE-2026-20681 | Modified | 未確認 | CWE-200 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26.3. An app may be able to access information about a user's |
| CVE-2026-20682 | Modified | 未確認 | CWE-200 | A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker may be able to discover a use |
| CVE-2026-2069 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llama_grammar_advance_stack of the file llama.cpp/src/llama-grammar.cpp of the component GBNF Gr |
| CVE-2026-2070 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/formPolicyRouteConf. Such manipulation of the argument G |
| CVE-2026-20700 | Analyzed | 掲載 | CWE-119 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. A |
| CVE-2026-20704 | Deferred | 未確認 | CWE-352 | Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, unintended operations |
| CVE-2026-2071 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formP2PLimitConfig. Performing a manipulation of the argument |
| CVE-2026-20711 | Analyzed | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords. |
| CVE-2026-2073 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/user/index.php. Executing a manipulation of the |
| CVE-2026-20730 | Analyzed | 未確認 | CWE-200 | A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information. Note: Software versions which hav |
| CVE-2026-20732 | Analyzed | 未確認 | CWE-451 | A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages. Note: Software versions which have reached End of Te |
| CVE-2026-20733 | Modified | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-2074 | Analyzed | 未確認 | CWE-610, CWE-611 | A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of the component HTTP POST Request Handler. |
| CVE-2026-20742 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injectin |
| CVE-2026-2075 | Analyzed | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the function saveRolePermission of the file dataset\repos\wareho |
| CVE-2026-2076 | Analyzed | 未確認 | CWE-266, CWE-285 | A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this vulnerability is the function addUser/updateUser/deleteUser of t |
| CVE-2026-20761 | Deferred | 未確認 | CWE-77 | A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted |
| CVE-2026-20764 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by providing |
| CVE-2026-2077 | Analyzed | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function addRole/updateRole/deleteRole |
| CVE-2026-2078 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addPermission/updatePermission/deletePermission of the fi |
| CVE-2026-20781 | Modified | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenti |
| CVE-2026-2079 | Analyzed | 未確認 | CWE-266, CWE-285 | A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addMenu/updateMenu/deleteMenu of the file dataset\ |
| CVE-2026-20791 | Modified | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-20792 | Modified | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial |
| CVE-2026-20796 | Analyzed | 未確認 | CWE-367 | Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should no |
| CVE-2026-20797 | Modified | 未確認 | CWE-121, CWE-787 | A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corruption and a termination of the p |
| CVE-2026-2080 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in UTT HiPER 810 1.7.4-141218. This issue affects the function setSysAdm of the file /goform/formUser. The manipulation of the argument passwd1 leads |
| CVE-2026-2081 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_password. This manipulation of the argument http_passw |
| CVE-2026-2082 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /goform/set_mac_clone. Such manipulation of the argument mac leads |
| CVE-2026-2083 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file /delete_post.php. Performing a manipulation of the arg |
| CVE-2026-2084 | Analyzed | 未確認 | CWE-77, CWE-78 | A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/set_language. Executing a manipulation of the argument langSelection |
| CVE-2026-20841 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code locally. |
| CVE-2026-20846 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network. |
| CVE-2026-2085 | Analyzed | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in D-Link DWR-M921 1.1.50. Affected is the function sub_419F20 of the file /boafrm/formUSSDSetup of the component USSD Configuration Endp |
| CVE-2026-2086 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formFireWall of the component Managemen |
| CVE-2026-2087 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Online Class Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. This manipulation of the |
| CVE-2026-2088 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of th |
| CVE-2026-2089 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipula |
| CVE-2026-20895 | Modified | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementa |
| CVE-2026-2090 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Online Class Record System 1.0. This issue affects some unknown processing of the file /admin/message/search.php. Executing a manip |
| CVE-2026-20902 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by inject |
| CVE-2026-20910 | Modified | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting |
| CVE-2026-2093 | Deferred | 未確認 | CWE-89 | Docpedia developed by Flowring has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents. |
| CVE-2026-2094 | Deferred | 未確認 | CWE-89 | Docpedia developed by Flowring has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database cont |
| CVE-2026-2095 | Analyzed | 未確認 | CWE-288 | Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain arbitrary user a |
| CVE-2026-2096 | Analyzed | 未確認 | CWE-288 | Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a speci |
| CVE-2026-2097 | Analyzed | 未確認 | CWE-434 | Agentflow developed by Flowring has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbi |
| CVE-2026-20977 | Analyzed | 未確認 | Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning. | |
| CVE-2026-20978 | Analyzed | 未確認 | Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application. | |
| CVE-2026-20979 | Analyzed | 未確認 | Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege. | |
| CVE-2026-2098 | Analyzed | 未確認 | CWE-79 | AgentFlow developed by Flowring has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browse |
| CVE-2026-20980 | Analyzed | 未確認 | Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands. | |
| CVE-2026-20981 | Analyzed | 未確認 | Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command with system privilege. | |
| CVE-2026-20982 | Analyzed | 未確認 | CWE-22 | Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege. |
| CVE-2026-20983 | Analyzed | 未確認 | Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privileg | |
| CVE-2026-20984 | Deferred | 未確認 | Improper handling of insufficient permission in Galaxy Wearable installed on non-Samsung Device prior to version 2.2.68 allows local attackers to access sensitive information. | |
| CVE-2026-20985 | Analyzed | 未確認 | Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privileg | |
| CVE-2026-20986 | Analyzed | 未確認 | CWE-22 | Path traversal in Samsung Members prior to Chinese version 15.5.05.4 allows local attackers to overwrite data within Samsung Members. |
| CVE-2026-20987 | Deferred | 未確認 | Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands. | |
| CVE-2026-2099 | Analyzed | 未確認 | CWE-79 | AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript codes that are executed in |
| CVE-2026-2101 | Deferred | 未確認 | CWE-79 | A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to |
| CVE-2026-2103 | Analyzed | 未確認 | CWE-321, CWE-798 | Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys |
| CVE-2026-2105 | Analyzed | 未確認 | CWE-266, CWE-285 | A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The affected element is the function addDept/updateDept/deleteDept of the file dataset\rep |
| CVE-2026-2106 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element is the function addNotice/updateNotice/deleteNotice/batchDel |
| CVE-2026-2107 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file |
| CVE-2026-2108 | Analyzed | 未確認 | CWE-404 | A vulnerability was determined in jsbroks COCO Annotator up to 0.11.1. This impacts an unknown function of the file /api/info/long_task of the component Endpoint. This manipulation |
| CVE-2026-2109 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file /api/undo/ of the component Delete Category Handler. Such manipul |
| CVE-2026-2110 | Analyzed | 未確認 | CWE-307, CWE-799 | A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by this vulnerability is an unknown functionality of the file /lo |
| CVE-2026-2111 | Analyzed | 未確認 | CWE-22 | A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this issue is some unknown functionality of the file /airag/knowledge/doc/edit of the component Retrieval-Augme |
| CVE-2026-2112 | Deferred | 未確認 | CWE-352 | The Dam Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce verification on the pending |
| CVE-2026-2113 | Analyzed | 未確認 | CWE-20, CWE-434, CWE-502 | A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.p |
| CVE-2026-2114 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_admin.php. The manipulation of the argum |
| CVE-2026-2115 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Society Management System 1.0. This issue affects some unknown processing of the file /admin/delete_expenses.php. This manipulation of the arg |
| CVE-2026-2116 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/edit_expenses.php. Such manipulation of the argumen |
| CVE-2026-2117 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/edit_activity.php. Performing a manipulation |
| CVE-2026-2118 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Execu |
| CVE-2026-2120 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_server_settings of the component Configuration Parameter Handler. |
| CVE-2026-21218 | Analyzed | 未確認 | CWE-166 | Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-2122 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in Xiaopi Panel up to 20260126. This impacts an unknown function of the file /demo.php of the component WAF Firewall. The manipulation of the ar |
| CVE-2026-21222 | Analyzed | 未確認 | CWE-532 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-21228 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network. |
| CVE-2026-21229 | Analyzed | 未確認 | CWE-20 | Improper input validation in Power BI allows an authorized attacker to execute code over a network. |
| CVE-2026-21231 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21232 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21234 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate p |
| CVE-2026-21235 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21236 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21237 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges local |
| CVE-2026-21238 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21239 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21240 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21241 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21242 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21243 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network. |
| CVE-2026-21244 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-21245 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21246 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21247 | Analyzed | 未確認 | CWE-122, CWE-125, CWE-20 | Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-21248 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-21249 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally. |
| CVE-2026-21250 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21251 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21253 | Modified | 未確認 | CWE-416 | Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21255 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-21256 | Analyzed | 未確認 | CWE-77, CWE-94 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code over a netwo |
| CVE-2026-21257 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a n |
| CVE-2026-21258 | Analyzed | 未確認 | CWE-125, CWE-20 | Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-21259 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-2126 | Deferred | 未確認 | CWE-863 | The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 20260 |
| CVE-2026-21260 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-21261 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-2127 | Deferred | 未確認 | CWE-862 | The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to unauthorized arbitrary shortcode execution in all versions up to, and including, 1.70.4. This is due to a missin |
| CVE-2026-2129 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/set_ac_status. Performing a manipulation of the argume |
| CVE-2026-2130 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in BurtTheCoder mcp-maigret up to 1.0.12. This affects an unknown part of the file src/index.ts of the component search_username. Executing a manipul |
| CVE-2026-2131 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function input_text. The manipulation of the argument text leads to os comm |
| CVE-2026-21312 | Analyzed | 未確認 | CWE-787 | Audition versions 25.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati |
| CVE-2026-21313 | Analyzed | 未確認 | CWE-125 | Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose |
| CVE-2026-21314 | Analyzed | 未確認 | CWE-125 | Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose |
| CVE-2026-21315 | Analyzed | 未確認 | CWE-125 | Audition versions 25.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access s |
| CVE-2026-21316 | Analyzed | 未確認 | CWE-788 | Audition versions 25.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to application denial-of-service. An attacker coul |
| CVE-2026-21317 | Analyzed | 未確認 | CWE-125 | Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose |
| CVE-2026-21318 | Analyzed | 未確認 | CWE-787 | After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Explo |
| CVE-2026-21319 | Analyzed | 未確認 | CWE-125 | After Effects versions 25.6 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to acc |
| CVE-2026-2132 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Administrator/PHP/AdminUpdateCategory.php. The m |
| CVE-2026-21320 | Analyzed | 未確認 | CWE-416 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio |
| CVE-2026-21321 | Analyzed | 未確認 | CWE-190 | After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-21322 | Analyzed | 未確認 | CWE-125 | After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated m |
| CVE-2026-21323 | Analyzed | 未確認 | CWE-416 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio |
| CVE-2026-21324 | Analyzed | 未確認 | CWE-125 | After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated m |
| CVE-2026-21325 | Analyzed | 未確認 | CWE-125 | After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated m |
| CVE-2026-21326 | Analyzed | 未確認 | CWE-416 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio |
| CVE-2026-21327 | Analyzed | 未確認 | CWE-787 | After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Explo |
| CVE-2026-21328 | Analyzed | 未確認 | CWE-787 | After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Explo |
| CVE-2026-21329 | Analyzed | 未確認 | CWE-416 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio |
| CVE-2026-2133 | Analyzed | 未確認 | CWE-284, CWE-434 | A weakness has been identified in code-projects Online Music Site 1.0. Impacted is an unknown function of the file /Administrator/PHP/AdminUpdateCategory.php. This manipulation of |
| CVE-2026-21330 | Analyzed | 未確認 | CWE-843 | After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution |
| CVE-2026-21332 | Analyzed | 未確認 | CWE-125 | InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabi |
| CVE-2026-21334 | Analyzed | 未確認 | CWE-787 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-21335 | Analyzed | 未確認 | CWE-787 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-21336 | Analyzed | 未確認 | CWE-476 | Substance3D - Designer versions 15.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could expl |
| CVE-2026-21337 | Analyzed | 未確認 | CWE-125 | Substance3D - Designer versions 15.1.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabi |
| CVE-2026-21338 | Analyzed | 未確認 | CWE-476 | Substance3D - Designer versions 15.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could expl |
| CVE-2026-21339 | Analyzed | 未確認 | CWE-125 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabi |
| CVE-2026-2134 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms/admin/manage-doctors.php. Such |
| CVE-2026-21340 | Analyzed | 未確認 | CWE-125 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabi |
| CVE-2026-21341 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-21342 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-21343 | Analyzed | 未確認 | CWE-125 | Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an all |
| CVE-2026-21344 | Analyzed | 未確認 | CWE-125 | Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an all |
| CVE-2026-21345 | Analyzed | 未確認 | CWE-125 | Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an all |
| CVE-2026-21346 | Analyzed | 未確認 | CWE-787 | Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Ex |
| CVE-2026-21347 | Analyzed | 未確認 | CWE-190 | Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the curre |
| CVE-2026-21348 | Analyzed | 未確認 | CWE-125 | Substance3D - Modeler versions 1.22.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabil |
| CVE-2026-21349 | Analyzed | 未確認 | CWE-787 | Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. E |
| CVE-2026-2135 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the ar |
| CVE-2026-21350 | Analyzed | 未確認 | CWE-476 | After Effects versions 25.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vu |
| CVE-2026-21351 | Analyzed | 未確認 | CWE-416 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio |
| CVE-2026-21352 | Analyzed | 未確認 | CWE-787 | DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Explo |
| CVE-2026-21353 | Analyzed | 未確認 | CWE-190 | DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-21354 | Analyzed | 未確認 | CWE-190 | DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit |
| CVE-2026-21355 | Analyzed | 未確認 | CWE-125 | DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to dis |
| CVE-2026-21357 | Analyzed | 未確認 | CWE-122, CWE-787 | InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-21358 | Analyzed | 未確認 | CWE-122, CWE-787 | InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in application denial-of-service. An attacker could |
| CVE-2026-2136 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID c |
| CVE-2026-2137 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Tenda TX3 up to 16.03.13.11_multi. This impacts an unknown function of the file /goform/SetIpMacBind. The manipulation of the argument list leads |
| CVE-2026-2138 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in Tenda TX9 up to 22.03.02.10_multi. Affected is the function sub_42D03C of the file /goform/SetStaticRouteCfg. The manipulation of the argument list res |
| CVE-2026-21389 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting |
| CVE-2026-2139 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Tenda TX9 up to 22.03.02.10_multi. Affected by this vulnerability is the function sub_432580 of the file /goform/fast_setting_wifi_set. This manip |
| CVE-2026-21393 | Deferred | 未確認 | CWE-79 | Movable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted input is stored by an attacker, arbitrary script may be executed on a logged-in user's |
| CVE-2026-2140 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in Tenda TX9 up to 22.03.02.10_multi. Affected by this issue is the function sub_4223E0 of the file /goform/setMacFilterCfg. Such manipulation of the |
| CVE-2026-2141 | Analyzed | 未確認 | CWE-266, CWE-285, CWE-863 | A security flaw has been discovered in WuKongOpenSource WukongCRM up to 11.3.3. This affects an unknown part of the file gateway/src/main/java/com/kakarote/gateway/service/impl/Per |
| CVE-2026-21410 | Analyzed | 未確認 | CWE-89 | InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Malicious users that use the vulnerable endpoint are potentially able to cause remote code |
| CVE-2026-21419 | Deferred | 未確認 | CWE-59 | Dell Display and Peripheral Manager (Windows) versions prior to 2.2 contain an Improper Link Resolution Before File Access ('Link Following') vulnerability in the Installer and Ser |
| CVE-2026-2142 | Analyzed | 未確認 | CWE-77, CWE-78 | A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420688 of the file /goform/set_qos. Executing a manipulation can lead to os co |
| CVE-2026-21420 | Analyzed | 未確認 | CWE-427 | Dell Repository Manager (DRM), versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially ex |
| CVE-2026-2143 | Analyzed | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The man |
| CVE-2026-21434 | Analyzed | 未確認 | CWE-770 | webtransport-go is an implementation of the WebTransport protocol. From 0.3.0 to 0.9.0, an attacker can cause excessive memory consumption in webtransport-go's session implementati |
| CVE-2026-21435 | Analyzed | 未確認 | CWE-400 | webtransport-go is an implementation of the WebTransport protocol. Prior to v0.10.0, an attacker can cause a denial of service in webtransport-go by preventing or indefinitely dela |
| CVE-2026-21438 | Analyzed | 未確認 | CWE-401, CWE-459 | webtransport-go is an implementation of the WebTransport protocol. Prior to 0.10.0, an attacker can cause unbounded memory consumption repeatedly creating and closing many WebTrans |
| CVE-2026-2144 | Deferred | 未確認 | CWE-269 | The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.05. This is due to the plugin storing the magic l |
| CVE-2026-21443 | Analyzed | 未確認 | CWE-116 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the `xl()` translation function returns unescaped s |
| CVE-2026-2145 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in cym1102 nginxWebUI up to 4.3.7. The impacted element is an unknown function of the file /adminPage/conf/check of the component Web Management Inte |
| CVE-2026-2146 | Analyzed | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in guchengwuyue yshopmall up to 1.9.1. This affects the function updateAvatar of the file /api/users/updateAvatar of the component co.yixiang.ut |
| CVE-2026-2147 | Analyzed | 未確認 | CWE-200, CWE-284 | A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management Interface. Executing a m |
| CVE-2026-2148 | Analyzed | 未確認 | CWE-200, CWE-284 | A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-bin/DownloadFlash of the component Web Management Interface. |
| CVE-2026-2149 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the fi |
| CVE-2026-2150 | Analyzed | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /checkin.p |
| CVE-2026-21508 | Analyzed | 未確認 | CWE-287, CWE-426 | Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-2151 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in D-Link DIR-615 4.10. This affects an unknown part of the file adv_firewall.php of the component DMZ Host Feature. Such manipulation of the argumen |
| CVE-2026-21510 | Analyzed | 掲載 | CWE-693 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-21511 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-21512 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-21513 | Analyzed | 掲載 | CWE-693 | Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-21514 | Analyzed | 掲載 | CWE-807 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-21516 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code over a network. |
| CVE-2026-21517 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21518 | Modified | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security fe |
| CVE-2026-21519 | Analyzed | 掲載 | CWE-843 | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-2152 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was found in D-Link DIR-615 4.10. This vulnerability affects unknown code of the file adv_routing.php of the component Web Configuration Interface. Performing a man |
| CVE-2026-21522 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21523 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network. |
| CVE-2026-21525 | Analyzed | 掲載 | CWE-476 | Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally. |
| CVE-2026-21527 | Analyzed | 未確認 | CWE-1286, CWE-345, CWE-451 | User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-21528 | Modified | 未確認 | CWE-1327, CWE-668 | Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-21529 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-2153 | Analyzed | 未確認 | CWE-601 | A vulnerability was determined in mwielgoszewski doorman up to 0.6. This issue affects the function is_safe_url of the file doorman/users/views.py. Executing a manipulation of the |
| CVE-2026-21531 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network. |
| CVE-2026-21532 | Analyzed | 未確認 | CWE-200 | Azure Function Information Disclosure Vulnerability |
| CVE-2026-21533 | Analyzed | 掲載 | CWE-269 | Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21535 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-21537 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-2154 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Impacted is an unknown function of the file /registration.php of t |
| CVE-2026-2155 | Analyzed | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. T |
| CVE-2026-2156 | Analyzed | 未確認 | CWE-79, CWE-94 | A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the file /admin/announcement/index.php?view=add |
| CVE-2026-2157 | Analyzed | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub_4175CC of the file /goform/set_static_route_table. Such manipulation of the argu |
| CVE-2026-2158 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /check_user.php. Performing a manipulation of the argument Userna |
| CVE-2026-2159 | Analyzed | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component R |
| CVE-2026-2160 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Mast |
| CVE-2026-2161 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Directory Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/forget-password.php. The manipula |
| CVE-2026-21619 | Modified | 未確認 | CWE-400, CWE-502 | Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), hexpm hex (mix_hex_api modules), erlang rebar3 (r3_hex_api m |
| CVE-2026-2162 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle cau |
| CVE-2026-21620 | Deferred | 未確認 | CWE-23 | Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), erlang otp tft |
| CVE-2026-21626 | Analyzed | 未確認 | CWE-200 | Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure |
| CVE-2026-21627 | Deferred | 未確認 | CWE-284 | The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework f |
| CVE-2026-2163 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in D-Link DIR-600 up to 2.15WWb02. This vulnerability affects unknown code of the file ssdp.cgi. Such manipulation of the argument HTTP_ST/REMOTE_ADD |
| CVE-2026-2164 | Analyzed | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in detronetdip E-commerce 1.0.0. This issue affects some unknown processing of the file /seller/assets/backend/profile/addadhar.php. Performing |
| CVE-2026-21643 | Analyzed | 掲載 | CWE-89 | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to exec |
| CVE-2026-2165 | Analyzed | 未確認 | CWE-287, CWE-306 | A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/add_seller.php of the component Account Cre |
| CVE-2026-21654 | Analyzed | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows OS Command Injection. |
| CVE-2026-21656 | Analyzed | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in cer |
| CVE-2026-21657 | Analyzed | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in cer |
| CVE-2026-21658 | Analyzed | 未確認 | CWE-94 | Unauthenticated Remote Code Execution i.e Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injectio |
| CVE-2026-21659 | Analyzed | 未確認 | CWE-22, CWE-23 | Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion (LFI) vulnerability in Johnson Controls Frick Controls Quantum HD allow an unauthentica |
| CVE-2026-2166 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Lo |
| CVE-2026-21660 | Modified | 未確認 | CWE-256, CWE-522 | A Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to u |
| CVE-2026-21665 | Deferred | 未確認 | CWE-502 | The Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in unsupported version 2021.2.4 (build 4.7.3155.0011) uses deprecated .NET Remoting T |
| CVE-2026-2167 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the arg |
| CVE-2026-2168 | Analyzed | 未確認 | CWE-74, CWE-77 | A flaw has been found in D-Link DWR-M921 1.1.50. This affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fota_url caus |
| CVE-2026-2169 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in D-Link DWR-M921 1.1.50. This impacts an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fota_url |
| CVE-2026-2171 | Modified | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Online Student Management System 1.0. Affected is an unknown function of the file accounts.php of the component Login. Performing a manip |
| CVE-2026-21718 | Analyzed | 未確認 | CWE-327 | An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authe |
| CVE-2026-2172 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Online Application System for Admission 1.0. Affected by this vulnerability is an unknown functionality of the file enrollment/index |
| CVE-2026-21722 | Modified | 未確認 | CWE-200, CWE-863 | Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of |
| CVE-2026-21725 | Modified | 未確認 | CWE-367 | A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so. This requires several very stri |
| CVE-2026-2173 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the a |
| CVE-2026-2174 | Analyzed | 未確認 | CWE-287 | A security flaw has been discovered in code-projects Contact Management System 1.0. This affects an unknown part of the component CRUD Endpoint. The manipulation of the argument ID |
| CVE-2026-21743 | Analyzed | 未確認 | CWE-862 | A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticat |
| CVE-2026-2175 | Analyzed | 未確認 | CWE-77, CWE-78 | A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420618 of the file /goform/set_upnp. This manipulation of the argument upnp_en |
| CVE-2026-2176 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Contact Management System 1.0. This issue affects some unknown processing of the file index.py. Such manipulation of the |
| CVE-2026-2177 | Analyzed | 未確認 | CWE-384 | A vulnerability has been found in SourceCodester Prison Management System 1.0. The impacted element is an unknown function of the component Login. The manipulation leads to session |
| CVE-2026-2178 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was found in r-huijts xcode-mcp-server up to f3419f00117aa9949e326f78cc940166c88f18cb. This affects the function registerXcodeTools of the file src/tools/xcode/inde |
| CVE-2026-2179 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument |
| CVE-2026-2180 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda RX3 16.03.13.11. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such manipulation of the argument ssid_5g leads |
| CVE-2026-2181 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Tenda RX3 16.03.13.11. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. Performing a manipulatio |
| CVE-2026-2182 | Analyzed | 未確認 | CWE-74, CWE-77 | A weakness has been identified in UTT 进取 521G 3.1.1-190816. Affected by this issue is the function doSystem of the file /goform/setSysAdm. Executing a manipulation of the argument |
| CVE-2026-2183 | Analyzed | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This affects an unknown part of the fil |
| CVE-2026-2184 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This vulnerability affects unknown code of the file / |
| CVE-2026-2185 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda RX3 16.03.13.11. This issue affects the function set_device_name of the file /goform/setBlackRule of the component MAC Filtering Configuration Endpoi |
| CVE-2026-2186 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda RX3 16.03.13.11. Impacted is the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument list leads to |
| CVE-2026-21862 | Analyzed | 未確認 | CWE-290 | RustFS is a distributed object storage system built in Rust. Prior to version alpha.78, IP-based access control can be bypassed: get_condition_values trusts client-supplied X-Forwa |
| CVE-2026-21863 | Modified | 未確認 | CWE-125 | Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port can send an invalid packe |
| CVE-2026-21864 | Analyzed | 未確認 | CWE-20 | Valkey-Bloom is a Rust based Valkey module which brings a Bloom Filter (Module) data type into the Valkey distributed key-value database. Prior to commit a68614b6e3845777d383b3a513 |
| CVE-2026-2187 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda RX3 16.03.13.11. The affected element is the function set_qosMib_list of the file /goform/formSetQosBand. Performing a manipulation of the argume |
| CVE-2026-21870 | Analyzed | 未確認 | CWE-193 | BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communications services. In 1.4.2, 1.5.0.rc2, and earlier, an off-by-o |
| CVE-2026-21878 | Analyzed | 未確認 | CWE-22 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functiona |
| CVE-2026-2188 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub_446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the arg |
| CVE-2026-2189 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/report/index.php. The manipulation of the argume |
| CVE-2026-21893 | Analyzed | 未確認 | CWE-20, CWE-78 | n8n is an open source workflow automation platform. From version 0.187.0 to before 1.120.3, a command injection vulnerability was identified in n8n’s community package installation |
| CVE-2026-2190 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/user/controller.php. The manipulation of th |
| CVE-2026-21902 | Analyzed | 未確認 | CWE-732 | An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauth |
| CVE-2026-2191 | Analyzed | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-bas |
| CVE-2026-2192 | Analyzed | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation of the argument sys. |
| CVE-2026-2193 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in D-Link DI-7100G C1 24.04.18D1. Affected by this issue is the function set_jhttpd_info. Performing a manipulation of the argument usb_username result |
| CVE-2026-2194 | Analyzed | 未確認 | CWE-74, CWE-77 | A flaw has been found in D-Link DI-7100G C1 24.04.18D1. This affects the function start_proxy_client_email. Executing a manipulation can lead to command injection. The attack can b |
| CVE-2026-2195 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /system/system/admins/assessments/pretest/questions- |
| CVE-2026-2196 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update. |
| CVE-2026-2197 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/admins/assessments/pretest/exam-delete.php. T |
| CVE-2026-2198 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loadda |
| CVE-2026-2199 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users |
| CVE-2026-2200 | Analyzed | 未確認 | CWE-79, CWE-94 | A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/save of the component API Endpoint. Executing a manipulation ca |
| CVE-2026-2201 | Analyzed | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. This impacts the function addLeave of the file src/main/java/co |
| CVE-2026-2202 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet of the component httpd. The manipulation of t |
| CVE-2026-2203 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in Tenda AC8 16.03.33.05. Affected by this vulnerability is an unknown functionality of the file /goform/fast_setting_wifi_set of the component Embedded Httpd |
| CVE-2026-22038 | Analyzed | 未確認 | CWE-532 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6 |
| CVE-2026-22044 | Analyzed | 未確認 | CWE-89 | GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has been patched in vers |
| CVE-2026-22048 | Deferred | 未確認 | CWE-918 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an |
| CVE-2026-2205 | Analyzed | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in WeKan up to 8.20. This affects an unknown part of the file server/publications/cards.js of the component Meteor Publication Handler. Such manipula |
| CVE-2026-2206 | Analyzed | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in WeKan up to 8.20. This vulnerability affects unknown code of the file server/methods/fixDuplicateLists.js of the component Administrative Rep |
| CVE-2026-2207 | Analyzed | 未確認 | CWE-200, CWE-284 | A weakness has been identified in WeKan up to 8.20. This issue affects some unknown processing of the file server/publications/activities.js of the component Activity Publication H |
| CVE-2026-2208 | Analyzed | 未確認 | CWE-862, CWE-863 | A security vulnerability has been detected in WeKan up to 8.20. Impacted is an unknown function of the file server/publications/rules.js of the component Rules Handler. The manipul |
| CVE-2026-2209 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in WeKan up to 8.18. The affected element is the function setCreateTranslation of the file client/components/settings/translationBody.js of the compone |
| CVE-2026-2210 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub_4211C8 of the file /goform/set_filtering. Such manipulation leads to os command injection. T |
| CVE-2026-2211 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Online Music Site 1.0. Affected is an unknown function of the file /Administrator/PHP/AdminDeleteCategory.php. Executing a manipulat |
| CVE-2026-2212 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /Administrator/PHP/AdminEditCategory.p |
| CVE-2026-2213 | Analyzed | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminAddAlbum.php. T |
| CVE-2026-2214 | Analyzed | 未確認 | CWE-79, CWE-94 | A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/PHP/AdminAddAlbum.php. This manipulation of the argument txt |
| CVE-2026-2215 | Deferred | 未確認 | CWE-1394 | A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a |
| CVE-2026-22153 | Analyzed | 未確認 | CWE-305 | An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP auth |
| CVE-2026-2216 | Deferred | 未確認 | CWE-22 | A flaw has been found in rachelos WeRSS we-mp-rss up to 1.4.8. Impacted is the function download_export_file of the file apis/tools.py. Executing a manipulation of the argument fil |
| CVE-2026-2217 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manage_user.php. The manipulation of the argum |
| CVE-2026-2218 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in D-Link DCS-933L up to 1.14.11. This affects an unknown function of the file /setSystemAdmin of the component alphapd. This manipulation of the arg |
| CVE-2026-2220 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file /system/system/admins/assessments/pretest/btn_functions.php |
| CVE-2026-22205 | Analyzed | 未確認 | CWE-288 | SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Atta |
| CVE-2026-22206 | Analyzed | 未確認 | CWE-89 | SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injec |
| CVE-2026-22207 | Deferred | 未確認 | CWE-306 | OpenViking through version 0.1.18, prior to commit 0251c70, contains a broken access control vulnerability that allows unauthenticated attackers to gain ROOT privileges when the ro |
| CVE-2026-22208 | Deferred | 未確認 | CWE-749, CWE-829 | OpenS100 (the reference implementation S-100 viewer) prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engin |
| CVE-2026-2221 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a m |
| CVE-2026-2222 | Analyzed | 未確認 | CWE-79, CWE-94 | A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown functionality of the file /system/system/admins/manage/user |
| CVE-2026-22220 | Analyzed | 未確認 | CWE-20 | A lack of proper input validation in the HTTP processing path in TP-Link Archer BE230 v1.2 (web modules) may allow a crafted request to cause the device’s web service to become unr |
| CVE-2026-22221 | Modified | 未確認 | CWE-78 | An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenticated attacker execute arbitrary code. Successful exploi |
| CVE-2026-22222 | Modified | 未確認 | CWE-78 | An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent authenticated attacker to execute arbitrary code. Successfu |
| CVE-2026-22223 | Modified | 未確認 | CWE-78 | An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn modules) allows adjacent authenticated attacker execute arbitrary code. Successful explo |
| CVE-2026-22224 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability may be exploited after the admin's authentication in the cloud communication interface on the TP-Link Archer BE230 v1.2. Successful exploitation c |
| CVE-2026-22225 | Modified | 未確認 | CWE-78 | A command injection vulnerability may be exploited after the admin's authentication in the VPN Connection Service on the Archer BE230 v1.2 and Archer AXE75 v1.0. Successful exploi |
| CVE-2026-22226 | Modified | 未確認 | CWE-78 | A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2. Successf |
| CVE-2026-22227 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability may be exploited after the admin's authentication via the configuration backup restoration function of the TP-Link Archer BE230 v1.2. Successful e |
| CVE-2026-22228 | Analyzed | 未確認 | CWE-400 | An authenticated user with high privileges may trigger a denial‑of‑service condition in TP-Link Archer BE230 v1.2 by restoring a crafted configuration file containing an excessivel |
| CVE-2026-22229 | Modified | 未確認 | CWE-78 | A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2 and D |
| CVE-2026-2223 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Online Reviewer System 1.0. Affected by this issue is some unknown functionality of the file /system/system/students/ass |
| CVE-2026-2224 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in code-projects Online Reviewer System 1.0. This affects an unknown part of the file /system/system/admins/manage/users/btn_functions.php. The manipul |
| CVE-2026-22247 | Analyzed | 未確認 | CWE-918 | GLPI is a free asset and IT management software package. From version 11.0.0 to before 11.0.5, a GLPI administrator can perform SSRF request through the Webhook feature. This issue |
| CVE-2026-2225 | Modified | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode News Portal Project 1.0. This vulnerability affects unknown code of the file /admin/index.php of the component Administrator Login. This manip |
| CVE-2026-22254 | Analyzed | 未確認 | CWE-79, CWE-80 | Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Versions of Winter CMS before 1.2.10 allow users with access to the CMS Asset Mana |
| CVE-2026-2226 | Analyzed | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in DouPHP up to 1.9. This issue affects some unknown processing of the file /admin/file.php of the component ZIP File Handler. Such manipulation of t |
| CVE-2026-22266 | Analyzed | 未確認 | CWE-146 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged |
| CVE-2026-22267 | Analyzed | 未確認 | CWE-266 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentiall |
| CVE-2026-22268 | Analyzed | 未確認 | CWE-266 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentiall |
| CVE-2026-22269 | Analyzed | 未確認 | CWE-940 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged |
| CVE-2026-2227 | Modified | 未確認 | CWE-74, CWE-77 | A vulnerability was found in D-Link DCS-931L up to 1.13.0. Impacted is the function doSystem of the file /setSystemAdmin. Performing a manipulation of the argument AdminID results |
| CVE-2026-22284 | Analyzed | 未確認 | CWE-77 | Dell SmartFabric OS10 Software, versions prior to 10.5.6.12, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high p |
| CVE-2026-2230 | Deferred | 未確認 | CWE-639 | The Booking Calendar plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 10.14.14 via the handle_ajax_save function due to |
| CVE-2026-2232 | Deferred | 未確認 | CWE-89 | The Product Table and List Builder for WooCommerce Lite plugin for WordPress is vulnerable to time-based SQL Injection via the 'search' parameter in all versions up to, and includi |
| CVE-2026-22333 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Object Injection.This issue affects YITH WooCommerce Compare: f |
| CVE-2026-2234 | Deferred | 未確認 | CWE-306 | C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content. |
| CVE-2026-22341 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Case-Themes Booked booked allows Authentication Abuse.This issue affects Booked: from n/a through <= 3.0.0 |
| CVE-2026-22344 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes FiveStar fivestar allows PHP Local File Inclu |
| CVE-2026-22345 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery new-image-gallery allows Object Injection.T |
| CVE-2026-22346 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This |
| CVE-2026-2235 | Deferred | 未確認 | CWE-89 | C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents. |
| CVE-2026-22350 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Exploiting Incorrectly Configured Access |
| CVE-2026-22351 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec |
| CVE-2026-22352 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows Reflected |
| CVE-2026-22354 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Dotstore Woocommerce Category Banner Management banner-management-for-woocommerce allows Object Injection.This issue affects Wooc |
| CVE-2026-22356 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Automattic Jetpack CRM zero-bs-crm allows PHP Local File In |
| CVE-2026-22357 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spencer Haws Link Whisper Free link-whisper allows Reflected XSS.This issue af |
| CVE-2026-2236 | Deferred | 未確認 | CWE-89 | C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents. |
| CVE-2026-22361 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes A-Mart a-mart allows PHP Local File Inclusion.T |
| CVE-2026-22362 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Photolia photolia allows PHP Local File Inclusi |
| CVE-2026-22363 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rhodos rhodos allows PHP Local File Inclusion.T |
| CVE-2026-22364 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes SevenTrees seventrees allows PHP Local File Inc |
| CVE-2026-22365 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Soleng soleng allows PHP Local File Inclusion.T |
| CVE-2026-22366 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Jude jude allows PHP Local File Inclusion.This |
| CVE-2026-22367 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Coworking coworking allows PHP Local File Incl |
| CVE-2026-22368 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Redy redy allows PHP Local File Inclusion.This |
| CVE-2026-22369 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Ironfit ironfit allows PHP Local File Inclusio |
| CVE-2026-22370 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Marveland marveland allows PHP Local File Inclu |
| CVE-2026-22371 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Gustavo gustavo allows PHP Local File Inclusio |
| CVE-2026-22372 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Isida isida allows PHP Local File Inclusion.Th |
| CVE-2026-22373 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Fooddy fooddy allows PHP Local File Inclusion. |
| CVE-2026-22374 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Zio Alberto zioalberto allows PHP Local File I |
| CVE-2026-22375 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Impacto Patronus impacto-patronus allows PHP L |
| CVE-2026-22376 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Parkivia parkivia allows PHP Local File Inclus |
| CVE-2026-22377 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Saveo saveo allows PHP Local File Inclusion.Th |
| CVE-2026-22378 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Blabber blabber allows PHP Local File Inclusio |
| CVE-2026-22379 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Netmix netmix allows PHP Local File Inclusion. |
| CVE-2026-22380 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes UnlimHost unlimhost allows PHP Local File Incl |
| CVE-2026-22381 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPres |
| CVE-2026-22383 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows Exploiting Incorrectly Config |
| CVE-2026-22384 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in leafcolor Applay - Shortcodes applay-shortcodes allows Object Injection.This issue affects Applay - Shortcodes: from n/a through |
| CVE-2026-2240 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability has been found in janet-lang janet up to 1.40.1. The impacted element is the function janetc_pop_funcdef of the file src/core/compile.c. Such manipulation leads to |
| CVE-2026-2241 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was found in janet-lang janet up to 1.40.1. This affects the function os_strftime of the file src/core/os.c. Performing a manipulation results in out-of-bounds read |
| CVE-2026-2242 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in janet-lang janet up to 1.40.1. This impacts the function janetc_if of the file src/core/specials.c. Executing a manipulation can lead to out-of-bo |
| CVE-2026-22422 | Deferred | 未確認 | CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in wpeverest Everest Forms everest-forms allows Code Injection.This issue affects Everes |
| CVE-2026-2243 | Deferred | 未確認 | CWE-125 | A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a deni |
| CVE-2026-2244 | Deferred | 未確認 | CWE-200 | A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid Google Cloud access tokens of other users via abuse of a bui |
| CVE-2026-2245 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was identified in CCExtractor up to 183. This affects the function parse_PAT/parse_PMT in the library src/lib_ccx/ts_tables.c of the component MPEG-TS File Parser. |
| CVE-2026-2246 | Deferred | 未確認 | CWE-119 | A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5. Affected by this vulnerability is the function apriltag_detector_detect of the file apriltag.c. Th |
| CVE-2026-2247 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability (SQLi) in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious pa |
| CVE-2026-2248 | Deferred | 未確認 | CWE-287, CWE-306 | METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote a |
| CVE-2026-2249 | Deferred | 未確認 | CWE-287, CWE-306 | METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote a |
| CVE-2026-2250 | Deferred | 未確認 | CWE-215, CWE-284 | The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite database containing sensit |
| CVE-2026-2251 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. This issue aff |
| CVE-2026-2252 | Analyzed | 未確認 | CWE-611, CWE-918 | An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references |
| CVE-2026-22548 | Analyzed | 未確認 | CWE-362 | When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions beyond the attacker's control can cause the bd proce |
| CVE-2026-22549 | Analyzed | 未確認 | CWE-250 | A vulnerability exists in F5 BIG-IP Container Ingress Services that may allow excessive permissions to read cluster secrets. Note: Software versions which have reached End of Tech |
| CVE-2026-22550 | Modified | 未確認 | CWE-78 | OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution. |
| CVE-2026-22553 | Analyzed | 未確認 | CWE-78 | All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web interface. Malicious users that use the vulnerable endpoint ar |
| CVE-2026-22567 | Analyzed | 未確認 | CWE-20 | Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields in limited sce |
| CVE-2026-22568 | Analyzed | 未確認 | CWE-20 | Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorized internal in |
| CVE-2026-2258 | Analyzed | 未確認 | CWE-119, CWE-787 | A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the function WaveFunctionCollapse in the library dev/src/lobster/wfc.h. Executing a manip |
| CVE-2026-2259 | Analyzed | 未確認 | CWE-119, CWE-787 | A vulnerability has been found in aardappel lobster up to 2025.4. Affected by this issue is the function lobster::Parser::ParseStatements in the library dev/src/lobster/parser.h of |
| CVE-2026-22592 | Analyzed | 未確認 | CWE-862 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, an authenticated user can cause a DOS attack. If one of the repo files is deleted before synchronizatio |
| CVE-2026-2260 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was found in D-Link DCS-931L up to 1.13.0. This affects an unknown part of the file /goform/setSysAdmin. The manipulation of the argument AdminID results in os comm |
| CVE-2026-22613 | Deferred | 未確認 | CWE-295 | The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attac |
| CVE-2026-2268 | Deferred | 未確認 | CWE-200 | The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0. This is due to the unsafe application of the `nin |
| CVE-2026-22715 | Deferred | 未確認 | CWE-923 | VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A malicious actor with administrative privileges on a Guest VM may |
| CVE-2026-22716 | Deferred | 未確認 | CWE-787 | Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to terminate certain Workstat |
| CVE-2026-22717 | Deferred | 未確認 | CWE-125 | Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information |
| CVE-2026-22719 | Analyzed | 掲載 | CWE-77 | VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote c |
| CVE-2026-22720 | Analyzed | 未確認 | CWE-79 | VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform a |
| CVE-2026-22721 | Analyzed | 未確認 | CWE-269 | VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obta |
| CVE-2026-22722 | Deferred | 未確認 | CWE-476 | A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply t |
| CVE-2026-22728 | Deferred | 未確認 | CWE-284 | Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow. The rotation handler derives the sealing scope for the newly encrypted |
| CVE-2026-2274 | Deferred | 未確認 | CWE-918 | A SSRF and Arbitrary File Read vulnerability in AppSheet Core in Google AppSheet prior to 2025-11-23 allows an authenticated remote attacker to read sensitive local files and acces |
| CVE-2026-2276 | Deferred | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in the Wix web application, where the endpoint ' https://manage.wix.com/account/account-settings ', responsible for uploading SVG |
| CVE-2026-22762 | Deferred | 未確認 | CWE-22 | Dell Avamar Server and Avamar Virtual Edition, versions prior to 19.10 SP1 with CHF338912, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2026-22765 | Analyzed | 未確認 | CWE-862 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vu |
| CVE-2026-22766 | Analyzed | 未確認 | CWE-434 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could |
| CVE-2026-22769 | Analyzed | 掲載 | CWE-798 | Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attack |
| CVE-2026-22778 | Modified | 未確認 | CWE-209, CWE-532 | vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal endpoint, PIL throws an er |
| CVE-2026-22780 | Analyzed | 未確認 | CWE-770 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be exploited when a malicious mach0 file, having bogus entries for |
| CVE-2026-2281 | Deferred | 未確認 | CWE-79 | The Private Comment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Label text' setting in all versions up to, and including, 0.0.4. This is due to insuf |
| CVE-2026-2282 | Deferred | 未確認 | CWE-79 | The Slidorion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.2 due to insufficient input sanitizatio |
| CVE-2026-22821 | Analyzed | 未確認 | CWE-89 | mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4. |
| CVE-2026-2284 | Deferred | 未確認 | CWE-862 | The News Element Elementor Blog Magazine plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.8. This is due to a missing capabilit |
| CVE-2026-22860 | Modified | 未確認 | CWE-22, CWE-548 | Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory`’s path check used a string prefix match on the expanded path. A request |
| CVE-2026-22866 | Analyzed | 未確認 | CWE-347 | Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain. In versions 1.6.2 and prior, the `RSASHA256Algorithm` and `RSASHA |
| CVE-2026-22875 | Deferred | 未確認 | CWE-79 | Movable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted input is stored by an attacker, arbitrary script may be executed on a logged-in user's |
| CVE-2026-22877 | Analyzed | 未確認 | CWE-22 | An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to read arbitrary files on the system, and potentially causin |
| CVE-2026-22878 | Modified | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-22881 | Analyzed | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords. |
| CVE-2026-22885 | Deferred | 未確認 | CWE-125 | A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted |
| CVE-2026-22888 | Analyzed | 未確認 | CWE-231 | Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product. |
| CVE-2026-22890 | Modified | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-22892 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, which allows an authen |
| CVE-2026-22894 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents o |
| CVE-2026-22903 | Deferred | 未確認 | CWE-121 | An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can trigger a stack buffer overflow in the modified lighttpd ser |
| CVE-2026-22904 | Deferred | 未確認 | CWE-121 | Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and trigger a stack buffe |
| CVE-2026-22905 | Deferred | 未確認 | CWE-22 | An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining u |
| CVE-2026-22906 | Deferred | 未確認 | CWE-321 | User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext use |
| CVE-2026-22922 | Analyzed | 未確認 | CWE-648 | Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to view task logs with |
| CVE-2026-22923 | Modified | 未確認 | CWE-121 | A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected application contains a data validation vulnerability that c |
| CVE-2026-2293 | Modified | 未確認 | CWE-551, CWE-863 | A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue a |
| CVE-2026-2295 | Deferred | 未確認 | CWE-200 | The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_post_ |
| CVE-2026-2296 | Deferred | 未確認 | CWE-94 | The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 3.1.0. This is du |
| CVE-2026-2301 | Deferred | 未確認 | CWE-862 | The Post Duplicator plugin for WordPress is vulnerable to unauthorized arbitrary protected post meta insertion in all versions up to, and including, 3.0.8. This is due to the `dupl |
| CVE-2026-2302 | Deferred | 未確認 | CWE-183 | Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code. |
| CVE-2026-2303 | Deferred | 未確認 | CWE-183 | The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulner |
| CVE-2026-23040 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: fix typo in frequency notification The NAN notification is for 5745 MHz which correspond | |
| CVE-2026-23041 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer crash in bnxt_ptp_enable during error cleanup When bnxt_init_one() fails during init | |
| CVE-2026-23042 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix aux device unplugging when rdma is not supported by vport If vport flags do not contain VIRTCHNL2_VP | |
| CVE-2026-23043 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in do_abort_log_replay() Coverity reported a NULL pointer dereference issu | |
| CVE-2026-23044 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When crypto_alloc_acomp() fails, it returns an | |
| CVE-2026-23045 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/ena: fix missing lock when update devlink params Fix assert lock warning while calling devl_param_driverin | |
| CVE-2026-23046 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix device mismatch in devm_kzalloc/devm_kfree Initial rss_hdr allocation uses virtio_device->devi | |
| CVE-2026-23047 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libceph: make calc_target() set t->paused, not just clear it Currently calc_target() clears t->paused if the r | |
| CVE-2026-23048 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: udp: call skb_orphan() before skb_attempt_defer_free() Standard UDP receive path does not use skb->destructor. | |
| CVE-2026-23049 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel The connector type for the DataImage | |
| CVE-2026-23050 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix a deadlock when returning a delegation during open() Ben Coddington reports seeing a hang in the fol | |
| CVE-2026-23051 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix drm panic null pointer when driver not support atomic When driver not support atomic, fb using | |
| CVE-2026-23052 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Do not over-allocate ftrace memory The pg_remaining calculation in ftrace_process_locs() assumes that | |
| CVE-2026-23053 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a deadlock involving nfs_release_folio() Wang Zhaolong reports a deadlock involving NFSv4.1 state rec | |
| CVE-2026-23054 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: hv_netvsc: reject RSS hash key programming without RX indirection table RSS configuration requires a vali | |
| CVE-2026-23055 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: riic: Move suspend handling to NOIRQ phase Commit 53326135d0e0 ("i2c: riic: Add suspend/resume support") | |
| CVE-2026-23056 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: uacce: implement mremap in uacce_vm_ops to return -EPERM The current uacce_vm_ops does not support the mremap | |
| CVE-2026-23057 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Coalesce only linear skb vsock/virtio common tries to coalesce buffers in rx queue: if a linear | |
| CVE-2026-23058 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d59 | |
| CVE-2026-23059 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Sanitize payload size to prevent member overflow In qla27xx_copy_fpin_pkt() and qla27xx_copy_mu | |
| CVE-2026-23060 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec authencesn assumes an ESP/ESN-for |
| CVE-2026-23061 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 735 |
| CVE-2026-23062 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro The GET_INSTANCE_ID macro that caused a ke |
| CVE-2026-23063 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: uacce: ensure safe queue release with state management Directly calling `put_queue` carries risks since it can |
| CVE-2026-23064 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: avoid possible NULL deref tcf_ife_encode() must make sure ife_encode() does not return NUL |
| CVE-2026-23065 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix memory leak in wbrf_record() The tmp buffer is allocated using kcalloc() but is not free |
| CVE-2026-23066 | Modified | 未確認 | CWE-362, CWE-674 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recvmsg() unconditional requeue If rxrpc_recvmsg() fails because MSG_DONTWAIT was specified but the |
| CVE-2026-23067 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: iommu/io-pgtable-arm: fix size_t signedness bug in unmap path __arm_lpae_unmap() returns size_t but was return |
| CVE-2026-23068 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-sprd-adi: Fix double free in probe error path The driver currently uses spi_alloc_host() to allocate |
| CVE-2026-23069 | Modified | 未確認 | CWE-190, CWE-191 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential underflow in virtio_transport_get_credit() The credit calculation in virtio_transp |
| CVE-2026-23070 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Octeontx2-af: Add proper checks for fwdata firmware populates MAC address, link modes (supported, advertised) | |
| CVE-2026-23071 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: regmap: Fix race condition in hwspinlock irqsave routine Previously, the address of the shared member '&map->s |
| CVE-2026-23072 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: l2tp: Fix memleak in l2tp_udp_encap_recv(). syzbot reported memleak of struct l2tp_session, l2tp_tunnel, sock, |
| CVE-2026-23073 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory corruption due to not set vif driver data size The struct ieee80211_vif contains trailin |
| CVE-2026-23074 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it is only supposed |
| CVE-2026-23075 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d59 |
| CVE-2026-23076 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix potential OOB access in audio mixer handling In the audio mixer handling code of ctxfi driver |
| CVE-2026-23077 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge Patch series "mm/vma: fix anon_vma UAF on mremap |
| CVE-2026-23078 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Fix buffer overflow in config retrieval The scarlett2_usb_get_config() function has a logic e |
| CVE-2026-23079 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() On error handling paths, lineinfo_change |
| CVE-2026-23080 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d |
| CVE-2026-23081 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: phy: intel-xway: fix OF node refcount leakage Automated review spotted am OF node reference count leakage | |
| CVE-2026-23082 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error In commit 7352e1d5932a ("c |
| CVE-2026-23083 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: fou: Don't allow 0 for FOU_ATTR_IPPROTO. fou_udp_recv() has the same problem mentioned in the previous patch. |
| CVE-2026-23084 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list When the parameter pmac_id_valid argument of |
| CVE-2026-23085 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Avoid truncating memory addresses On 32-bit machines with CONFIG_ARM_LPAE, it is possible |
| CVE-2026-23086 | Modified | 未確認 | CWE-400 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit directly from pee |
| CVE-2026-23087 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Memory allocated for struct vscsiblk_info |
| CVE-2026-23088 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash on synthetic stacktrace field usage When creating a synthetic event based on an existing sy |
| CVE-2026-23089 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() When snd_usb_create_mixer() fails, snd_usb_mixer_f |
| CVE-2026-23090 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: slimbus: core: fix device reference leak on report present Slimbus devices can be allocated dynamically upon r | |
| CVE-2026-23091 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: intel_th: fix device leak on output open() Make sure to drop the reference taken when looking up the th device |
| CVE-2026-23092 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_source When simple_write_to_buffer() suc |
| CVE-2026-23093 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbd: fix dma_unmap_sg() nents The dma_unmap_sg() functions should be called with the same nents as the | |
| CVE-2026-23094 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce supports the device isolation feature. If the driver implements | |
| CVE-2026-23095 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. [0] The repro generated a G |
| CVE-2026-23096 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: uacce: fix cdev handling in the cleanup path When cdev_device_add fails, it internally releases the cdev memor | |
| CVE-2026-23097 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock (analyzed by Lance Yang): |
| CVE-2026-23098 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: netrom: fix double-free in nr_route_frame() In nr_route_frame(), old_skb is immediately freed without checking |
| CVE-2026-23099 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: bonding: limit BOND_MODE_8023AD to Ethernet devices BOND_MODE_8023AD makes sense for ARPHRD_ETHER only. syzbo |
| CVE-2026-23100 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb_pmd_shared() Patch series "mm/hugetlb: fixes for PMD table sharing (incl. using mmu_g | |
| CVE-2026-23101 | Modified | 未確認 | CWE-362, CWE-908 | In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to leds_list when it is fully ready Before this change the LED was added to leds |
| CVE-2026-23102 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of SVE context When SME is supported, Restoring SVE signal context can g |
| CVE-2026-23103 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the addrs_lock be per port, not per ipvlan dev. Initial code see |
| CVE-2026-23104 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ice: fix devlink reload call trace Commit 4da71a77fc3b ("ice: read internal temperature sensor") introduced in | |
| CVE-2026-23105 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag This is more of a prev |
| CVE-2026-23106 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: timekeeping: Adjust the leap state for the correct auxiliary timekeeper When __do_ajdtimex() was introduced to | |
| CVE-2026-23107 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA The code to restore a ZA context doesn't attempt |
| CVE-2026-23108 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d |
| CVE-2026-23109 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: fs/writeback: skip AS_NO_DATA_INTEGRITY mappings in wait_sb_inodes() Above the while() loop in wait_sb_inodes( |
| CVE-2026-23110 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Wake up the error handler when final completions race against each other The fragile ordering betw |
| CVE-2026-23111 | Modified | 未確認 | CWE-416, CWE-672 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() ha |
| CVE-2026-23112 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() could walk past cmd->req |
| CVE-2026-23113 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop Currently this is checked before running the pending | |
| CVE-2026-23114 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: ptrace: Fix SVE writes on !SME systems When SVE is supported but SME is not supported, a ptrace | |
| CVE-2026-23115 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: serial: Fix not set tty->port race condition Revert commit bfc467db60b7 ("serial: remove redundant tty_port_li |
| CVE-2026-23116 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu For i.MX8MQ platform, the ADB in the VP | |
| CVE-2026-23117 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ice: add missing ice_deinit_hw() in devlink reinit path devlink-reload results in ice_init_hw failed error, an |
| CVE-2026-23118 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix data-race warning and potential load/store tearing Fix the following: BUG: KCSAN: data-rac |
| CVE-2026-23119 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bonding: provide a net pointer to __skb_flow_dissect() After 3cbf4ffba5ee ("net: plumb network namespace into |
| CVE-2026-2312 | Deferred | 未確認 | CWE-862 | The Media Library Folders plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 8.3.6 via the delete_maxgalleria_media() and |
| CVE-2026-23120 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: l2tp: avoid one data-race in l2tp_tunnel_del_work() We should read sk->sk_socket only when dealing with kernel |
| CVE-2026-23121 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mISDN: annotate data-race around dev->work dev->work can re read locklessly in mISDN_read() and mISDN_poll(). |
| CVE-2026-23122 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue The previous 7 KB per queue caused TX unit hangs un | |
| CVE-2026-23123 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: interconnect: debugfs: initialize src_node and dst_node to empty strings The debugfs_create_str() API assumes |
| CVE-2026-23124 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: ipv6: annotate data-race in ndisc_router_discovery() syzbot found that ndisc_router_discovery() could read and |
| CVE-2026-23125 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT A null-ptr-deref was reported in the SCTP trans |
| CVE-2026-23126 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix a race issue related to the operation on bpf_bound_progs list The netdevsim driver lacks a prot |
| CVE-2026-23127 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix refcount warning on event->mmap_count increment When calling refcount_inc(&event->mmap_count) inside | |
| CVE-2026-23128 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: arm64: Set __nocfi on swsusp_arch_resume() A DABT is reported[1] on an android based system when resume from h |
| CVE-2026-23129 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dpll: Prevent duplicate registrations Modify the internal registration helpers dpll_xa_ref_{dpll,pin}_add() to | |
| CVE-2026-2313 | Analyzed | 未確認 | CWE-416 | Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: |
| CVE-2026-23130 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dead lock while flushing management frames Commit [1] converted the management transmission |
| CVE-2026-23131 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names The hp-bioscfg driver attempts to reg | |
| CVE-2026-23132 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind Fix several issues in dw_dp_bind() error handling: | |
| CVE-2026-23133 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: fix dma_free_coherent() pointer dma_alloc_coherent() allocates a DMA mapped buffer and stores th |
| CVE-2026-23134 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: slab: fix kmalloc_nolock() context check for PREEMPT_RT On PREEMPT_RT kernels, local_lock becomes a sleeping l | |
| CVE-2026-23135 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dma_free_coherent() pointer dma_alloc_coherent() allocates a DMA mapped buffer and stores th | |
| CVE-2026-23136 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: libceph: reset sparse-read state in osd_fault() When a fault occurs, the connection is abandoned, reestablishe |
| CVE-2026-23137 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: of: unittest: Fix memory leak in unittest_data_add() In unittest_data_add(), if of_resolve_phandles() fails, t |
| CVE-2026-23138 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Add recursion protection in kernel stack trace recording A bug was reported about an infinite recursi | |
| CVE-2026-23139 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: update last_gc only when GC has been performed Currently last_gc is being updated eve | |
| CVE-2026-2314 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-23140 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Subtract size of xdp_frame from allowed metadata size The xdp_frame structure takes up part of | |
| CVE-2026-23141 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in range_is_hole_in_parent() Before accessing the disk_bytenr field of a | |
| CVE-2026-23142 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure When a DAMOS-scheme DAMON sy | |
| CVE-2026-23143 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix misalignment bug in struct virtnet_info Use the new TRAILING_OVERLAP() helper to fix a misalig | |
| CVE-2026-23144 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure When a context DAMON sysfs directory setup |
| CVE-2026-23145 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branch for ext4_xattr_inode_update_ref forget |
| CVE-2026-23146 | Modified | 未確認 | CWE-362, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT b |
| CVE-2026-23147 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix the folio leak on S390 hardware acceleration [BUG] After commit aa60fe12b4f4 ("btrfs: zlib: r |
| CVE-2026-23148 | Modified | 未確認 | CWE-362, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference There is a race condition in nvmet_bio |
| CVE-2026-23149 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() Since GEM bo handles a | |
| CVE-2026-2315 | Analyzed | 未確認 | Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. | |
| CVE-2026-23150 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). syzbot reported various memory leaks related to NFC, struc |
| CVE-2026-23151 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix memory leak in set_ssp_complete Fix memory leak in set_ssp_complete() where mgmt_pending_ |
| CVE-2026-23152 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: correctly decode TTLM with default link map TID-To-Link Mapping (TTLM) elements do not contain | |
| CVE-2026-23153 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acqu |
| CVE-2026-23154 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO This patch enhances GSO segment handling by properly checking |
| CVE-2026-23155 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Sinc commit 79a6d1bfe114 ("can: gs_usb: gs_usb_ |
| CVE-2026-23156 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_get() efivar_entry_get() always returns success even if the un | |
| CVE-2026-23157 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages [BUG] There is an internal rep |
| CVE-2026-23158 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix UAF in configfs release path The gpio-virtuser configfs release path uses guard(mutex) to |
| CVE-2026-23159 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: perf: sched: Fix perf crash with new is_user_task() helper In order to do a user space stacktrace the current |
| CVE-2026-2316 | Analyzed | 未確認 | CWE-451 | Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sever |
| CVE-2026-23160 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix memory leak in octep_device_setup() In octep_device_setup(), if octep_ctrl_net_init() fails, th |
| CVE-2026-23161 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mm/shmem, swap: fix race of truncate and swap entry split The helper for shmem swap freeing is not handling th |
| CVE-2026-23162 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/nvm: Fix double-free on aux add failure After a successful auxiliary_device_init(), aux_dev->dev.releas |
| CVE-2026-23163 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove On APUs such as Raven and Renoir ( |
| CVE-2026-23164 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: rocker: fix memory leak in rocker_world_port_post_fini() In rocker_world_port_pre_init(), rocker_port->wpriv i |
| CVE-2026-23165 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix deadlock in RSS config read Since cited commit, core locks the net_device's rss_lock when handling e |
| CVE-2026-23166 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues Add NULL pointer checks in ice_vsi_set_napi_queue |
| CVE-2026-23167 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a r |
| CVE-2026-23168 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make fprop_new_period() hardirq safe Bernd has reported a lockdep splat from flexible propor | |
| CVE-2026-23169 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() syzbot and Eulgyu Kim reported crashes in mptcp_pm_nl_get_lo |
| CVE-2026-2317 | Analyzed | 未確認 | CWE-200, CWE-352 | Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-23170 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/imx/tve: fix probe device leak Make sure to drop the reference taken to the DDC device during probe on pro |
| CVE-2026-23171 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update Fix a use-after-free which happens du |
| CVE-2026-23172 | Modified | 未確認 | CWE-401, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the DPMAIF RX path, the t |
| CVE-2026-23173 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iterate only over actual |
| CVE-2026-23174 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: handle changing device dma map requirements The initial state of dma_needs_unmap may be false, but c | |
| CVE-2026-23175 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: cpsw: Execute ndo_set_rx_mode callback in a work queue Commit 1767bb2d47b7 ("ipv6: mcast: Don't hold RTNL | |
| CVE-2026-23176 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_haps: Fix memory leaks in add/remove routines toshiba_haps_add() leaks the haps object a | |
| CVE-2026-23177 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm, shmem: prevent infinite loop on truncate race When truncating a large swap entry, shmem_free_swap() return | |
| CVE-2026-23178 | Deferred | 未確認 | CWE-122 | In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() `i2c_hid_xfer` is used to read `recv_len + |
| CVE-2026-23179 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() When the socket is closed while in TCP_LISTEN a callbac | |
| CVE-2026-2318 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform |
| CVE-2026-23180 | Deferred | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: add bounds check for if_id in IRQ handler The IRQ handler extracts if_id from the upper 16 bits |
| CVE-2026-23181 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: sync read disk super and set block size When the user performs a btrfs mount, the block device is not s | |
| CVE-2026-23182 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: tegra: Fix a memory leak in tegra_slink_probe() In tegra_slink_probe(), when platform_get_irq() fails, it | |
| CVE-2026-23183 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cgroup/dmem: fix NULL pointer dereference when setting max An issue was triggered: BUG: kernel NULL pointer | |
| CVE-2026-23184 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_netlink_report() Oneway transactions sent to frozen targets via binder_proc_transact |
| CVE-2026-23185 | Modified | 未確認 | CWE-416, CWE-772 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: cancel mlo_scan_start_wk mlo_scan_start_wk is not canceled on disconnection. In fact, it i |
| CVE-2026-23186 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() The acpi_power_meter driver's .no |
| CVE-2026-23187 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains Fix out-of-range access of bc->domains in imx |
| CVE-2026-23188 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net: usb: r8152: fix resume reset deadlock rtl8152 can trigger device reset during reset which potentially can |
| CVE-2026-23189 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix NULL pointer dereference in ceph_mds_auth_match() The CephFS kernel client has regression starting f |
| CVE-2026-2319 | Analyzed | 未確認 | CWE-362 | Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install a malicious extension to poten |
| CVE-2026-23190 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in acp3x pdm dma ops |
| CVE-2026-23191 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM st |
| CVE-2026-23192 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: linkwatch: use __dev_put() in callers to prevent UAF After linkwatch_do_dev() calls __dev_put() to release the |
| CVE-2026-23193 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count( |
| CVE-2026-23194 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: correctly handle FDA objects of length zero Fix a bug where an empty FDA (fd array) object with 0 |
| CVE-2026-23195 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: cgroup/dmem: avoid pool UAF An UAF issue was observed: BUG: KASAN: slab-use-after-free in page_counter_unchar |
| CVE-2026-23196 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer Add DMA buffer readiness check before r |
| CVE-2026-23197 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: preserve error state in block data length handler When a block read returns an invalid length, zero |
| CVE-2026-23198 | Modified | 未確認 | CWE-416, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: KVM: Don't clobber irqfd routing type when deassigning irqfd When deassigning a KVM_IRQFD, don't clobber the i |
| CVE-2026-23199 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: procfs: avoid fetching build ID while holding VMA lock Fix PROCMAP_QUERY to fetch optional build ID only after |
| CVE-2026-2320 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI sp |
| CVE-2026-23200 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF syzbot reported a kernel BUG in fib6_add_rt2n |
| CVE-2026-23201 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix oops due to invalid pointer for kfree() in parse_longname() This fixes a kernel oops when reading ce |
| CVE-2026-23202 | Modified | 未確認 | CWE-362, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer The curr_xfer field is read by the IRQ h |
| CVE-2026-23203 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue Commit 1767bb2d47b7 ("ipv6: mcast: Don't hold | |
| CVE-2026-23204 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @of |
| CVE-2026-23205 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix memory leak in smb2_open_file() Reproducer: 1. server: directories are exported read-only |
| CVE-2026-23206 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero The driver allocates arrays for ports, FD |
| CVE-2026-23207 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect curr_xfer check in IRQ handler Now that all other accesses to curr_xfer are done u |
| CVE-2026-23208 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Prevent excessive number of frames In this case, the user constructed the parameters with max |
| CVE-2026-23209 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice repro to crash the kernel: ip l |
| CVE-2026-2321 | Modified | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrupt |
| CVE-2026-23210 | Modified | 未確認 | CWE-362, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix PTP NULL pointer dereference during VSI rebuild Fix race condition where PTP periodic work runs while |
| CVE-2026-23211 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm, swap: restore swap_space attr aviod kernel panic commit 8b47299a411a ("mm, swap: mark swap address space r | |
| CVE-2026-23212 | Modified | 未確認 | CWE-362, CWE-367 | In the Linux kernel, the following vulnerability has been resolved: bonding: annotate data-races around slave->last_rx slave->last_rx and slave->target_last_arp_rx[...] can be re |
| CVE-2026-23213 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Disable MMIO access during SMU Mode 1 reset During Mode 1 reset, the ASIC undergoes a reset cycle | |
| CVE-2026-23214 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: reject new transactions if the fs is fully read-only [BUG] There is a bug report where a heavily fuzzed | |
| CVE-2026-23215 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/vmware: Fix hypercall clobbers Fedora QA reported the following panic: BUG: unable to handle page fault | |
| CVE-2026-23216 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() In iscsit_dec_conn_usage_count(), the |
| CVE-2026-23217 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: riscv: trace: fix snapshot deadlock with sbi ecall If sbi_ecall.c's functions are traceable, echo "__sbi_ecal |
| CVE-2026-23218 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: gpio: loongson-64bit: Fix incorrect NULL check after devm_kcalloc() Fix incorrect NULL check in loongson_gpio_ |
| CVE-2026-23219 | Analyzed | 未確認 | CWE-772 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single When CONFIG_MEM_ALLOC_PROFILING_DEBUG i |
| CVE-2026-2322 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI sp |
| CVE-2026-23220 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths The problem occurs when a signed |
| CVE-2026-23221 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix use-after-free in driver_override_show() The driver_override_show() function reads the driver |
| CVE-2026-23222 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly The existing allocation of scatterlists | |
| CVE-2026-23223 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix UAF in xchk_btree_check_block_owner We cannot dereference bs->cur when trying to determine if bs->cur |
| CVE-2026-23224 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix UAF issue for file-backed mounts w/ directio option [ 9.269940][ T3222] Call trace: [ 9.26994 |
| CVE-2026-23225 | Deferred | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Don't assume CID is CPU owned on mode switch Shinichiro reported a KASAN UAF, which is actually a | |
| CVE-2026-23226 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: add chann_lock to protect ksmbd_chann_list xarray ksmbd_chann_list xarray lacks synchronization, allowi |
| CVE-2026-23227 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free E |
| CVE-2026-23228 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() On kthread_run() failure in ksmbd_tcp_n |
| CVE-2026-23229 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI | |
| CVE-2026-2323 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sever |
| CVE-2026-23230 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: smb: client: split cached_fid bitfields to avoid shared-byte RMW races is_open, has_lease and on_list are stor |
| CVE-2026-2327 | Analyzed | 未確認 | CWE-1333 | Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the use of the regex /\*+$/ in the linkify f |
| CVE-2026-2329 | Analyzed | 未確認 | CWE-121 | An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. A remote attacker can leverage this vulnerability to achieve u |
| CVE-2026-2333 | Analyzed | 未確認 | CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request. |
| CVE-2026-2337 | Deferred | 未確認 | CWE-79 | A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet BusinessManager: 10.15.1 |
| CVE-2026-2344 | Deferred | 未確認 | CWE-79 | A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users.This issue affects Plunet BusinessManager: 10.15.1 |
| CVE-2026-2345 | Deferred | 未確認 | CWE-346 | Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.addEventListener('message', ...) handlers that do not properly |
| CVE-2026-23476 | Analyzed | 未確認 | CWE-79 | FacturaScripts is open-source enterprise resource planning and accounting software. Prior to 2025.8, there a reflected XSS bug in FacturaScripts. The problem is in how error messag |
| CVE-2026-23491 | Modified | 未確認 | CWE-22 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A path traversal vulnerability exists in the `get_file` method of the `Guest` mo |
| CVE-2026-2350 | Analyzed | 未確認 | CWE-532 | Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS. |
| CVE-2026-23515 | Analyzed | 未確認 | CWE-78 | Signal K Server is a server application that runs on a central hub in a boat. Prior to 1.5.0, a command injection vulnerability allows authenticated users with write permissions to |
| CVE-2026-23521 | Analyzed | 未確認 | CWE-22, CWE-73 | Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users who can create or edit devices can set a device `un |
| CVE-2026-23541 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through |
| CVE-2026-23542 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through <= 7.0. |
| CVE-2026-23543 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Securi |
| CVE-2026-23544 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in codetipi Valenti valenti allows Object Injection.This issue affects Valenti: from n/a through <= 5.6.3.5. |
| CVE-2026-23545 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec |
| CVE-2026-23547 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-23548 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Direct |
| CVE-2026-23549 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.1.1. |
| CVE-2026-23552 | Analyzed | 未確認 | CWE-346 | Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component. The Camel-Keycloak KeycloakSecurityPolicy does not validate the iss (issuer) claim |
| CVE-2026-2356 | Deferred | 未確認 | CWE-284 | The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions u |
| CVE-2026-23572 | Deferred | 未確認 | CWE-863 | Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with |
| CVE-2026-2359 | Modified | 未確認 | CWE-772 | Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by dropp |
| CVE-2026-23595 | Analyzed | 未確認 | CWE-284 | An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged |
| CVE-2026-23596 | Analyzed | 未確認 | CWE-400 | A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an att |
| CVE-2026-23597 | Analyzed | 未確認 | CWE-200 | Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful |
| CVE-2026-23598 | Analyzed | 未確認 | CWE-209 | Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful |
| CVE-2026-23599 | Deferred | 未確認 | CWE-269 | A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software for Linux. Successful exploitation of this vulnerability could |
| CVE-2026-2360 | Deferred | 未確認 | CWE-427 | PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that o |
| CVE-2026-23604 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Keyword Filtering rule creation workflow. An authenticated user can supply H |
| CVE-2026-23605 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Attachment Filtering rule creation workflow. An authenticated user can suppl |
| CVE-2026-23606 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Advanced Content Filtering rule creation workflow. An authenticated user can |
| CVE-2026-23607 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Anti-Spam Whitelist management interface. An authenticated user can supply H |
| CVE-2026-23608 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Mail Monitoring rule creation endpoint. An authenticated user can supply HTM |
| CVE-2026-23609 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Perimeter SMTP Servers configuration page. An authenticated user can supply |
| CVE-2026-2361 | Deferred | 未確認 | CWE-427 | PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a temporary view based on a function containing malicious code. When the |
| CVE-2026-23610 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the POP2Exchange configuration endpoint. An authenticated user can supply HTML/J |
| CVE-2026-23611 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the IP Blocklist management page. An authenticated user can supply HTML/JavaScri |
| CVE-2026-23612 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the IP DNS Blocklist configuration page. An authenticated user can supply HTML/J |
| CVE-2026-23613 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the URI DNS Blocklist configuration page. An authenticated user can supply HTML/ |
| CVE-2026-23614 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Sender Policy Framework IP Exceptions interface. An authenticated user can s |
| CVE-2026-23615 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Sender Policy Framework Email Exceptions interface. An authenticated user ca |
| CVE-2026-23616 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Anti-Spoofing configuration page. An authenticated user can supply HTML/Java |
| CVE-2026-23617 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Spam Keyword Checking (Body) conditions interface. An authenticated user can |
| CVE-2026-23618 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Spam Keyword Checking (Subject) conditions interface. An authenticated user |
| CVE-2026-23619 | Analyzed | 未確認 | CWE-79 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Local Domains settings page. An authenticated user can supply HTML/JavaScrip |
| CVE-2026-2362 | Deferred | 未確認 | CWE-79 | The WP Accessibility plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'alt' attribute of images processed by the "Long Description UI" feature in |
| CVE-2026-23620 | Analyzed | 未確認 | CWE-203 | GFI MailEssentials AI versions prior to 22.4 contain an arbitrary file existence enumeration vulnerability in the ListServer.IsDBExist() web method exposed at /MailEssentials/pages |
| CVE-2026-23621 | Analyzed | 未確認 | CWE-203 | GFI MailEssentials AI versions prior to 22.4 contain an arbitrary directory existence enumeration vulnerability in the ListServer.IsPathExist() web method exposed at /MailEssential |
| CVE-2026-23623 | Deferred | 未確認 | CWE-285 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Development Edition version 25.04.08.2 and prior to Collabora Onl |
| CVE-2026-23624 | Analyzed | 未確認 | CWE-384 | GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.0.5, when remote authentication is used, based on SSO variab |
| CVE-2026-23627 | Analyzed | 未確認 | CWE-89 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an SQL injection vulnerability in the Immunization |
| CVE-2026-23632 | Analyzed | 未確認 | CWE-862, CWE-863 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, the endpoint "PUT /repos/:owner/:repo/contents/*" does not require write permissions and allows access |
| CVE-2026-23633 | Analyzed | 未確認 | CWE-22 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via path traversal in Git hook editing. This issue has been patch |
| CVE-2026-23647 | Deferred | 未確認 | CWE-798 | Glory RBG-100 recycler systems using the ISPK-08 software component contain hard-coded operating system credentials that allow remote authentication to the underlying Linux system. |
| CVE-2026-23648 | Deferred | 未確認 | CWE-732 | Glory RBG-100 recycler systems using the ISPK-08 software component contain multiple system binaries with overly permissive file permissions. Several binaries executed by the root |
| CVE-2026-23655 | Analyzed | 未確認 | CWE-312 | Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network. |
| CVE-2026-2367 | Deferred | 未確認 | CWE-79 | The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ays_block' shortcode in all versions up t |
| CVE-2026-23678 | Analyzed | 未確認 | CWE-78 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the affected devi |
| CVE-2026-23681 | Analyzed | 未確認 | CWE-862 | Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authenticated attacker could invoke specific function modules to retrieve information about |
| CVE-2026-23684 | Analyzed | 未確認 | CWE-362, CWE-366 | A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being created with erroneou |
| CVE-2026-23685 | Analyzed | 未確認 | CWE-502 | Due to a Deserialization vulnerability in SAP NetWeaver (JMS service), an attacker authenticated as an administrator with local access could submit specially crafted content to the |
| CVE-2026-23686 | Analyzed | 未確認 | CWE-113, CWE-436 | Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially crafted content to the a |
| CVE-2026-23687 | Modified | 未確認 | CWE-347 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML docume |
| CVE-2026-23688 | Analyzed | 未確認 | CWE-862 | SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on i |
| CVE-2026-23689 | Analyzed | 未確認 | CWE-606, CWE-770 | Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a rem |
| CVE-2026-23693 | Deferred | 未確認 | CWE-306 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /wp-json/eleme |
| CVE-2026-23694 | Deferred | 未確認 | CWE-352 | Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery (CSRF) vulnerability affecting multiple administrative AJAX |
| CVE-2026-23702 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by sending m |
| CVE-2026-23703 | Deferred | 未確認 | CWE-276 | The installer of FinalCode Client provided by Digital Arts Inc. contains an incorrect default permissions vulnerability. A non-administrative user may execute arbitrary code with S |
| CVE-2026-23704 | Deferred | 未確認 | CWE-434 | A non-administrative user can upload malicious files. When an administrator or the product accesses that file, an arbitrary script may be executed on the administrator's browser. N |
| CVE-2026-23715 | Analyzed | 未確認 | CWE-787 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds write v |
| CVE-2026-23716 | Analyzed | 未確認 | CWE-125 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu |
| CVE-2026-23717 | Analyzed | 未確認 | CWE-125 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu |
| CVE-2026-23718 | Analyzed | 未確認 | CWE-125 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu |
| CVE-2026-23719 | Analyzed | 未確認 | CWE-122 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected application is vulnerable to heap-based buffer |
| CVE-2026-23720 | Analyzed | 未確認 | CWE-125 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu |
| CVE-2026-23738 | Analyzed | 未確認 | CWE-79 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cooki |
| CVE-2026-23739 | Analyzed | 未確認 | CWE-611 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the ast_xml_open() function in xml.c p |
| CVE-2026-23740 | Analyzed | 未確認 | CWE-427 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb ini |
| CVE-2026-23741 | Analyzed | 未確認 | CWE-427 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the asterisk/contrib/scripts/ast_cored |
| CVE-2026-23747 | Deferred | 未確認 | CWE-121 | Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils. The golioth_payload_as_int() and golioth_paylo |
| CVE-2026-23748 | Deferred | 未確認 | CWE-191 | Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bounds read in LightDB State string parsing. When processing a string payload, a pa |
| CVE-2026-23749 | Deferred | 未確認 | CWE-170 | Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to improper null termination of a blockwise transfer path. blockwis |
| CVE-2026-23750 | Deferred | 未確認 | CWE-122 | Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certificate handling. server_cert_write() allocates a heap buffer of |
| CVE-2026-23794 | Analyzed | 未確認 | CWE-79 | Reflected XSS in Apache Syncope's Enduser Login page. An attacker that tricks a legitimate user into clicking a malicious link and logging in to Syncope Enduser could steal that us |
| CVE-2026-23795 | Analyzed | 未確認 | CWE-611 | Improper Restriction of XML External Entity Reference vulnerability in Apache Syncope Console. An administrator with adequate entitlements to create or edit Keymaster parameters vi |
| CVE-2026-23796 | Analyzed | 未確認 | CWE-384 | Quick.Cart allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker |
| CVE-2026-23797 | Analyzed | 未確認 | CWE-256 | In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password in user editing page. The vendor was notified early about t |
| CVE-2026-23803 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Burhan Nasir Smart Auto Upload Images smart-auto-upload-images allows Server Side Request Forgery.This issue affects Smart Auto |
| CVE-2026-23804 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in BBR Plugins Better Business Reviews better-business-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issu |
| CVE-2026-23805 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yoren Chang Media Search Enhanced media-search-enhanced allows SQL Injection.T |
| CVE-2026-2383 | Deferred | 未確認 | CWE-79 | The Simple Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field in all versions up to, and including, 4.0.5 due to insufficient input |
| CVE-2026-2384 | Deferred | 未確認 | CWE-79 | The Quiz Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `vc_quizmaker` shortcode in all versions up to, and including, 6.7.1.7 due to insu |
| CVE-2026-2385 | Deferred | 未確認 | CWE-345 | The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Insufficient Verification of Data Au |
| CVE-2026-23856 | Deferred | 未確認 | CWE-284 | Dell iDRAC Service Module (iSM) for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module (iSM) for Linux, versions prior to 5.4.1.1, contain an Improper Access Control |
| CVE-2026-23857 | Analyzed | 未確認 | CWE-280 | Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged att |
| CVE-2026-23858 | Analyzed | 未確認 | CWE-79 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileg |
| CVE-2026-23859 | Analyzed | 未確認 | CWE-602 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability. A high privileged attacker with remote access could |
| CVE-2026-2386 | Deferred | 未確認 | CWE-863 | The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Incorrect Authorization in all versi |
| CVE-2026-23861 | Deferred | 未確認 | CWE-79 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privil |
| CVE-2026-23897 | Analyzed | 未確認 | CWE-1333 | Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3.13.0, 4.2.0 to before |
| CVE-2026-23901 | Analyzed | 未確認 | CWE-208 | Observable Timing Discrepancy vulnerability in Apache Shiro. This issue affects Apache Shiro: from 1.*, 2.* before 2.0.7. Users are recommended to upgrade to version 2.0.7 or lat |
| CVE-2026-23903 | Modified | 未確認 | CWE-289 | Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro: before 2.0.7. Users are recommended to upgrade to version 2.0.7, which fix |
| CVE-2026-23906 | Modified | 未確認 | CWE-287 | Affected Products and Versions * Apache Druid * Affected Versions: 0.17.0 through 35.x (all versions prior to 36.0.0) * Prerequisites: * druid-basic-security extension e |
| CVE-2026-2391 | Analyzed | 未確認 | CWE-20 | ### Summary The `arrayLimit` option in qs does not enforce limits for comma-separated values when `comma: true` is enabled, allowing attackers to cause denial-of-service via memory |
| CVE-2026-23939 | Modified | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Store.Local' module) allows Relative Path Traversal |
| CVE-2026-23948 | Analyzed | 未確認 | CWE-476 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in rdp_write_logon_info_v2() allows a malicious RDP serve |
| CVE-2026-23969 | Analyzed | 未確認 | CWE-89 | Apache Superset utilizes a configurable dictionary, DISALLOWED_SQL_FUNCTIONS, to restrict the execution of potentially sensitive SQL functions within SQL Lab and charts. While this |
| CVE-2026-23980 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to conduct error- |
| CVE-2026-23982 | Analyzed | 未確認 | CWE-863 | An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permi |
| CVE-2026-23983 | Analyzed | 未確認 | CWE-200 | A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information. The Tag endpoint (disabled by default) allows |
| CVE-2026-23984 | Analyzed | 未確認 | CWE-863 | An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read-only verification check when using a Po |
| CVE-2026-23989 | Analyzed | 未確認 | CWE-863 | REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass |
| CVE-2026-23997 | Analyzed | 未確認 | CWE-79 | FacturaScripts is open-source enterprise resource planning and accounting software. In 2025.71 and earlier, a Stored Cross-Site Scripting (XSS) vulnerability was discovered in the |
| CVE-2026-23999 | Analyzed | 未確認 | CWE-330 | Fleet is open source device management software. In versions prior to 4.80.1, Fleet generated device lock and wipe PINs using a predictable algorithm based solely on the current Un |
| CVE-2026-24004 | Analyzed | 未確認 | CWE-862 | Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fleet’s Android MDM Pub/Sub handling could allow unauthenticated requests to trigge |
| CVE-2026-24005 | Analyzed | 未確認 | CWE-918 | Kruise provides automated management of large-scale applications on Kubernetes. Prior to versions 1.8.3 and 1.7.5, PodProbeMarker allows defining custom probes with TCPSocket or HT |
| CVE-2026-24007 | Analyzed | 未確認 | CWE-352 | Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items. An attacker could use |
| CVE-2026-24027 | Analyzed | 未確認 | CWE-294 | Crafted zones can lead to increased incoming network traffic. |
| CVE-2026-24040 | Analyzed | 未確認 | CWE-362 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, the addJS method in the jspdf Node.js build utilizes a shared module-scoped variable (text) to store JavaScript c |
| CVE-2026-24043 | Analyzed | 未確認 | CWE-74 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addMetadata function allows users to inject arbitrary XML. If given the |
| CVE-2026-24044 | Deferred | 未確認 | CWE-336 | Element Server Suite Community Edition (ESS Community) deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initi |
| CVE-2026-24045 | Modified | 未確認 | CWE-79 | Docmost is open-source collaborative wiki and documentation software. From 0.20.0 and before 0.25.0, the public share page functionality in Docmost does not properly HTML-escape pa |
| CVE-2026-24050 | Analyzed | 未確認 | CWE-79 | Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible to stored XSS in group names or channel n |
| CVE-2026-24051 | Analyzed | 未確認 | CWE-426 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking (Untrusted Search Paths) on macOS/Dar |
| CVE-2026-24052 | Analyzed | 未確認 | CWE-601 | Claude Code is an agentic coding tool. Prior to version 1.0.111, Claude Code contained insufficient URL validation in its trusted domain verification mechanism for WebFetch request |
| CVE-2026-24053 | Analyzed | 未確認 | CWE-22, CWE-79 | Claude Code is an agentic coding tool. Prior to version 2.0.74, due to a Bash command validation flaw in parsing ZSH clobber syntax, it was possible to bypass directory restriction |
| CVE-2026-24070 | Modified | 未確認 | CWE-426 | During the installation of the Native Access application, a privileged helper `com.native-instruments.NativeAccess.Helper2`, which is used by Native Access to trigger functions via |
| CVE-2026-24071 | Analyzed | 未確認 | CWE-367 | It was found that the XPC service offered by the privileged helper of Native Access uses the PID of the connecting client to verify its code signature. This is considered insecure |
| CVE-2026-2408 | Analyzed | 未確認 | CWE-416 | Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension. |
| CVE-2026-2409 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.This issue affects Cloud Suite: |
| CVE-2026-24095 | Deferred | 未確認 | CWE-862 | Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows users with the "Use WATO" permission to access the "Analyze |
| CVE-2026-24098 | Analyzed | 未確認 | CWE-200 | Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors generated by other Da |
| CVE-2026-2410 | Deferred | 未確認 | CWE-352 | The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due t |
| CVE-2026-24122 | Analyzed | 未確認 | CWE-295 | Cosign provides code signing and transparency for containers and binaries. In versions 3.0.4 and below, an issuing certificate with a validity that expires before the leaf certific |
| CVE-2026-24126 | Analyzed | 未確認 | CWE-88 | Weblate is a web based localization tool. Prior to 5.16.0, the SSH management console did not validate the passed input while adding the SSH host key, which could lead to an argume |
| CVE-2026-24133 | Analyzed | 未確認 | CWE-770 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addImage method results in denial of service. If given the possibility |
| CVE-2026-24135 | Analyzed | 未確認 | CWE-22 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, a path traversal vulnerability exists in the updateWikiPage function of Gogs. The vulnerability allows |
| CVE-2026-24149 | Deferred | 未確認 | CWE-94 | NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of thi |
| CVE-2026-2415 | Analyzed | 未確認 | CWE-627 | Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name} is used in an email template, it will be replaced with the buyer's |
| CVE-2026-2416 | Deferred | 未確認 | CWE-89 | The Geo Mashup plugin for WordPress is vulnerable to SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.17. This is due to insufficient escaping on t |
| CVE-2026-2419 | Deferred | 未確認 | CWE-22 | The WP-DownloadManager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.69 via the 'download_path' configuration parameter. This is due |
| CVE-2026-24241 | Analyzed | 未確認 | CWE-287 | NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of th |
| CVE-2026-2426 | Deferred | 未確認 | CWE-22 | The WP-DownloadManager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.69 via the 'file' parameter in the file deletion functionality. |
| CVE-2026-2428 | Deferred | 未確認 | CWE-345 | The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 6.1.17. This is due to t |
| CVE-2026-24300 | Analyzed | 未確認 | CWE-284 | Azure Front Door Elevation of Privilege Vulnerability |
| CVE-2026-24302 | Modified | 未確認 | CWE-284 | Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-24312 | Analyzed | 未確認 | CWE-862 | An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authenticated administrative user can bypass role restrictions by leveraging permissions |
| CVE-2026-24314 | Analyzed | 未確認 | CWE-497 | Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact |
| CVE-2026-24319 | Analyzed | 未確認 | CWE-312, CWE-316 | In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unaut |
| CVE-2026-24320 | Analyzed | 未確認 | CWE-113, CWE-787 | Due to improper memory management in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker could exploit logical errors in memory management by suppl |
| CVE-2026-24321 | Analyzed | 未確認 | CWE-359 | SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these open endpoints to retrieve sensitive information that is not i |
| CVE-2026-24322 | Analyzed | 未確認 | CWE-862 | SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be |
| CVE-2026-24323 | Analyzed | 未確認 | CWE-601 | The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses |
| CVE-2026-24324 | Analyzed | 未確認 | CWE-405 | SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker with user privileges to execute a specific query in AdminTools that could cause the |
| CVE-2026-24325 | Analyzed | 未確認 | CWE-79 | SAP BusinessObjects Enterprise does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site Scripting (XSS) vulnerability. This enables an admin user to inject |
| CVE-2026-24326 | Analyzed | 未確認 | CWE-862 | Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Security, an attacker with user privileges could call remote-enabled function modul |
| CVE-2026-24327 | Analyzed | 未確認 | CWE-862 | Due to missing authorization check in SAP Strategic Enterprise Management (Balanced Scorecard in Business Server Pages), an authenticated attacker could access information that the |
| CVE-2026-24328 | Analyzed | 未確認 | CWE-601 | SAP TAF_APPLAUNCHER within Business Server Pages allows unauthenticated attacker to craft malicious links that, when clicked by a victim, redirect them to attacker?controlled sites |
| CVE-2026-24343 | Analyzed | 未確認 | CWE-643 | Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. User |
| CVE-2026-2435 | Analyzed | 未確認 | CWE-89 | Tanium addressed a SQL injection vulnerability in Asset. |
| CVE-2026-24350 | Analyzed | 未確認 | CWE-79 | PluXml CMS is vulnerable to Stored XSS in file uploading functionality. An authenticated attacker can upload an SVG file containing a malicious payload, which will be executed when |
| CVE-2026-24351 | Analyzed | 未確認 | CWE-79 | PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality. Attacker with editing privileges can inject arbitrary HTML and JS into website, which will be rendered |
| CVE-2026-24352 | Analyzed | 未確認 | CWE-384 | PluXml CMS allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker |
| CVE-2026-24375 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Control Security Levels.Thi |
| CVE-2026-2439 | Analyzed | 未確認 | CWE-338, CWE-340 | Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids. The generate_session_id function in Concierge::Sessions::Base defaults to using the uui |
| CVE-2026-24392 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nabil Lemsieh HurryTimer hurrytimer allows Stored XSS.This issue affects Hurry |
| CVE-2026-2441 | Analyzed | 掲載 | CWE-416 | Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-24416 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Time-Based Blind SQL Injection vul |
| CVE-2026-24417 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Time-Based Blind SQL Injection vul |
| CVE-2026-24418 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Error-Based SQL Injection vulnerab |
| CVE-2026-24419 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Error-Based SQL Injection vulnerab |
| CVE-2026-24426 | Analyzed | 未確認 | CWE-79 | Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior contain an improper output encoding vulnerability in the web management interface. User-supplied input is reflected in |
| CVE-2026-24427 | Analyzed | 未確認 | CWE-201 | Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose sensitive information in web management responses. Administrative credentials, including the router and/or admi |
| CVE-2026-2443 | Modified | 未確認 | CWE-125 | A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate reque |
| CVE-2026-24434 | Analyzed | 未確認 | CWE-352 | Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior does not implement CSRF protections for administrative functions in the web management interface. The interface does n |
| CVE-2026-24441 | Analyzed | 未確認 | CWE-319 | Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP responses, allowing an on-path attacker to obtain sensitive authen |
| CVE-2026-24443 | Analyzed | 未確認 | CWE-620 | EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface. The password change |
| CVE-2026-24445 | Modified | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial |
| CVE-2026-24447 | Deferred | 未確認 | CWE-1236 | If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such malformed data. When a victim user download and open such a C |
| CVE-2026-24449 | Analyzed | 未確認 | CWE-1391 | For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information. |
| CVE-2026-24452 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by supplyin |
| CVE-2026-24455 | Deferred | 未確認 | CWE-319 | The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication. Traffic is encoded but not encrypted, exposing user cre |
| CVE-2026-24465 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution. |
| CVE-2026-24466 | Deferred | 未確認 | CWE-428 | Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with |
| CVE-2026-2447 | Modified | 未確認 | CWE-122 | Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2. |
| CVE-2026-24471 | Deferred | 未確認 | CWE-441 | continuwuity is a Matrix homeserver written in Rust. This vulnerability allows an attacker with a malicious remote server to cause the local server to sign an arbitrary event upon |
| CVE-2026-24481 | Analyzed | 未確認 | CWE-125 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure vulnerability |
| CVE-2026-24484 | Analyzed | 未確認 | CWE-400 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for multi-layer neste |
| CVE-2026-24485 | Analyzed | 未確認 | CWE-400 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sy |
| CVE-2026-24487 | Analyzed | 未確認 | CWE-200, CWE-863 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an authorization bypass vulnerability in the FHIR C |
| CVE-2026-24488 | Analyzed | 未確認 | CWE-22 | OpenEMR is a free and open source electronic health records and medical practice management application. In versions up to and including 8.0.0, an arbitrary file exfiltration vulne |
| CVE-2026-24491 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notifications after the control channel is closed, dereferencing a fre |
| CVE-2026-24494 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend |
| CVE-2026-24497 | Analyzed | 未確認 | CWE-121, CWE-787 | Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue affects ThinkWise: from 7 through 23. |
| CVE-2026-24498 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, Inc. IpTIME AX3000Q, E |
| CVE-2026-2451 | Analyzed | 未確認 | CWE-627 | Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name} is used in an email template, it will be replaced with the buyer's |
| CVE-2026-24512 | Deferred | 未確認 | CWE-20 | A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead to arbitrary code exe |
| CVE-2026-24513 | Deferred | 未確認 | CWE-754 | A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation may not be effective in the presence of a specific misconfigurat |
| CVE-2026-24514 | Deferred | 未確認 | CWE-770 | A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the val |
| CVE-2026-24517 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecti |
| CVE-2026-2452 | Analyzed | 未確認 | CWE-627 | Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name} is used in an email template, it will be replaced with the buyer's |
| CVE-2026-2459 | Analyzed | 未確認 | CWE-267 | A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so. |
| CVE-2026-2460 | Analyzed | 未確認 | CWE-267 | A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not a |
| CVE-2026-2464 | Deferred | 未確認 | CWE-22 | Path traversal vulnerability in the AMR Printer Management 1.01 Beta web service, which allows remote attackers to read arbitrary files from the underlying Windows system by using |
| CVE-2026-24663 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an unauthenticated attacker to achieve remote code execution on the system by sending |
| CVE-2026-24664 | Analyzed | 未確認 | CWE-204 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a username enumeration vulnerability allows unauthenticated |
| CVE-2026-24665 | Analyzed | 未確認 | CWE-79 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a stored Cross-Site Scripting (XSS) vulnerability allows aut |
| CVE-2026-24666 | Analyzed | 未確認 | CWE-352 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Cross-Site Request Forgery (CSRF) vulnerability in multipl |
| CVE-2026-24667 | Analyzed | 未確認 | CWE-613 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, failure to invalidate active user sessions after a password |
| CVE-2026-24668 | Analyzed | 未確認 | CWE-284 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken access control vulnerability allows authenticated s |
| CVE-2026-24669 | Analyzed | 未確認 | CWE-613 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an insecure password reset mechanism allows local attackers |
| CVE-2026-24670 | Analyzed | 未確認 | CWE-284 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken access control vulnerability allows authenticated s |
| CVE-2026-24671 | Analyzed | 未確認 | CWE-79 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Stored Cross-Site Scripting (XSS) vulnerability allows aut |
| CVE-2026-24672 | Analyzed | 未確認 | CWE-79 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Stored Cross-Site Scripting (XSS) vulnerability allows aut |
| CVE-2026-24673 | Analyzed | 未確認 | CWE-434 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attacke |
| CVE-2026-24674 | Analyzed | 未確認 | CWE-79 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Reflected Cross-Site Scripting (XSS) vulnerability allows |
| CVE-2026-24675 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but later code still dereferences it |
| CVE-2026-24676 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the capture thread continues using a |
| CVE-2026-24677 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate the source bu |
| CVE-2026-24678 | Modified | 未確認 | CWE-416, CWE-825 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel clos |
| CVE-2026-24679 | Analyzed | 未確認 | CWE-122 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, The URBDRC client uses server-supplied interface numbers as array indices without bounds checks, c |
| CVE-2026-24680 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again |
| CVE-2026-24681 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel clos |
| CVE-2026-24682 | Analyzed | 未確認 | CWE-122 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audin_server_recv_formats frees an incorrect number of audio formats on parse failure (i + i), lea |
| CVE-2026-24683 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it without synchronization; a co |
| CVE-2026-24684 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal |
| CVE-2026-24689 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injectin |
| CVE-2026-2469 | Deferred | 未確認 | CWE-74 | Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') |
| CVE-2026-24694 | Deferred | 未確認 | CWE-427 | The installer for Roland Cloud Manager ver.3.1.19 and prior insecurely loads Dynamic Link Libraries (DLLs), which could allow an attacker to execute arbitrary code with the privile |
| CVE-2026-24695 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injec |
| CVE-2026-24708 | Deferred | 未確認 | CWE-669, CWE-73 | An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering |
| CVE-2026-2471 | Deferred | 未確認 | CWE-502 | The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.15.0 via deserialization of untrusted input from the email lo |
| CVE-2026-2472 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including |
| CVE-2026-2473 | Deferred | 未確認 | CWE-340 | Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticate |
| CVE-2026-24731 | Modified | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenti |
| CVE-2026-24733 | Modified | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constraint was configured to allow HEAD request |
| CVE-2026-24734 | Modified | 未確認 | CWE-20, CWE-295 | Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did n |
| CVE-2026-24735 | Analyzed | 未確認 | CWE-359 | Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 1.7.1. An unauthenticated API endpoint |
| CVE-2026-24737 | Modified | 未確認 | CWE-116, CWE-917 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such |
| CVE-2026-2474 | Analyzed | 未確認 | CWE-122, CWE-1284 | Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom(). The function does not validate that th |
| CVE-2026-24743 | Analyzed | 未確認 | CWE-79 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability occurs in the upload Invoice L |
| CVE-2026-24744 | Analyzed | 未確認 | CWE-79 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability occurs in the Edit Invoices fu |
| CVE-2026-24745 | Analyzed | 未確認 | CWE-79 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability occurs in the upload Login Log |
| CVE-2026-24746 | Analyzed | 未確認 | CWE-79 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability occurs in the Edit Quotes func |
| CVE-2026-24762 | Analyzed | 未確認 | CWE-532 | RustFS is a distributed object storage system built in Rust. From versions alpha.13 to alpha.81, RustFS logs sensitive credential material (access key, secret key, session token) t |
| CVE-2026-24763 | Analyzed | 未確認 | CWE-78 | OpenClaw (formerly Clawdbot) is a personal AI assistant you run on your own devices. Prior to 2026.1.29, a command injection vulnerability existed in OpenClaw’s Docker sandbox exe |
| CVE-2026-24764 | Analyzed | 未確認 | CWE-74, CWE-94 | OpenClaw (formerly Clawdbot) is a personal AI assistant users run on their own devices. In versions 2026.2.2 and below, when the Slack integration is enabled, channel metadata (top |
| CVE-2026-24773 | Analyzed | 未確認 | CWE-639 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an Insecure Direct Object Reference (IDOR) vulnerability all |
| CVE-2026-24774 | Analyzed | 未確認 | CWE-841 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a business logic vulnerability allows authenticated students |
| CVE-2026-24776 | Analyzed | 未確認 | CWE-639 | OpenProject is an open-source, web-based project management software. Prior to 17.0.2, the drag&drop handler moving an agenda item to a different section was not properly checking |
| CVE-2026-24777 | Analyzed | 未確認 | CWE-862 | OpenProject is an open-source, web-based project management software. Prior to 17.0.2, users with the Manage Users permission can lock and unlock users. This functionality should o |
| CVE-2026-24788 | Deferred | 未確認 | CWE-78 | RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the pr |
| CVE-2026-24789 | Deferred | 未確認 | CWE-306 | An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication. |
| CVE-2026-2479 | Deferred | 未確認 | CWE-918 | The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.1. This is due to the use of `strpos() |
| CVE-2026-24790 | Deferred | 未確認 | CWE-306 | The underlying PLC of the device can be remotely influenced, without proper safeguards or authentication. |
| CVE-2026-24834 | Modified | 未確認 | CWE-281, CWE-732 | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In versions prior to 3.27.0, an |
| CVE-2026-24843 | Analyzed | 未確認 | CWE-22 | melange allows users to build apk packages using declarative pipelines. In version 0.11.3 to before 0.40.3, an attacker who can influence the tar stream from a QEMU guest VM could |
| CVE-2026-24844 | Analyzed | 未確認 | CWE-78 | melange allows users to build apk packages using declarative pipelines. From version 0.3.0 to before 0.40.3, an attacker who can provide build input values, but not modify pipeline |
| CVE-2026-24847 | Analyzed | 未確認 | CWE-601 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Eye Exam form module allows any authenticated u |
| CVE-2026-24849 | Analyzed | 未確認 | CWE-22 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, the `disposeDocument()` method in `EtherFaxActions. |
| CVE-2026-24851 | Analyzed | 未確認 | CWE-863 | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.5 to v1.11.2 ( openfga-0.2.22<= Helm c |
| CVE-2026-24853 | Analyzed | 未確認 | CWE-290 | Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to C |
| CVE-2026-2486 | Deferred | 未確認 | CWE-79 | The Master Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ma_el_bh_table_btn_text' parameter in versions up to, and including, 2.1. |
| CVE-2026-24884 | Analyzed | 未確認 | CWE-59 | Compressing is a compressing and uncompressing lib for node. In version 2.0.0 and 1.10.3 and prior, Compressing extracts TAR archives while restoring symbolic links without validat |
| CVE-2026-24885 | Analyzed | 未確認 | CWE-352 | Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a Cross-Site Request Forgery (CSRF) vulnerability exists in the ProjectPermissionController |
| CVE-2026-24887 | Analyzed | 未確認 | CWE-78, CWE-94 | Claude Code is an agentic coding tool. Prior to version 2.0.72, due to an error in command parsing, it was possible to bypass the Claude Code confirmation prompt to trigger executi |
| CVE-2026-2489 | Deferred | 未確認 | CWE-79 | The TP2WP Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Watched domains' textarea on the attachment importer settings page in all versions up |
| CVE-2026-24890 | Analyzed | 未確認 | CWE-285 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an authorization bypass vulnerability in the patien |
| CVE-2026-24891 | Analyzed | 未確認 | CWE-502 | openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus. Versions 5.3.1 and below contain an unsafe deserializatio |
| CVE-2026-24892 | Analyzed | 未確認 | CWE-502 | openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus. openITCOCKPIT Community Edition 5.3.1 and earlier contain |
| CVE-2026-24894 | Analyzed | 未確認 | CWE-269, CWE-384, CWE-613 | FrankenPHP is a modern application server for PHP. Prior to 1.11.2, when running FrankenPHP in worker mode, the $_SESSION superglobal is not correctly reset between requests. This |
| CVE-2026-24895 | Analyzed | 未確認 | CWE-180 | FrankenPHP is a modern application server for PHP. Prior to 1.11.2, FrankenPHP’s CGI path splitting logic improperly handles Unicode characters during case conversion. The logic co |
| CVE-2026-24896 | Analyzed | 未確認 | CWE-284 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, a Broken Access Control vulnerability exists in Ope |
| CVE-2026-2490 | Deferred | 未確認 | CWE-59 | RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affect |
| CVE-2026-24900 | Analyzed | 未確認 | CWE-639 | MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, the courses/<:course_id>/assignments/<:assignment_id>/submissions/html_content ac |
| CVE-2026-24903 | Analyzed | 未確認 | CWE-79 | OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaSta |
| CVE-2026-24908 | Analyzed | 未確認 | CWE-89 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an SQL injection vulnerability in the Patient REST |
| CVE-2026-24914 | Analyzed | 未確認 | CWE-416, CWE-843 | Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-24915 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
| CVE-2026-24916 | Analyzed | 未確認 | CWE-200 | Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-24917 | Analyzed | 未確認 | CWE-416 | UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-24918 | Analyzed | 未確認 | CWE-476 | Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-24919 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-2492 | Deferred | 未確認 | CWE-427 | TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected inst |
| CVE-2026-24920 | Analyzed | 未確認 | CWE-264 | Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-24921 | Analyzed | 未確認 | CWE-125 | Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
| CVE-2026-24922 | Analyzed | 未確認 | CWE-120, CWE-122 | Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-24923 | Analyzed | 未確認 | CWE-264 | Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-24924 | Modified | 未確認 | CWE-264 | Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-24925 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-24926 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-24927 | Analyzed | 未確認 | CWE-416 | Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-24928 | Analyzed | 未確認 | CWE-680, CWE-787 | Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-24929 | Analyzed | 未確認 | CWE-125, CWE-476 | Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-24930 | Analyzed | 未確認 | CWE-362, CWE-416 | UAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-24931 | Analyzed | 未確認 | CWE-264 | Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-24932 | Analyzed | 未確認 | CWE-295 | The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL |
| CVE-2026-24933 | Analyzed | 未確認 | CWE-295 | The API communication component fails to validate the SSL/TLS certificate when sending HTTPS requests to the server. An improper certificates validation vulnerability allows an una |
| CVE-2026-24934 | Analyzed | 未確認 | CWE-295 | The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate when querying an external server for the device's WAN IP address. An unauthenticated |
| CVE-2026-24935 | Analyzed | 未確認 | CWE-295 | A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional au |
| CVE-2026-24936 | Analyzed | 未確認 | CWE-20 | When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerability in a specific CGI program allowing an unauthenticated |
| CVE-2026-24938 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search better-search allows Stored XSS.This issue affects Better S |
| CVE-2026-24939 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff |
| CVE-2026-24940 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Themefic Travelfic Toolkit travelfic-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trave |
| CVE-2026-24941 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Por |
| CVE-2026-24942 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: from n/a through <= 5.1. |
| CVE-2026-24943 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference grandconference allows Reflected XSS.This issue af |
| CVE-2026-24944 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in weDevs Subscribe2 subscribe2 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe2: from n/a |
| CVE-2026-24945 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 allows Exploiting Incorrectly Configured Access Control Securi |
| CVE-2026-24946 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Cont |
| CVE-2026-24947 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-24948 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects |
| CVE-2026-24949 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe photome allows DOM-Based XSS.This issue affects PhotoMe: fr |
| CVE-2026-2495 | Deferred | 未確認 | CWE-89 | The WPNakama – Team and multi-Client Collaboration, Editorial and Project Management plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the '/wp-json/ |
| CVE-2026-24950 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in themeplugs Authorsy authorsy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af |
| CVE-2026-24951 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through |
| CVE-2026-24952 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows St |
| CVE-2026-24953 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue a |
| CVE-2026-24954 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.0.8. |
| CVE-2026-24955 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fox-themes Whizz Plugins whizz-plugins allows Reflected XSS.This issue affects |
| CVE-2026-24956 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada Download Manager Addons for Elementor wpdm-elementor allows Blind SQL |
| CVE-2026-24957 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S |
| CVE-2026-24958 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This is |
| CVE-2026-24959 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue a |
| CVE-2026-24961 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Server Side Request Forgery.This issue affects Grand Blog: from n/a through < 3.1.5. |
| CVE-2026-24962 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Sigmize sigmize allows Cross Site Request Forgery.This issue affects Sigmize: from n/a through <= 0.0.9. |
| CVE-2026-24965 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Exploiting Incorrectly Configured Access Control Security |
| CVE-2026-24966 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Copyscape Copyscape Premium copyscape-premium allows Cross Site Request Forgery.This issue affects Copyscape Premium: from n/a th |
| CVE-2026-24967 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ameliabooking Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/ |
| CVE-2026-2498 | Deferred | 未確認 | CWE-79 | The WP Social Meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.1 due to insufficient input saniti |
| CVE-2026-24982 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff |
| CVE-2026-24984 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brecht Visual Link Preview visual-link-preview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vis |
| CVE-2026-24985 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in approveme WP Forms Signature Contract Add-On wp-forms-signature-contract-add-on allows Exploiting Incorrectly Configured Access Control Secur |
| CVE-2026-24986 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects |
| CVE-2026-24988 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Hogg The Events Calendar Shortcode & Block the-events-calendar-shortcode |
| CVE-2026-2499 | Deferred | 未確認 | CWE-79 | The Custom Logo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.2 due to insufficient input sanitizatio |
| CVE-2026-24990 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a th |
| CVE-2026-24991 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Exploiting Incorrectly Configured Access Control Security |
| CVE-2026-24992 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows Retr |
| CVE-2026-24994 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue |
| CVE-2026-24995 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af |
| CVE-2026-24996 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wpelemento WPElemento Importer wpelemento-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-24997 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Wired Impact Wired Impact Volunteer Management wired-impact-volunteer-management allows Exploiting Incorrectly Configured Access Control Secu |
| CVE-2026-24998 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hustle wordpress-popup allows Retrieve Emb |
| CVE-2026-24999 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Alma Alma alma-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Alma: from |
| CVE-2026-25000 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of |
| CVE-2026-25003 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in madalin.ungureanu Client Portal client-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clie |
| CVE-2026-25004 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Business Directory cm-business-directory allows Stor |
| CVE-2026-25005 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Se |
| CVE-2026-25006 | Deferred | 未確認 | CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore allows Code Injection.This issue affects XStore: from n/a throug |
| CVE-2026-25008 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables |
| CVE-2026-25010 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This |
| CVE-2026-25011 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Securit |
| CVE-2026-25012 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in gfazioli WP Bannerize Pro wp-bannerize-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bann |
| CVE-2026-25014 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in themelooks Enter Addons enteraddons allows Cross Site Request Forgery.This issue affects Enter Addons: from n/a through <= 2.3.2. |
| CVE-2026-25015 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1.2.53. |
| CVE-2026-25016 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Pop |
| CVE-2026-25019 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Atar |
| CVE-2026-2502 | Deferred | 未確認 | CWE-79 | The xmlrpc attacks blocker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0, via the 'X-Forwarded-For' HTTP header. This is d |
| CVE-2026-25020 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects W |
| CVE-2026-25021 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Mizan Themes Mizan Demo Importer mizan-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec |
| CVE-2026-25022 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Blind SQL Inje |
| CVE-2026-25023 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker allows |
| CVE-2026-25024 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Blair Williams ThirstyAffiliates thirstyaffiliates allows Cross Site Request Forgery.This issue affects ThirstyAffiliates: from n |
| CVE-2026-25027 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Unicamp unicamp allows PHP Local File Inclusion.T |
| CVE-2026-25028 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Contr |
| CVE-2026-25036 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from |
| CVE-2026-25037 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by configur |
| CVE-2026-2504 | Deferred | 未確認 | CWE-862 | The Dealia – Request a quote plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on multiple AJAX handlers in all versions up t |
| CVE-2026-25049 | Analyzed | 未確認 | CWE-913 | n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authenticated user with permission to create or modify workflows could abuse crafted ex |
| CVE-2026-25051 | Analyzed | 未確認 | CWE-79 | n8n is an open source workflow automation platform. Prior to version 1.123.2, a Cross-Site Scripting (XSS) vulnerability has been identified in the handling of webhook responses an |
| CVE-2026-25052 | Analyzed | 未確認 | CWE-367 | n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to |
| CVE-2026-25053 | Analyzed | 未確認 | CWE-78 | n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or m |
| CVE-2026-25054 | Analyzed | 未確認 | CWE-79, CWE-80 | n8n is an open source workflow automation platform. Prior to versions 1.123.9 and 2.2.1, a Cross-Site Scripting (XSS) vulnerability existed in a markdown rendering component used i |
| CVE-2026-25055 | Analyzed | 未確認 | CWE-22 | n8n is an open source workflow automation platform. Prior to versions 1.123.12 and 2.4.0, when workflows process uploaded files and transfer them to remote servers via the SSH node |
| CVE-2026-25056 | Analyzed | 未確認 | CWE-434, CWE-693 | n8n is an open source workflow automation platform. Prior to versions 1.118.0 and 2.4.0, a vulnerability in the Merge node's SQL Query mode allowed authenticated users with permiss |
| CVE-2026-25057 | Analyzed | 未確認 | CWE-23 | MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able to upload a zip file to create an assignment from an exporte |
| CVE-2026-25059 | Analyzed | 未確認 | CWE-22 | OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, the application contains path traversal vulnerability in multiple file operation handlers in server/handles/fsman |
| CVE-2026-2506 | Deferred | 未確認 | CWE-79 | The EM Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to the plugin storing attacker-control |
| CVE-2026-25060 | Analyzed | 未確認 | CWE-599 | OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, certificate verification is disabled by default for all storage driver communications. The TlsInsecureSkipVerify |
| CVE-2026-25062 | Analyzed | 未確認 | CWE-22 | Outline is a service that allows for collaborative documentation. Prior to 1.4.0, during the JSON import process, the value of attachments[].key from the imported JSON is passed di |
| CVE-2026-25069 | Deferred | 未確認 | CWE-22 | SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can s |
| CVE-2026-2507 | Deferred | 未確認 | CWE-476 | When BIG-IP AFM or BIG-IP DDoS is provisioned, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not e |
| CVE-2026-25084 | Deferred | 未確認 | CWE-306 | Authentication for ZLAN5143D can be bypassed by directly accessing internal URLs. |
| CVE-2026-25085 | Analyzed | 未確認 | CWE-394 | A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate va |
| CVE-2026-25087 | Analyzed | 未確認 | CWE-416 | Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It can be triggered when reading an Arrow IPC file (but not an IP |
| CVE-2026-25105 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by inje |
| CVE-2026-25108 | Analyzed | 掲載 | CWE-78 | FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arb |
| CVE-2026-25109 | Modified | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecti |
| CVE-2026-25111 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting |
| CVE-2026-25113 | Modified | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial |
| CVE-2026-25114 | Modified | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial |
| CVE-2026-25115 | Analyzed | 未確認 | CWE-693 | n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox en |
| CVE-2026-25120 | Analyzed | 未確認 | CWE-639 | Gogs is an open source self-hosted Git service. In versions 0.13.4 and below, the DeleteComment API does not verify that the comment belongs to the repository specified in the URL. |
| CVE-2026-25121 | Analyzed | 未確認 | CWE-22, CWE-23 | apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, a path traversal vulnerability was discovered in apko's di |
| CVE-2026-25122 | Analyzed | 未確認 | CWE-400, CWE-770 | apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.0, expandapk.Split drains the first gzip stream of an APK arc |
| CVE-2026-25123 | Analyzed | 未確認 | CWE-918 | Homarr is an open-source dashboard. Prior to 1.52.0, a public (unauthenticated) tRPC endpoint widget.app.ping accepts an arbitrary url and performs a server-side request to that UR |
| CVE-2026-25124 | Analyzed | 未確認 | CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the OpenEMR application is vulnerable to an access |
| CVE-2026-25127 | Analyzed | 未確認 | CWE-863 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the server does not properly validate user permissi |
| CVE-2026-25131 | Analyzed | 未確認 | CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, a Broken Access Control vulnerability exists in the |
| CVE-2026-25134 | Analyzed | 未確認 | CWE-88 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to 6.8.150, 25.0.82, and 26.0.5, the MaintenanceController exposes an action zipLanguage wh |
| CVE-2026-25135 | Analyzed | 未確認 | CWE-200 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 have an information disclosure vulnerability that l |
| CVE-2026-25136 | Analyzed | 未確認 | CWE-1004, CWE-79 | Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. A reflected Cross-site Scrip |
| CVE-2026-25137 | Deferred | 未確認 | CWE-306, CWE-552 | The NixOs Odoo package is an open source ERP and CRM system. From 21.11 to before 25.11 and 26.05, every NixOS based Odoo setup publicly exposes the database manager without any au |
| CVE-2026-25138 | Analyzed | 未確認 | CWE-204 | Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Prior to versions 35.8.3, 38 |
| CVE-2026-25139 | Analyzed | 未確認 | CWE-125 | RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices. In version 2025.10 and p |
| CVE-2026-25140 | Analyzed | 未確認 | CWE-400, CWE-770 | apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, an attacker who controls or compromises an APK repository |
| CVE-2026-25142 | Analyzed | 未確認 | CWE-1321, CWE-94 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.27, SanboxJS does not properly restrict __lookupGetter__ which can be used to obtain prototypes, which can be used for es |
| CVE-2026-25143 | Analyzed | 未確認 | CWE-78 | melange allows users to build apk packages using declarative pipelines. From version 0.10.0 to before 0.40.3, an attacker who can influence inputs to the patch pipeline could execu |
| CVE-2026-25144 | Deferred | 未確認 | CWE-79 | Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and execu |
| CVE-2026-25145 | Analyzed | 未確認 | CWE-22 | melange allows users to build apk packages using declarative pipelines. From version 0.14.0 to before 0.40.3, an attacker who can influence a melange configuration file (e.g., thro |
| CVE-2026-25147 | Analyzed | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, in `portal/portal_payment.php`, the patient id used |
| CVE-2026-25148 | Analyzed | 未確認 | CWE-79 | Qwik is a performance focused javascript framework. Prior to version 1.19.0, a Cross-Site Scripting vulnerability in Qwik.js' server-side rendering virtual attribute serialization |
| CVE-2026-25149 | Analyzed | 未確認 | CWE-601 | Qwik is a performance focused javascript framework. Prior to version 1.19.0, an Open Redirect vulnerability in Qwik City's default request handler middleware allows a remote attack |
| CVE-2026-25150 | Analyzed | 未確認 | CWE-1321 | Qwik is a performance focused javascript framework. Prior to version 1.19.0, a prototype pollution vulnerability exists in the formToObj() function within @builder.io/qwik-city mid |
| CVE-2026-25151 | Analyzed | 未確認 | CWE-352 | Qwik is a performance focused javascript framework. Prior to version 1.19.0, Qwik City’s server-side request handler inconsistently interprets HTTP request headers, which can be ab |
| CVE-2026-25155 | Analyzed | 未確認 | CWE-352 | Qwik is a performance focused javascript framework. Prior to version 1.12.0, a typo in the regular expression within isContentType causes incorrect parsing of certain Content-Type |
| CVE-2026-25157 | Analyzed | 未確認 | CWE-78 | OpenClaw is a personal AI assistant. Prior to version 2026.1.29, there is an OS command injection vulnerability via the Project Root Path in sshNodeCommand. The sshNodeCommand func |
| CVE-2026-2516 | Deferred | 未確認 | CWE-426, CWE-427 | A vulnerability was identified in Unidocs ezPDF DRM Reader and ezPDF Reader 2.0/3.0.0.4. This affects an unknown part in the library SHFOLDER.dll. Such manipulation leads to uncont |
| CVE-2026-25160 | Analyzed | 未確認 | CWE-295 | Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables TLS certificate verification by default |
| CVE-2026-25161 | Analyzed | 未確認 | CWE-22 | Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains path traversal vulnerability in multiple |
| CVE-2026-25164 | Analyzed | 未確認 | CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the REST API route table in `apis/routes/_rest_rout |
| CVE-2026-2517 | Analyzed | 未確認 | CWE-404 | A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft in the library lib/gtp/v2/types.c of the component SMF. Perfo |
| CVE-2026-25191 | Deferred | 未確認 | CWE-427 | The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to |
| CVE-2026-25195 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by supply |
| CVE-2026-25196 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting |
| CVE-2026-25198 | Deferred | 未確認 | CWE-601 | web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability. If this vulnerability is exploited, the user may be redirected to an a |
| CVE-2026-25200 | Analyzed | 未確認 | CWE-434 | A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue a |
| CVE-2026-25201 | Analyzed | 未確認 | CWE-434 | An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21 |
| CVE-2026-25202 | Analyzed | 未確認 | CWE-798 | The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21 |
| CVE-2026-2521 | Analyzed | 未確認 | CWE-119 | A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_response of the component SGW-C. Executing a manipulation can |
| CVE-2026-2522 | Analyzed | 未確認 | CWE-119 | A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/esm-build.c of the component MME. The manipulation leads to |
| CVE-2026-25220 | Analyzed | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Message Center accepts the URL parameter `show_ |
| CVE-2026-25221 | Analyzed | 未確認 | CWE-352 | PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, the OAuth 2.0 implementation for GitHub and Google login providers is vulnerable to Login Cro |
| CVE-2026-25222 | Analyzed | 未確認 | CWE-200 | PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, a timing attack vulnerability in the sign-in process allows unauthenticated attackers to dete |
| CVE-2026-25223 | Modified | 未確認 | CWE-179, CWE-436 | Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.2, a validation bypass vulnerability exists in Fastify where request body validation schemas spe |
| CVE-2026-25224 | Analyzed | 未確認 | CWE-770 | Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.3, a denial-of-service vulnerability in Fastify’s Web Streams response handling can allow a remo |
| CVE-2026-25227 | Analyzed | 未確認 | CWE-94 | authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view |
| CVE-2026-25228 | Analyzed | 未確認 | CWE-22 | Signal K Server is a server application that runs on a central hub in a boat. Prior to 2.20.3, a path traversal vulnerability in SignalK Server's applicationData API allows authent |
| CVE-2026-25229 | Analyzed | 未確認 | CWE-284 | Gogs is an open source self-hosted Git service. Versions 0.13.4 and below have a broken access control vulnerability which allows authenticated users with write access to any repos |
| CVE-2026-2523 | Analyzed | 未確認 | CWE-617 | A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smf_gn_handle_create_pdp_context_request of the file /src/smf/gn-handler.c of the componen |
| CVE-2026-25230 | Analyzed | 未確認 | CWE-116, CWE-79 | FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an authenticated user to modify the DOM and add e.g. form element |
| CVE-2026-25231 | Analyzed | 未確認 | CWE-284, CWE-552 | FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0, the application contains an unauthenticated file read vulnerability due to the lack of access c |
| CVE-2026-25232 | Analyzed | 未確認 | CWE-863 | Gogs is an open source self-hosted Git service. Versions 0.13.4 and below have an access control bypass vulnerability which allows any repository collaborator with Write permission |
| CVE-2026-25233 | Analyzed | 未確認 | CWE-783 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, |
| CVE-2026-25234 | Analyzed | 未確認 | CWE-89 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in category deletion can allow an attacker with acce |
| CVE-2026-25235 | Analyzed | 未確認 | CWE-337 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, predictable verification hashes may allow attackers to guess verification tokens a |
| CVE-2026-25236 | Analyzed | 未確認 | CWE-89 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution fo |
| CVE-2026-25237 | Analyzed | 未確認 | CWE-624 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable |
| CVE-2026-25238 | Analyzed | 未確認 | CWE-89 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to |
| CVE-2026-25239 | Analyzed | 未確認 | CWE-89 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in apidoc queue insertion can allow query manipulati |
| CVE-2026-2524 | Analyzed | 未確認 | CWE-404 | A flaw has been found in Open5GS 2.7.6. The impacted element is the function mme_s11_handle_create_session_response of the component MME. This manipulation causes denial of service |
| CVE-2026-25240 | Analyzed | 未確認 | CWE-89 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability can occur in user::maintains() when role filters are |
| CVE-2026-25241 | Analyzed | 未確認 | CWE-89 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, an unauthenticated SQL injection in the /get/<package>/<version> endpoint allows r |
| CVE-2026-25242 | Analyzed | 未確認 | CWE-862 | Gogs is an open source self-hosted Git service. Versions 0.13.4 and below expose unauthenticated file upload endpoints by default. When the global RequireSigninView setting is disa |
| CVE-2026-2525 | Analyzed | 未確認 | CWE-404 | A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoint. Such manipulation leads to denial of service. The attack |
| CVE-2026-25251 | Rejected | 未確認 | Rejected reason: This has been moved to the REJECTED state because the information source is under review. If circumstances change, it is possible that this will be moved to the PU | |
| CVE-2026-25253 | Analyzed | 未確認 | CWE-669 | OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token |
| CVE-2026-2526 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Wavlink WL-WN579A3 up to 20210219. This impacts the function multi_ssid of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument SS |
| CVE-2026-2527 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219. Affected is an unknown function of the file /cgi-bin/login.cgi. Executing a manipulation of the argument key ca |
| CVE-2026-2528 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in Wavlink WL-WN579A3 up to 20210219. Affected by this vulnerability is the function Delete_Mac_list of the file /cgi-bin/wireless.cgi. The manipulat |
| CVE-2026-2529 | Analyzed | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteMac of the file /cgi-bin/wireless.cgi. The manipulation of th |
| CVE-2026-2530 | Analyzed | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Wavlink WL-WN579A3 up to 20210219. This affects the function AddMac of the file /cgi-bin/wireless.cgi. This manipulation of the argument macAddr c |
| CVE-2026-25305 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore xstore allows DOM-Based XSS.This issue affects XStore: from n/a |
| CVE-2026-25307 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based XSS.This issue affects XSto |
| CVE-2026-25308 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sim |
| CVE-2026-2531 | Analyzed | 未確認 | CWE-918 | A security vulnerability has been detected in MindsDB up to 25.14.1. This vulnerability affects the function clear_filename of the file mindsdb/utilities/security.py of the compone |
| CVE-2026-25310 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Alobaidi Extend Link extend-link allows Server Side Request Forgery.This issue affects Extend Link: from n/a through <= 2.0.0. |
| CVE-2026-25311 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in 10up Autoshare for Twitter autoshare-for-twitter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects A |
| CVE-2026-25313 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Shahjahan Jewel FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: |
| CVE-2026-25314 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Messiah TOP Table Of Contents top-table-of-contents allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff |
| CVE-2026-25315 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in hcaptcha hCaptcha for WP hcaptcha-for-forms-and-more allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec |
| CVE-2026-25316 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Brainstorm Force CartFlows cartflows allows Object Injection.This issue affects CartFlows: from n/a through <= 2.1.19. |
| CVE-2026-25318 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Wisernotify team WiserReview Product Reviews for WooCommerce wiser-review allows Exploiting Incorrectly Configured Access Control Security Le |
| CVE-2026-25319 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in wpzita Zita Elementor Site Library zita-site-library allows Cross Site Request Forgery.This issue affects Zita Elementor Site Lib |
| CVE-2026-2532 | Analyzed | 未確認 | CWE-918 | A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.py of the co |
| CVE-2026-25320 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db allows Exploiting Incorrectly Configured Access Control Security Levels.T |
| CVE-2026-25321 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PSM Plugins SupportCandy supportcandy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SupportCandy |
| CVE-2026-25322 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in PublishPress PublishPress Revisions revisionary allows Cross Site Request Forgery.This issue affects PublishPress Revisions: from |
| CVE-2026-25323 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OSM: from n/a through <= 6.1.12. |
| CVE-2026-25324 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Contro |
| CVE-2026-25325 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Retrieve Em |
| CVE-2026-25326 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-c |
| CVE-2026-25329 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issu |
| CVE-2026-2533 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in Tosei Self-service Washing Machine 4.02. Impacted is an unknown function of the file /cgi-bin/tosei_datasend.php. Executing a manipulation of the argument |
| CVE-2026-25330 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PublishPress PublishPress Authors publishpress-authors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff |
| CVE-2026-25331 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows DOM-Based XSS.This issu |
| CVE-2026-25332 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-25333 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in peregrinethemes Shopwell shopwell allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopwell: from n |
| CVE-2026-25335 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Exploiting Incorrectly Configured Access Con |
| CVE-2026-25336 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wpcoachify Coachify coachify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coachify: from n/a th |
| CVE-2026-25337 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in wpcoachify Coachify coachify allows Cross Site Request Forgery.This issue affects Coachify: from n/a through <= 1.1.5. |
| CVE-2026-25338 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Exploiting Incorrectly Configured Access Control Se |
| CVE-2026-2534 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub_44AC4C of the file /cgi-bin/mbox-config?method=SET§ion=ptest_bandwidth. The |
| CVE-2026-25343 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS wp-sms allows DOM-Based XSS.This issue affects WP SMS: from |
| CVE-2026-25348 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in alttextai Download Alt Text AI alttext-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download |
| CVE-2026-2535 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. The impacted element is the function sub_44AB9C of the file /cgi-bin/mbox-config?method=SET§ion=ptest_channel. The manipu |
| CVE-2026-2536 | Deferred | 未確認 | CWE-610, CWE-611 | A vulnerability was determined in opencc JFlow up to 20260129. This affects the function Imp_Done of the file src/main/java/bp/wf/httphandler/WF_Admin_AttrFlow.java of the componen |
| CVE-2026-25362 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FooPlugins FooGallery foogallery allows Stored XSS.This issue affects FooGalle |
| CVE-2026-25363 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in FooPlugins FooGallery foogallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FooGallery: from |
| CVE-2026-25364 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This iss |
| CVE-2026-25367 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in NooTheme CitiLights noo-citilights allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CitiLights: fro |
| CVE-2026-25368 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a |
| CVE-2026-2537 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in Comfast CF-E4 2.6.0.1. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone of the component HTTP POS |
| CVE-2026-25370 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP |
| CVE-2026-25372 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kodezen LLC Academy LMS academy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Academy LMS: from |
| CVE-2026-25374 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Spa and Salon spa-and-salon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spa and Salo |
| CVE-2026-25375 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security |
| CVE-2026-25378 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Blind SQL Injection.Th |
| CVE-2026-2538 | Deferred | 未確認 | CWE-426, CWE-427 | A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Affected is an unknown function in the library Msimg32.dll. Performing a manipulation res |
| CVE-2026-25384 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-25385 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in KaizenCoders URL Shortify url-shortify allows Server Side Request Forgery.This issue affects URL Shortify: from n/a through <= 1 |
| CVE-2026-25386 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Elementor Ally pojo-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ally: from n/a t |
| CVE-2026-25387 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Elementor Image Optimizer by Elementor image-optimization allows Exploiting Incorrectly Configured Access Control Security Levels.This issue |
| CVE-2026-25388 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads Pro: from |
| CVE-2026-25389 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensi |
| CVE-2026-2539 | Deferred | 未確認 | CWE-319 | The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool (e.g., SDR) can capture the random nu |
| CVE-2026-25391 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Wand: fr |
| CVE-2026-25392 | Deferred | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in KaizenCoders Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress |
| CVE-2026-25393 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in sparklewpthemes Hello FSE hello-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hello FSE: fro |
| CVE-2026-25394 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in sparklewpthemes Fitness FSE fitness-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fitness FS |
| CVE-2026-25395 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ikreatethemes Business Roy business-roy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business R |
| CVE-2026-25399 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in CryoutCreations Serious Slider cryout-serious-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec |
| CVE-2026-2540 | Deferred | 未確認 | CWE-288, CWE-294 | The Micca KE700 system contains flawed resynchronization logic and is vulnerable to replay attacks. This attack requires sending two previously captured codes in a specific sequenc |
| CVE-2026-25402 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Con |
| CVE-2026-25404 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Ma |
| CVE-2026-25407 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in cookiebot Cookiebot cookiebot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cookiebot: from n/a |
| CVE-2026-25408 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-25409 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in crgeary JAMstack Deployments wp-jamstack-deployments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec |
| CVE-2026-2541 | Deferred | 未確認 | CWE-331 | The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing only 64 possible combinations. This low entropy allows an attac |
| CVE-2026-25410 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in tstephenson WP-CORS wp-cors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CORS: from n/a thro |
| CVE-2026-25411 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in themastercut Revision Manager TMC revision-manager-tmc allows Cross Site Request Forgery.This issue affects Revision Manager TMC: |
| CVE-2026-25412 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-25415 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in iqonicdesign WPBookit Pro wpbookit-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPBookit Pr |
| CVE-2026-25416 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-25418 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: f |
| CVE-2026-25419 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects U |
| CVE-2026-2542 | Deferred | 未確認 | CWE-426, CWE-428 | A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\Program Files\Total VPN\win-service.exe. |
| CVE-2026-25420 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af |
| CVE-2026-25421 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Collision with another CVE. | |
| CVE-2026-25422 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Themes4WP Popularis Extra popularis-extra allows Cross Site Request Forgery.This issue affects Popularis Extra: from n/a through |
| CVE-2026-25423 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-25428 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in totalsoft TS Poll poll-wp allows Server Side Request Forgery.This issue affects TS Poll: from n/a through <= 2.5.5. |
| CVE-2026-2543 | Deferred | 未確認 | CWE-620, CWE-640 | A vulnerability was identified in vichan-devel vichan up to 5.1.5. This vulnerability affects unknown code of the file inc/mod/pages.php of the component Password Change Handler. T |
| CVE-2026-25432 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipre |
| CVE-2026-2544 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0. This issue affects the function child_process.exec of the file run.js. The manipulation results in os command in |
| CVE-2026-25441 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LeadCo |
| CVE-2026-2545 | Analyzed | 未確認 | CWE-79, CWE-94 | A weakness has been identified in LigeroSmart up to 6.1.26. Impacted is an unknown function of the file /otrs/index.pl?Action=AgentTicketSearch. This manipulation of the argument P |
| CVE-2026-25451 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue af |
| CVE-2026-25453 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mdempfle Advanced iFrame advanced-iframe allows DOM-Based XSS.This issue affec |
| CVE-2026-25459 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in uixthemes Sober sober allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sober: from n/a through <= 3 |
| CVE-2026-2546 | Analyzed | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in LigeroSmart up to 6.1.26. The affected element is an unknown function of the file /otrs/index.pl. Such manipulation of the argument So |
| CVE-2026-25463 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpEstate Wpresidence Core wpresidence-core allows Stored XSS.This issue affect |
| CVE-2026-2547 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in LigeroSmart up to 6.1.26. The impacted element is the function AgentDashboard of the file /otrs/index.pl. Performing a manipulation of the argument |
| CVE-2026-25472 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Stored XSS.This issue affects |
| CVE-2026-25473 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through <= 1 |
| CVE-2026-25474 | Analyzed | 未確認 | CWE-345 | OpenClaw is a personal AI assistant. In versions 2026.1.30 and below, if channels.telegram.webhookSecret is not set when in Telegram webhook mode, OpenClaw may accept webhook HTTP |
| CVE-2026-25475 | Analyzed | 未確認 | CWE-200, CWE-22 | OpenClaw is a personal AI assistant. Prior to version 2026.1.30, the isValidMedia() function in src/media/parse.ts allows arbitrary file paths including absolute paths, home direct |
| CVE-2026-25476 | Analyzed | 未確認 | CWE-613 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the session expiration check in `library/auth.inc.p |
| CVE-2026-25478 | Analyzed | 未確認 | CWE-942 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, CORSConfig.allowed_origins_regex is constructed using a regex built from configured allowlis |
| CVE-2026-25479 | Analyzed | 未確認 | CWE-185 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, in litestar.middleware.allowed_hosts, allowlist entries are compiled into regex patterns in |
| CVE-2026-2548 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in WAYOS FBM-220G 24.10.19. This affects the function sub_40F820 of the file rc. Executing a manipulation of the argument upnp_waniface/upnp_ssdp_interval/upn |
| CVE-2026-25480 | Analyzed | 未確認 | CWE-176 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord() substituti |
| CVE-2026-25481 | Analyzed | 未確認 | CWE-94 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.59.32, there is a bypass to the fix for CVE-2025-46724. TableChatAgent can call p |
| CVE-2026-25482 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored DOM XSS vulnerability exists in the "Recent Orders" da |
| CVE-2026-25483 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability exists in Craft Commerce’s Order Sta |
| CVE-2026-25484 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, there is a Stored XSS via Product Type names. The name is not s |
| CVE-2026-25485 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers t |
| CVE-2026-25486 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. From version 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in |
| CVE-2026-25487 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers t |
| CVE-2026-25488 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers t |
| CVE-2026-25489 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers t |
| CVE-2026-2549 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in zhanghuanhao LibrarySystem 图书馆管理系统 up to 1.1.1. This impacts an unknown function of the file BookController.java. The manipulation leads to improp |
| CVE-2026-25490 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers t |
| CVE-2026-25491 | Analyzed | 未確認 | CWE-79 | Craft is a platform for creating digital experiences. From 5.0.0-RC1 to 5.8.21, Craft has a stored XSS via Entry Type names. The name is not sanitized when displayed in the Entry T |
| CVE-2026-25492 | Analyzed | 未確認 | CWE-918 | Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the save_images_Asset GraphQL mutation can be abused to fetch intern |
| CVE-2026-25493 | Analyzed | 未確認 | CWE-918 | Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the saveAsset GraphQL mutation validates the initial |
| CVE-2026-25494 | Analyzed | 未確認 | CWE-918 | Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the saveAsset GraphQL mutation uses filter_var(..., |
| CVE-2026-25495 | Analyzed | 未確認 | CWE-89 | Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the element-indexes/get-elements endpoint is vulnera |
| CVE-2026-25496 | Analyzed | 未確認 | CWE-79 | Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, a stored XSS vulnerability exists in the Number fiel |
| CVE-2026-25497 | Analyzed | 未確認 | CWE-639 | Craft is a platform for creating digital experiences. In Craft versions from 4.0.0-RC1 to before 4.17.0-beta.1 and 5.9.0-beta.1, there is a Privilege Escalation vulnerability in Cr |
| CVE-2026-25498 | Analyzed | 未確認 | CWE-470 | Craft is a platform for creating digital experiences. In versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, a Remote Code Execution (RCE) vulnerability exists in Craf |
| CVE-2026-25499 | Analyzed | 未確認 | CWE-1188, CWE-22 | Terraform / OpenTofu Provider adds support for Proxmox Virtual Environment. Prior to version 0.93.1, in the SSH configuration documentation, the sudoer line suggested is insecure a |
| CVE-2026-2550 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi. The manipulation results in unrestricted u |
| CVE-2026-25500 | Analyzed | 未確認 | CWE-79 | Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory` generates an HTML directory index where each file entry is rendered as a |
| CVE-2026-25501 | Analyzed | 未確認 | CWE-476 | free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics |
| CVE-2026-25502 | Analyzed | 未確認 | CWE-121, CWE-787 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, stack-based b |
| CVE-2026-25503 | Analyzed | 未確認 | CWE-704, CWE-843 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, type confusio |
| CVE-2026-25505 | Analyzed | 未確認 | CWE-306, CWE-321 | Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Prior to version 0.1.7, a hardcoded secret key used for signing JWTs is checked into source |
| CVE-2026-25506 | Modified | 未確認 | CWE-120, CWE-787 | MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE |
| CVE-2026-25507 | Analyzed | 未確認 | CWE-416 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a use-after-free vulnerability was reported in the BLE p |
| CVE-2026-25508 | Analyzed | 未確認 | CWE-125 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, an out-of-bounds read vulnerability was reported in the |
| CVE-2026-25509 | Analyzed | 未確認 | CWE-203, CWE-204 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, the authent |
| CVE-2026-2551 | Analyzed | 未確認 | CWE-22 | A vulnerability was determined in ZenTao up to 21.7.8. Affected by this vulnerability is the function delete of the file editor/control.php of the component Backup Handler. This ma |
| CVE-2026-25510 | Analyzed | 未確認 | CWE-434, CWE-94 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenti |
| CVE-2026-25511 | Analyzed | 未確認 | CWE-918 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, an authenticated user within the System Administr |
| CVE-2026-25512 | Analyzed | 未確認 | CWE-78 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, there is a remote code execution (RCE) vulnerabil |
| CVE-2026-25513 | Analyzed | 未確認 | CWE-1286, CWE-20, CWE-89, CWE-943 | FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection vulnerability in the |
| CVE-2026-25514 | Analyzed | 未確認 | CWE-20, CWE-89, CWE-943 | FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection vulnerability in the |
| CVE-2026-25516 | Analyzed | 未確認 | CWE-79 | NiceGUI is a Python-based UI framework. The ui.markdown() component uses the markdown2 library to convert markdown content to HTML, which is then rendered via innerHTML. By default |
| CVE-2026-25517 | Analyzed | 未確認 | CWE-862 | Wagtail is an open source content management system built on Django. Prior to versions 6.3.6, 7.0.4, 7.1.3, 7.2.2, and 7.3, due to a missing permission check on the preview endpoin |
| CVE-2026-25518 | Analyzed | 未確認 | CWE-129, CWE-704 | cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In |
| CVE-2026-25519 | Analyzed | 未確認 | CWE-284 | OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides suppo |
| CVE-2026-2552 | Analyzed | 未確認 | CWE-22 | A vulnerability was identified in ZenTao up to 21.7.8. Affected by this issue is the function delete of the file editor/control.php of the component Committer. Such manipulation of |
| CVE-2026-25520 | Analyzed | 未確認 | CWE-74 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, The return values of functions aren't wrapped. Object.values/Object.entries can be used to get an Array containing th |
| CVE-2026-25521 | Modified | 未確認 | CWE-1321, CWE-915 | Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. In versions from 2.0.12 to before 2.0.39, a prototype pollution vulnerability exists i |
| CVE-2026-25522 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers t |
| CVE-2026-25523 | Analyzed | 未確認 | CWE-200 | Magento-lts is a long-term support alternative to Magento Community Edition (CE). Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it's location |
| CVE-2026-25526 | Analyzed | 未確認 | CWE-1336 | JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3, JinJava is vulnerable to arbitrary Ja |
| CVE-2026-25527 | Analyzed | 未確認 | CWE-22 | changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<group>/<filename>` route accepts `group=".."`, which causes `sen |
| CVE-2026-25528 | Deferred | 未確認 | CWE-918 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. The LangSmith SDK's distributed tracing feature is vulnerable to Server-Side Request Forgery via ma |
| CVE-2026-2553 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the |
| CVE-2026-25530 | Analyzed | 未確認 | CWE-639 | Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated users t |
| CVE-2026-25531 | Analyzed | 未確認 | CWE-862 | Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects() en |
| CVE-2026-25532 | Analyzed | 未確認 | CWE-191 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vulnerability exists in the WPS (Wi-Fi Protected Setup |
| CVE-2026-25533 | Analyzed | 未確認 | CWE-835 | Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitizat |
| CVE-2026-25535 | Modified | 未確認 | CWE-400, CWE-770 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the `addImage` method results in denial of service. If given the possibilit |
| CVE-2026-25536 | Modified | 未確認 | CWE-362, CWE-367 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3, cross-client response data leak when a single McpSe |
| CVE-2026-25537 | Analyzed | 未確認 | CWE-843 | jsonwebtoken is a JWT lib in rust. Prior to version 10.3.0, there is a Type Confusion vulnerability in jsonwebtoken, specifically, in its claim validation logic. When a standard cl |
| CVE-2026-25538 | Analyzed | 未確認 | CWE-862 | Devtron is an open source tool integration platform for Kubernetes. In version 2.0.0 and prior, a vulnerability exists in Devtron's Attributes API interface, allowing any authentic |
| CVE-2026-25539 | Analyzed | 未確認 | CWE-22 | SiYuan is a personal knowledge management system. Prior to version 3.5.5, the /api/file/copyFile endpoint does not validate the dest parameter, allowing authenticated users to writ |
| CVE-2026-25540 | Analyzed | 未確認 | CWE-524 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via `Rails.cache. |
| CVE-2026-25541 | Analyzed | 未確認 | CWE-680 | Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of |
| CVE-2026-25543 | Analyzed | 未確認 | CWE-116, CWE-79 | HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. Prior to versions 9.0.892 and 9.1.893-beta, if the template |
| CVE-2026-25544 | Analyzed | 未確認 | CWE-89 | Payload is a free and open source headless content management system. Prior to 3.73.0, when querying JSON or richText fields, user input was directly embedded into SQL without esca |
| CVE-2026-25545 | Analyzed | 未確認 | CWE-918 | Astro is a web framework. Prior to version 9.5.4, Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerab |
| CVE-2026-25546 | Analyzed | 未確認 | CWE-78 | Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote |
| CVE-2026-25547 | Deferred | 未確認 | CWE-1333 | @isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service (DoS) issue cau |
| CVE-2026-25548 | Analyzed | 未確認 | CWE-117, CWE-94, CWE-98 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A critical Remote Code Execution (RCE) vulnerability exists in InvoicePlane 1.7. |
| CVE-2026-2555 | Analyzed | 未確認 | CWE-20, CWE-502 | A weakness has been identified in JeecgBoot 3.9.1. This vulnerability affects the function importDocumentFromZip of the file org/jeecg/modules/airag/llm/controller/AiragKnowledgeCo |
| CVE-2026-25554 | Deferred | 未確認 | CWE-89 | OpenSIPS versions 3.1 before 3.6.4 containing the auth_jwt module (prior to commit 3822d33) contain a SQL injection vulnerability in the jwt_db_authorize() function in modules/auth |
| CVE-2026-25556 | Analyzed | 未確認 | CWE-415 | MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an exception occurs during display list rendering. The function |
| CVE-2026-2556 | Analyzed | 未確認 | CWE-918 | A security vulnerability has been detected in cskefu up to 8.0.1. This issue affects some unknown processing of the file com/cskefu/cc/controller/resource/MediaController.java of t |
| CVE-2026-25560 | Analyzed | 未確認 | CWE-90 | WeKan versions prior to 8.19 contain an LDAP filter injection vulnerability in LDAP authentication. User-supplied username input is incorporated into LDAP search filters and DN-rel |
| CVE-2026-25561 | Analyzed | 未確認 | CWE-863 | WeKan versions prior to 8.19 contain an authorization weakness in the attachment upload API. The API does not fully validate that provided identifiers (such as boardId, cardId, swi |
| CVE-2026-25562 | Analyzed | 未確認 | CWE-203 | WeKan versions prior to 8.19 contain an information disclosure vulnerability in the attachments publication. Attachment metadata can be returned without properly scoping results to |
| CVE-2026-25563 | Analyzed | 未確認 | CWE-639 | WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checklist routes. The implementation does not verify that the supp |
| CVE-2026-25564 | Analyzed | 未確認 | CWE-639 | WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checklist routes. The implementation does not verify that the supp |
| CVE-2026-25565 | Analyzed | 未確認 | CWE-863 | WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This |
| CVE-2026-25566 | Analyzed | 未確認 | CWE-863 | WeKan versions prior to 8.19 contain an authorization vulnerability in card move logic. A user can specify a destination board/list/swimlane without adequate authorization checks f |
| CVE-2026-25567 | Analyzed | 未確認 | CWE-639 | WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in the card comment creation API. The endpoint accepts an authorId from the request body, allowing a |
| CVE-2026-25568 | Analyzed | 未確認 | CWE-863 | WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allowPrivateOnly is not sufficiently enforced at board creation t |
| CVE-2026-2557 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in cskefu up to 8.0.1. Impacted is the function Upload of the file com/cskefu/cc/controller/resource/MediaController.java of the component File Upload. |
| CVE-2026-25574 | Analyzed | 未確認 | CWE-639 | Payload is a free and open source headless content management system. Prior to 3.74.0, a cross-collection Insecure Direct Object Reference (IDOR) vulnerability exists in the payloa |
| CVE-2026-25575 | Analyzed | 未確認 | CWE-22, CWE-23, CWE-26 | NavigaTUM is a website and API to search for rooms, buildings and other places. Prior to commit 86f34c7, there is a path traversal vulnerability in the propose_edits endpoint allow |
| CVE-2026-25576 | Analyzed | 未確認 | CWE-122 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exist |
| CVE-2026-25577 | Deferred | 未確認 | CWE-248, CWE-307 | Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmett_core.http.wrappers.Request does not handle CookieError exception |
| CVE-2026-25578 | Analyzed | 未確認 | CWE-79, CWE-80 | Navidrome is an open source web-based music collection server and streamer. Prior to version 0.60.0, a cross-site scripting vulnerability in the frontend allows a malicious attacke |
| CVE-2026-25579 | Analyzed | 未確認 | CWE-400, CWE-770, CWE-789 | Navidrome is an open source web-based music collection server and streamer. Prior to version 0.60.0, authenticated users can crash the Navidrome server by supplying an excessively |
| CVE-2026-2558 | Deferred | 未確認 | CWE-918 | A flaw has been found in GeekAI up to 4.2.4. The affected element is the function Download of the file api/handler/net_handler.go. This manipulation of the argument url causes serv |
| CVE-2026-25580 | Modified | 未確認 | CWE-918 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability |
| CVE-2026-25581 | Analyzed | 未確認 | CWE-79 | SCEditor is a lightweight WYSIWYG BBCode and XHTML editor. Prior to 3.2.1, if an attacker has the ability control configuration options passed to sceditor.create(), like emoticons, |
| CVE-2026-25582 | Analyzed | 未確認 | CWE-119, CWE-122, CWE-787 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a he |
| CVE-2026-25583 | Analyzed | 未確認 | CWE-119, CWE-122, CWE-787 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a he |
| CVE-2026-25584 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787, CWE-788 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a st |
| CVE-2026-25585 | Analyzed | 未確認 | CWE-119, CWE-125, CWE-129, CWE-787 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a vu |
| CVE-2026-25586 | Analyzed | 未確認 | CWE-74 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, a sandbox escape is possible by shadowing hasOwnProperty on a sandbox object, which disables prototype whitelist enfo |
| CVE-2026-25587 | Analyzed | 未確認 | CWE-94 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, as Map is in SAFE_PROTOYPES, it's prototype can be obtained via Map.prototype. By overwriting Map.prototype.has the s |
| CVE-2026-25591 | Analyzed | 未確認 | CWE-943 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.10, a SQL LIKE wildcard injection vulnerabili |
| CVE-2026-25592 | Deferred | 未確認 | CWE-22 | Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Mi |
| CVE-2026-25593 | Analyzed | 未確認 | CWE-306, CWE-78 | OpenClaw is a personal AI assistant. Prior to 2026.1.20, an unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath |
| CVE-2026-25594 | Analyzed | 未確認 | CWE-79 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability exists in InvoicePlane 1.7.0 v |
| CVE-2026-25595 | Analyzed | 未確認 | CWE-79 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability exists in InvoicePlane 1.7.0 v |
| CVE-2026-25596 | Analyzed | 未確認 | CWE-79 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability exists in InvoicePlane 1.7.0 v |
| CVE-2026-25597 | Analyzed | 未確認 | CWE-208 | PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3, there is a time-based user enumeration vulnerability in the user authentication functionality of |
| CVE-2026-25598 | Analyzed | 未確認 | CWE-778 | Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Prior to 2.14.2, a security vulnerability has been identified in the Harden-Runner GitHub |
| CVE-2026-2560 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in kalcaddle kodbox up to 1.64.05. The impacted element is the function run of the file plugins/fileThumb/lib/VideoResize.class.php of the component |
| CVE-2026-25603 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be |
| CVE-2026-25609 | Analyzed | 未確認 | CWE-862 | Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only. |
| CVE-2026-2561 | Modified | 未確認 | CWE-266, CWE-269 | A vulnerability was found in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This affects the function web_get_ddns_uptime of the file /jdcapi of the component jdcweb_rpc. Performi |
| CVE-2026-25610 | Analyzed | 未確認 | CWE-617 | An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints. |
| CVE-2026-25611 | Deferred | 未確認 | CWE-405 | A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server. |
| CVE-2026-25612 | Deferred | 未確認 | CWE-412 | The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one |
| CVE-2026-25613 | Analyzed | 未確認 | CWE-704 | An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index. |
| CVE-2026-25614 | Analyzed | 未確認 | CWE-502 | Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680. |
| CVE-2026-25615 | Analyzed | 未確認 | CWE-502 | Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668. |
| CVE-2026-25616 | Analyzed | 未確認 | CWE-79 | Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665. |
| CVE-2026-2562 | Modified | 未確認 | CWE-266, CWE-269 | A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This impacts the function cast_streen of the file /jdcapi of the component jdcweb_rpc. Executing a |
| CVE-2026-25628 | Analyzed | 未確認 | CWE-73 | Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-con |
| CVE-2026-2563 | Modified | 未確認 | CWE-266, CWE-269 | A vulnerability was identified in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. Affected is the function set_stcreenen_deabled_status/get_status of the file /f/service/controlDev |
| CVE-2026-25630 | Rejected | 未確認 | Rejected reason: Reason: This candidate was issued in error. | |
| CVE-2026-25631 | Analyzed | 未確認 | CWE-20, CWE-522 | n8n is an open source workflow automation platform. Prior to 1.121.0, there is a vulnerability in the HTTP Request node's credential domain validation allowed an authenticated atta |
| CVE-2026-25632 | Analyzed | 未確認 | CWE-502 | EPyT-Flow is a Python package designed for the easy generation of hydraulic and water quality scenario data of water distribution networks. Prior to 0.16.1, EPyT-Flow’s REST API pa |
| CVE-2026-25633 | Analyzed | 未確認 | CWE-862 | Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permission to view assets are able are able to download them and v |
| CVE-2026-25634 | Analyzed | 未確認 | CWE-119, CWE-123, CWE-628, CWE-682, CWE-787 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4, SrcPixel and DestPixe |
| CVE-2026-25635 | Analyzed | 未確認 | CWE-22 | calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions |
| CVE-2026-25636 | Analyzed | 未確認 | CWE-22, CWE-73, CWE-94 | calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files wri |
| CVE-2026-25637 | Analyzed | 未確認 | CWE-401 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacke |
| CVE-2026-25638 | Analyzed | 未確認 | CWE-401 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, memory leak exists in `coders/msl.c`. In th |
| CVE-2026-25639 | Modified | 未確認 | CWE-1287, CWE-754 | Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing co |
| CVE-2026-2564 | Deferred | 未確認 | CWE-640 | A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulati |
| CVE-2026-25640 | Modified | 未確認 | CWE-22, CWE-79 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 to before 1.51.0, a path traversal vulnerability in the Pydantic AI |
| CVE-2026-25641 | Analyzed | 未確認 | CWE-367 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, there is a sandbox escape vulnerability due to a mismatch between the key on which the validation is performed and th |
| CVE-2026-25642 | Analyzed | 未確認 | CWE-79 | HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.6, files served below the /uploads/ endpoint did not use a more strict security-poli |
| CVE-2026-25643 | Analyzed | 未確認 | CWE-250, CWE-269, CWE-668, CWE-78 | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.4, a critical Remote Command Execution (RCE) vulnerability has been ide |
| CVE-2026-25644 | Analyzed | 未確認 | CWE-295 | DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in |
| CVE-2026-25646 | Modified | 未確認 | CWE-122, CWE-125, CWE-126 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read v |
| CVE-2026-25647 | Analyzed | 未確認 | CWE-79 | Lute is a structured Markdown engine supporting Go and JavaScript. Lute 1.7.6 and earlier (as used in SiYuan before) has a Stored Cross-Site Scripting (XSS) vulnerability in the Ma |
| CVE-2026-25648 | Analyzed | 未確認 | CWE-434, CWE-79 | Versions of the Traccar open-source GPS tracking system starting with 6.11.1 contain an issue in which authenticated users can execute arbitrary JavaScript in the context of other |
| CVE-2026-25649 | Analyzed | 未確認 | CWE-352, CWE-601 | Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users can steal OAuth 2.0 authorization codes by exploiti |
| CVE-2026-2565 | Analyzed | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Wavlink WL-NU516U1 20251208. Affected by this issue is the function sub_40785C of the file /cgi-bin/adm.cgi. This manipulation of the argument tim |
| CVE-2026-25650 | Analyzed | 未確認 | CWE-200 | MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Sale |
| CVE-2026-25651 | Analyzed | 未確認 | CWE-601 | client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an o |
| CVE-2026-25655 | Analyzed | 未確認 | CWE-427 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a configuration file by a low-privileged user. |
| CVE-2026-25656 | Modified | 未確認 | CWE-427 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper mo |
| CVE-2026-2566 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Wavlink WL-NU516U1 up to 130/260. This affects the function sub_406194 of the file /cgi-bin/adm.cgi. Such manipulation of the argument |
| CVE-2026-2567 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub_401218 of the file /cgi-bin/nas.cgi. Performing a manipulation of the argum |
| CVE-2026-25676 | Deferred | 未確認 | CWE-427 | The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code m |
| CVE-2026-25692 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25693 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25694 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25695 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25696 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25697 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25698 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-2570 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-25701 | Deferred | 未確認 | CWE-377 | An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like: * gain access to possible private i |
| CVE-2026-25711 | Modified | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementa |
| CVE-2026-25715 | Deferred | 未確認 | CWE-521 | The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the device permits authentication with empty cr |
| CVE-2026-25721 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting |
| CVE-2026-25722 | Analyzed | 未確認 | CWE-20, CWE-78 | Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. |
| CVE-2026-25723 | Analyzed | 未確認 | CWE-20, CWE-78 | Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using piped sed operations with the echo command, allowing attacker |
| CVE-2026-25724 | Modified | 未確認 | CWE-285, CWE-61 | Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic l |
| CVE-2026-25725 | Analyzed | 未確認 | CWE-501, CWE-668 | Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.json configuration file |
| CVE-2026-25727 | Analyzed | 未確認 | CWE-121 | time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of servic |
| CVE-2026-25728 | Analyzed | 未確認 | CWE-367 | ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #40, a Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability exists in ClipBucket's avatar and |
| CVE-2026-25729 | Analyzed | 未確認 | CWE-863 | DeepAudit is a multi-agent system for code vulnerability discovery. In 3.0.4 and earlier, there is an improper access control vulnerability in the /api/v1/users/ endpoint allows an |
| CVE-2026-25731 | Analyzed | 未確認 | CWE-1336 | calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templite templating engine allows arbitrary code execution when a u |
| CVE-2026-25732 | Analyzed | 未確認 | CWE-22 | NiceGUI is a Python-based UI framework. Prior to 3.7.0, NiceGUI's FileUpload.name property exposes client-supplied filename metadata without sanitization, enabling path traversal w |
| CVE-2026-25733 | Analyzed | 未確認 | CWE-1004, CWE-79 | Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38 |
| CVE-2026-25734 | Analyzed | 未確認 | CWE-1004, CWE-79 | Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38 |
| CVE-2026-25735 | Analyzed | 未確認 | CWE-1004, CWE-79 | Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38 |
| CVE-2026-25736 | Analyzed | 未確認 | CWE-1004, CWE-79 | Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38 |
| CVE-2026-25738 | Analyzed | 未確認 | CWE-367, CWE-918 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Versions prior to 3.3.10 are vulnerable to server-side request forg |
| CVE-2026-25739 | Analyzed | 未確認 | CWE-79 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Versions prior to 3.3.10 are vulnerable to cross-site scripting whe |
| CVE-2026-25740 | Deferred | 未確認 | CWE-250 | captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings. In 25.05 and earlier, when programs.captive-browser is enabled, any user |
| CVE-2026-25741 | Deferred | 未確認 | CWE-863 | Zulip is an open-source team collaboration tool. Prior to commit bf28c82dc9b1f630fa8e9106358771b20a0040f7, the API endpoint for creating a card update session during an upgrade flo |
| CVE-2026-25743 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, users with the "Forms administration" role can fill |
| CVE-2026-25746 | Analyzed | 未確認 | CWE-89 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 contain a SQL injection vulnerability in prescripti |
| CVE-2026-25747 | Modified | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component. The Camel-LevelDB DefaultLevelDBSerializer class deserializes data read from the LevelDB aggrega |
| CVE-2026-25748 | Analyzed | 未確認 | CWE-287 | authentik is an open-source identity provider. Prior to 2025.10.4 and 2025.12.4, with a malformed cookie it was possible to bypass authentication when using forward authentication |
| CVE-2026-25749 | Analyzed | 未確認 | CWE-122 | Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'help |
| CVE-2026-25751 | Analyzed | 未確認 | CWE-306, CWE-312 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An information disclosure vulnerability in FUXA allows an unauthenticated, remote attacker to retrieve sen |
| CVE-2026-25752 | Analyzed | 未確認 | CWE-862 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device |
| CVE-2026-25753 | Analyzed | 未確認 | CWE-259 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application uses a hard-coded, static default password for all newly created s |
| CVE-2026-25754 | Analyzed | 未確認 | CWE-1321 | AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a prototype pollution vulnerability in AdonisJS multipart form-data parsing may allow a re |
| CVE-2026-25755 | Modified | 未確認 | CWE-116, CWE-94 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of the `addJS` method allows an attacker to inject arbitrary PDF objects into the ge |
| CVE-2026-25757 | Analyzed | 未確認 | CWE-639 | Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 5.0.8, 5.1.10, 5.2.7, and 5.3.2, unauthenticated users can view completed guest orders by Or |
| CVE-2026-25758 | Analyzed | 未確認 | CWE-284, CWE-639 | Spree is an open source e-commerce solution built with Ruby on Rails. A critical IDOR vulnerability exists in Spree Commerce's guest checkout flow that allows any guest user to bin |
| CVE-2026-25759 | Analyzed | 未確認 | CWE-79 | Statmatic is a Laravel and Git powered content management system (CMS). From 6.0.0 to before 6.2.3, a stored XSS vulnerability in content titles allows authenticated users with con |
| CVE-2026-2576 | Deferred | 未確認 | CWE-89 | The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'payment' parameter in all versions up |
| CVE-2026-25760 | Analyzed | 未確認 | CWE-22 | Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.6.11, a path traversal in the website content subsystem lets an authenticated operator r |
| CVE-2026-25761 | Analyzed | 未確認 | CWE-77 | Super-linter is a combination of multiple linters to run as a GitHub Action or standalone. From 6.0.0 to 8.3.0, the Super-linter GitHub Action is vulnerable to command injection vi |
| CVE-2026-25762 | Analyzed | 未確認 | CWE-400, CWE-770 | AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a denial of service (DoS) vulnerability exists in the multipart file handling logic of @ad |
| CVE-2026-25763 | Analyzed | 未確認 | CWE-78 | OpenProject is an open-source, web-based project management software. Prior to versions 16.6.7 and 17.0.3, an arbitrary file write vulnerability exists in OpenProject’s repository |
| CVE-2026-25764 | Analyzed | 未確認 | CWE-80 | OpenProject is an open-source, web-based project management software. Prior to versions 16.6.7 and 17.0.3, an HTML injection vulnerability occurs in the time tracking function of O |
| CVE-2026-25765 | Analyzed | 未確認 | CWE-918 | Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Prior to 2.14.1, Faraday's build_exclusive_url method (in lib/faraday/conne |
| CVE-2026-25766 | Analyzed | 未確認 | CWE-22 | Echo is a Go web framework. In versions 5.0.0 through 5.0.2 on Windows, Echo’s `middleware.Static` using the default filesystem allows path traversal via backslashes, enabling unau |
| CVE-2026-25767 | Analyzed | 未確認 | CWE-863 | LavinMQ is a high-performance message queue & streaming server. Before 2.6.8, an authenticated user, with the “Policymaker” tag, could create shovels bypassing access controls. an |
| CVE-2026-25768 | Analyzed | 未確認 | CWE-862 | LavinMQ is a high-performance message queue & streaming server. Before 2.6.6, an authenticated user could access metadata in the broker they should not have access to. This vulnera |
| CVE-2026-2577 | Deferred | 未確認 | CWE-306 | The WhatsApp bridge component in Nanobot binds the WebSocket server to all network interfaces (0.0.0.0) on port 3001 by default and does not require authentication for incoming con |
| CVE-2026-25774 | Modified | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-25778 | Modified | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementa |
| CVE-2026-25785 | Analyzed | 未確認 | CWE-22 | Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 and earlier, which may allow an attacker to tamper with arbitrary file |
| CVE-2026-25791 | Analyzed | 未確認 | CWE-306, CWE-400 | Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener accepts unauthenticated TOTP bootstrap messages and allocates s |
| CVE-2026-25793 | Analyzed | 未確認 | CWE-347 | Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible to evade a blo |
| CVE-2026-25794 | Modified | 未確認 | CWE-122, CWE-190 | ImageMagick is free and open-source software used for editing and manipulating digital images. `WriteUHDRImage` in `coders/uhdr.c` uses `int` arithmetic to compute the pixel buffer |
| CVE-2026-25795 | Analyzed | 未確認 | CWE-476 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in `ReadSFWImage()` (`coders/sfw.c`), when |
| CVE-2026-25796 | Analyzed | 未確認 | CWE-401 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in `ReadSTEGANOImage()` (`coders/stegano.c` |
| CVE-2026-25797 | Analyzed | 未確認 | CWE-94 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing Post |
| CVE-2026-25798 | Analyzed | 未確認 | CWE-476 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCac |
| CVE-2026-25799 | Analyzed | 未確認 | CWE-369 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a logic error in YUV sampling factor valida |
| CVE-2026-25802 | Analyzed | 未確認 | CWE-79 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.9, a potential unsafe operation occurs in com |
| CVE-2026-25803 | Analyzed | 未確認 | CWE-798 | 3DP-MANAGER is an inbound generator for 3x-ui. In version 2.0.1 and prior, the application automatically creates an administrative account with known default credentials (admin/adm |
| CVE-2026-25804 | Analyzed | 未確認 | CWE-287, CWE-770 | Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arit |
| CVE-2026-25805 | Analyzed | 未確認 | CWE-356 | Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, when asking for allowance. Further it does not show after the t |
| CVE-2026-25806 | Analyzed | 未確認 | CWE-862 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the GET /api/students/:email PUT /api/students/:email/status, and DELETE /api/stud |
| CVE-2026-25807 | Analyzed | 未確認 | CWE-94 | ZAI Shell is an autonomous SysOps agent designed to navigate, repair, and secure complex environments. Prior to 9.0.3, the P2P terminal sharing feature (share start) opens a TCP so |
| CVE-2026-25808 | Analyzed | 未確認 | CWE-862 | Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and fol |
| CVE-2026-25809 | Analyzed | 未確認 | CWE-285 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not validate the assessment lifecycle state befo |
| CVE-2026-25810 | Analyzed | 未確認 | CWE-862 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/student.submission.routes.ts verify authentication but fail |
| CVE-2026-25811 | Analyzed | 未確認 | CWE-863 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application derives the tenant identifier directly from the email domain provi |
| CVE-2026-25812 | Analyzed | 未確認 | CWE-352 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS requests but does not implement any CSRF |
| CVE-2026-25813 | Analyzed | 未確認 | CWE-532 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs highly sensitive data directly to console output without mask |
| CVE-2026-25814 | Analyzed | 未確認 | CWE-74 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query parameters are passed directly into DynamoDB query/filter co |
| CVE-2026-25815 | Deferred | 未確認 | CWE-1394 | Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild from 2025-12-16 through 2026 (by default, |
| CVE-2026-25828 | Deferred | 未確認 | CWE-78 | grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because it does not sanitize the $root parameter to resolve_device( |
| CVE-2026-25837 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25838 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25839 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25840 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25841 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25842 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25843 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25844 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25845 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25846 | Analyzed | 未確認 | CWE-532 | In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs |
| CVE-2026-25847 | Analyzed | 未確認 | CWE-79 | In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible |
| CVE-2026-25848 | Analyzed | 未確認 | CWE-306 | In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible |
| CVE-2026-25851 | Modified | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenti |
| CVE-2026-25857 | Analyzed | 未確認 | CWE-78 | Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagnostic functionality (formSetWanDiag). The implementation con |
| CVE-2026-25858 | Modified | 未確認 | CWE-640 | macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenticated attacker to reset arbitra |
| CVE-2026-25859 | Analyzed | 未確認 | CWE-863 | Wekan versions prior to 8.20 allow non-administrative users to access migration functionality due to insufficient permission checks, potentially resulting in unauthorized migration |
| CVE-2026-25868 | Analyzed | 未確認 | CWE-79 | MiniGal Nano version 0.3.5 and prior contain a reflected cross-site scripting (XSS) vulnerability in index.php via the dir parameter. The application constructs $currentdir from us |
| CVE-2026-25869 | Analyzed | 未確認 | CWE-22 | MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The application appends user-controlled input to the photos directo |
| CVE-2026-25870 | Deferred | 未確認 | CWE-918 | DoraCMS version 3.1 and prior contains a server-side request forgery (SSRF) vulnerability in its UEditor remote image fetch functionality. The application accepts user-supplied URL |
| CVE-2026-25872 | Deferred | 未確認 | CWE-22 | JUNG Smart Panel KNX firmware version L1.12.22 and prior contain an unauthenticated path traversal vulnerability in the embedded web interface. The application fails to properly va |
| CVE-2026-25875 | Analyzed | 未確認 | CWE-863 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The admin authorization middleware trusts client-controlled JWT claims (role and s |
| CVE-2026-25876 | Analyzed | 未確認 | CWE-862 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/results.routes.ts verify authentication but fails to enforc |
| CVE-2026-25878 | Analyzed | 未確認 | CWE-306 | FroshAdminer is the Adminer plugin for Shopware Platform. Prior to 2.2.1, the Adminer route (/admin/adminer) was accessible without Shopware admin authentication. The route was con |
| CVE-2026-2588 | Analyzed | 未確認 | CWE-190 | Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length p |
| CVE-2026-25880 | Analyzed | 未確認 | CWE-426 | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious binary (explorer.exe) located in the same directory as the ope |
| CVE-2026-25881 | Analyzed | 未確認 | CWE-1321 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.31, a sandbox escape vulnerability allows sandboxed code to mutate host built-in prototypes by laundering the isGlobal pr |
| CVE-2026-25882 | Analyzed | 未確認 | CWE-129 | Fiber is an Express inspired web framework written in Go. A denial of service vulnerability exists in Fiber v2 and v3 that allows remote attackers to crash the application by sendi |
| CVE-2026-25885 | Analyzed | 未確認 | CWE-285, CWE-306 | PolarLearn is a free and open-source learning program. In 0-PRERELEASE-16 and earlier, the group chat WebSocket at wss://polarlearn.nl/api/v1/ws can be used without logging in. An |
| CVE-2026-25889 | Analyzed | 未確認 | CWE-178 | File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivi |
| CVE-2026-25890 | Analyzed | 未確認 | CWE-706, CWE-863 | File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, an authenticated |
| CVE-2026-25891 | Analyzed | 未確認 | CWE-22 | Fiber is an Express inspired web framework written in Go. A Path Traversal (CWE-22) vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and re |
| CVE-2026-25892 | Analyzed | 未確認 | CWE-20 | Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via JavaScript postMessage |
| CVE-2026-25893 | Analyzed | 未確認 | CWE-285, CWE-287 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker |
| CVE-2026-25894 | Analyzed | 未確認 | CWE-1188, CWE-321 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An insecure default configuration in FUXA allows an unauthenticated, remote attacker to gain administrativ |
| CVE-2026-25895 | Analyzed | 未確認 | CWE-22, CWE-306 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows an unauthenticated, remote attacker to write arbitrary files |
| CVE-2026-25896 | Modified | 未確認 | CWE-185, CWE-79 | fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. From 4.1.3to before 5.3.5, a dot (. |
| CVE-2026-25897 | Analyzed | 未確認 | CWE-122, CWE-190 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, an Integer Overflow vulnerability exists in |
| CVE-2026-25898 | Analyzed | 未確認 | CWE-125 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the UIL and XPM image encoder do not valida |
| CVE-2026-25899 | Analyzed | 未確認 | CWE-770, CWE-789 | Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the `fiber_flash` cookie can force an unbounded allocation on any |
| CVE-2026-25903 | Analyzed | 未確認 | CWE-862 | Apache NiFi 1.1.0 through 2.7.2 are missing authorization when updating configuration properties on extension components that have specific Required Permissions based on the Restri |
| CVE-2026-25904 | Deferred | 未確認 | CWE-918 | The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of |
| CVE-2026-25905 | Deferred | 未確認 | CWE-653 | The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any Python code to use the Pyodide APIs to modify the JS environ |
| CVE-2026-25916 | Deferred | 未確認 | CWE-420 | Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage. |
| CVE-2026-25918 | Analyzed | 未確認 | CWE-532 | unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintex |
| CVE-2026-2592 | Deferred | 未確認 | CWE-284 | The Zarinpal Gateway for WooCommerce plugin for WordPress is vulnerable to Improper Access Control to Payment Status Update in all versions up to and including 5.0.16. This is due |
| CVE-2026-25920 | Analyzed | 未確認 | CWE-125 | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in SumatraPDF's MOBI HuffDic decompressor. The bounds check in |
| CVE-2026-25922 | Analyzed | 未確認 | CWE-287, CWE-347 | authentik is an open-source identity provider. Prior to 2025.8.6, 2025.10.4, and 2025.12.4, when using a SAML Source that has the option Verify Assertion Signature under Verificati |
| CVE-2026-25923 | Analyzed | 未確認 | CWE-434, CWE-502 | my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// prot |
| CVE-2026-25924 | Analyzed | 未確認 | CWE-863 | Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a security control bypass vulnerability in Kanboard allows an authenticated administrator to |
| CVE-2026-25925 | Analyzed | 未確認 | CWE-502 | PowerDocu contains a Windows GUI executable to perform technical documentations. Prior to 2.4.0, PowerDocu contains a critical security vulnerability in how it parses JSON files wi |
| CVE-2026-25926 | Analyzed | 未確認 | CWE-426 | Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability (CWE-426) exists in versions prior to 8.9.2 when launching Windows Explorer without an a |
| CVE-2026-25927 | Analyzed | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the DICOM viewer state API (e.g. upload or state s |
| CVE-2026-25929 | Analyzed | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the document controller’s `patient_picture` context |
| CVE-2026-25930 | Analyzed | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Layout-Based Form (LBF) printable view accepts |
| CVE-2026-25931 | Deferred | 未確認 | CWE-276, CWE-807, CWE-829 | vscode-spell-checker is a basic spell checker that works well with code and documents. Prior to v4.5.4, DocumentSettings._determineIsTrusted treats the configuration value cSpell.t |
| CVE-2026-25933 | Analyzed | 未確認 | CWE-78 | Arduino App Lab is a cross-platform IDE for developing Arduino Apps. Prior to 0.4.0, a vulnerability was identified in the Terminal component of the arduino-app-lab application. Th |
| CVE-2026-25934 | Analyzed | 未確認 | CWE-354 | go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and . |
| CVE-2026-25935 | Analyzed | 未確認 | CWE-79, CWE-80 | Vikunja is a todo-app to organize your life. Prior to 1.1.0, TaskGlanceTooltip.vue temporarily creates a div and sets the innerHtml to the description. Since there is no escaping o |
| CVE-2026-25938 | Analyzed | 未確認 | CWE-290, CWE-306 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remot |
| CVE-2026-25939 | Analyzed | 未確認 | CWE-862 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authorization bypass vulnerability in the FUXA allows an unauthenti |
| CVE-2026-25940 | Modified | 未確認 | CWE-116 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such |
| CVE-2026-25941 | Analyzed | 未確認 | CWE-125, CWE-20 | FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vuln |
| CVE-2026-25942 | Analyzed | 未確認 | CWE-125 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_code_names[]` array (7 elements, |
| CVE-2026-25945 | Modified | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial |
| CVE-2026-25947 | Analyzed | 未確認 | CWE-89 | Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task |
| CVE-2026-25949 | Modified | 未確認 | CWE-400, CWE-770 | Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated client can bypass T |
| CVE-2026-25950 | Rejected | 未確認 | Rejected reason: Further research determined the issue is not a vulnerability. | |
| CVE-2026-25951 | Analyzed | 未確認 | CWE-184, CWE-22, CWE-23 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.11, there is a flaw in the path sanitization logic allows an authenticated attacker with admi |
| CVE-2026-25952 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_w |
| CVE-2026-25953 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWindow` because the RDPGFX DVC th |
| CVE-2026-25954 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAppWindow` pointer because `xf_ra |
| CVE-2026-25955 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` whose `data` pointer references a |
| CVE-2026-25956 | Analyzed | 未確認 | CWE-601, CWE-79 | Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redire |
| CVE-2026-25957 | Analyzed | 未確認 | CWE-755 | Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make the entire Cube API unavailable by submitting a specially cr |
| CVE-2026-25958 | Analyzed | 未確認 | CWE-807 | Cube is a semantic layer for building data applications. From 0.27.19 to before 1.5.13, 1.4.2, and 1.0.14, it is possible to make a specially crafted request with a valid API token |
| CVE-2026-25959 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` because the cliprd |
| CVE-2026-25961 | Analyzed | 未確認 | CWE-295, CWE-494 | SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS hostname verification (INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and |
| CVE-2026-25963 | Analyzed | 未確認 | CWE-863 | Fleet is open source device management software. In versions prior to 4.80.1, a broken authorization check in Fleet’s certificate template deletion API could allow a team administr |
| CVE-2026-25964 | Analyzed | 未確認 | CWE-22, CWE-73 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, a Path Traversal vulnerability in the RecipeImport workflow of |
| CVE-2026-25965 | Modified | 未確認 | CWE-22 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick’s path security policy is enfor |
| CVE-2026-25966 | Analyzed | 未確認 | CWE-284 | ImageMagick is free and open-source software used for editing and manipulating digital images. The shipped "secure" security policy includes a rule intended to prevent reading/writ |
| CVE-2026-25967 | Analyzed | 未確認 | CWE-121, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a stack-based buffer overflow exists in the ImageMagick FT |
| CVE-2026-25968 | Analyzed | 未確認 | CWE-121, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when process |
| CVE-2026-25969 | Analyzed | 未確認 | CWE-401 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in `coders/ashlar.c`. The `WriteASHLA |
| CVE-2026-2597 | Analyzed | 未確認 | CWE-122, CWE-1284 | Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function random_bytes(). The function does not validate that the length param |
| CVE-2026-25970 | Analyzed | 未確認 | CWE-190 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a signed integer overflow vulnerability in |
| CVE-2026-25971 | Analyzed | 未確認 | CWE-674, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular referenc |
| CVE-2026-25973 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25974 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25975 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25976 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25977 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25978 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25979 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25980 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25981 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-25982 | Analyzed | 未確認 | CWE-125 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds read vulnerability exi |
| CVE-2026-25983 | Analyzed | 未確認 | CWE-416 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-af |
| CVE-2026-25984 | Rejected | 未確認 | Rejected reason: This CVE was assigned in error. | |
| CVE-2026-25985 | Modified | 未確認 | CWE-770, CWE-789 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious |
| CVE-2026-25986 | Analyzed | 未確認 | CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer overflow write vulnerability |
| CVE-2026-25987 | Analyzed | 未確認 | CWE-125 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exist |
| CVE-2026-25988 | Analyzed | 未確認 | CWE-401 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, sometimes msl.c fails to update the stack i |
| CVE-2026-25989 | Analyzed | 未確認 | CWE-190, CWE-193, CWE-681 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can cause a denial of se |
| CVE-2026-25990 | Modified | 未確認 | CWE-787 | Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in |
| CVE-2026-25991 | Analyzed | 未確認 | CWE-918 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, there is a Blind Server-Side Request Forgery (SSRF) vulnerabili |
| CVE-2026-25992 | Analyzed | 未確認 | CWE-22 | SiYuan is a personal knowledge management system. Prior to 3.5.5, the /api/file/getFile endpoint uses case-sensitive string equality checks to block access to sensitive files. On c |
| CVE-2026-25993 | Analyzed | 未確認 | CWE-89 | EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / request_path values—derived from the url_key st |
| CVE-2026-25994 | Analyzed | 未確認 | CWE-120 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when processing cre |
| CVE-2026-25996 | Analyzed | 未確認 | CWE-150 | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in colu |
| CVE-2026-25997 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` memory because `xf_clipboard_for |
| CVE-2026-25998 | Analyzed | 未確認 | CWE-1204, CWE-323 | strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database (private keys, EAP secrets), strongMan encrypts the corr |
| CVE-2026-25999 | Analyzed | 未確認 | CWE-285 | Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to 2.10.2, there is an improper access control vulnerability that allows unauthorized users to tr |
| CVE-2026-26000 | Analyzed | 未確認 | CWE-1021 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0, 17.4.6, and 16.10.13, it's possible using comments to inje |
| CVE-2026-26003 | Analyzed | 未確認 | CWE-601 | FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby thre |
| CVE-2026-26005 | Analyzed | 未確認 | CWE-918 | ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #45, in Clip Bucket V5, The Remote Play allows creating video entries that reference external video URLs wi |
| CVE-2026-26006 | Analyzed | 未確認 | CWE-1333 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. The autogpt before 0.6.32 is vulner |
| CVE-2026-26007 | Modified | 未確認 | CWE-345, CWE-354 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers. |
| CVE-2026-26009 | Deferred | 未確認 | CWE-78 | Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install scripts defined in server templates execute directly on the |
| CVE-2026-26010 | Analyzed | 未確認 | CWE-269 | OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / |
| CVE-2026-26011 | Analyzed | 未確認 | CWE-122, CWE-787 | navigation2 is a ROS 2 Navigation Framework and System. In 1.3.11 and earlier, a critical heap out-of-bounds write vulnerability exists in Nav2 AMCL's particle filter clustering lo |
| CVE-2026-26012 | Analyzed | 未確認 | CWE-863 | vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.3, a regular organization member can retrieve all ciphers wi |
| CVE-2026-26013 | Analyzed | 未確認 | CWE-918 | LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.get_num_tokens_from_messages() method fetches arbitrary image_url values |
| CVE-2026-26014 | Analyzed | 未確認 | CWE-200 | Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which m |
| CVE-2026-26016 | Analyzed | 未確認 | CWE-283, CWE-639 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.12.1, a missing authorization check in multiple controllers |
| CVE-2026-26019 | Analyzed | 未確認 | CWE-918 | LangChain is a framework for building LLM-powered applications. Prior to 1.1.14, the RecursiveUrlLoader class in @langchain/community is a web crawler that recursively follows link |
| CVE-2026-26020 | Analyzed | 未確認 | CWE-285 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.48, an authenticated u |
| CVE-2026-26021 | Analyzed | 未確認 | CWE-1321 | set-in provides the set value of nested associative structure given array of keys. A prototype pollution vulnerability exists in the the npm package set-in (>=2.0.1, < 2.0.5). Desp |
| CVE-2026-26023 | Analyzed | 未確認 | CWE-79 | Dify is an open-source LLM app development platform. Prior to 1.13.0, a cross site scripting vulnerability has been found in the web application chat frontend when using echarts. U |
| CVE-2026-26024 | Analyzed | 未確認 | CWE-476 | free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics |
| CVE-2026-26025 | Analyzed | 未確認 | CWE-476 | free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics |
| CVE-2026-26029 | Deferred | 未確認 | CWE-78 | sf-mcp-server is an implementation of Salesforce MCP server for Claude for Desktop. A command injection vulnerability exists in sf-mcp-server due to unsafe use of child_process.exe |
| CVE-2026-26030 | Analyzed | 未確認 | CWE-94 | Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemoryVectorStore` filter |
| CVE-2026-26031 | Analyzed | 未確認 | CWE-863 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.44.0, security issue was identified in Frappe Learning, where unau |
| CVE-2026-26036 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26037 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26038 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26039 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26040 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26041 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26042 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26043 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26044 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26045 | Analyzed | 未確認 | CWE-94 | A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is res |
| CVE-2026-26046 | Analyzed | 未確認 | CWE-78 | A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX |
| CVE-2026-26047 | Analyzed | 未確認 | CWE-400, CWE-770 | A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially |
| CVE-2026-26048 | Deferred | 未確認 | CWE-306 | The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing forged deauthentication and disassociation frames to be br |
| CVE-2026-26049 | Deferred | 未確認 | CWE-522 | The web management interface of the device renders the passwords in a plaintext input field. The current password is directly visible to anyone with access to the UI, potentially |
| CVE-2026-2605 | Analyzed | 未確認 | CWE-532 | Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS. |
| CVE-2026-26050 | Deferred | 未確認 | CWE-427 | The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Librari |
| CVE-2026-26055 | Analyzed | 未確認 | CWE-306 | Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) component of Yoke. The ATC |
| CVE-2026-26056 | Analyzed | 未確認 | CWE-94 | Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) component of Yoke. It allow |
| CVE-2026-26057 | Analyzed | 未確認 | CWE-668 | Skill Scanner is a security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. A vulnerability in the API Server of Skill Sc |
| CVE-2026-26059 | Analyzed | 未確認 | CWE-79 | ChurchCRM is an open-source church management system. In versions prior to 6.8.2, it was possible for an authenticated user with permission to edit groups to store a JavaScript pay |
| CVE-2026-26063 | Deferred | 未確認 | CWE-20 | CediPay is a crypto-to-fiat app for the Ghanaian market. A vulnerability in CediPay prior to version 1.2.3 allows attackers to bypass input validation in the transaction API. The i |
| CVE-2026-26064 | Analyzed | 未確認 | CWE-22 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below contain a Path Traversal vulnerability that allows arb |
| CVE-2026-26065 | Analyzed | 未確認 | CWE-22 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below are vulnerable to Path Traversal through PDB readers ( |
| CVE-2026-26066 | Analyzed | 未確認 | CWE-400, CWE-835 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data |
| CVE-2026-26068 | Analyzed | 未確認 | CWE-77, CWE-78 | emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata (Transport, Hostname) is accepted during check-in and late |
| CVE-2026-26069 | Analyzed | 未確認 | CWE-200 | Scraparr is a Prometheus Exporter for various components of the *arr Suite. From 3.0.0-beta to before 3.0.2, when the Readarr integration was enabled, the exporter exposed the conf |
| CVE-2026-26075 | Analyzed | 未確認 | CWE-352 | FastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. need to initiate data acquisition requests from the server, th |
| CVE-2026-26076 | Analyzed | 未確認 | CWE-770 | ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker can remotely induce moderate increases (2-4 times above normal) in cpu usage. Wh |
| CVE-2026-26077 | Analyzed | 未確認 | CWE-287 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, several webhook endpoints (SendGrid, Mailjet, Mandrill, Postmark, SparkPost) i |
| CVE-2026-26078 | Analyzed | 未確認 | CWE-639 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, when the `patreon_webhook_secret` site setting is blank, an attacker can forge |
| CVE-2026-26079 | Deferred | 未確認 | CWE-829 | Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because comments are mishandled. |
| CVE-2026-2608 | Deferred | 未確認 | CWE-862 | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all vers |
| CVE-2026-26085 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26086 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26087 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26088 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26089 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26090 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26091 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26092 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26093 | Analyzed | 未確認 | CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request. |
| CVE-2026-26095 | Analyzed | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request. |
| CVE-2026-26096 | Analyzed | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request. |
| CVE-2026-26097 | Analyzed | 未確認 | CWE-427 | Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request. |
| CVE-2026-26098 | Analyzed | 未確認 | CWE-427 | Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request. |
| CVE-2026-26099 | Analyzed | 未確認 | CWE-427 | Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request. |
| CVE-2026-26100 | Analyzed | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request. |
| CVE-2026-26101 | Analyzed | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request. |
| CVE-2026-26102 | Analyzed | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request. |
| CVE-2026-26103 | Modified | 未確認 | CWE-862 | A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue al |
| CVE-2026-26104 | Modified | 未確認 | CWE-862 | A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privile |
| CVE-2026-26119 | Analyzed | 未確認 | CWE-287 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-2615 | Analyzed | 未確認 | CWE-74, CWE-77 | A flaw has been found in Wavlink WL-NU516U1 up to 20251208. The affected element is the function singlePortForwardDelete of the file /cgi-bin/firewall.cgi. Executing a manipulation |
| CVE-2026-26157 | Deferred | 未確認 | CWE-73 | A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific |
| CVE-2026-26158 | Deferred | 未確認 | CWE-73 | A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction directory by crafting a malicious tar archive containing unval |
| CVE-2026-2616 | Analyzed | 未確認 | CWE-259, CWE-798 | A vulnerability has been found in Beetel 777VR1 up to 01.00.09. The impacted element is an unknown function of the component Web Management Interface. The manipulation leads to har |
| CVE-2026-2617 | Analyzed | 未確認 | CWE-1188 | A vulnerability was found in Beetel 777VR1 up to 01.00.09. This affects an unknown function of the component Telnet Service/SSH Service. The manipulation results in insecure defaul |
| CVE-2026-2618 | Analyzed | 未確認 | CWE-310, CWE-327 | A vulnerability was determined in Beetel 777VR1 up to 01.00.09. This impacts an unknown function of the component SSH Service. This manipulation causes risky cryptographic algorith |
| CVE-2026-26185 | Analyzed | 未確認 | CWE-203 | Directus is a real-time API and App dashboard for managing SQL database content. Before 11.14.1, a timing-based user enumeration vulnerability exists in the password reset function |
| CVE-2026-26186 | Analyzed | 未確認 | CWE-89 | Fleet is open source device management software. A SQL injection vulnerability in versions prior to 4.80.1 allowed authenticated users to inject arbitrary SQL expressions via the ` |
| CVE-2026-26187 | Analyzed | 未確認 | CWE-22 | lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to 1.77.0, the local block adapter (pkg/block/local/adapter.go) allows authenticate |
| CVE-2026-26188 | Analyzed | 未確認 | CWE-79 | Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. An authenticated, low-privilege user (able to create/edit forms) can inject arbitrary HTML/JS int |
| CVE-2026-26189 | Analyzed | 未確認 | CWE-78 | Trivy Action runs Trivy as GitHub action to scan a Docker container image for vulnerabilities. A command injection vulnerability exists in `aquasecurity/trivy-action` versions 0.31 |
| CVE-2026-26190 | Analyzed | 未確認 | CWE-306 | Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication byp |
| CVE-2026-26192 | Analyzed | 未確認 | CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.7.0, aanually modifying chat history allows setting the `html` |
| CVE-2026-26193 | Analyzed | 未確認 | CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.44, aanually modifying chat history allows setting the `embe |
| CVE-2026-26198 | Analyzed | 未確認 | CWE-89 | Ormar is a async mini ORM for Python. In versions 0.9.9 through 0.22.0, when performing aggregate queries, Ormar ORM constructs SQL expressions by passing user-supplied column name |
| CVE-2026-2620 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Huace Monitoring and Early Warning System 2.2. Affected by this issue is some unknown functionality of the file /Web/SysManage/ProjectRole.aspx. E |
| CVE-2026-26200 | Modified | 未確認 | CWE-122, CWE-131, CWE-787 | HDF5 is software for managing data. Prior to version 1.14.4-2, an attacker who can control an `h5` file parsed by HDF5 can trigger a write-based heap buffer overflow condition. Thi |
| CVE-2026-26201 | Analyzed | 未確認 | CWE-362, CWE-663 | emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Und |
| CVE-2026-26202 | Analyzed | 未確認 | CWE-22, CWE-73 | Penpot is an open-source design tool for design and code collaboration. Prior to version 2.13.2, an authenticated user can read arbitrary files from the server by supplying a local |
| CVE-2026-26203 | Analyzed | 未確認 | CWE-416 | PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug oc |
| CVE-2026-26205 | Deferred | 未確認 | CWE-863 | opa-envoy-plugun is a plugin to enforce OPA policies with Envoy. Versions prior to 1.13.2-envoy-2 have a vulnerability in how the `input.parsed_path` field is constructed. HTTP req |
| CVE-2026-26207 | Analyzed | 未確認 | CWE-862 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, `discourse-policy` plugin allows any authenticated user to interact with polic |
| CVE-2026-26208 | Deferred | 未確認 | CWE-502 | ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserialization leading to Remote Code Execution. The application at |
| CVE-2026-2621 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in Sciyon Koyuan Thermoelectricity Heat Network Management System 3.0. This affects an unknown part of the file /SISReport/WebReport20/Pr |
| CVE-2026-26214 | Deferred | 未確認 | CWE-297 | Galaxy FDS Android SDK (XiaoMi/galaxy-fds-sdk-android) version 3.0.8 and prior disable TLS hostname verification when HTTPS is enabled (the default configuration). In GalaxyFDSClie |
| CVE-2026-26215 | Deferred | 未確認 | CWE-502 | manga-image-translator version beta-0.3 and prior in shared API mode contains an unsafe deserialization vulnerability that can lead to unauthenticated remote code execution. The Fa |
| CVE-2026-26216 | Analyzed | 未確認 | CWE-94 | Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code th |
| CVE-2026-26217 | Analyzed | 未確認 | CWE-22 | Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment. The /execute_js, /screenshot, /pdf, and /html endpoints accept file:// U |
| CVE-2026-26218 | Analyzed | 未確認 | CWE-798 | newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisioned with a predictable default password. Deployments that i |
| CVE-2026-26219 | Analyzed | 未確認 | CWE-327 | newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm. The implementation does not incorporate per-user salts or computational cost controls, enabl |
| CVE-2026-2622 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Blossom up to 1.17.1. This vulnerability affects the function content of the file blossom-backend/backend/src/main/java/com/blossom/backend/server/a |
| CVE-2026-26220 | Deferred | 未確認 | CWE-502 | LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution vulnerability in PD (prefill-decode) disaggregation mode. The PD master node exposes WebSocket end |
| CVE-2026-26221 | Deferred | 未確認 | CWE-502 | Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe). An attacker who can reach the service ca |
| CVE-2026-26222 | Analyzed | 未確認 | CWE-502, CWE-918 | Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the Object |
| CVE-2026-26223 | Modified | 未確認 | CWE-79 | SPIP before 4.4.8 allows cross-site scripting (XSS) in the private area via malicious iframe tags. The application does not properly sandbox or escape iframe content in the back-of |
| CVE-2026-26224 | Deferred | 未確認 | CWE-367 | Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and application logs for support analysis, contains a local privilege esc |
| CVE-2026-26225 | Deferred | 未確認 | CWE-59 | Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup |
| CVE-2026-26226 | Deferred | 未確認 | CWE-79 | beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to cross-site scripting (XSS) when rendering attacker-controlled Mermaid diagrams. |
| CVE-2026-26227 | Deferred | 未確認 | CWE-307 | VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time passw |
| CVE-2026-26228 | Deferred | 未確認 | CWE-22, CWE-73 | VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file q |
| CVE-2026-2623 | Analyzed | 未確認 | CWE-22 | A flaw has been found in Blossom up to 1.17.1. This issue affects the function put of the file blossom-backend/common/common-iaas/src/main/java/com/blossom/common/iaas/blos/BLOSMan |
| CVE-2026-26234 | Analyzed | 未確認 | CWE-644 | JUNG Smart Visu Server 1.1.1050 contains a request header manipulation vulnerability that allows unauthenticated attackers to override request URLs by injecting arbitrary values in |
| CVE-2026-26235 | Analyzed | 未確認 | CWE-306 | JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a sin |
| CVE-2026-2624 | Modified | 未確認 | CWE-306 | Missing Authentication for Critical Function vulnerability in ePati Cyber Security Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass. This i |
| CVE-2026-26249 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26250 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26251 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26252 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26253 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26254 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26255 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26256 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26257 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26264 | Analyzed | 未確認 | CWE-125 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigger a length underflow |
| CVE-2026-26265 | Analyzed | 未確認 | CWE-639, CWE-863 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, an IDOR vulnerability in the directory items endpoint allows any user, includi |
| CVE-2026-26267 | Analyzed | 未確認 | CWE-670 | soroban-sdk is a Rust SDK for Soroban contracts. Prior to versions 22.0.10, 23.5.2, and 25.1.1, the `#[contractimpl]` macro contains a bug in how it wires up function calls. `#[con |
| CVE-2026-26268 | Analyzed | 未確認 | CWE-862 | Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection) |
| CVE-2026-26269 | Analyzed | 未確認 | CWE-121 | Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys comma |
| CVE-2026-2627 | Deferred | 未確認 | CWE-59 | A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\Program Files\Common Files\microsoft shared\ink\HID.dll of the |
| CVE-2026-26270 | Analyzed | 未確認 | CWE-79 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability exists in InvoicePlane (latest |
| CVE-2026-26271 | Analyzed | 未確認 | CWE-126 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_image_copy_from_icon_data()` (libfreerdp/codec/color.c) can |
| CVE-2026-26273 | Analyzed | 未確認 | CWE-200, CWE-640 | Known is a social publishing platform. Prior to 1.6.3, a Critical Broken Authentication vulnerability exists in Known 1.6.2 and earlier. The application leaks the password reset to |
| CVE-2026-26275 | Analyzed | 未確認 | CWE-354, CWE-697 | httpsig-hyper is a hyper extension for http message signatures. An issue was discovered in `httpsig-hyper` prior to version 0.0.23 where Digest header verification could incorrectl |
| CVE-2026-26278 | Modified | 未確認 | CWE-776 | fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 4.1.3 through 5.3.5, th |
| CVE-2026-26280 | Modified | 未確認 | CWE-78 | systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the `wifiNetworks()` function allows an atta |
| CVE-2026-26281 | Analyzed | 未確認 | CWE-79 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A stored cross-site scripting (XSS) vulnerability in the Sumex invoice view allo |
| CVE-2026-26282 | Analyzed | 未確認 | CWE-125, CWE-126 | NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in `.NET Single File` bundle header pa |
| CVE-2026-26283 | Analyzed | 未確認 | CWE-835 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a `continue` statement in the JPEG extent b |
| CVE-2026-26284 | Analyzed | 未確認 | CWE-122, CWE-125, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick lacks proper boundary checking |
| CVE-2026-26286 | Analyzed | 未確認 | CWE-918 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-2629 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in jishi node-sonos-http-api up to 3776f0ee2261c924c7b7204de121a38100a08ca7. Affected is the function Promise of the file lib/tts-providers/mac-os.js |
| CVE-2026-26290 | Modified | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementa |
| CVE-2026-26295 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26296 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26297 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26298 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26299 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-2630 | Deferred | 未確認 | CWE-78 | A Command Injection vulnerability exists where an authenticated, remote attacker could execute arbitrary code on the underlying server where Tenable Security Center is hosted. |
| CVE-2026-26300 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26301 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26302 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26303 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-26305 | Modified | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial |
| CVE-2026-26312 | Analyzed | 未確認 | CWE-770 | Stalwart is a mail and collaboration server. A denial-of-service vulnerability exists in Stalwart Mail Server versions 0.13.0 through 0.15.4 where accessing a specially crafted ema |
| CVE-2026-26313 | Analyzed | 未確認 | CWE-770 | go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.17.0, an attacker can cause high memory usage by sending a specially-craf |
| CVE-2026-26314 | Analyzed | 未確認 | CWE-20 | go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, a vulnerable node can be forced to shutdown/crash using a specially |
| CVE-2026-26315 | Analyzed | 未確認 | CWE-203 | go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, through a flaw in the ECIES cryptography implementation, an attacke |
| CVE-2026-26316 | Analyzed | 未確認 | CWE-863 | OpenClaw is a personal AI assistant. Prior to 2026.2.13, the optional BlueBubbles iMessage channel plugin could accept webhook requests as authenticated based only on the TCP peer |
| CVE-2026-26317 | Analyzed | 未確認 | CWE-352 | OpenClaw is a personal AI assistant. Prior to 2026.2.14, browser-facing localhost mutation routes accepted cross-origin browser requests without explicit Origin/Referer validation. |
| CVE-2026-26318 | Modified | 未確認 | CWE-78 | systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. |
| CVE-2026-26319 | Analyzed | 未確認 | CWE-306 | OpenClaw is a personal AI assistant. Versions 2026.2.13 and below allow the optional @openclaw/voice-call plugin Telnyx webhook handler to accept unsigned inbound webhook requests |
| CVE-2026-26320 | Analyzed | 未確認 | CWE-451 | OpenClaw is a personal AI assistant. OpenClaw macOS desktop client registers the `openclaw://` URL scheme. For `openclaw://agent` deep links without an unattended `key`, the app sh |
| CVE-2026-26321 | Analyzed | 未確認 | CWE-22 | OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Feishu extension previously allowed `sendMediaFeishu` to treat attacker-controlled `mediaUrl` values a |
| CVE-2026-26322 | Analyzed | 未確認 | CWE-918 | OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Gateway tool accepted a tool-supplied `gatewayUrl` without sufficient restrictions, which could cause |
| CVE-2026-26323 | Analyzed | 未確認 | CWE-78 | OpenClaw is a personal AI assistant. Versions 2026.1.8 through 2026.2.13 have a command injection in the maintainer/dev script `scripts/update-clawtributors.ts`. The issue affects |
| CVE-2026-26324 | Analyzed | 未確認 | CWE-918 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, OpenClaw's SSRF protection could be bypassed using full-form IPv4-mapped IPv6 literals such as `0:0:0:0:0:ffff:7f00 |
| CVE-2026-26325 | Analyzed | 未確認 | CWE-284 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, a mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approva |
| CVE-2026-26326 | Analyzed | 未確認 | CWE-200 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, `skills.status` could disclose secrets to `operator.read` clients by returning raw resolved config values in `confi |
| CVE-2026-26327 | Analyzed | 未確認 | CWE-345 | OpenClaw is a personal AI assistant. Discovery beacons (Bonjour/mDNS and DNS-SD) include TXT records such as `lanHost`, `tailnetDns`, `gatewayPort`, and `gatewayTlsSha256`. TXT rec |
| CVE-2026-26328 | Analyzed | 未確認 | CWE-284, CWE-863 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, under iMessage `groupPolicy=allowlist`, group authorization could be satisfied by sender identities coming from the |
| CVE-2026-26329 | Analyzed | 未確認 | CWE-22 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, authenticated attackers can read arbitrary files from the Gateway host by supplying absolute paths or path traversa |
| CVE-2026-2633 | Deferred | 未確認 | CWE-862 | The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.6.1. This is due to a missing capabil |
| CVE-2026-26331 | Analyzed | 未確認 | CWE-78 | yt-dlp is a command-line audio/video downloader. Starting in version 2023.06.21 and prior to version 2026.02.21, when yt-dlp's `--netrc-cmd` command-line option (or `netrc_cmd` Pyt |
| CVE-2026-26333 | Analyzed | 未確認 | CWE-306, CWE-502 | Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs (including EndeavorServer |
| CVE-2026-26334 | Analyzed | 未確認 | CWE-798 | Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (Veramark.Core.Config class). These keys are used to encrypt t |
| CVE-2026-26335 | Analyzed | 未確認 | CWE-321 | Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\\Program Files (x86)\\Veramark\\Ve |
| CVE-2026-26336 | Analyzed | 未確認 | CWE-863 | Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, thus leading to the dis |
| CVE-2026-26337 | Analyzed | 未確認 | CWE-36 | Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal. |
| CVE-2026-26338 | Analyzed | 未確認 | CWE-918 | Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality. |
| CVE-2026-26339 | Analyzed | 未確認 | CWE-918 | Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document |
| CVE-2026-2634 | Modified | 未確認 | CWE-451 | Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be prese |
| CVE-2026-26340 | Analyzed | 未確認 | CWE-306 | Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP |
| CVE-2026-26341 | Analyzed | 未確認 | CWE-1392 | Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissio |
| CVE-2026-26342 | Analyzed | 未確認 | CWE-613 | Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration. An attacker who o |
| CVE-2026-26345 | Analyzed | 未確認 | CWE-79 | SPIP before 4.4.8 contains a stored cross-site scripting (XSS) vulnerability in the public area triggered in certain edge-case usage patterns. The echapper_html_suspect() function |
| CVE-2026-2635 | Deferred | 未確認 | CWE-1393, CWE-798 | MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authent |
| CVE-2026-26351 | Modified | 未確認 | CWE-79 | GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components functionality wit |
| CVE-2026-26357 | Deferred | 未確認 | CWE-79 | Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged |
| CVE-2026-26358 | Analyzed | 未確認 | CWE-862 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerab |
| CVE-2026-26359 | Analyzed | 未確認 | CWE-73 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially expl |
| CVE-2026-2636 | Deferred | 未確認 | CWE-159 | This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special Elements" weakness, which leads to an unrecoverable inconsistency in the CLFS.sys driver. Th |
| CVE-2026-26360 | Analyzed | 未確認 | CWE-73 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially expl |
| CVE-2026-26361 | Analyzed | 未確認 | CWE-73 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially expl |
| CVE-2026-26362 | Analyzed | 未確認 | CWE-23 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulner |
| CVE-2026-26365 | Deferred | 未確認 | CWE-444 | Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request containing the header "Connection: Tran |
| CVE-2026-26366 | Analyzed | 未確認 | CWE-1392 | eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active after installation and commissioning without enforcing a mandatory |
| CVE-2026-26367 | Modified | 未確認 | CWE-862 | eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the deleteUserAccount JSON-RPC method that permits any authenticated low-privileged user (U |
| CVE-2026-26368 | Analyzed | 未確認 | CWE-862 | eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the resetUserPassword JSON-RPC method that allows any authenticated low-privileged user (UG |
| CVE-2026-26369 | Modified | 未確認 | CWE-269 | eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege escalation vulnerability due to insufficient authorization checks in the setUserGroup JSON-RPC method. A low-privileged |
| CVE-2026-26370 | Deferred | 未確認 | CWE-79 | WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in |
| CVE-2026-2641 | Deferred | 未確認 | CWE-404, CWE-674 | A weakness has been identified in universal-ctags ctags up to 6.2.1. The affected element is the function parseExpression/parseExprList of the file parsers/v.c of the component V L |
| CVE-2026-2642 | Deferred | 未確認 | CWE-404, CWE-476 | A security vulnerability has been detected in ggreer the_silver_searcher up to 2.2.0. The impacted element is the function search_stream of the file src/search.c. The manipulation |
| CVE-2026-2644 | Analyzed | 未確認 | CWE-119, CWE-125, CWE-787 | A weakness has been identified in niklasso minisat up to 2.2.0. This issue affects the function Solver::value in the library core/SolverTypes.h of the component DIMACS File Parser. |
| CVE-2026-26464 | Modified | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, which allows remote attackers to inject and store arbitrary J |
| CVE-2026-2647 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-2648 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. (Chromium securit |
| CVE-2026-2649 | Analyzed | 未確認 | CWE-472 | Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severit |
| CVE-2026-2650 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-2653 | Analyzed | 未確認 | CWE-119, CWE-122 | A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in |
| CVE-2026-2654 | Analyzed | 未確認 | CWE-918 | A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation |
| CVE-2026-2655 | Analyzed | 未確認 | CWE-119, CWE-416 | A vulnerability was detected in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::str_less::operator of the file include/chaiscript/chaiscript_defines.hpp. T |
| CVE-2026-2656 | Analyzed | 未確認 | CWE-119, CWE-416 | A flaw has been found in ChaiScript up to 6.1.0. This affects the function chaiscript::Type_Info::bare_equal of the file include/chaiscript/dispatchkit/type_info.hpp. This manipula |
| CVE-2026-2657 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in wren-lang wren up to 0.4.0. This impacts the function printError of the file src/vm/wren_compiler.c of the component Error Message Handler. Such m |
| CVE-2026-2658 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was found in newbee-ltd newbee-mall up to a069069b07027613bf0e7f571736be86f431faee. Affected is an unknown function of the component Multiple Endpoints. Performing |
| CVE-2026-2659 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file src/squirrel/squirrel/sqfuncstate.cpp. Execu |
| CVE-2026-2660 | Analyzed | 未確認 | CWE-119, CWE-416 | A vulnerability was identified in FascinatedBox lily up to 2.3. Affected by this issue is the function shorthash_for_name of the file src/lily_symtab.c. The manipulation leads to u |
| CVE-2026-2661 | Analyzed | 未確認 | CWE-119, CWE-122 | A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-base |
| CVE-2026-2662 | Analyzed | 未確認 | CWE-119, CWE-125, CWE-787 | A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the function count_transforms of the file src/lily_emitter.c. This manipulation causes ou |
| CVE-2026-2663 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/r |
| CVE-2026-2664 | Analyzed | 未確認 | CWE-125 | An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local at |
| CVE-2026-2665 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in huanzi-qch base-admin up to 57a8126bb3353a004f3c7722089e3b926ea83596. Impacted is the function Upload of the file SysFileController.java of the comp |
| CVE-2026-2666 | Analyzed | 未確認 | CWE-284, CWE-434 | A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Template Archive Handler. Executin |
| CVE-2026-2667 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. The impacted element is an unknown function of the file /dispatch/api? |
| CVE-2026-2668 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This affects an unknown function of the file /dm/dispatch/user/add of the c |
| CVE-2026-26682 | Analyzed | 未確認 | CWE-94 | An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the PluginController.java component |
| CVE-2026-2669 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This impacts an unknown function of the file /dm/dispatch/user/delete |
| CVE-2026-2670 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB |
| CVE-2026-26717 | Deferred | 未確認 | CWE-208 | An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py. The application used the non-constant time == operator for HMAC signature verification in the sync_course_run_fr |
| CVE-2026-2672 | Analyzed | 未確認 | CWE-22 | A security flaw has been discovered in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is the function Download of the file /Search/S |
| CVE-2026-26721 | Analyzed | 未確認 | CWE-598 | An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter. |
| CVE-2026-26722 | Analyzed | 未確認 | CWE-269 | An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality. |
| CVE-2026-26723 | Analyzed | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the function paramet |
| CVE-2026-26724 | Modified | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and |
| CVE-2026-26725 | Modified | 未確認 | CWE-269 | An issue in edu Business Solutions Print Shop Pro WebDesk v.18.34 (fixed in 19.76) allows a remote attacker to escalate privileges via the AccessID parameter. |
| CVE-2026-26731 | Modified | 未確認 | CWE-121, CWE-787 | TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function. |
| CVE-2026-26732 | Modified | 未確認 | CWE-121, CWE-787 | TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters in the formFilter function. |
| CVE-2026-26736 | Modified | 未確認 | CWE-121, CWE-787 | TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIpv6Setup function. |
| CVE-2026-26744 | Analyzed | 未確認 | CWE-204 | A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endpoint. The application returns different |
| CVE-2026-26745 | Analyzed | 未確認 | CWE-89 | OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currency_symbol configuration field. Although the input is initially stored without immedi |
| CVE-2026-26746 | Analyzed | 未確認 | CWE-434 | OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function. An attacker can read arbitrary files on the web server by manipulat |
| CVE-2026-26747 | Analyzed | 未確認 | CWE-644 | A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServiceProvider.php, combined with the default mis |
| CVE-2026-2676 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.jav |
| CVE-2026-2677 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/representatives-management' endpoint, which co |
| CVE-2026-2678 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/customers' endpoint, which c |
| CVE-2026-2679 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' endpoint, which could a |
| CVE-2026-2680 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes' endpoint, whi |
| CVE-2026-2681 | Deferred | 未確認 | CWE-787 | A flaw was found in the blst cryptographic library. This out-of-bounds stack write vulnerability, specifically in the blst_sha256_bcopy assembly routine, occurs due to a missing ze |
| CVE-2026-2682 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). Impacted is an unknown function of the file /mine/PublicReport/prinReport.ht |
| CVE-2026-2683 | Analyzed | 未確認 | CWE-22 | A vulnerability was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). The affected element is an unknown function of the file /Using/Subject/downLoad.html. P |
| CVE-2026-2684 | Analyzed | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). The impacted element is an unknown function of the file /Archive/ErecordMana |
| CVE-2026-2686 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in SECCN Dingcheng G10 3.1.0.181203. This impacts the function qq of the file /cgi-bin/session_login.cgi. The manipulation of the argumen |
| CVE-2026-26861 | Analyzed | 未確認 | CWE-346 | CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS) via window.postMessage. The handleCustomHtmlPreviewPostMessageEvent function in src/util/ca |
| CVE-2026-26862 | Analyzed | 未確認 | CWE-79, CWE-829 | CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage in the Visual Builder module. The origin validation in src |
| CVE-2026-2689 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Event Management System 1.0. Affected is an unknown function of the file /admin/manage_booking.php. The manipulation of the argument ID |
| CVE-2026-2690 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Event Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login of the compon |
| CVE-2026-2691 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Event Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/manage_register.php. Such manipu |
| CVE-2026-2692 | Analyzed | 未確認 | CWE-22 | A vulnerability was found in CoCoTeaNet CyreneAdmin up to 1.3.0. This affects an unknown part of the file /api/system/user/getAvatar of the component Image Handler. Performing a ma |
| CVE-2026-2693 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in CoCoTeaNet CyreneAdmin up to 1.3.0. This vulnerability affects unknown code of the file /api/system/dashboard/getCount of the component System Inf |
| CVE-2026-26930 | Deferred | 未確認 | CWE-79 | SmarterTools SmarterMail before 9526 allows XSS via MAPI requests. |
| CVE-2026-26932 | Analyzed | 未確認 | CWE-129 | Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker can sen |
| CVE-2026-26934 | Analyzed | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input (CWE-1284) in Kibana can allow an authenticated attacker with view-only privileges to cause a Denial of Service via Input Data Ma |
| CVE-2026-26935 | Analyzed | 未確認 | CWE-20 | Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153) |
| CVE-2026-26936 | Analyzed | 未確認 | CWE-1333 | Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup (CAPEC- |
| CVE-2026-26937 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153) |
| CVE-2026-26938 | Analyzed | 未確認 | CWE-1336 | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana |
| CVE-2026-2694 | Deferred | 未確認 | CWE-285 | The The Events Calendar plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to an improper capability check on the 'can_edit' and 'can_dele |
| CVE-2026-26952 | Analyzed | 未確認 | CWE-116, CWE-20, CWE-79 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. Versions 6.4 and below are vulnerable to stored HTML |
| CVE-2026-26953 | Analyzed | 未確認 | CWE-116, CWE-20, CWE-79 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. Versions 6.0 and above have a Stored HTML Injection |
| CVE-2026-26955 | Modified | 未確認 | CWE-787, CWE-805 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow in FreeRDP clients using the GDI |
| CVE-2026-26957 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: Upon further research, the maintainer determined that the behavior described by the CVE re | |
| CVE-2026-26958 | Deferred | 未確認 | CWE-665 | filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult |
| CVE-2026-26959 | Deferred | 未確認 | CWE-829 | ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below fail to validate the integrity or authenticity of the ADB binary path specified in the ManualAdbPath se |
| CVE-2026-26960 | Analyzed | 未確認 | CWE-22 | node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction dire |
| CVE-2026-26963 | Analyzed | 未確認 | CWE-863 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.5 will incorrectly permit traffic from Pods on other nodes w |
| CVE-2026-26964 | Analyzed | 未確認 | CWE-200 | Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Versions 1.634.6 and below allow non-admin users to obtain Slack OAuth c |
| CVE-2026-26965 | Modified | 未確認 | CWE-787 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle()` writes into `pDstData` at ` |
| CVE-2026-26967 | Analyzed | 未確認 | CWE-122 | PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a critical Heap-based Buffer Overflow vulnerability in PJSIP's H |
| CVE-2026-2697 | Analyzed | 未確認 | CWE-639 | An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter. |
| CVE-2026-26972 | Analyzed | 未確認 | CWE-22 | OpenClaw is a personal AI assistant. In versions 2026.1.12 through 2026.2.12, OpenClaw browser download helpers accepted an unsanitized output path. When invoked via the browser co |
| CVE-2026-26973 | Analyzed | 未確認 | CWE-639, CWE-863 | Discourse is an open source discussion platform. Versions prior to 2025.12.2, 2026.1.1, and 2026.2.0 have an IDOR (Insecure Direct Object Reference) in `ReviewableNotesController`. |
| CVE-2026-26974 | Analyzed | 未確認 | CWE-829 | Slyde is a program that creates animated presentations from XML. In versions 0.0.4 and below, Node.js automatically imports **/*.plugin.{js,mjs} files including those from node_mod |
| CVE-2026-26975 | Analyzed | 未確認 | CWE-22, CWE-434, CWE-73 | Music Assistant is an open-source media library manager that integrates streaming services with connected speakers. Versions 2.6.3 and below allow unauthenticated network-adjacent |
| CVE-2026-26977 | Analyzed | 未確認 | CWE-284, CWE-862 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the detai |
| CVE-2026-26979 | Analyzed | 未確認 | CWE-862 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users are able to close, archive and pin topics in private categories they |
| CVE-2026-2698 | Analyzed | 未確認 | CWE-639 | An improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope. |
| CVE-2026-26980 | Modified | 未確認 | CWE-89 | Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This issue has been fixed |
| CVE-2026-26981 | Analyzed | 未確認 | CWE-195 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.6 and |
| CVE-2026-26983 | Analyzed | 未確認 | CWE-416, CWE-476 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL interpreter crashes when processing |
| CVE-2026-26984 | Analyzed | 未確認 | CWE-22, CWE-434 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. Prior to versions 26. |
| CVE-2026-26985 | Analyzed | 未確認 | CWE-22 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. Starting in version 2 |
| CVE-2026-26986 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointer during `HashTable_Free` clea |
| CVE-2026-26987 | Analyzed | 未確認 | CWE-79 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are vulnerable to Reflected XSS attacks via email field. This issue has be |
| CVE-2026-26988 | Analyzed | 未確認 | CWE-89 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below contain an SQL Injection vulnerability in the ajax_table.php endpoint. The |
| CVE-2026-26989 | Analyzed | 未確認 | CWE-79 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Al |
| CVE-2026-26990 | Analyzed | 未確認 | CWE-89 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below have a Time-Based Blind SQL Injection vulnerability in address-search.inc.p |
| CVE-2026-26991 | Analyzed | 未確認 | CWE-79 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. In versions 26.1.1 and below, the device group name is not sanitized, allowing attackers with admin pr |
| CVE-2026-26992 | Analyzed | 未確認 | CWE-79 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. In versions 26.1.1 and below, the port group name is not sanitized, allowing attackers with admin priv |
| CVE-2026-26993 | Analyzed | 未確認 | CWE-79 | Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Versions 1.7.0 and below allow users to upload files without proper content val |
| CVE-2026-26994 | Analyzed | 未確認 | CWE-693 | uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. In versions 1.6.7 and below, uTLS did not imple |
| CVE-2026-26995 | Rejected | 未確認 | Rejected reason: Further research determined the issue is an external dependency vulnerability. | |
| CVE-2026-26996 | Analyzed | 未確認 | CWE-1333 | minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Ser |
| CVE-2026-26997 | Analyzed | 未確認 | CWE-79 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, a normal authenticated user can store the XSS payload. The payload is triggered by administrator |
| CVE-2026-27001 | Analyzed | 未確認 | CWE-77 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, OpenClaw embedded the current working directory (workspace path) into the agent system prompt without sanitization. |
| CVE-2026-27002 | Analyzed | 未確認 | CWE-250 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options (bind mounts, host |
| CVE-2026-27003 | Analyzed | 未確認 | CWE-522 | OpenClaw is a personal AI assistant. Telegram bot tokens can appear in error messages and stack traces (for example, when request URLs include `https://api.telegram.org/bot<token>/ |
| CVE-2026-27004 | Analyzed | 未確認 | CWE-209, CWE-346 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, in some shared-agent deployments, OpenClaw session tools (`sessions_list`, `sessions_history`, `sessions_send`) all |
| CVE-2026-27007 | Analyzed | 未確認 | CWE-1254 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, `normalizeForHash` in `src/agents/sandbox/config-hash.ts` recursively sorted arrays that contained only primitive v |
| CVE-2026-27008 | Analyzed | 未確認 | CWE-73 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in `download` skill installation allowed `targetDir` values from skill frontmatter to resolve outside the per |
| CVE-2026-27009 | Analyzed | 未確認 | CWE-79 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a atored XSS issue in the OpenClaw Control UI when rendering assistant identity (name/avatar) into an inline `<scri |
| CVE-2026-27013 | Analyzed | 未確認 | CWE-116, CWE-79 | Fabric.js is a Javascript HTML5 canvas library. Prior to version 7.2.0, Fabric.js applies `escapeXml()` to text content during SVG export (`src/shapes/Text/TextSVGExportMixin.ts:18 |
| CVE-2026-27014 | Analyzed | 未確認 | CWE-674 | NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested direct |
| CVE-2026-27015 | Analyzed | 未確認 | CWE-617 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align()` (`libfreerdp/utils/smartcar |
| CVE-2026-27016 | Analyzed | 未確認 | CWE-116, CWE-79 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 24.10.0 through 26.1.1 are vulnerable to Stored XSS via the unit parameter in Custom OID. The |
| CVE-2026-27017 | Analyzed | 未確認 | CWE-1240 | uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerpr |
| CVE-2026-2702 | Deferred | 未確認 | CWE-259, CWE-798 | A security flaw has been discovered in Beetel 777VR1 up to 01.00.09. This issue affects some unknown processing of the component WPA2 PSK. Performing a manipulation results in hard |
| CVE-2026-27020 | Deferred | 未確認 | CWE-79 | Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerabil |
| CVE-2026-27021 | Analyzed | 未確認 | CWE-862 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, the voters endpoint in the poll plugin lacked post visibility checks which all |
| CVE-2026-27022 | Deferred | 未確認 | CWE-74 | @langchain/langgraph-checkpoint-redis is the Redis checkpoint and store implementation for LangGraph. A query injection vulnerability exists in the @langchain/langgraph-checkpoint- |
| CVE-2026-27024 | Analyzed | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires acce |
| CVE-2026-27025 | Analyzed | 未確認 | CWE-834 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consu |
| CVE-2026-27026 | Analyzed | 未確認 | CWE-770 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a malfo |
| CVE-2026-27028 | Modified | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenti |
| CVE-2026-2703 | Analyzed | 未確認 | CWE-189, CWE-193 | A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::decode_base64 of the file source/detail/cryptography/base64.cpp of the com |
| CVE-2026-27031 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27032 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27033 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27034 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27035 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27036 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27037 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27038 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-2704 | Modified | 未確認 | CWE-119, CWE-125 | A security vulnerability has been detected in Open Babel up to 3.1.1. The affected element is the function OpenBabel::transform3d::DescribeAsString of the file src/math/transform3d |
| CVE-2026-27042 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPDeveloper NotificationX notificationx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notificati |
| CVE-2026-2705 | Modified | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in Open Babel up to 3.1.1. The impacted element is the function OBAtom::SetFormalCharge in the library include/openbabel/atom.h of the component MOL2 F |
| CVE-2026-27050 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in ThimPress RealPress realpress allows Cross Site Request Forgery.This issue affects RealPress: from n/a through <= 1.1.0. |
| CVE-2026-27052 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in villatheme Sales Countdown Timer for WooCommerce and WordPr |
| CVE-2026-27055 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PenciDesign Penci AI SmartContent Creator penci-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-27056 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in StellarWP iThemes Sync ithemes-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iThemes Sync: |
| CVE-2026-27057 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Filter Everything penci-filter-everything allows Stored XSS. |
| CVE-2026-27058 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Podcast penci-podcast allows DOM-Based XSS.This issue affect |
| CVE-2026-27059 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Recipe penci-recipe allows DOM-Based XSS.This issue affects |
| CVE-2026-2706 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Patient Record Management System 1.0. This affects an unknown function of the file /fecalysis_not.php. This manipulation of the argument comp |
| CVE-2026-27066 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-27069 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soledad soledad allows DOM-Based XSS.This issue affects Soledad: f |
| CVE-2026-27072 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager pixelyoursite all |
| CVE-2026-27074 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: |
| CVE-2026-2709 | Deferred | 未確認 | CWE-601 | A flaw has been found in busy up to 2.5.5. The affected element is an unknown function of the file source-code/busy-master/src/server/app.js of the component Callback Handler. Exec |
| CVE-2026-27090 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in WP Moose Kenta Companion kenta-companion allows Cross Site Request Forgery.This issue affects Kenta Companion: from n/a through < |
| CVE-2026-27092 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPAdverts: from |
| CVE-2026-27094 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoDaddy CoBlocks coblocks allows Stored XSS.This issue affects CoBlocks: from |
| CVE-2026-27099 | Analyzed | 未確認 | CWE-79 | Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the user-provided description of the "Mark temporarily offline" offline c |
| CVE-2026-27100 | Analyzed | 未確認 | CWE-200 | Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with |
| CVE-2026-2711 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in zhutoutoutousan worldquant-miner up to 1.0.9. The impacted element is an unknown function of the file worldquant-miner-master/agent-dify-api/core/ |
| CVE-2026-27111 | Analyzed | 未確認 | CWE-862 | Kargo manages and automates the promotion of software artifacts. From v1.9.0 to v1.9.2, Kargo's authorization model includes a promote verb -- a non-standard Kubernetes "dolphin ve |
| CVE-2026-27112 | Analyzed | 未確認 | CWE-863 | Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the batch resource creation endpoints of both Kargo's legacy gRPC |
| CVE-2026-27113 | Deferred | 未確認 | CWE-78 | Liquid Prompt is an adaptive prompt for Bash and Zsh. Starting in commit cf3441250bb5d8b45f6f8b389fcdf427a99ac28a and prior to commit a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c on th |
| CVE-2026-27114 | Modified | 未確認 | CWE-835 | NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop in the ROMFS archive par |
| CVE-2026-27115 | Analyzed | 未確認 | CWE-22, CWE-73 | ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below have an unvalidated command-line argument that allows any user to trigger recursive deletion of arbitra |
| CVE-2026-27116 | Analyzed | 未確認 | CWE-79, CWE-80 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, a reflected HTML injection vulnerability exists in the Projects module where the `filter` UR |
| CVE-2026-27117 | Analyzed | 未確認 | CWE-22, CWE-23, CWE-36 | bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.11, a path traversal vulnerability ("Zip Slip") exists in |
| CVE-2026-27118 | Deferred | 未確認 | CWE-346 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Versions of @sveltejs/adapter-vercel prior to 6.3.2 are vulnerable to cache poison |
| CVE-2026-27119 | Analyzed | 未確認 | CWE-79 | svelte performance oriented web framework. From 5.39.3, <=5.51.4, in certain circumstances, the server-side rendering output of an <option> element does not properly escape its con |
| CVE-2026-27120 | Analyzed | 未確認 | CWE-75, CWE-79, CWE-87 | Leafkit is a templating language with Swift-inspired syntax. Prior to 1.4.1, htmlEscaped in leaf-kit will only escape html special characters if the extended grapheme clusters matc |
| CVE-2026-27121 | Analyzed | 未確認 | CWE-79 | svelte performance oriented web framework. Versions of svelte prior to 5.51.5 are vulnerable to cross-site scripting (XSS) during server-side rendering. When using spread syntax to |
| CVE-2026-27122 | Analyzed | 未確認 | CWE-79 | svelte performance oriented web framework. Prior to 5.51.5, when using <svelte:element this={tag}> in server-side rendering, the provided tag name is not validated or sanitized bef |
| CVE-2026-27125 | Analyzed | 未確認 | CWE-915 | svelte performance oriented web framework. Prior to 5.51.5, in server-side rendering, attribute spreading on elements (e.g. <div {...attrs}>) enumerates inherited properties from t |
| CVE-2026-27126 | Analyzed | 未確認 | CWE-79 | Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a stored Cross-site Scripting (XSS) vulnerability exists in the `edi |
| CVE-2026-27127 | Analyzed | 未確認 | CWE-367 | Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, the SSRF validation in Craft CMS’s GraphQL Asset mutation performs D |
| CVE-2026-27128 | Analyzed | 未確認 | CWE-367 | Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a Time-of-Check-Time-of-Use (TOCTOU) race condition exists in Craft |
| CVE-2026-27129 | Analyzed | 未確認 | CWE-918 | Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, the SSRF validation in Craft CMS’s GraphQL Asset mutation uses `geth |
| CVE-2026-27133 | Analyzed | 未確認 | CWE-295, CWE-296 | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 to before 0.50.1, when a chain consisting of mult |
| CVE-2026-27134 | Modified | 未確認 | CWE-287, CWE-295, CWE-296 | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In versions 0.49.0 through 0.50.0, when using a custom Clust |
| CVE-2026-27141 | Deferred | 未確認 | CWE-476 | Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic |
| CVE-2026-27146 | Analyzed | 未確認 | CWE-352, CWE-434 | GetSimple CMS is a content management system. All versions of GetSimple CMS do not implement CSRF protection on the administrative file upload endpoint. As a result, an attacker ca |
| CVE-2026-27147 | Analyzed | 未確認 | CWE-79 | GetSimple CMS is a content management system. All versions of GetSimple CMS are vulnerable to XSS through SVG file uploads. Authenticated users can upload SVG files via the adminis |
| CVE-2026-27148 | Modified | 未確認 | CWE-346, CWE-74, CWE-79 | Storybook is a frontend workshop for building user interface components and pages in isolation. Prior to versions 7.6.23, 8.6.17, 9.1.19, and 10.2.10, the WebSocket functionality i |
| CVE-2026-27149 | Analyzed | 未確認 | CWE-89 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, SQL injection in PM tag filtering (`list_private_messages_tag`) allows bypassi |
| CVE-2026-27150 | Analyzed | 未確認 | CWE-862 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing `validate_before_create` authorization in Data Explorer's `QueryGroupB |
| CVE-2026-27151 | Analyzed | 未確認 | CWE-862 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, the `move_posts` action only checked `can_move_posts?` on the source topic but |
| CVE-2026-27152 | Analyzed | 未確認 | CWE-284 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, DM communication-preference bypass when adding members via `Chat::AddUsersToCh |
| CVE-2026-27153 | Analyzed | 未確認 | CWE-863 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, moderators could export user Chat DMs via the CSV export endpoint by exploitin |
| CVE-2026-27154 | Analyzed | 未確認 | CWE-79 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, a user full name can be evaluated as raw HTML when the following settings are |
| CVE-2026-27156 | Analyzed | 未確認 | CWE-79 | NiceGUI is a Python-based UI framework. Prior to version 3.8.0, several NiceGUI APIs that execute methods on client-side elements (`Element.run_method()`, `AgGrid.run_grid_method() |
| CVE-2026-2716 | Deferred | 未確認 | CWE-79 | The Client Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Testimonial Heading' setting in all versions up to, and including, 2.0. Thi |
| CVE-2026-27161 | Analyzed | 未確認 | CWE-200 | GetSimple CMS is a content management system. All versions of GetSimple CMS rely on .htaccess files to restrict access to sensitive directories such as /data/ and /backups/. If Apa |
| CVE-2026-27162 | Analyzed | 未確認 | CWE-200 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, `posts_nearby` was checking topic access but then returning all posts regardle |
| CVE-2026-27163 | Rejected | 未確認 | Rejected reason: This CVE was assigned in error. | |
| CVE-2026-27167 | Analyzed | 未確認 | CWE-522, CWE-798 | Gradio is an open-source Python package designed for quick prototyping. Starting in version 4.16.0 and prior to version 6.6.0, Gradio applications running outside of Hugging Face S |
| CVE-2026-27168 | Analyzed | 未確認 | CWE-122 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. All versions are vulnerable to Heap-based Buffer Overflow thr |
| CVE-2026-27169 | Analyzed | 未確認 | CWE-116, CWE-79 | OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below render untrusted user/model content in chat t |
| CVE-2026-27170 | Analyzed | 未確認 | CWE-20, CWE-918 | OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.2-alpha and below, URL ingest allows overly permissive serve |
| CVE-2026-27171 | Analyzed | 未確認 | CWE-1284 | zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition. |
| CVE-2026-27174 | Analyzed | 未確認 | CWE-94 | MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.class.php causes |
| CVE-2026-27175 | Analyzed | 未確認 | CWE-78 | MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated OS command injection via rc/index.php. The $param variable from user input is interpolated into a command str |
| CVE-2026-27176 | Analyzed | 未確認 | CWE-79 | MajorDoMo (aka Major Domestic Module) contains a reflected cross-site scripting (XSS) vulnerability in command.php. The $qry parameter is rendered directly into the HTML page witho |
| CVE-2026-27177 | Analyzed | 未確認 | CWE-79 | MajorDoMo (aka Major Domestic Module) contains a stored cross-site scripting (XSS) vulnerability via the /objects/?op=set endpoint, which is intentionally unauthenticated for IoT d |
| CVE-2026-27178 | Analyzed | 未確認 | CWE-79 | MajorDoMo (aka Major Domestic Module) contains a stored cross-site scripting (XSS) vulnerability through method parameter injection into the shoutbox. The /objects/?method= endpoin |
| CVE-2026-27179 | Analyzed | 未確認 | CWE-89 | MajorDoMo (aka Major Domestic Module) contains an unauthenticated SQL injection vulnerability in the commands module. The commands_search.inc.php file directly interpolates the $_G |
| CVE-2026-2718 | Deferred | 未確認 | CWE-79 | The Dealia – Request a Quote plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Gutenberg block attributes in all versions up to, and including, 1.0.8. This is d |
| CVE-2026-27180 | Analyzed | 未確認 | CWE-494 | MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated remote code execution through supply chain compromise via update URL poisoning. The saverestore module expose |
| CVE-2026-27181 | Analyzed | 未確認 | CWE-862 | MajorDoMo (aka Major Domestic Module) allows unauthenticated arbitrary module uninstallation through the market module. The market module's admin() method reads gr('mode') from $_R |
| CVE-2026-27182 | Deferred | 未確認 | CWE-306 | Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending specially crafted UDP JSON fram |
| CVE-2026-27189 | Analyzed | 未確認 | CWE-362, CWE-367 | OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below, use non-atomic and insufficiently synchroniz |
| CVE-2026-27190 | Analyzed | 未確認 | CWE-78 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.6.8, a command injection vulnerability exists in Deno's node:child_process implementation. This vulnerability |
| CVE-2026-27191 | Analyzed | 未確認 | CWE-601 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Versions 5.0.39 and below the redirect query parameter is appended to the |
| CVE-2026-27192 | Analyzed | 未確認 | CWE-346 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.0.39 and below, origin validation uses startsWith() for comp |
| CVE-2026-27193 | Analyzed | 未確認 | CWE-200 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.0.39 and below, all HTTP request headers are stored in the s |
| CVE-2026-27194 | Analyzed | 未確認 | CWE-74 | D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tale p |
| CVE-2026-27195 | Analyzed | 未確認 | CWE-755 | Wasmtime is a runtime for WebAssembly. Starting with Wasmtime 39.0.0, the `component-model-async` feature became the default, which brought with it a new implementation of `[Typed] |
| CVE-2026-27196 | Analyzed | 未確認 | CWE-79 | Statmatic is a Laravel and Git powered content management system (CMS). Versions 5.73.8 and below in addition to 6.0.0-alpha.1 through 6.3.1 have a Stored XSS vulnerability in html |
| CVE-2026-27197 | Analyzed | 未確認 | CWE-287 | Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have a critical vulnerability in its SAML SSO implementation which allo |
| CVE-2026-27198 | Analyzed | 未確認 | CWE-269 | Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorization during account cr |
| CVE-2026-27199 | Analyzed | 未確認 | CWE-67 | Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safe_join function allows Windows device names as filenames if preceded by other path segmen |
| CVE-2026-27200 | Rejected | 未確認 | Rejected reason: Further research determined the situation described is not a vulnerability. | |
| CVE-2026-27201 | Rejected | 未確認 | Rejected reason: Further research determined the situation described is not a vulnerability. | |
| CVE-2026-27202 | Analyzed | 未確認 | CWE-22, CWE-23 | GetSimple CMS is a content management system. All versions of GetSimple CMS have a flaw in the Uploaded Files feature that allows for arbitrary file reads. This issue has not been |
| CVE-2026-27203 | Deferred | 未確認 | CWE-15, CWE-74 | eBay API MCP Server is an open source local MCP server providing AI assistants with comprehensive access to eBay's Sell APIs. All versions are vulnerable to Environment Variable In |
| CVE-2026-27204 | Analyzed | 未確認 | CWE-400, CWE-770, CWE-774, CWE-789 | Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of WASI host interfaces are susceptible to guest-cont |
| CVE-2026-27205 | Analyzed | 未確認 | CWE-524 | Flask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header |
| CVE-2026-27206 | Deferred | 未確認 | CWE-502 | Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library allows deserialization of PHP objects from JSON using a speci |
| CVE-2026-27208 | Analyzed | 未確認 | CWE-250, CWE-269, CWE-78, CWE-88 | bleon-ethical/api-gateway-deploy provides API gateway deployment. Version 1.0.0 is vulnerable to an attack chain involving OS Command Injection and Privilege Escalation. This allow |
| CVE-2026-27210 | Analyzed | 未確認 | CWE-79 | Pannellum is a lightweight, free, and open source panorama viewer for the web. In versions 3.5.0 through 2.5.6, the hot spot attributes configuration property allowed any attribute |
| CVE-2026-27211 | Analyzed | 未確認 | CWE-73 | Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. Versions 34.0 through 50.0 arevulnerable to arbitrary host file exfiltration (constrained by process privileges) |
| CVE-2026-27212 | Analyzed | 未確認 | CWE-1321 | Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. Versions 6.5.1 through 12.1.1 have a Prototype pollution vulnerability. The vuln |
| CVE-2026-2731 | Deferred | 未確認 | CWE-22 | Path traversal and content injection in JobRunnerBackground.aspx in DynamicWeb 8 (all) and 9 (<9.19.7 and <9.20.3) allows unauthenticated attackers to execute code via simple web r |
| CVE-2026-27317 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27318 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27319 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27320 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27321 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27322 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27323 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27324 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27325 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27327 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in YayCommerce YayMail yaymail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayMail: from n/a thro |
| CVE-2026-27328 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in DevsBlink EduBlink edublink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduBlink: from n/a thr |
| CVE-2026-2733 | Deferred | 未確認 | CWE-285 | A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even after a Docker registry client has been administratively disable |
| CVE-2026-27343 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VanKarWai Airtifact airtifact allows PHP Local File Inclusi |
| CVE-2026-2735 | Analyzed | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) in Alkacon's OpenCms v18.0, which occurs when user input is not properly validated when sending a POST request to ‘/blog/new-article/org.opencms.u |
| CVE-2026-2736 | Analyzed | 未確認 | CWE-79 | Reflected Cross-site Scripting (XSS) in Alkacon's OpenCms v18.0, which allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL c |
| CVE-2026-27360 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Stored XSS.This issue affect |
| CVE-2026-27368 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Incorrectly Configured Access Cont |
| CVE-2026-2738 | Deferred | 未確認 | CWE-131 | Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of |
| CVE-2026-27387 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Direct |
| CVE-2026-2739 | Deferred | 未確認 | CWE-835 | This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter a |
| CVE-2026-2744 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-27440 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a |
| CVE-2026-27449 | Deferred | 未確認 | CWE-284, CWE-306, CWE-639 | Umbraco Engage is a business intelligence platform. A vulnerability has been identified in Umbraco Engage prior to versions 16.2.1 and 17.1.1 where certain API endpoints are expose |
| CVE-2026-27452 | Analyzed | 未確認 | CWE-200 | ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In versions 11.0.5 and below, in some cases, decoding an INTEG |
| CVE-2026-27457 | Analyzed | 未確認 | CWE-200, CWE-862 | Weblate is a web based localization tool. Prior to version 5.16.1, the REST API's `AddonViewSet` (`weblate/api/views.py`, line 2831) uses `queryset = Addon.objects.all()` without o |
| CVE-2026-27458 | Analyzed | 未確認 | CWE-80 | LinkAce is a self-hosted archive to collect website links. Versions 2.4.2 and below have a Stored Cross-site Scripting vulnerability through the Atom feed endpoint for lists (/list |
| CVE-2026-27461 | Analyzed | 未確認 | CWE-89 | Pimcore is an Open Source Data & Experience Management Platform. In versions up to and including 11.5.14.1 and 12.3.2, the filter query parameter in the dependency listing endpoint |
| CVE-2026-27464 | Analyzed | 未確認 | CWE-1336, CWE-94 | Metabase is an open-source data analytics platform. In versions prior to 0.57.13 and versions 0.58.x through 0.58.6, authenticated users are able to retrieve sensitive information |
| CVE-2026-27465 | Analyzed | 未確認 | CWE-201 | Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fleet’s configuration API could expose Google Calendar service account credentials |
| CVE-2026-27466 | Analyzed | 未確認 | CWE-668 | BigBlueButton is an open-source virtual classroom. In versions 3.0.21 and below, the official documentation for "Server Customization" on Support for ClamAV as presentation file sc |
| CVE-2026-27467 | Analyzed | 未確認 | CWE-200 | BigBlueButton is an open-source virtual classroom. In versions 3.0.19 and below, when first joining a session with the microphone muted, the client sends audio to the server regard |
| CVE-2026-27468 | Analyzed | 未確認 | CWE-862 | Mastodon is a free, open-source social network server based on ActivityPub. FASP registration requires manual approval by an administrator. In versions 4.4.0 through 4.4.13 and 4.5 |
| CVE-2026-27469 | Deferred | 未確認 | CWE-116, CWE-79 | Isso is a lightweight commenting server written in Python and JavaScript. In commits before 0afbfe0691ee237963e8fb0b2ee01c9e55ca2144, there is a stored Cross-Site Scripting (XSS) v |
| CVE-2026-27470 | Analyzed | 未確認 | CWE-89 | ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vu |
| CVE-2026-27471 | Analyzed | 未確認 | CWE-284, CWE-306, CWE-862 | ERP is a free and open source Enterprise Resource Planning tool. In versions up to 15.98.0 and 16.0.0-rc.1 and through 16.6.0, certain endpoints lacked access validation which allo |
| CVE-2026-27472 | Analyzed | 未確認 | CWE-918 | SPIP before 4.4.9 allows Blind Server-Side Request Forgery (SSRF) via syndicated sites in the private area. When editing a syndicated site, the application does not verify that the |
| CVE-2026-27473 | Analyzed | 未確認 | CWE-79 | SPIP before 4.4.9 allows Stored Cross-Site Scripting (XSS) via syndicated sites in the private area. The #URL_SYNDIC output is not properly sanitized on the private syndicated site |
| CVE-2026-27474 | Modified | 未確認 | CWE-79 | SPIP before 4.4.9 allows Cross-Site Scripting (XSS) in the private area, complementing an incomplete fix from SPIP 4.4.8. The echappe_anti_xss() function was not systematically app |
| CVE-2026-27475 | Analyzed | 未確認 | CWE-502 | SPIP before 4.4.9 allows Insecure Deserialization in the public area through the table_valeur filter and the DATA iterator, which accept serialized data. An attacker who can place |
| CVE-2026-27476 | Deferred | 未確認 | CWE-78 | RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. At |
| CVE-2026-27477 | Analyzed | 未確認 | CWE-918 | Mastodon is a free, open-source social network server based on ActivityPub. FASP registration requires manual approval by an administrator. In versions 4.4.0 through 4.4.13 and 4.5 |
| CVE-2026-27479 | Analyzed | 未確認 | CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Versions 4.6.0 and below contain a Server-Side Request Forgery (SSRF) vulnerability in the subscription and p |
| CVE-2026-27480 | Analyzed | 未確認 | CWE-204 | Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. In versions 2.1.0 through 2.40.1, a timing-based username enumeration vulnerabilit |
| CVE-2026-27482 | Analyzed | 未確認 | CWE-396 | Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthent |
| CVE-2026-27483 | Analyzed | 未確認 | CWE-22 | MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interfac |
| CVE-2026-27484 | Analyzed | 未確認 | CWE-862 | OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, the Discord moderation action handling (timeout, kick, ban) uses sender identity from request parameters in to |
| CVE-2026-27485 | Analyzed | 未確認 | CWE-61 | OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, skills/skill-creator/scripts/package_skill.py (a local helper script used when authors package skills) previou |
| CVE-2026-27486 | Analyzed | 未確認 | CWE-283 | OpenClaw is a personal AI assistant. In versions 2026.2.13 and below of the OpenClaw CLI, the process cleanup uses system-wide process enumeration and pattern matching to terminate |
| CVE-2026-27487 | Analyzed | 未確認 | CWE-78 | OpenClaw is a personal AI assistant. In versions 2026.2.13 and below, when using macOS, the Claude CLI keychain credential refresh path constructed a shell command to write the upd |
| CVE-2026-27488 | Analyzed | 未確認 | CWE-918 | OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, Cron webhook delivery in src/gateway/server-cron.ts uses fetch() directly, so webhook targets can reach privat |
| CVE-2026-2749 | Analyzed | 未確認 | CWE-22 | Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all befor |
| CVE-2026-27492 | Analyzed | 未確認 | CWE-488 | Lettermint Node.js SDK is the official Node.js SDK for Lettermint. In versions 1.5.0 and below, email properties (such as to, subject, html, text, and attachments) are not reset be |
| CVE-2026-27493 | Analyzed | 未確認 | CWE-94, CWE-95 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability existed in n8n's Form nodes tha |
| CVE-2026-27494 | Analyzed | 未確認 | CWE-497 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could use the |
| CVE-2026-27495 | Analyzed | 未確認 | CWE-94 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could exploit |
| CVE-2026-27497 | Analyzed | 未確認 | CWE-89, CWE-94 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could leverag |
| CVE-2026-27498 | Analyzed | 未確認 | CWE-94 | n8n is an open source workflow automation platform. Prior to versions 2.2.0 and 1.123.8, an authenticated user with permission to create or modify workflows could chain the Read/Wr |
| CVE-2026-2750 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affects Centreon Open Tickets on Cen |
| CVE-2026-27500 | Rejected | 未確認 | Rejected reason: Further research determined the situation described is not a vulnerability. | |
| CVE-2026-27501 | Rejected | 未確認 | Rejected reason: Further research determined the situation described is not a vulnerability. | |
| CVE-2026-27502 | Analyzed | 未確認 | CWE-79 | SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter. The application embeds the unsanitized parameter v |
| CVE-2026-27503 | Analyzed | 未確認 | CWE-79 | SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter. When an authenticated administrator views a |
| CVE-2026-27504 | Analyzed | 未確認 | CWE-79 | SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the stationid query parameter. When an authenticated administrat |
| CVE-2026-27505 | Analyzed | 未確認 | CWE-79 | SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php). User-supplied |
| CVE-2026-27506 | Analyzed | 未確認 | CWE-79 | SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow (user_settings.php submitting to admin/update_user.php). Aut |
| CVE-2026-27507 | Analyzed | 未確認 | CWE-798 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users. Knowledge of these cr |
| CVE-2026-27509 | Modified | 未確認 | CWE-306 | Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actu |
| CVE-2026-2751 | Analyzed | 未確認 | CWE-89 | Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) al |
| CVE-2026-27510 | Analyzed | 未確認 | CWE-345 | Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution due to missing |
| CVE-2026-27511 | Analyzed | 未確認 | CWE-1021 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface. The interface does not set the X-Fram |
| CVE-2026-27512 | Analyzed | 未確認 | CWE-116, CWE-79 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability in the administrative interface. Responses omit the X-Content-Type-Opt |
| CVE-2026-27513 | Analyzed | 未確認 | CWE-352 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface. The interface do |
| CVE-2026-27514 | Analyzed | 未確認 | CWE-201, CWE-525 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive information exposure vulnerability in the configuration download functionality. The configuration |
| CVE-2026-27515 | Analyzed | 未確認 | CWE-330 | Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An attacker can gu |
| CVE-2026-27516 | Modified | 未確認 | CWE-201, CWE-317 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP responses, allowing |
| CVE-2026-27517 | Modified | 未確認 | CWE-79 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and execute arbi |
| CVE-2026-27518 | Analyzed | 未確認 | CWE-352 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior lack CSRF protections for state-changing actions in the administrative interface. An attacker can tr |
| CVE-2026-27519 | Analyzed | 未確認 | CWE-321, CWE-327 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the key is static and expo |
| CVE-2026-27520 | Analyzed | 未確認 | CWE-312 | Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessible via the web inter |
| CVE-2026-27521 | Modified | 未確認 | CWE-307 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or account lockout on failed login attempts, enabling brute-force att |
| CVE-2026-27527 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27528 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27529 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27530 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27531 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27532 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27533 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27534 | Rejected | 未確認 | Rejected reason: Not used | |
| CVE-2026-27567 | Analyzed | 未確認 | CWE-918 | Payload is a free and open source headless content management system. Prior to 3.75.0, a Server-Side Request Forgery (SSRF) vulnerability exists in Payload's external file upload f |
| CVE-2026-27568 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. Prior to version 21.0, AVideo allows Markdown in video comments and uses Parsedown (v1.7.4) without Safe Mode enabled. Markdown links |
| CVE-2026-2757 | Modified | 未確認 | CWE-1384 | Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunder |
| CVE-2026-27571 | Analyzed | 未確認 | CWE-409, CWE-770 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The WebSockets handling of NATS messages handles compressed messages via the WebSock |
| CVE-2026-27572 | Analyzed | 未確認 | CWE-770 | Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of the `wasi:http/types.fields` resource is susceptib |
| CVE-2026-27573 | Rejected | 未確認 | Rejected reason: Further research determined the situation described is not a vulnerability. | |
| CVE-2026-27574 | Analyzed | 未確認 | CWE-94 | OneUptime is a solution for monitoring and managing online services. In versions 9.5.13 and below, custom JavaScript monitor feature uses Node.js's node:vm module (explicitly docum |
| CVE-2026-27575 | Analyzed | 未確認 | CWE-521, CWE-613 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to set weak passwords (e.g., 1234, password) without enforcing |
| CVE-2026-27576 | Analyzed | 未確認 | CWE-400 | OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, the ACP bridge accepts very large prompt text blocks and can assemble oversized prompt payloads before forward |
| CVE-2026-27577 | Analyzed | 未確認 | CWE-94 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, additional exploits in the expression evaluation of n8n have been identified and |
| CVE-2026-27578 | Analyzed | 未確認 | CWE-79, CWE-80 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could inject |
| CVE-2026-27579 | Deferred | 未確認 | CWE-346, CWE-942 | CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbi |
| CVE-2026-2758 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27580 | Rejected | 未確認 | Rejected reason: Further research determined the situation described is not a vulnerability. | |
| CVE-2026-27581 | Rejected | 未確認 | Rejected reason: Further research determined the situation described is not a vulnerability. | |
| CVE-2026-27582 | Rejected | 未確認 | Rejected reason: Further research determined the situation described is not a vulnerability. | |
| CVE-2026-27583 | Rejected | 未確認 | Rejected reason: Further research determined the situation described is not a vulnerability. | |
| CVE-2026-27584 | Analyzed | 未確認 | CWE-306 | Actual is a local-first personal finance tool. Prior to version 26.2.1, missing authentication middleware in the ActualBudget server component allows any unauthenticated user to qu |
| CVE-2026-27585 | Analyzed | 未確認 | CWE-20 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the path sanitization routine in file matcher doesn't sanitize backslashes which can lead |
| CVE-2026-27586 | Analyzed | 未確認 | CWE-755 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, two swallowed errors in `ClientAuthentication.provision()` cause mTLS client certificate a |
| CVE-2026-27587 | Analyzed | 未確認 | CWE-178 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP `path` request matcher is intended to be case-insensitive, but when the match |
| CVE-2026-27588 | Analyzed | 未確認 | CWE-178 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP `host` request matcher is documented as case-insensitive, but when configured |
| CVE-2026-27589 | Analyzed | 未確認 | CWE-352 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the local caddy admin API (default listen `127.0.0.1:2019`) exposes a state-changing `POST |
| CVE-2026-2759 | Modified | 未確認 | CWE-1384 | Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderb |
| CVE-2026-27590 | Analyzed | 未確認 | CWE-180, CWE-20 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's FastCGI path splitting logic computes the split index on a lowercased copy of the |
| CVE-2026-27593 | Analyzed | 未確認 | CWE-640 | Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 6.3.3 and 5.73.10, an attacker may leverage a vulnerability in the password reset feature |
| CVE-2026-27595 | Analyzed | 未確認 | CWE-306 | Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (POST `/apps/:appId/agent`) ha |
| CVE-2026-27597 | Analyzed | 未確認 | CWE-94 | Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by `@enclave-vm/cor |
| CVE-2026-27598 | Analyzed | 未確認 | CWE-22 | Dagu is a workflow engine with a built-in Web user interface. In versions up to and including 1.16.7, the `CreateNewDAG` API endpoint (`POST /api/v1/dags`) does not validate the DA |
| CVE-2026-2760 | Modified | 未確認 | CWE-1384 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunde |
| CVE-2026-27606 | Modified | 未確認 | CWE-22 | Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and present in current source) is vulnerable |
| CVE-2026-27607 | Analyzed | 未確認 | CWE-20, CWE-863 | RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.56 through 1.0.0-alpha.82, RustFS does not validate policy conditions in presigned POST uploads |
| CVE-2026-27608 | Analyzed | 未確認 | CWE-862 | Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) do |
| CVE-2026-27609 | Analyzed | 未確認 | CWE-352 | Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) la |
| CVE-2026-2761 | Modified | 未確認 | CWE-693 | Sandbox escape in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27610 | Analyzed | 未確認 | CWE-1289 | Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the `ConfigKeyCache` uses the same cache key for both ma |
| CVE-2026-27611 | Analyzed | 未確認 | CWE-200, CWE-287, CWE-288 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to versions 1.1.3-stable and 1.2.6-beta, when users share password-protected files, the recipient can comp |
| CVE-2026-27612 | Analyzed | 未確認 | CWE-79 | Repostat is a React component to fetch and display GitHub repository info. Prior to version 1.0.1, the `RepoCard` component is vulnerable to Reflected Cross-Site Scripting (XSS). T |
| CVE-2026-27613 | Analyzed | 未確認 | CWE-78, CWE-88 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. A vulnerability in versions prior to 2.01 allows unauthenticated remote attackers to bypass the web server's CGI |
| CVE-2026-27614 | Analyzed | 未確認 | CWE-79 | Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.13, an unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in |
| CVE-2026-27615 | Analyzed | 未確認 | CWE-40, CWE-829 | ADB Explorer is a fluent UI for ADB on Windows. In versions prior to Beta 0.9.26022, ADB-Explorer allows the `ManualAdbPath` settings variable, which determines the path of the ADB |
| CVE-2026-27616 | Analyzed | 未確認 | CWE-79 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to upload SVG files as task attachments. SVG is an XML-based fo |
| CVE-2026-2762 | Modified | 未確認 | CWE-190 | Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27621 | Analyzed | 未確認 | CWE-79 | TypiCMS is a multilingual content management system based on the Laravel framework. A Stored Cross-Site Scripting (XSS) vulnerability exists in the file upload module of TypiCMS pr |
| CVE-2026-27623 | Modified | 未確認 | CWE-20, CWE-617 | Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by t |
| CVE-2026-27624 | Analyzed | 未確認 | CWE-284, CWE-441 | Coturn is a free open source implementation of TURN and STUN Server. Coturn is commonly configured to block loopback and internal ranges using "denied-peer-ip" and/or default loopb |
| CVE-2026-27626 | Analyzed | 未確認 | CWE-78 | OliveTin gives access to predefined shell commands from a web interface. In versions up to and including 3000.10.0, OliveTin's shell mode safety check (`checkShellArgumentSafety`) |
| CVE-2026-27627 | Analyzed | 未確認 | CWE-79 | Karakeep is a elf-hostable bookmark-everything app. In version 0.30.0, when the Reddit metascraper plugin returns `readableContentHtml`, the HTML parsing subprocess uses it directl |
| CVE-2026-27628 | Modified | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires read |
| CVE-2026-27629 | Analyzed | 未確認 | CWE-1336 | InvenTree is an Open Source Inventory Management System. Prior to version 1.2.3, insecure server-side templates can be hijacked to expose secure information to the client. When gen |
| CVE-2026-2763 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27630 | Analyzed | 未確認 | CWE-400, CWE-770 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 are vulnerable to a Denial of Service (DoS) attack known as Slowloris. The server |
| CVE-2026-27632 | Analyzed | 未確認 | CWE-352 | Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871a14c192d1fb8146cdbc76f29f27c1cf48, the Talishar application lacks Cross-Site Request Forgery (CSRF) protectio |
| CVE-2026-27633 | Analyzed | 未確認 | CWE-400, CWE-770 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 have a Denial of Service (DoS) vulnerability via memory exhaustion. Unauthenticate |
| CVE-2026-27635 | Analyzed | 未確認 | CWE-78 | Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Prior to version 0.133.0, when model render gen |
| CVE-2026-27636 | Analyzed | 未確認 | CWE-434 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's file upload restriction list in `app/Misc/Helper.php` does |
| CVE-2026-27637 | Analyzed | 未確認 | CWE-330 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's `TokenAuth` middleware uses a predictable authentication to |
| CVE-2026-27638 | Analyzed | 未確認 | CWE-862 | Actual is a local-first personal finance tool. Prior to version 26.2.1, in multi-user mode (OpenID), the sync API endpoints (`/sync/*`) don't verify that the authenticated user own |
| CVE-2026-27639 | Analyzed | 未確認 | CWE-79 | Mercator is an open source web application designed to enable mapping of information systems. A stored Cross-Site Scripting (XSS) vulnerability exists in Mercator prior to version |
| CVE-2026-2764 | Modified | 未確認 | CWE-416 | JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and |
| CVE-2026-27640 | Analyzed | 未確認 | CWE-212 | tfplan2md is software for converting Terraform plan JSON files into human-readable Markdown reports. Prior to version 1.26.1, a bug in tfplan2md affected several distinct rendering |
| CVE-2026-27641 | Analyzed | 未確認 | CWE-1336, CWE-22 | Flask-Reuploaded provides file uploads for Flask. A critical path traversal and extension bypass vulnerability in versions prior to 1.5.0 allows remote attackers to achieve arbitra |
| CVE-2026-27642 | Analyzed | 未確認 | CWE-20 | free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, remote a |
| CVE-2026-27643 | Analyzed | 未確認 | CWE-209 | free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, the NEF co |
| CVE-2026-27645 | Analyzed | 未確認 | CWE-79 | changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, the RSS single-watch endpoint reflects the UUID path parameter directly in the |
| CVE-2026-27647 | Modified | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementa |
| CVE-2026-2765 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27652 | Modified | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementa |
| CVE-2026-27653 | Analyzed | 未確認 | CWE-276, CWE-863 | The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM |
| CVE-2026-2766 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-2767 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-2768 | Modified | 未確認 | CWE-284, CWE-693 | Sandbox escape in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-2769 | Modified | 未確認 | CWE-416 | Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27691 | Analyzed | 未確認 | CWE-190, CWE-681 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, signed integer overflow in iccFromCube.cpp dur |
| CVE-2026-27692 | Analyzed | 未確認 | CWE-125, CWE-170, CWE-787 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, heap-buffer-overflow read occurs during CIccTa |
| CVE-2026-27695 | Analyzed | 未確認 | CWE-770 | zae-limiter is a rate limiting library using the token bucket algorithm. Prior to version 0.10.1, all rate limit buckets for a single entity share the same DynamoDB partition key ( |
| CVE-2026-27696 | Analyzed | 未確認 | CWE-918 | changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, changedetection.io is vulnerable to Server-Side Request Forgery (SSRF) because |
| CVE-2026-27699 | Analyzed | 未確認 | CWE-22 | The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to 5.2.0 in the `downloadToDir()` method. A malicious FTP server c |
| CVE-2026-2770 | Modified | 未確認 | CWE-416 | Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27700 | Analyzed | 未確認 | CWE-290, CWE-345 | Hono is a Web application framework that provides support for any JavaScript runtime. In versions 4.12.0 and 4.12.1, when using the AWS Lambda adapter (`hono/aws-lambda`) behind an |
| CVE-2026-27701 | Deferred | 未確認 | CWE-94 | LiveCode is an open-source, client-side code playground. Prior to commit e151c64c2bd80d2d53ac1333f1df9429fe6a1a11, LiveCode's `i18n-update-pull` GitHub Actions workflow is vulnerab |
| CVE-2026-27702 | Analyzed | 未確認 | CWE-20, CWE-94, CWE-95 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. Prior to version 3.30.4, an unsafe `eval()` vulnerability in Budibase's view filtering imp |
| CVE-2026-27704 | Analyzed | 未確認 | CWE-22 | The Dart and Flutter SDKs provide software development kits for the Dart programming language. In versions of the Dart SDK prior to 3.11.0 and the Flutter SDK prior to version 3.41 |
| CVE-2026-27705 | Analyzed | 未確認 | CWE-639 | Plane is an an open-source project management tool. Prior to version 1.2.2, the `ProjectAssetEndpoint.patch()` method in `apps/api/plane/app/views/asset/v2.py` (lines 579–593) perf |
| CVE-2026-27706 | Analyzed | 未確認 | CWE-918 | Plane is an an open-source project management tool. Prior to version 1.2.2, a Full Read Server-Side Request Forgery (SSRF) vulnerability has been identified in the "Add Link" featu |
| CVE-2026-27707 | Analyzed | 未確認 | CWE-288, CWE-807 | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Starting in version 2.0.0 and prior to version 3.1.0, an authentication guard logic flaw i |
| CVE-2026-27709 | Analyzed | 未確認 | CWE-125 | NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s `.NET Single File Application` parser has an out-o |
| CVE-2026-2771 | Modified | 未確認 | CWE-125 | Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27710 | Analyzed | 未確認 | CWE-191 | NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a denial-of-service vulnerability exists in NanaZip’s `.NET |
| CVE-2026-27711 | Analyzed | 未確認 | CWE-125 | NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a memory corruption vulnerability in NanaZip’s UFS parser al |
| CVE-2026-2772 | Modified | 未確認 | CWE-416 | Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27727 | Modified | 未確認 | CWE-502, CWE-74 | mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote `factoryClassLoca |
| CVE-2026-27728 | Analyzed | 未確認 | CWE-78 | OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in `NetworkPathMonitor.performTraceroute()` allo |
| CVE-2026-27729 | Analyzed | 未確認 | CWE-770 | Astro is a web framework. In versions 9.0.0 through 9.5.3, Astro server actions have no default request body size limit, which can lead to memory exhaustion DoS. A single large POS |
| CVE-2026-2773 | Modified | 未確認 | CWE-119 | Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8 |
| CVE-2026-27730 | Analyzed | 未確認 | CWE-918 | esm.sh is a no-build content delivery network (CDN) for web development. Versions up to and including 137 have an SSRF vulnerability (CWE-918) in esm.sh’s `/http(s)` fetch route. T |
| CVE-2026-27732 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. Prior to version 22.0, the `aVideoEncoder.json.php` API endpoint accepts a `downloadURL` parameter and fetches the referenced resource |
| CVE-2026-27734 | Analyzed | 未確認 | CWE-22 | Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the |
| CVE-2026-27735 | Analyzed | 未確認 | CWE-22 | Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2026.1.14, the git_add tool di |
| CVE-2026-27736 | Analyzed | 未確認 | CWE-601 | BigBlueButton is an open-source virtual classroom. In versions on the 3.x branch prior to 3.0.20, the string received with errorRedirectUrl lacks validation, using it directly in t |
| CVE-2026-27738 | Deferred | 未確認 | CWE-601 | The Angular SSR is a server-rise rendering tool for Angular applications. An Open Redirect vulnerability exists in the internal URL processing logic in versions on the 19.x branch |
| CVE-2026-27739 | Deferred | 未確認 | CWE-918 | The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 have a Server-Side Request Forgery (SSRF) vuln |
| CVE-2026-2774 | Modified | 未確認 | CWE-190 | Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27741 | Analyzed | 未確認 | CWE-352 | Bludit version 3.16.1 contains a cross-site request forgery (CSRF) vulnerability in the /admin/uninstall-plugin/ and /admin/install-theme/ endpoints. The application does not imple |
| CVE-2026-27742 | Analyzed | 未確認 | CWE-79 | Bludit version 3.16.2 contains a stored cross-site scripting (XSS) vulnerability in the post content functionality. The application performs client-side sanitation of content input |
| CVE-2026-27743 | Analyzed | 未確認 | CWE-89 | The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the referer_spam_ajouter and referer_spam_supprimer action handlers. |
| CVE-2026-27744 | Analyzed | 未確認 | CWE-94 | The SPIP tickets plugin versions prior to 4.3.3 contain an unauthenticated remote code execution vulnerability in the forum preview handling for public ticket pages. The plugin app |
| CVE-2026-27745 | Analyzed | 未確認 | CWE-94 | The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulnerability in the translation interface workflow. The plugin i |
| CVE-2026-27746 | Analyzed | 未確認 | CWE-79 | The SPIP jeux plugin versions prior to 4.1.1 contain a reflected cross-site scripting (XSS) vulnerability in the pre_propre pipeline. The plugin incorporates untrusted request para |
| CVE-2026-27747 | Modified | 未確認 | CWE-89 | The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php. When handling |
| CVE-2026-2775 | Modified | 未確認 | CWE-288 | Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27751 | Analyzed | 未確認 | CWE-1392 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to obtain administrative access to the managemen |
| CVE-2026-27752 | Analyzed | 未確認 | CWE-319 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials. An attacker positio |
| CVE-2026-27753 | Analyzed | 未確認 | CWE-307 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against t |
| CVE-2026-27754 | Analyzed | 未確認 | CWE-328 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie generation, weakening session security. Attackers c |
| CVE-2026-27755 | Analyzed | 未確認 | CWE-330 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by compu |
| CVE-2026-27756 | Analyzed | 未確認 | CWE-79 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not properly encod |
| CVE-2026-27757 | Analyzed | 未確認 | CWE-620 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without verifying the |
| CVE-2026-27758 | Analyzed | 未確認 | CWE-352 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface that allows attackers to induce authentica |
| CVE-2026-27759 | Deferred | 未確認 | CWE-918 | Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability that allows Auth |
| CVE-2026-2776 | Modified | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 14 |
| CVE-2026-27767 | Modified | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenti |
| CVE-2026-2777 | Modified | 未確認 | CWE-269 | Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27772 | Modified | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenti |
| CVE-2026-27773 | Modified | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-27776 | Analyzed | 未確認 | CWE-502 | IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue. This can be exploited only when IM-LogicDesigner is deployed on the system. Arbitrary |
| CVE-2026-2778 | Modified | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbi |
| CVE-2026-2779 | Modified | 未確認 | CWE-119 | Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27792 | Analyzed | 未確認 | CWE-862 | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. A missing authorization vulnerability has been identified in the application starting in v |
| CVE-2026-27793 | Analyzed | 未確認 | CWE-639 | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.1.0, the `GET /api/v1/user/:id` endpoint returns the full settings obje |
| CVE-2026-27794 | Deferred | 未確認 | CWE-502 | LangGraph Checkpoint defines the base interface for LangGraph checkpointers. Prior to version 4.0.0, a Remote Code Execution vulnerability exists in LangGraph's caching layer when |
| CVE-2026-27795 | Analyzed | 未確認 | CWE-918 | LangChain is a framework for building LLM-powered applications. Prior to version 1.1.8, a redirect-based Server-Side Request Forgery (SSRF) bypass exists in `RecursiveUrlLoader` in |
| CVE-2026-27798 | Analyzed | 未確認 | CWE-125, CWE-126 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability occur |
| CVE-2026-27799 | Analyzed | 未確認 | CWE-122, CWE-126 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exist |
| CVE-2026-2780 | Modified | 未確認 | CWE-269 | Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27800 | Analyzed | 未確認 | CWE-22 | Zed, a code editor, has a Zip Slip (Path Traversal) vulnerability exists in its extension archive extraction functionality prior to version 0.224.4. The `extract_zip()` function in |
| CVE-2026-27804 | Analyzed | 未確認 | CWE-327, CWE-345 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.3 and 9.1.1-alpha.4, an unauthenticated attacker can f |
| CVE-2026-27808 | Analyzed | 未確認 | CWE-918 | Mailpit is an email testing tool and API for developers. Prior to version 1.29.2, the Link Check API (/api/v1/message/{ID}/link-check) is vulnerable to Server-Side Request Forgery |
| CVE-2026-27809 | Analyzed | 未確認 | CWE-190, CWE-409, CWE-617, CWE-704, CWE-755, CWE-789 | psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data (e.g. a literal run |
| CVE-2026-2781 | Modified | 未確認 | CWE-190 | Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35. |
| CVE-2026-27810 | Analyzed | 未確認 | CWE-113 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.4.0, an HTTP Response Header Injection vulnerability in the |
| CVE-2026-27812 | Analyzed | 未確認 | CWE-116 | Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. A vulnerability in versions prior to 0.1.85 is a Password Reset Po |
| CVE-2026-27818 | Analyzed | 未確認 | CWE-20, CWE-918 | TerriaJS-Server is a NodeJS Express server for TerriaJS, a library for building web-based geospatial data explorers. A validation bug in versions prior to 4.0.3 allows an attacker |
| CVE-2026-27819 | Analyzed | 未確認 | CWE-22, CWE-248 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the restoreConfig function in vikunja/pkg/modules/dump/restore.go of the go-vikunja/vikunja |
| CVE-2026-2782 | Modified | 未確認 | CWE-269 | Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27821 | Analyzed | 未確認 | CWE-121 | GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in `src/filters/dmx_nhml.c`. The value |
| CVE-2026-27822 | Analyzed | 未確認 | CWE-79 | RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.83, a Stored Cross-Site Scripting (XSS) vulnerability in the RustFS Console allows an atta |
| CVE-2026-27824 | Analyzed | 未確認 | CWE-307, CWE-346 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.4.0, the calibre Content Server's brute-force protection mec |
| CVE-2026-27829 | Analyzed | 未確認 | CWE-918 | Astro is a web framework. In versions 9.0.0 through 9.5.3, a bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the serv |
| CVE-2026-2783 | Modified | 未確認 | CWE-200, CWE-843 | Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thund |
| CVE-2026-27830 | Deferred | 未確認 | CWE-502, CWE-94 | c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and `javax.naming.Reference` instances. Several c3p0 `ConnectionPoo |
| CVE-2026-27831 | Deferred | 未確認 | CWE-125 | rldns is an open source DNS server. Version 1.3 has a heap-based out-of-bounds read that leads to denial of service. Version 1.4 contains a patch for the issue. |
| CVE-2026-27832 | Analyzed | 未確認 | CWE-89 | Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection (SQLi) vulnerability, exploit |
| CVE-2026-27835 | Analyzed | 未確認 | CWE-639 | wger is a free, open-source workout and fitness manager. In versions up to and including 2.4, `RepetitionsConfigViewSet` and `MaxRepetitionsConfigViewSet` return all users' repetit |
| CVE-2026-27836 | Analyzed | 未確認 | CWE-862 | phpMyFAQ is an open source FAQ web application. Prior to version 4.0.18, the WebAuthn prepare endpoint (`/api/webauthn/prepare`) creates new active user accounts without any authen |
| CVE-2026-27837 | Analyzed | 未確認 | CWE-1321 | Dottie provides nested object access and manipulation in JavaScript. Versions 2.0.4 through 2.0.6 contain an incomplete fix for CVE-2023-26132. The prototype pollution guard introd |
| CVE-2026-27838 | Analyzed | 未確認 | CWE-639 | wger is a free, open-source workout and fitness manager. Five routine detail action endpoints check a cache before calling `self.get_object()`. In versions up to and including 2.4, |
| CVE-2026-27839 | Analyzed | 未確認 | CWE-639 | wger is a free, open-source workout and fitness manager. In versions up to and including 2.4, three `nutritional_values` action endpoints fetch objects via `Model.objects.get(pk=pk |
| CVE-2026-2784 | Modified | 未確認 | CWE-288 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27840 | Analyzed | 未確認 | CWE-302 | ZITADEL is an open source identity management platform. Starting in version 2.31.0 and prior to versions 3.4.7 and 4.11.0, opaque OIDC access tokens in the v2 format truncated to 8 |
| CVE-2026-27846 | Deferred | 未確認 | CWE-306 | Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network to gain access to sensitive |
| CVE-2026-27847 | Deferred | 未確認 | CWE-89 | Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the |
| CVE-2026-27848 | Deferred | 未確認 | CWE-78 | Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user. This issue affe |
| CVE-2026-27849 | Deferred | 未確認 | CWE-78 | Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configuring devices |
| CVE-2026-2785 | Modified | 未確認 | CWE-824 | Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27850 | Deferred | 未確認 | Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only access | |
| CVE-2026-2786 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-2787 | Modified | 未確認 | CWE-416 | Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8 |
| CVE-2026-2788 | Modified | 未確認 | CWE-119 | Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbir |
| CVE-2026-27884 | Deferred | 未確認 | CWE-22 | NetExec is a network execution tool. Prior to version 1.5.1, the module spider_plus improperly creates the output file and folder path when saving files from SMB shares. It does no |
| CVE-2026-27887 | Deferred | 未確認 | CWE-770, CWE-774, CWE-789 | Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web ser |
| CVE-2026-27888 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.3, an attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requir |
| CVE-2026-2789 | Modified | 未確認 | CWE-416 | Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27896 | Modified | 未確認 | CWE-178, CWE-436 | The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions prior to 1.3.1. Go's standard library performs case-insensitive |
| CVE-2026-27899 | Analyzed | 未確認 | CWE-269, CWE-863 | WireGuard Portal (or wg-portal) is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full admi |
| CVE-2026-2790 | Modified | 未確認 | CWE-346 | Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-27900 | Analyzed | 未確認 | CWE-532 | The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without |
| CVE-2026-27901 | Analyzed | 未確認 | CWE-79 | Svelte performance oriented web framework. Prior to version 5.53.5, the contents of `bind:innerText` and `bind:textContent` on `contenteditable` elements were not properly escaped. |
| CVE-2026-27902 | Analyzed | 未確認 | CWE-79 | Svelte performance oriented web framework. Prior to version 5.53.5, errors from `transformError` were not correctly escaped prior to being embedded in the HTML output, causing pote |
| CVE-2026-27903 | Analyzed | 未確認 | CWE-407 | minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 |
| CVE-2026-27904 | Analyzed | 未確認 | CWE-1333 | minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 |
| CVE-2026-2791 | Modified | 未確認 | CWE-288 | Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. |
| CVE-2026-2792 | Modified | 未確認 | CWE-787 | Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that |
| CVE-2026-2793 | Modified | 未確認 | CWE-787 | Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption |
| CVE-2026-27933 | Analyzed | 未確認 | CWE-613 | Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to ses |
| CVE-2026-27938 | Deferred | 未確認 | CWE-78 | WPGraphQL provides a GraphQL API for WordPress sites. Prior to version 2.9.1, the `wp-graphql/wp-graphql` repository contains a GitHub Actions workflow (`release.yml`) vulnerable t |
| CVE-2026-27939 | Analyzed | 未確認 | CWE-287 | Statmatic is a Laravel and Git powered content management system (CMS). Starting in version 6.0.0 and prior to version 6.4.0, Authenticated Control Panel users may under certain co |
| CVE-2026-2794 | Modified | 未確認 | CWE-908 | Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148. |
| CVE-2026-27941 | Analyzed | 未確認 | CWE-829 | OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event |
| CVE-2026-27942 | Analyzed | 未確認 | CWE-120 | fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. Prior to version 5.3.8, the applica |
| CVE-2026-27943 | Analyzed | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. In versions up to and including 8.0.0, the eye exam (eye_mag) view loads da |
| CVE-2026-27945 | Analyzed | 未確認 | CWE-918 | ZITADEL is an open source identity management platform. Zitadel Action V2 (introduced as early preview in 2.59.0, beta in 3.0.0 and GA in 4.0.0) is a webhook based approach to allo |
| CVE-2026-27946 | Analyzed | 未確認 | CWE-862 | ZITADEL is an open source identity management platform. Prior to versions 4.11.1 and 3.4.7, a vulnerability in Zitadel's self-management capability allowed users to mark their emai |
| CVE-2026-27947 | Analyzed | 未確認 | CWE-434, CWE-88 | Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, and 6.8.154 have an authenticated Remote Code Execution vulner |
| CVE-2026-27948 | Analyzed | 未確認 | CWE-79 | Copyparty is a portable file server. In versions prior to 1.20.9, an XSS allows for reflected cross-site scripting via URL-parameter `?setck=...`. Version 1.20.9 fixes the issue. |
| CVE-2026-2795 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-27950 | Analyzed | 未確認 | CWE-416 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplete. While the v |
| CVE-2026-27951 | Analyzed | 未確認 | CWE-190 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless blocking loop. This may affect |
| CVE-2026-27952 | Analyzed | 未確認 | CWE-94 | Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used Restri |
| CVE-2026-27954 | Analyzed | 未確認 | CWE-862 | Live Helper Chat is an open-source application that enables live support websites. In versions up to and including 4.52, three chat action endpoints (holdaction.php, blockuser.php |
| CVE-2026-27959 | Modified | 未確認 | CWE-20 | Koa is middleware for Node.js using ES2017 async functions. Prior to versions 3.1.2 and 2.16.4, Koa's `ctx.hostname` API performs naive parsing of the HTTP Host header, extracting |
| CVE-2026-2796 | Modified | 未確認 | CWE-843 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-27961 | Analyzed | 未確認 | CWE-1336 | Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template renderi |
| CVE-2026-27963 | Analyzed | 未確認 | CWE-79 | Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web applica |
| CVE-2026-27965 | Analyzed | 未確認 | CWE-78 | Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S |
| CVE-2026-27966 | Analyzed | 未確認 | CWE-94 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.8.0, the CSV Agent node in Langflow hardcodes `allow_dangerous_code=True`, which a |
| CVE-2026-27967 | Analyzed | 未確認 | CWE-59 | Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools (`read_file`, `edit_file`). It allows reading and writing files **outside th |
| CVE-2026-27968 | Analyzed | 未確認 | CWE-287, CWE-613 | Packistry is a self-hosted Composer repository designed to handle PHP package distribution. Prior to version 0.13.0, RepositoryAwareController::authorize() verified token presence |
| CVE-2026-27969 | Analyzed | 未確認 | CWE-22 | Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S |
| CVE-2026-2797 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-27970 | Modified | 未確認 | CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Versions prior to 21.2.0, 21.1.16, 20.3.17, and |
| CVE-2026-27973 | Analyzed | 未確認 | CWE-79 | Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile |
| CVE-2026-27974 | Analyzed | 未確認 | CWE-79 | Audiobookshelf is a self-hosted audiobook and podcast server. A cross-site scripting (XSS) vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile applic |
| CVE-2026-27975 | Analyzed | 未確認 | CWE-284 | Ajenti is a Linux and BSD modular server admin panel. Prior to version 2.2.13, an unauthenticated user could gain access to a server to execute arbitrary code on this server. This |
| CVE-2026-27976 | Analyzed | 未確認 | CWE-61 | Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor (`async_tar::Archive::unpack`) creates symlinks from the archi |
| CVE-2026-2798 | Modified | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2799 | Modified | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2800 | Modified | 未確認 | CWE-290 | Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2801 | Modified | 未確認 | CWE-754 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2802 | Modified | 未確認 | CWE-362 | Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2803 | Modified | 未確認 | CWE-200, CWE-693 | Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2804 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2805 | Modified | 未確認 | CWE-824 | Invalid pointer in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2806 | Modified | 未確認 | CWE-457, CWE-908 | Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2807 | Modified | 未確認 | CWE-787 | Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could ha |
| CVE-2026-28083 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: fro |
| CVE-2026-28131 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Retrieve Embedded Sensitive Dat |
| CVE-2026-28132 | Deferred | 未確認 | CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews allows Code Injection. |
| CVE-2026-28136 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS wp-sms allows SQL Injection.This issue affects WP SMS: from |
| CVE-2026-28138 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0. |
| CVE-2026-2817 | Deferred | 未確認 | CWE-378, CWE-379, CWE-538 | Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local u |
| CVE-2026-2818 | Deferred | 未確認 | CWE-22, CWE-23 | A zip-slip path traversal vulnerability in Spring Data Geode's import snapshot functionality allows attackers to write files outside the intended extraction directory. This vulnera |
| CVE-2026-2819 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3. This vulnerability affects the function SaServletFilter of the file /workflow/instance/deleteByInstanceIds of |
| CVE-2026-28193 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint |
| CVE-2026-28194 | Analyzed | 未確認 | CWE-601 | In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow |
| CVE-2026-28195 | Analyzed | 未確認 | CWE-862 | In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations |
| CVE-2026-28196 | Analyzed | 未確認 | CWE-459 | In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk |
| CVE-2026-2820 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in Fujian Smart Integrated Management Platform System up to 7.5. This issue affects some unknown processing of the file /Module/CRXT/Controller/ |
| CVE-2026-28207 | Analyzed | 未確認 | CWE-78 | Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version 0.4.2, a command injection vulnerability (CWE-78) in the Zen C compiler allows l |
| CVE-2026-28208 | Modified | 未確認 | CWE-22 | Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary |
| CVE-2026-2821 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Fujian Smart Integrated Management Platform System up to 7.5. Impacted is an unknown function of the file /Module/CRXT/Controller/XCamera.ashx. Th |
| CVE-2026-28211 | Deferred | 未確認 | CWE-943 | The NVDA Dev & Test Toolbox is an NVDA add-on for gathering tools to help NVDA development and testing. A vulnerability exists in versions 2.0 through 8.0 in the Log Reader feature |
| CVE-2026-28213 | Analyzed | 未確認 | CWE-200, CWE-640 | EverShop is a TypeScript-first eCommerce platform. Versions prior to 2.1.1 have a vulnerability in the "Forgot Password" functionality. When specifying a target email address, the |
| CVE-2026-28215 | Analyzed | 未確認 | CWE-284, CWE-287 | hoppscotch is an open source API development ecosystem. Prior to version 2026.2.0, an unauthenticated attacker can overwrite the entire infrastructure configuration of a self-hoste |
| CVE-2026-28216 | Analyzed | 未確認 | CWE-639 | hoppscotch is an open source API development ecosystem. Prior to version 2026.2.0, any logged-in user can read, modify or delete another user's personal environment by ID. `user-en |
| CVE-2026-28217 | Analyzed | 未確認 | CWE-639, CWE-862 | hoppscotch is an open source API development ecosystem. Prior to version 2026.2.0, the `userCollection` GraphQL query accepts an arbitrary collection ID and returns the full collec |
| CVE-2026-28218 | Analyzed | 未確認 | CWE-284 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, fail-open access control in Data Explorer plugin allows any authenticated user |
| CVE-2026-28219 | Analyzed | 未確認 | CWE-915 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, an improper authorization check in the topic management logic allows authentic |
| CVE-2026-2822 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file /jeecgboot/sys/dict/loadDict/airag_app,1,create_by of t |
| CVE-2026-28225 | Analyzed | 未確認 | CWE-639 | Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Prior to version 0.133.1, the `get_model` metho |
| CVE-2026-28226 | Analyzed | 未確認 | CWE-89 | Phishing Club is a phishing simulation and man-in-the-middle framework. Prior to version 1.30.2, an authenticated SQL injection vulnerability exists in the GetOrphaned recipient li |
| CVE-2026-28227 | Analyzed | 未確認 | CWE-863 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users can publish topics into staff-only categories via the `publish_to_ca |
| CVE-2026-2823 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Comfast CF-E7 2.6.0.9. The impacted element is the function sub_41ACCC of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone of the compo |
| CVE-2026-28230 | Analyzed | 未確認 | CWE-284 | SteVe is an open-source EV charging station management system. In versions up to and including 3.11.0, when a charger sends a StopTransaction message, SteVe looks up the transactio |
| CVE-2026-28231 | Analyzed | 未確認 | CWE-125, CWE-190 | pillow_heif is a Python library for working with HEIF images and plugin for Pillow. Prior to version 1.3.0, an integer overflow in the encode path buffer validation of `_pillow_hei |
| CVE-2026-2824 | Analyzed | 未確認 | CWE-74, CWE-77 | A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET§ion=ping_config of the component webmggnt. Exec |
| CVE-2026-2825 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8. This impacts the function fix_html of the file tools/fix.py of the component Article Module. The manipulatio |
| CVE-2026-28268 | Analyzed | 未確認 | CWE-459, CWE-640 | Vikunja is an open-source self-hosted task management platform. Versions prior to 2.1.0 have a business logic vulnerability exists in the password reset mechanism of vikunja/api th |
| CVE-2026-28269 | Analyzed | 未確認 | CWE-78 | Kiteworks is a private data network (PDN). Prior to version 9.2.0, avulnerability in Kiteworks command execution functionality allows authenticated users to redirect command output |
| CVE-2026-28270 | Analyzed | 未確認 | CWE-434 | Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows uploading of arbitrary files without proper validation. Malicio |
| CVE-2026-28271 | Analyzed | 未確認 | CWE-350, CWE-918 | Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration functionality allows bypassing of SSRF protections through DNS rebindi |
| CVE-2026-28272 | Analyzed | 未確認 | CWE-79 | Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scr |
| CVE-2026-28274 | Analyzed | 未確認 | CWE-434, CWE-79 | Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.4 are vulnerable to Stored Cross-Site Scripting (XSS) in the document upload func |
| CVE-2026-28275 | Analyzed | 未確認 | CWE-613 | Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.4 do not invalidate previously issued JWT access tokens after a user changes thei |
| CVE-2026-28276 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-862 | Initiative is a self-hosted project management platform. An access control vulnerability exists in Initiative versions prior to 0.32.2 where uploaded documents are served from a pu |
| CVE-2026-28279 | Analyzed | 未確認 | CWE-78 | osctrl is an osquery management solution. Prior to version 0.5.0, an OS command injection vulnerability exists in the `osctrl-admin` environment configuration. An authenticated adm |
| CVE-2026-28280 | Analyzed | 未確認 | CWE-79 | osctrl is an osquery management solution. Prior to version 0.5.0, a stored cross-site scripting (XSS) vulnerability exists in the `osctrl-admin` on-demand query list. A user with q |
| CVE-2026-28288 | Analyzed | 未確認 | CWE-204 | Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate ema |
| CVE-2026-28295 | Deferred | 未確認 | CWE-918 | A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. T |
| CVE-2026-28296 | Deferred | 未確認 | CWE-93 | A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return a |
| CVE-2026-2831 | Deferred | 未確認 | CWE-89 | The MailArchiver plugin for WordPress is vulnerable to SQL Injection via the ‘logid’ parameter in all versions up to, and including, 4.5.0 due to insufficient escaping on the user |
| CVE-2026-2832 | Deferred | 未確認 | CWE-200 | Certain Samsung MultiXpress Multifunction Printers may be vulnerable to information disclosure, potentially exposing address book entries and other device configuration information |
| CVE-2026-28338 | Analyzed | 未確認 | CWE-79 | PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's `vbhtml` and `yahtml` report formats insert rule violation messages into HTML output without |
| CVE-2026-28351 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This req |
| CVE-2026-28352 | Analyzed | 未確認 | CWE-306 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.11, the API endpoint used to manage event |
| CVE-2026-28354 | Analyzed | 未確認 | CWE-639, CWE-863 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, collection item operations are vulnerable to authorization flaws, allowing a normal authenticate |
| CVE-2026-28355 | Deferred | 未確認 | CWE-79 | Canarytokens help track activity and actions on a network. Versions prior to `sha-7ff0e12` have a Self Cross-Site Scripting vulnerability in the "PWA" Canarytoken, whereby the Cana |
| CVE-2026-28363 | Analyzed | 未確認 | CWE-184 | In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compress-prog) in allowlist mode, leading to ap |
| CVE-2026-28364 | Modified | 未確認 | CWE-125, CWE-126 | In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The |
| CVE-2026-28370 | Modified | 未確認 | CWE-95 | In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution on the Vitrage service host |
| CVE-2026-28372 | Modified | 未確認 | CWE-829 | telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-l |
| CVE-2026-28400 | Deferred | 未確認 | CWE-749 | Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker. Versions prior to 1.0.16 expose a POST `/engines/_configure` endpoint that accepts a |
| CVE-2026-28402 | Analyzed | 未確認 | CWE-354 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.2.2, a malicious or compromised |
| CVE-2026-28406 | Modified | 未確認 | CWE-22 | kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks buil |
| CVE-2026-28407 | Analyzed | 未確認 | CWE-703 | malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior to version 1.21.0, malcontent would remove nested archives w |
| CVE-2026-28408 | Analyzed | 未確認 | CWE-287, CWE-862 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, the script in adicionar_tipo_docs_atendido.php does not go through the project's central controller and |
| CVE-2026-28409 | Analyzed | 未確認 | CWE-78 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, a critical Remote Code Execution (RCE) vulnerability exists in the WeGIA application's database restorat |
| CVE-2026-28411 | Analyzed | 未確認 | CWE-288, CWE-473 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the `extract()` function on the `$_REQUEST` superglobal allows an unauthenticated attac |
| CVE-2026-28414 | Analyzed | 未確認 | CWE-22, CWE-36 | Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.7, Gradio apps running on Window with Python 3.13+ are vulnerable to an absolute path tra |
| CVE-2026-28415 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-330, CWE-601 | Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _ta |
| CVE-2026-28416 | Analyzed | 未確認 | CWE-918 | Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to m |
| CVE-2026-28417 | Analyzed | 未確認 | CWE-78, CWE-86 | Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducin |
| CVE-2026-28418 | Analyzed | 未確認 | CWE-122, CWE-125 | Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. Whe |
| CVE-2026-28419 | Analyzed | 未確認 | CWE-124, CWE-125 | Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a mal |
| CVE-2026-28420 | Analyzed | 未確認 | CWE-122, CWE-125 | Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when proce |
| CVE-2026-28421 | Analyzed | 未確認 | CWE-122, CWE-20 | Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Bot |
| CVE-2026-28422 | Analyzed | 未確認 | CWE-121 | Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fil |
| CVE-2026-28423 | Analyzed | 未確認 | CWE-918 | Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, when Glide image manipulation is used in insecure mode (which is not th |
| CVE-2026-28424 | Analyzed | 未確認 | CWE-862 | Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, user email addresses were included in responses from the user fieldtype |
| CVE-2026-28425 | Modified | 未確認 | CWE-94 | Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, an authenticated control panel user with access to Antlers-enabled inpu |
| CVE-2026-28426 | Analyzed | 未確認 | CWE-79 | Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, stored XSS vulnerability in svg and icon related components allow authe |
| CVE-2026-2844 | Analyzed | 未確認 | CWE-306 | Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11 |
| CVE-2026-2845 | Analyzed | 未確認 | CWE-770 | An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated use |
| CVE-2026-2846 | Analyzed | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105. This impacts the function sub_44D264 of the file /goform/formPdbUpConfig of the component Web Management I |
| CVE-2026-2847 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub_44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. Th |
| CVE-2026-2848 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register |
| CVE-2026-2849 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function deleteCache/removeAllCache/syncCache of th |
| CVE-2026-2850 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file datase |
| CVE-2026-2851 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addInport/updateInport/deleteInport of th |
| CVE-2026-28515 | Analyzed | 未確認 | CWE-862 | openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose L |
| CVE-2026-28516 | Analyzed | 未確認 | CWE-89 | openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-sup |
| CVE-2026-28517 | Modified | 未確認 | CWE-78 | openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php. The application retrieves the 'dot' configuration paramet |
| CVE-2026-2852 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects the function addSales/updateSales/deleteSales of the file data |
| CVE-2026-2853 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in D-Link DWR-M960 1.01.07. This affects the function sub_462E14 of the file /boafrm/formSysLog of the component System Log Configuration Endpoint. Per |
| CVE-2026-2854 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub_4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipula |
| CVE-2026-2855 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in D-Link DWR-M960 1.01.07. Affected is the function sub_4648F0 of the file /boafrm/formDdns of the component DDNS Settings Handler. The manipulation |
| CVE-2026-28554 | Analyzed | 未確認 | CWE-862 | wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to approve or unapprove any forum post via the wpforo_approve_ajax AJAX han |
| CVE-2026-28555 | Analyzed | 未確認 | CWE-862 | wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to close or reopen any forum topic via the wpforo_close_ajax handler. Attac |
| CVE-2026-28556 | Analyzed | 未確認 | CWE-862 | wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to move, merge, or split any forum topic via the topic_move, topic_merge, a |
| CVE-2026-28557 | Analyzed | 未確認 | CWE-862 | wpForo Forum 2.4.14 contains a missing capability check vulnerability that allows authenticated users to trigger bulk wpForo usergroup reassignment via the wpforo_synch_roles AJAX |
| CVE-2026-28558 | Analyzed | 未確認 | CWE-79 | wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload func |
| CVE-2026-28559 | Analyzed | 未確認 | CWE-200 | wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve private and unapproved forum topics via the global RSS feed endpo |
| CVE-2026-2856 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_424AFC of the file /boafrm/formFilter of the component Filter Configuration |
| CVE-2026-28560 | Analyzed | 未確認 | CWE-79 | wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data output into an inline script block using json_encode withou |
| CVE-2026-28561 | Analyzed | 未確認 | CWE-79 | wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent JavaScript via forum description fields echoed without outp |
| CVE-2026-28562 | Analyzed | 未確認 | CWE-89 | wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted ide |
| CVE-2026-2857 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_423E00 of the file /boafrm/formPortFw of the component Port Forwarding Configu |
| CVE-2026-2858 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was identified in wren-lang wren up to 0.4.0. This affects the function peekChar of the file src/vm/wren_compiler.c of the component Source File Parser. Such manipu |
| CVE-2026-2860 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. Impacted is an unknown function of the f |
| CVE-2026-2861 | Modified | 未確認 | CWE-200, CWE-284 | A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information di |
| CVE-2026-2863 | Deferred | 未確認 | CWE-22 | A flaw has been found in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. The impacted element is the function deleteFile of the file F |
| CVE-2026-2864 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. This affects the function pictureDelete of the file |
| CVE-2026-2865 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP PO |
| CVE-2026-2867 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument |
| CVE-2026-2869 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was identified in janet-lang janet up to 1.40.1. Affected by this vulnerability is the function janetc_varset of the file src/core/specials.c of the component handl |
| CVE-2026-2870 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Tenda A21 1.0.0.0. Affected by this issue is the function set_qosMib_list of the file /goform/formSetQosBand. The manipulation of the argumen |
| CVE-2026-2871 | Analyzed | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda A21 1.0.0.0. This affects the function fromSetIpMacBind of the file /goform/SetIpMacBind. This manipulation of the argument list causes stac |
| CVE-2026-2872 | Analyzed | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda A21 1.0.0.0. This vulnerability affects the function set_device_name of the file /goform/setBlackRule of the component MAC Filte |
| CVE-2026-2873 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda A21 1.0.0.0. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. Performing a manipulation of the argument schedSt |
| CVE-2026-2874 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda A21 1.0.0.0. Impacted is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. Executing a manipulation of the argument |
| CVE-2026-2876 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda A18 15.13.07.13. This affects the function parse_macfilter_rule of the file /goform/setBlackRule. This manipulation of the argument deviceLi |
| CVE-2026-2877 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda A18 15.13.07.13. This affects the function strcpy of the file /goform/WifiExtraSet of the component Httpd Service. The manipulation of the a |
| CVE-2026-2878 | Analyzed | 未確認 | CWE-331 | In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerability exists in RadAsyncUpload, where a predictable temporary identifier, based on |
| CVE-2026-2880 | Analyzed | 未確認 | CWE-20 | A vulnerability in @fastify/middie versions < 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware (for example, app.use('/secret', auth)). Wh |
| CVE-2026-2881 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_425FF8 of the file /boafrm/formFirewallAdv of the component Advanced Firewall |
| CVE-2026-2882 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_46385C of the file /boafrm/formDosCfg. Performing a manipulation of the argument submit-ur |
| CVE-2026-2883 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_427D74 of the file /boafrm/formIpQoS. Executing a manipulation of the argument submit-url ca |
| CVE-2026-2884 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in D-Link DWR-M960 1.01.07. The affected element is the function sub_41914C of the file /boafrm/formWanConfigSetup of the component WAN Interface Set |
| CVE-2026-2885 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in D-Link DWR-M960 1.01.07. The impacted element is the function sub_469104 of the file /boafrm/formIpv6Setup. The manipulation of the argument |
| CVE-2026-2886 | Analyzed | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda A21 1.0.0.0. This affects the function set_device_name of the file /goform/SetOnlineDevName. This manipulation of the argument devName cause |
| CVE-2026-2887 | Analyzed | 未確認 | CWE-404, CWE-674 | A security vulnerability has been detected in aardappel lobster up to 2025.4. This impacts the function lobster::TypeName in the library dev/src/lobster/idents.h. Such manipulation |
| CVE-2026-2889 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was detected in CCExtractor up to 0.96.5. Affected is the function processmp4 in the library src/lib_ccx/mp4.c. Performing a manipulation results in use after free. |
| CVE-2026-2894 | Analyzed | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the function getMember of the file app/frontend/view/login/forget.html. Such manipulat |
| CVE-2026-2895 | Analyzed | 未確認 | CWE-640 | A security flaw has been discovered in funadmin up to 7.1.0-rc4. Affected by this issue is the function repass of the file app/frontend/controller/Member.php. Performing a manipula |
| CVE-2026-2896 | Analyzed | 未確認 | CWE-266, CWE-285 | A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Configuration Handler. |
| CVE-2026-2897 | Analyzed | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the file app/backend/view/index/index.html of the component Backe |
| CVE-2026-2898 | Analyzed | 未確認 | CWE-20, CWE-502 | A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend End |
| CVE-2026-2903 | Deferred | 未確認 | CWE-404, CWE-476 | A flaw has been found in skvadrik re2c up to 4.4. Impacted is the function check_and_merge_special_rules of the file src/parse/ast.cc. This manipulation causes null pointer derefer |
| CVE-2026-2904 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in UTT HiPER 810G 1.7.7-171114. This affects the function strcpy of the file /goform/ConfigExceptAli. Executing a manipulation can lead to buffer ove |
| CVE-2026-2905 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda HG9 300001138. This impacts an unknown function of the file /boaform/formWlanSetup of the component Wireless Configuration Endpoint. The man |
| CVE-2026-2906 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Tenda HG9 300001138. Affected is an unknown function of the file /boaform/formSamba of the component Samba Configuration Endpoint. The manipu |
| CVE-2026-2907 | Analyzed | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the component GPON Configurat |
| CVE-2026-2908 | Analyzed | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda HG9 300001138. Affected by this issue is some unknown functionality of the file /boaform/formLoopBack of the component Loopback |
| CVE-2026-2909 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda HG9 300001138. This affects an unknown part of the file /boaform/formPing of the component Diagnostic Ping Endpoint. Performing a manipulation |
| CVE-2026-2910 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to |
| CVE-2026-2911 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects some unknown processing of the file /goform/GstDhcpSetSer. The manipulation leads to buffer overflow |
| CVE-2026-2912 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/students/assessments/results/studentresult-view.ph |
| CVE-2026-2913 | Analyzed | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vips_source_read_to_memory of the file libvips/iofuncs/source.c. This manipulation caus |
| CVE-2026-2914 | Analyzed | 未確認 | CWE-269 | CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs |
| CVE-2026-2925 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_42B5A0 of the file /boafrm/formBridgeVlan of the component Bridge VLAN Configura |
| CVE-2026-2926 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4237AC of the file /boafrm/formLteSetup of the component LTE Configuration Endpoint. Executing a man |
| CVE-2026-2927 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_462590 of the file /boafrm/formOpMode of the component Operation Mode Configu |
| CVE-2026-2928 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_452CCC of the file /boafrm/formWlEncrypt of the component WLAN Encryption Configuration En |
| CVE-2026-2929 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_453140 of the file /boafrm/formWlAc of the component Wireless Access Control Endpoint. This |
| CVE-2026-2930 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. Suc |
| CVE-2026-2932 | Analyzed | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admin/D_adPosition.php of the component Extended Manag |
| CVE-2026-2933 | Analyzed | 未確認 | CWE-79, CWE-94 | A weakness has been identified in YiFang CMS up to 2.0.5. This affects the function update of the file app/db/admin/D_adManage.php of the component Extended Management Module. Exec |
| CVE-2026-2934 | Analyzed | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in YiFang CMS up to 2.0.5. This impacts the function update of the file app/db/admin/D_friendLinkGroup.php of the component Extended Mana |
| CVE-2026-2935 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/ConfigExceptMSN. Executing a manipulation of the arg |
| CVE-2026-2938 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/update_smtp.p |
| CVE-2026-2939 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /add_student/ of the component Add Student Module. |
| CVE-2026-2940 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability was determined in Zaher1307 tiny_web_server up to 8d77b1044a0ca3a5297d8726ac8aa2cf944d481b. This affects the function tiny_web_server/tiny.c of the file tiny_web_se |
| CVE-2026-2943 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SapneshNaik Student Management System up to f4b4f0928f0b5551a28ee81ae7e7fe47d9345318. This impacts an unknown function of the file index.php. Such |
| CVE-2026-2944 | Analyzed | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01. Affected is the function system of the file /cgi-bin/monitor.php of the component HTTP |
| CVE-2026-2945 | Analyzed | 未確認 | CWE-918 | A weakness has been identified in JeecgBoot 3.9.0. Affected by this vulnerability is an unknown functionality of the file /sys/common/uploadImgByHttp. Executing a manipulation of t |
| CVE-2026-2946 | Analyzed | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in rymcu forest up to 0.0.5. Affected by this issue is the function XssUtils.replaceHtmlCode of the file src/main/java/com/rymcu/forest/u |
| CVE-2026-2947 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in rymcu forest up to 0.0.5. This affects the function updateUserInfo of the file - src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java |
| CVE-2026-2952 | Analyzed | 未確認 | CWE-77, CWE-78 | A flaw has been found in Vaelsys 4.1.0. This vulnerability affects unknown code of the file /tree/tree_server.php of the component HTTP POST Request Handler. This manipulation of t |
| CVE-2026-2953 | Analyzed | 未確認 | CWE-22 | A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handle |
| CVE-2026-2954 | Analyzed | 未確認 | CWE-707, CWE-74 | A vulnerability was found in Dromara UJCMS 10.0.2. Impacted is the function importChanel of the file /api/backend/ext/import-data/import-channel of the component ImportDataControll |
| CVE-2026-2956 | Analyzed | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in qinming99 dst-admin up to 1.5.0. This affects the function revertBackup of the file /home/restore. The manipulation of the argument Name resu |
| CVE-2026-2957 | Analyzed | 未確認 | CWE-404 | A weakness has been identified in qinming99 dst-admin up to 1.5.0. This impacts the function deleteBackup of the file src/main/java/com/tugos/dst/admin/controller/BackupController. |
| CVE-2026-2958 | Analyzed | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in D-Link DWR-M960 1.01.07. Affected is the function sub_457C5C of the file /boafrm/formWsc. Such manipulation of the argument save_apply |
| CVE-2026-2959 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_44E0F8 of the file /boafrm/formNewSchedule. Performing a manipulation of |
| CVE-2026-2960 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_468D64 of the file /boafrm/formDhcpv6s. Executing a manipulation of the argument submit |
| CVE-2026-2961 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4196C4 of the file /boafrm/formVpnConfigSetup of the component VPN Configuration Endpoint. |
| CVE-2026-2962 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_460F30 of the file /boafrm/formDateReboot of the component Scheduled Reboot Config |
| CVE-2026-2963 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in Jinher OA C6 up to 20260210. This issue affects some unknown processing of the file /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx. This m |
| CVE-2026-2964 | Analyzed | 未確認 | CWE-1321, CWE-94 | A vulnerability was identified in higuma web-audio-recorder-js 0.1/0.1.1. Impacted is the function extend in the library lib/WebAudioRecorder.js of the component Dynamic Config Han |
| CVE-2026-2965 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown function of the file /admin/SysModule/edit.html of the compo |
| CVE-2026-2966 | Analyzed | 未確認 | CWE-310, CWE-330 | A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. |
| CVE-2026-2967 | Analyzed | 未確認 | CWE-940 | A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/net_builtin.c of the component TCP Sequence Number Han |
| CVE-2026-2968 | Analyzed | 未確認 | CWE-345, CWE-347 | A vulnerability was detected in Cesanta Mongoose up to 7.20. This impacts the function mg_chacha20_poly1305_decrypt of the file /src/tls_chacha20.c of the component Poly1305 Authen |
| CVE-2026-2969 | Analyzed | 未確認 | CWE-1336, CWE-791 | A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the comp |
| CVE-2026-2970 | Analyzed | 未確認 | CWE-20, CWE-502 | A vulnerability has been found in datapizza-labs datapizza-ai 0.0.2. Affected by this vulnerability is the function RedisCache of the file datapizza-ai-cache/redis/datapizza/cache/ |
| CVE-2026-2971 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login. |
| CVE-2026-2972 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in a466350665 Smart-SSO up to 2.1.1. This affects the function Save of the file smart-sso-server/src/main/java/openjoe/smart/sso/server/controller/ad |
| CVE-2026-2974 | Analyzed | 未確認 | CWE-285, CWE-530 | A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of the file shared_prefs/aliasvault.xml of the component Backu |
| CVE-2026-2975 | Analyzed | 未確認 | CWE-200, CWE-284 | A security flaw has been discovered in FastApiAdmin up to 2.2.0. Affected by this vulnerability is the function reset_api_docs of the file /backend/app/plugin/init_app.py of the co |
| CVE-2026-2976 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-434 | A weakness has been identified in FastApiAdmin up to 2.2.0. Affected by this issue is the function download_controller of the file /backend/app/api/v1/module_common/file/controller |
| CVE-2026-2977 | Analyzed | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in FastApiAdmin up to 2.2.0. This affects the function upload_controller of the file /backend/app/api/v1/module_common/file/controller.py |
| CVE-2026-2978 | Analyzed | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in FastApiAdmin up to 2.2.0. This vulnerability affects the function upload_file_controller of the file /backend/app/api/v1/module_system/params/contro |
| CVE-2026-2979 | Analyzed | 未確認 | CWE-284, CWE-434 | A flaw has been found in FastApiAdmin up to 2.2.0. This issue affects the function user_avatar_upload_controller of the file /backend/app/api/v1/module_system/user/controller.py of |
| CVE-2026-2980 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in UTT HiPER 810G up to 1.7.7-1711. Impacted is the function strcpy of the file /goform/setSysAdm. The manipulation of the argument passwd1 leads to |
| CVE-2026-2981 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in UTT HiPER 810G up to 1.7.7-1711. The affected element is the function strcpy of the file /goform/formTaskEdit_ap. The manipulation of the argument txtM |
| CVE-2026-2983 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/import_users.php of the c |
| CVE-2026-2984 | Analyzed | 未確認 | CWE-404 | A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/drop_user.php. Such manipulation of |
| CVE-2026-2985 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in Tiandy Video Surveillance System 视频监控平台 7.17.0. This impacts the function downloadImage of the file /com/tiandy/easy7/core/bo/CLSBODownLoad.j |
| CVE-2026-2997 | Deferred | 未確認 | CWE-639 | Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter |
| CVE-2026-2998 | Deferred | 未確認 | CWE-426 | ERP developed by eAI Technologies has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a crafted DLL file in the same directory as the program, thereb |
| CVE-2026-3010 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue aff |
| CVE-2026-3015 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/formPolicyRouteConf. Executing a manipulation of the argume |
| CVE-2026-3016 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the file /goform/formP2PLimitConfig. The manipulation of the arg |
| CVE-2026-3025 | Analyzed | 未確認 | CWE-284, CWE-434 | A flaw has been found in ShuoRen Smart Heating Integrated Management Platform 1.0.0. Affected by this vulnerability is an unknown functionality of the file /MP/Service/Webservice/E |
| CVE-2026-3026 | Analyzed | 未確認 | CWE-918 | A vulnerability has been found in erzhongxmu JEEWMS 3.7. Affected by this issue is some unknown functionality of the file /plug-in/ueditor/jsp/getRemoteImage.jsp of the component U |
| CVE-2026-3027 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was found in erzhongxmu JEEWMS up to 3.7. This affects an unknown part of the file src/main/webapp/plug-in/ueditor/jsp/getContent.jsp of the component UEditor. The |
| CVE-2026-3028 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in erzhongxmu JEEWMS up to 3.7. This vulnerability affects the function doAdd of the file src/main/java/com/jeecg/demo/controller/JeecgListDemoContro |
| CVE-2026-3037 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by modifying |
| CVE-2026-3040 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the function cgiGetFile of the file /cgi-bin/mainfunction.cgi/uploadlangs of the component Web Mana |
| CVE-2026-3041 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in xingfuggz BaykeShop up to 1.3.20. Impacted is an unknown function of the file src/baykeshop/contrib/article/templates/baykeshop/sideba |
| CVE-2026-3042 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the |
| CVE-2026-3043 | Analyzed | 未確認 | CWE-79, CWE-94 | A flaw has been found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/navbar.php. Executing a manipulation of the argume |
| CVE-2026-3044 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda AC8 16.03.34.06. This affects the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. The manipulati |
| CVE-2026-3046 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This vulnerability affects unknown code of the file /check_prof |
| CVE-2026-3049 | Analyzed | 未確認 | CWE-601 | A vulnerability was detected in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horilla_generics/global_search.py of the component Query Par |
| CVE-2026-3050 | Analyzed | 未確認 | CWE-79, CWE-94 | A flaw has been found in horilla-opensource horilla up to 1.0.2. Impacted is an unknown function of the file static/assets/js/global.js of the component Leads Module. This manipula |
| CVE-2026-3051 | Analyzed | 未確認 | CWE-22 | A vulnerability has been found in DataLinkDC dinky up to 1.2.5. The affected element is the function getProjectDir of the file dinky-admin/src/main/java/org/dinky/utils/GitReposito |
| CVE-2026-3052 | Analyzed | 未確認 | CWE-918 | A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyContro |
| CVE-2026-3053 | Analyzed | 未確認 | CWE-287, CWE-306 | A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file dinky-admin/src/main/java/org/dinky/configure/AppConfig.java o |
| CVE-2026-3054 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the argument hint leads to cross site scripting. The attack can b |
| CVE-2026-3057 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the comp |
| CVE-2026-3061 | Modified | 未確認 | CWE-125 | Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security s |
| CVE-2026-3062 | Modified | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chro |
| CVE-2026-3063 | Modified | 未確認 | Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTM | |
| CVE-2026-3064 | Analyzed | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in HummerRisk up to 1.5.0. Affected by this issue is some unknown functionality of the file ResourceCreateService.java of the component C |
| CVE-2026-3065 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in HummerRisk up to 1.5.0. This affects the function CommandUtils.commonExecCmdWithResult of the file CloudTaskService.java of the component Cloud Task |
| CVE-2026-3066 | Analyzed | 未確認 | CWE-74, CWE-77 | A flaw has been found in HummerRisk up to 1.5.0. This vulnerability affects the function fixedCommand of the file hummer-common/hummer-common-core/src/main/java/com/hummer/common/c |
| CVE-2026-3067 | Analyzed | 未確認 | CWE-22 | A vulnerability has been found in HummerRisk up to 1.5.0. This issue affects the function extractTarGZ/extractZip of the file hummer-common/hummer-common-core/src/main/java/com/hum |
| CVE-2026-3068 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the file /deluser.php. Executing a manipulation of the argument u |
| CVE-2026-3069 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Document Management System 1.0. Affected is an unknown function of the file /edtlbls.php. The manipulation of the argumen |
| CVE-2026-3070 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of |
| CVE-2026-3071 | Deferred | 未確認 | CWE-502 | Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest are vulnerable to arbitrary code execution when loading a malicious model. |
| CVE-2026-3075 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensitive Data.Thi |
| CVE-2026-3091 | Analyzed | 未確認 | CWE-427 | An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service duri |
| CVE-2026-3100 | Analyzed | 未確認 | CWE-295 | The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS. An improper validated TLS/SSL certific |
| CVE-2026-3101 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Intelbras TIP 635G 1.12.3.5. This vulnerability affects unknown code of the component Ping Handler. The manipulation results in os command injection. T |
| CVE-2026-3102 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Pars |
| CVE-2026-3105 | Analyzed | 未確認 | CWE-89 | SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities. A vulnerability exists in the query construction for the Co |
| CVE-2026-3118 | Modified | 未確認 | CWE-89 | A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The issue occurs due to insufficient input validation in GraphQL query handling. An |
| CVE-2026-3131 | Modified | 未確認 | CWE-200 | Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensiti |
| CVE-2026-3133 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Document Management System 1.0. This issue affects some unknown processing of the file /loging.php of the component Login. The manipu |
| CVE-2026-3134 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode News Portal Project 1.0. The affected element is an unknown function of the file /newsportal/admin/edit-category.php. The manipu |
| CVE-2026-3135 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode News Portal Project 1.0. The impacted element is an unknown function of the file /admin/add-category.php. This manipulation of the ar |
| CVE-2026-3137 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an unknown function of the file food_ordering.exe. Such manipulation leads to stack-b |
| CVE-2026-3145 | Analyzed | 未確認 | CWE-119 | A flaw has been found in libvips up to 8.18.0. The affected element is the function vips_foreign_load_matrix_file_is_a/vips_foreign_load_matrix_header of the file libvips/foreign/m |
| CVE-2026-3146 | Analyzed | 未確認 | CWE-404, CWE-476 | A vulnerability has been found in libvips up to 8.18.0. The impacted element is the function vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. The manipulat |
| CVE-2026-3147 | Analyzed | 未確認 | CWE-119, CWE-122 | A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_build of the file libvips/foreign/csvload.c. The manipulation results in heap-bas |
| CVE-2026-3148 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argume |
| CVE-2026-3149 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode College Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/asign-single-student-subjects. |
| CVE-2026-3150 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of t |
| CVE-2026-3151 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument e |
| CVE-2026-3152 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argu |
| CVE-2026-3153 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username |
| CVE-2026-3163 | Analyzed | 未確認 | CWE-918 | A vulnerability has been found in SourceCodester Website Link Extractor 1.0. This vulnerability affects the function file_get_contents of the component URL Handler. The manipulatio |
| CVE-2026-3164 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode News Portal Project 1.0. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation of the argument pag |
| CVE-2026-3165 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Tenda F453 1.0.0.3. Impacted is the function fromSetWifiGusetBasic of the file /goform/AdvSetWrlsafeset of the component httpd. This manipulation |
| CVE-2026-3166 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in Tenda F453 1.0.0.3. The affected element is the function fromRouteStatic of the file /goform/RouteStatic of the component httpd. Such manipulation |
| CVE-2026-3167 | Analyzed | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Tenda F453 1.0.0.3. The impacted element is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component httpd. Perfor |
| CVE-2026-3168 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromNatStaticSetting of the file /goform/NatStaticSetting of the component httpd. Executing a manipu |
| CVE-2026-3169 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Tenda F453 1.0.0.3. This impacts the function fromSafeEmailFilter of the file /goform/SafeEmailFilter of the component httpd. The mani |
| CVE-2026-3170 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The |
| CVE-2026-3171 | Analyzed | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /que |
| CVE-2026-3172 | Deferred | 未確認 | CWE-191, CWE-787 | Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server. |
| CVE-2026-3179 | Analyzed | 未確認 | CWE-22 | The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings. A malicious server or MITM attacker can craft filenames |
| CVE-2026-3185 | Analyzed | 未確認 | CWE-285, CWE-639 | A vulnerability was found in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected is an unknown function of the file /api/admin/sys-message/ of the component API Endpoint. The ma |
| CVE-2026-3186 | Analyzed | 未確認 | CWE-1393 | A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this vulnerability is an unknown functionality of the file /api/admin/sys-user/reset/pas |
| CVE-2026-3187 | Analyzed | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this issue is some unknown functionality of the file /api/admin/sys-file/upload of the c |
| CVE-2026-3188 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This affects an unknown part of the file /api/admin/common/download/templates of the component |
| CVE-2026-3189 | Deferred | 未確認 | CWE-918 | A weakness has been identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This vulnerability affects unknown code of the file /api/admin/common/files/download. Executing a ma |
| CVE-2026-3192 | Analyzed | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in Chia Blockchain 2.1.0. This issue affects the function _authenticate of the file rpc_server_base.py of the component RPC Credential Ha |
| CVE-2026-3193 | Analyzed | 未確認 | CWE-352, CWE-862 | A vulnerability was detected in Chia Blockchain 2.1.0. Impacted is an unknown function of the file /send_transaction. The manipulation results in cross-site request forgery. The at |
| CVE-2026-3194 | Analyzed | 未確認 | CWE-287, CWE-306 | A flaw has been found in Chia Blockchain 2.1.0. The affected element is the function send_transaction/get_private_key of the component RPC Server Master Passphrase Handler. This ma |
| CVE-2026-3197 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-3200 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in z-9527 admin 1.0/2.0. The affected element is the function checkName/register/login/getUser/getUsers of the file /server/controller/user.js. The m |
| CVE-2026-3201 | Analyzed | 未確認 | CWE-1325, CWE-770 | USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service |
| CVE-2026-3202 | Analyzed | 未確認 | CWE-476 | NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service |
| CVE-2026-3203 | Analyzed | 未確認 | CWE-126 | RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service |
| CVE-2026-3206 | Deferred | 未確認 | CWE-404 | Improper Resource Shutdown or Release vulnerability in KrakenD, SLU KrakenD-CE (CircuitBreaker modules), KrakenD, SLU KrakenD-EE (CircuitBreaker modules). This issue affects Kraken |
| CVE-2026-3209 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in fosrl Pangolin up to 1.15.4-s.3. This affects the function verifyRoleAccess/verifyApiKeyRoleAccess of the component Role Handler. The manipulation |
| CVE-2026-3221 | Analyzed | 未確認 | CWE-312 | Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker with access to the database to obtain se |
| CVE-2026-3223 | Analyzed | 未確認 | CWE-22 | Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer. |
| CVE-2026-3255 | Analyzed | 未確認 | CWE-338, CWE-340 | HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function. The HTTP::Session2 session id generator returns a SHA-1 hash seeded |
| CVE-2026-3261 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode School Management System 1.0. This impacts an unknown function of the file /settings/index.php of the component Setting Handler. This manipula |
| CVE-2026-3262 | Analyzed | 未確認 | CWE-698, CWE-705 | A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interfa |
| CVE-2026-3263 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/ |
| CVE-2026-3264 | Analyzed | 未確認 | CWE-698, CWE-705 | A vulnerability was determined in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. Affected by this issue is some unknown functionality of the component Administr |
| CVE-2026-3265 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. This affects an unknown part of the file /api/Security/ of the component Securi |
| CVE-2026-3268 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in psi-probe PSI Probe up to 5.3.0. The affected element is an unknown function of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ |
| CVE-2026-3269 | Analyzed | 未確認 | CWE-404 | A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/s |
| CVE-2026-3270 | Analyzed | 未確認 | CWE-918 | A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the compon |
| CVE-2026-3271 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in Tenda F453 1.0.0.3. This impacts the function fromP2pListFilter of the file /goform/P2pListFilterof of the component httpd. The manipulation of the arg |
| CVE-2026-3272 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. This manipulation of th |
| CVE-2026-3273 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component httpd. Suc |
| CVE-2026-3274 | Analyzed | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Performing a mani |
| CVE-2026-3275 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Executing a manipulation of th |
| CVE-2026-3277 | Modified | 未確認 | CWE-312 | The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 scr |
| CVE-2026-3281 | Analyzed | 未確認 | CWE-119, CWE-122 | A vulnerability was detected in libvips 8.19.0. This affects the function vips_bandrank_build of the file libvips/conversion/bandrank.c. Performing a manipulation of the argument i |
| CVE-2026-3282 | Analyzed | 未確認 | CWE-119, CWE-125 | A flaw has been found in libvips 8.19.0. This vulnerability affects the function vips_unpremultiply_build of the file libvips/conversion/unpremultiply.c. Executing a manipulation o |
| CVE-2026-3283 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability has been found in libvips 8.19.0. This issue affects the function vips_extract_band_build of the file libvips/conversion/extract.c. The manipulation of the argument |
| CVE-2026-3284 | Analyzed | 未確認 | CWE-189, CWE-190 | A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conversion/extract.c. The manipulation of the argument extract_are |
| CVE-2026-3285 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in berry-lang berry up to 1.1.0. The affected element is the function scan_string of the file src/be_lexer.c. This manipulation causes out-of-bounds |
| CVE-2026-3286 | Analyzed | 未確認 | CWE-918 | A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding |
| CVE-2026-3287 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in youlaitech youlai-mall 2.0.0. This affects the function listPagedSpuForApp of the file mall-pms/pms-boot/src/main/java/com/youlai/mall/pms/co |
| CVE-2026-3289 | Analyzed | 未確認 | CWE-22 | A weakness has been identified in Sanluan PublicCMS 6.202506.d. This impacts the function saveMetadata of the file TemplateCacheComponent.java of the component Template Cache Gener |
| CVE-2026-3292 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipu |
| CVE-2026-3293 | Analyzed | 未確認 | CWE-1333, CWE-400 | A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core |
| CVE-2026-3301 | Analyzed | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the com |
| CVE-2026-3302 | Analyzed | 未確認 | CWE-79, CWE-94 | A weakness has been identified in SourceCodester Doctor Appointment System 1.0. Affected by this issue is some unknown functionality of the file /register.php of the component Sign |
| CVE-2026-3304 | Modified | 未確認 | CWE-459 | Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by sendi |
| CVE-2026-3327 | Deferred | 未確認 | CWE-79 | Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malicious authenticated user to circumvent the restriction enforced on the configured f |
| CVE-2026-3376 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromSafeMacFilter of the file /goform/SafeMacFilter. Such manipulat |