NVD公開月 2026-03
6,304 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2006-10002 | Modified | 未確認 | CWE-122, CWE-176 | XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes. A :utf8 PerlIO layer, pars |
| CVE-2006-10003 | Modified | 未確認 | CWE-122, CWE-193 | XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack. In the case (stackptr == stacksize - 1), the stack will NOT be expanded. Then |
| CVE-2013-20005 | Deferred | 未確認 | CWE-79 | Qool CMS 2.0 RC2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious web |
| CVE-2013-20006 | Deferred | 未確認 | CWE-79 | Qool CMS contains multiple persistent cross-site scripting vulnerabilities in several administrative scripts where POST parameters are not properly sanitized before being stored an |
| CVE-2014-125112 | Analyzed | 未確認 | CWE-565 | Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerabili |
| CVE-2015-20113 | Analyzed | 未確認 | CWE-352 | Next Click Ventures RealtyScript 4.0.2 contains cross-site request forgery and persistent cross-site scripting vulnerabilities that allow attackers to perform administrative action |
| CVE-2015-20114 | Analyzed | 未確認 | CWE-79 | Next Click Ventures RealtyScript 4.0.2 contains a cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious input th |
| CVE-2015-20115 | Analyzed | 未確認 | CWE-79 | Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php. At |
| CVE-2015-20116 | Analyzed | 未確認 | CWE-79 | Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize CSV file uploads, allowing attackers to inject malicious scripts through filename parameters in multipart form dat |
| CVE-2015-20117 | Analyzed | 未確認 | CWE-352 | Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create unauthorized user accounts and administra |
| CVE-2015-20118 | Analyzed | 未確認 | CWE-79 | Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface. Attackers can submit PO |
| CVE-2015-20119 | Analyzed | 未確認 | CWE-79 | Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious HTML and iframe elements through |
| CVE-2015-20120 | Analyzed | 未確認 | CWE-89 | Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers to extract database information by inje |
| CVE-2015-20121 | Analyzed | 未確認 | CWE-89 | Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting arbitrary SQL code th |
| CVE-2016-20024 | Deferred | 未確認 | CWE-538 | ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files. Attackers can exp |
| CVE-2016-20025 | Deferred | 未確認 | CWE-552 | ZKTeco ZKAccess Professional 3.5.3 contains an insecure file permissions vulnerability that allows authenticated users to escalate privileges by modifying executable files. Attacke |
| CVE-2016-20026 | Deferred | 未確認 | CWE-798 | ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow unauthenticated attackers to access the manager application. Attackers can au |
| CVE-2016-20027 | Deferred | 未確認 | CWE-79 | ZKTeco ZKBioSecurity 3.0 contains multiple reflected cross-site scripting vulnerabilities that allow attackers to execute arbitrary HTML and script code by injecting malicious payl |
| CVE-2016-20028 | Deferred | 未確認 | CWE-352 | ZKTeco ZKBioSecurity 3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malic |
| CVE-2016-20029 | Deferred | 未確認 | CWE-276 | ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used to retrieve local resources. A |
| CVE-2016-20030 | Deferred | 未確認 | CWE-551 | ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters via the userna |
| CVE-2016-20031 | Deferred | 未確認 | CWE-798 | ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost r |
| CVE-2016-20032 | Deferred | 未確認 | CWE-79 | ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious pa |
| CVE-2016-20033 | Analyzed | 未確認 | CWE-639 | Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to escalate privileges by replacing executable files due to imprope |
| CVE-2016-20034 | Analyzed | 未確認 | CWE-352 | Wowza Streaming Engine 4.5.0 contains a privilege escalation vulnerability that allows authenticated read-only users to elevate privileges to administrator by manipulating POST par |
| CVE-2016-20035 | Analyzed | 未確認 | CWE-352 | Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by crafting malicious web pages. Attackers |
| CVE-2016-20036 | Analyzed | 未確認 | CWE-79 | Wowza Streaming Engine 4.5.0 contains multiple reflected cross-site scripting vulnerabilities in the enginemanager interface where input passed through various parameters is not pr |
| CVE-2016-20037 | Deferred | 未確認 | CWE-787 | xwpe 1.5.30a-2.1 and prior contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying overly long input strings that ex |
| CVE-2016-20038 | Deferred | 未確認 | CWE-787 | yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the applicati |
| CVE-2016-20039 | Awaiting Analysis | 未確認 | CWE-787 | Multi Emulator Super System 0.154-3.1 contains a buffer overflow vulnerability in the gamma parameter handling that allows local attackers to crash the application or execute arbit |
| CVE-2016-20040 | Deferred | 未確認 | CWE-22 | TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute arbitrary code. Attac |
| CVE-2016-20041 | Deferred | 未確認 | CWE-22 | Yasr 0.6.9-5 contains a buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized argument to the -p pa |
| CVE-2016-20042 | Deferred | 未確認 | CWE-787 | TRN 3.6-23 contains a stack buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the application. Attackers can |
| CVE-2016-20043 | Analyzed | 未確認 | CWE-787 | NRSS RSS Reader 0.3.9-1 contains a stack buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -F parameter. |
| CVE-2016-20044 | Analyzed | 未確認 | CWE-787 | PInfo 0.6.9-5.1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -m parameter. Attacke |
| CVE-2016-20045 | Analyzed | 未確認 | CWE-787 | HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -rc command-l |
| CVE-2016-20046 | Deferred | 未確認 | CWE-787 | zFTP Client 20061220+dfsg3-4.1 contains a buffer overflow vulnerability in the NAME parameter handling of FTP connections that allows local attackers to crash the application or ex |
| CVE-2016-20047 | Awaiting Analysis | 未確認 | CWE-787 | EKG Gadu 1.9~pre+r2855-3+b1 contains a local buffer overflow vulnerability in the username handling that allows local attackers to execute arbitrary code by supplying an oversized |
| CVE-2016-20048 | Deferred | 未確認 | CWE-22 | iSelect 1.4.0-2+b1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized value to the -k/--key parameter. A |
| CVE-2016-20049 | Analyzed | 未確認 | CWE-787 | JAD 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying oversized input that exceeds buffer bo |
| CVE-2017-20217 | Deferred | 未確認 | CWE-306 | Serviio PRO 1.8 contains an information disclosure vulnerability due to improper access control enforcement in the Configuration REST API that allows unauthenticated attackers to a |
| CVE-2017-20218 | Deferred | 未確認 | CWE-428 | Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privileges by placing maliciou |
| CVE-2017-20219 | Deferred | 未確認 | CWE-79 | Serviio PRO 1.8 DLNA Media Streaming Server contains a DOM-based cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting mal |
| CVE-2017-20220 | Deferred | 未確認 | CWE-306 | Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password. Att |
| CVE-2017-20221 | Analyzed | 未確認 | CWE-352 | Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by ex |
| CVE-2017-20222 | Analyzed | 未確認 | CWE-306 | Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot without authentica |
| CVE-2017-20223 | Analyzed | 未確認 | CWE-639 | Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access resou |
| CVE-2017-20224 | Analyzed | 未確認 | CWE-434 | Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious content by exploiting en |
| CVE-2017-20225 | Analyzed | 未確認 | CWE-787 | TiEmu 2.08 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting inadequate boundary checks on user-supplied |
| CVE-2017-20226 | Deferred | 未確認 | CWE-787 | Mapscrn 2.0.3 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized input buffer. Attackers can craft |
| CVE-2017-20227 | Analyzed | 未確認 | CWE-787 | JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that |
| CVE-2017-20228 | Analyzed | 未確認 | CWE-787 | Flat Assembler 1.71.21 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input to the application. A |
| CVE-2017-20229 | Analyzed | 未確認 | CWE-787 | MAWK 1.3.3-17 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting inadequate boundary checks on user-suppli |
| CVE-2018-25159 | Deferred | 未確認 | CWE-1334 | Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) injection vulnerability that allows unauthenticated attackers to execute arbitrary com |
| CVE-2018-25161 | Deferred | 未確認 | CWE-89 | Warranty Tracking System 11.06.3 contains an SQL injection vulnerability that allows attackers to execute arbitrary SQL queries by injecting malicious code through the txtCustomerC |
| CVE-2018-25162 | Deferred | 未確認 | CWE-434 | 2-Plan Team 1.0.4 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload executable PHP files by sending multipart form data to managefile.ph |
| CVE-2018-25163 | Deferred | 未確認 | CWE-89 | BitZoom 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rollno and userna |
| CVE-2018-25164 | Deferred | 未確認 | CWE-552 | EverSync 0.5 contains an arbitrary file download vulnerability that allows unauthenticated attackers to access sensitive files by requesting them directly from the files directory. |
| CVE-2018-25165 | Deferred | 未確認 | CWE-89 | Galaxy Forces MMORPG 0.5.8 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'typ |
| CVE-2018-25166 | Deferred | 未確認 | CWE-89 | Meneame English Pligg 5.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the sea |
| CVE-2018-25167 | Deferred | 未確認 | CWE-89 | Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attacker |
| CVE-2018-25168 | Deferred | 未確認 | CWE-434 | Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting crafted |
| CVE-2018-25169 | Deferred | 未確認 | CWE-1188 | AMPPS 2.7 contains a denial of service vulnerability that allows remote attackers to crash the service by sending malformed data to the default HTTP port. Attackers can establish m |
| CVE-2018-25170 | Deferred | 未確認 | CWE-352 | DoceboLMS 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id, idC, and idU parame |
| CVE-2018-25171 | Deferred | 未確認 | CWE-434 | EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attack |
| CVE-2018-25172 | Deferred | 未確認 | CWE-89 | Pedidos 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'q' parameter. At |
| CVE-2018-25173 | Deferred | 未確認 | CWE-89 | Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter. Attack |
| CVE-2018-25174 | Deferred | 未確認 | CWE-352 | ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to _configurar_perfil.php. |
| CVE-2018-25175 | Deferred | 未確認 | CWE-89 | Alienor Web Libre 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the identif |
| CVE-2018-25176 | Deferred | 未確認 | CWE-352 | Alive Parish 2.0.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the key parame |
| CVE-2018-25177 | Deferred | 未確認 | CWE-352 | Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by submitting crafted POST |
| CVE-2018-25178 | Analyzed | 未確認 | CWE-22 | Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter. Attackers can |
| CVE-2018-25179 | Deferred | 未確認 | CWE-89 | Gumbo CMS 0.99 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the language param |
| CVE-2018-25180 | Deferred | 未確認 | CWE-89 | Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter i |
| CVE-2018-25181 | Deferred | 未確認 | CWE-22 | Musicco 2.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary directories by manipulating the parent parameter. Attackers can su |
| CVE-2018-25182 | Deferred | 未確認 | CWE-89 | Silurus Classifieds Script 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through th |
| CVE-2018-25183 | Analyzed | 未確認 | CWE-89 | Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. |
| CVE-2018-25184 | Deferred | 未確認 | CWE-22 | Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers ca |
| CVE-2018-25185 | Analyzed | 未確認 | CWE-89 | Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username p |
| CVE-2018-25186 | Analyzed | 未確認 | CWE-352 | Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the profile endpo |
| CVE-2018-25187 | Analyzed | 未確認 | CWE-89 | Tina4 Stack 1.0.3 contains multiple vulnerabilities allowing unauthenticated attackers to access sensitive database files and execute SQL injection attacks. Attackers can directly |
| CVE-2018-25188 | Deferred | 未確認 | CWE-89 | Webiness Inventory 2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the order |
| CVE-2018-25189 | Deferred | 未確認 | CWE-89 | Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arbitrary SQL queries. A |
| CVE-2018-25190 | Analyzed | 未確認 | CWE-352 | Easyndexer 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative accounts by submitting forged POST requests. Attac |
| CVE-2018-25191 | Deferred | 未確認 | CWE-89 | Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'mod_id' |
| CVE-2018-25192 | Deferred | 未確認 | CWE-89 | GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter |
| CVE-2018-25193 | Deferred | 未確認 | CWE-1188 | Mongoose Web Server 6.9 contains a denial of service vulnerability that allows remote attackers to crash the service by establishing multiple socket connections. Attackers can repe |
| CVE-2018-25194 | Deferred | 未確認 | CWE-22 | Nominas 0.27 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the username paramet |
| CVE-2018-25195 | Analyzed | 未確認 | CWE-89 | Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code. |
| CVE-2018-25196 | Deferred | 未確認 | CWE-89 | ServerZilla 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter. Atta |
| CVE-2018-25197 | Deferred | 未確認 | CWE-89 | PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the catid paramet |
| CVE-2018-25198 | Deferred | 未確認 | CWE-787 | eToolz 3.4.8.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying oversized input buffers. Attackers can create a payload |
| CVE-2018-25199 | Analyzed | 未確認 | CWE-89 | OOP CMS BLOG 1.0 contains SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through multiple parameter |
| CVE-2018-25200 | Analyzed | 未確認 | CWE-352 | OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST request |
| CVE-2018-25201 | Analyzed | 未確認 | CWE-89 | School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows attackers to bypass authentication by injecting SQL code throu |
| CVE-2018-25202 | Awaiting Analysis | 未確認 | CWE-89 | SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id' parameter in the signIn endpoint. A |
| CVE-2018-25203 | Deferred | 未確認 | CWE-89 | Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email par |
| CVE-2018-25204 | Analyzed | 未確認 | CWE-89 | Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attacke |
| CVE-2018-25205 | Awaiting Analysis | 未確認 | CWE-89 | ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the 'query' parameter in the search functionalit |
| CVE-2018-25206 | Deferred | 未確認 | CWE-89 | KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands through the 'my_item_search' parameter in edit.php. Attackers can submit POST r |
| CVE-2018-25207 | Deferred | 未確認 | CWE-89 | Online Quiz Maker 1.0 contains SQL injection vulnerabilities in the catid and usern parameters that allow authenticated attackers to execute arbitrary SQL commands. Attackers can s |
| CVE-2018-25208 | Analyzed | 未確認 | CWE-89 | qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through filter_by parameters. Attackers |
| CVE-2018-25209 | Awaiting Analysis | 未確認 | CWE-89 | OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter |
| CVE-2018-25210 | Analyzed | 未確認 | CWE-79 | WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries. Att |
| CVE-2018-25211 | Analyzed | 未確認 | CWE-787 | Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized |
| CVE-2018-25212 | Analyzed | 未確認 | CWE-787 | Boxoft wav-wma Converter 1.0 contains a local buffer overflow vulnerability in structured exception handling that allows attackers to execute arbitrary code by crafting malicious W |
| CVE-2018-25213 | Analyzed | 未確認 | CWE-787 | Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the |
| CVE-2018-25214 | Analyzed | 未確認 | CWE-787 | MegaPing contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload to the Destination Address List field |
| CVE-2018-25215 | Analyzed | 未確認 | CWE-787 | Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long stri |
| CVE-2018-25216 | Analyzed | 未確認 | CWE-787 | AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image file name field |
| CVE-2018-25217 | Analyzed | 未確認 | CWE-787 | PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with mal |
| CVE-2018-25218 | Analyzed | 未確認 | CWE-787 | PassFab RAR Password Recovery 9.3.2 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a |
| CVE-2018-25219 | Analyzed | 未確認 | CWE-787 | PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a ma |
| CVE-2018-25220 | Analyzed | 未確認 | CWE-787 | Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attacker |
| CVE-2018-25221 | Analyzed | 未確認 | CWE-787 | EChat Server 3.1 contains a buffer overflow vulnerability in the chat.ghp endpoint that allows remote attackers to execute arbitrary code by supplying an oversized username paramet |
| CVE-2018-25222 | Deferred | 未確認 | CWE-787 | SC v7.16 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Att |
| CVE-2018-25223 | Analyzed | 未確認 | CWE-787 | Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers c |
| CVE-2018-25224 | Analyzed | 未確認 | CWE-306 | PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious values in the configurati |
| CVE-2018-25225 | Analyzed | 未確認 | CWE-306 | SIPP 3.3 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious input in the configuratio |
| CVE-2018-25226 | Analyzed | 未確認 | CWE-787 | FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the account name field |
| CVE-2018-25227 | Analyzed | 未確認 | CWE-466 | Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. At |
| CVE-2018-25228 | Analyzed | 未確認 | CWE-787 | NetSetMan 4.7.1 contains a buffer overflow vulnerability in the Workgroup feature that allows local attackers to crash the application by supplying oversized input. Attackers can c |
| CVE-2018-25229 | Analyzed | 未確認 | CWE-1282 | BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that allows local attackers to crash the application by supplying |
| CVE-2018-25230 | Analyzed | 未確認 | CWE-787 | Free IP Switcher 3.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Computer Name fiel |
| CVE-2018-25231 | Analyzed | 未確認 | CWE-98 | HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long file path in the logging prefer |
| CVE-2018-25232 | Analyzed | 未確認 | CWE-1285 | Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the custom log |
| CVE-2018-25233 | Analyzed | 未確認 | CWE-233 | WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the username field du |
| CVE-2018-25234 | Analyzed | 未確認 | CWE-466 | SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field |
| CVE-2018-25235 | Analyzed | 未確認 | CWE-787 | NetworkActiv Web Server 4.0 contains a buffer overflow vulnerability in the username field of the Security options that allows local attackers to crash the application by supplying |
| CVE-2019-25463 | Deferred | 未確認 | CWE-787 | SpotIE Internet Explorer Password Recovery 2.9.5 contains a denial of service vulnerability in the registration key input field that allows local attackers to crash the application |
| CVE-2019-25464 | Deferred | 未確認 | CWE-770 | InputMapper 1.6.10 contains a buffer overflow vulnerability in the username field that allows local attackers to crash the application by entering an excessively long string. Attac |
| CVE-2019-25465 | Deferred | 未確認 | CWE-260 | Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listin |
| CVE-2019-25466 | Deferred | 未確認 | CWE-787 | Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by creating a ma |
| CVE-2019-25467 | Deferred | 未確認 | CWE-787 | Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alph |
| CVE-2019-25468 | Deferred | 未確認 | CWE-94 | NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters |
| CVE-2019-25469 | Deferred | 未確認 | CWE-787 | Folder Lock 7.7.9 contains a buffer overflow vulnerability in the serial number registration field that allows local attackers to crash the application by submitting an oversized p |
| CVE-2019-25470 | Deferred | 未確認 | CWE-798 | eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user data by exploiting the w |
| CVE-2019-25471 | Analyzed | 未確認 | CWE-22 | FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint. Attackers ca |
| CVE-2019-25472 | Awaiting Analysis | 未確認 | CWE-73 | IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServer.exx endpoint. Att |
| CVE-2019-25473 | Deferred | 未確認 | CWE-89 | Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month parameter. Attackers ca |
| CVE-2019-25474 | Deferred | 未確認 | CWE-787 | Easy MP3 Downloader 4.7.8.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long unlock code. Attackers ca |
| CVE-2019-25475 | Deferred | 未確認 | CWE-787 | SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can inje |
| CVE-2019-25476 | Deferred | 未確認 | CWE-787 | Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can create |
| CVE-2019-25477 | Deferred | 未確認 | CWE-787 | RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialo |
| CVE-2019-25478 | Deferred | 未確認 | CWE-787 | GetGo Download Manager 6.2.2.3300 contains a buffer overflow vulnerability that allows remote attackers to cause denial of service by sending HTTP responses with excessively long h |
| CVE-2019-25479 | Deferred | 未確認 | CWE-89 | Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the city parameter. Atta |
| CVE-2019-25480 | Deferred | 未確認 | CWE-22 | ARMBot contains an unrestricted file upload vulnerability in upload.php that allows unauthenticated attackers to upload arbitrary files by manipulating the file parameter with path |
| CVE-2019-25481 | Deferred | 未確認 | CWE-89 | iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the jqSearchDestina |
| CVE-2019-25482 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code th |
| CVE-2019-25483 | Deferred | 未確認 | CWE-306 | Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows local users to bypass command restrictions by using the command subs |
| CVE-2019-25484 | Deferred | 未確認 | CWE-787 | WinMPG iPod Convert 3.0 contains a buffer overflow vulnerability in the Register dialog that allows local attackers to crash the application by supplying an oversized payload. Atta |
| CVE-2019-25485 | Deferred | 未確認 | CWE-787 | R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers |
| CVE-2019-25486 | Deferred | 未確認 | CWE-89 | Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user_id parameter. Atta |
| CVE-2019-25487 | Deferred | 未確認 | CWE-639 | SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to |
| CVE-2019-25488 | Analyzed | 未確認 | CWE-89 | Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database queries through G |
| CVE-2019-25498 | Analyzed | 未確認 | CWE-89 | Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landing_location pa |
| CVE-2019-25499 | Analyzed | 未確認 | CWE-89 | Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter. A |
| CVE-2019-25500 | Analyzed | 未確認 | CWE-89 | Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employerid paramete |
| CVE-2019-25501 | Analyzed | 未確認 | CWE-89 | Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_id parameter. Attacke |
| CVE-2019-25502 | Analyzed | 未確認 | CWE-79 | Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value parameter in th |
| CVE-2019-25503 | Analyzed | 未確認 | CWE-89 | PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter |
| CVE-2019-25504 | Deferred | 未確認 | CWE-89 | NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience paramete |
| CVE-2019-25505 | Analyzed | 未確認 | CWE-89 | Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attacker |
| CVE-2019-25506 | Analyzed | 未確認 | CWE-89 | FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL c |
| CVE-2019-25507 | Deferred | 未確認 | CWE-89 | Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'shop' p |
| CVE-2019-25508 | Analyzed | 未確認 | CWE-89 | Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through |
| CVE-2019-25509 | Deferred | 未確認 | CWE-89 | XooDigital Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter. Atta |
| CVE-2019-25510 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative a |
| CVE-2019-25511 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through |
| CVE-2019-25512 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST reques |
| CVE-2019-25513 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through |
| CVE-2019-25514 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST reques |
| CVE-2019-25515 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers to gain admini |
| CVE-2019-25516 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through |
| CVE-2019-25517 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through |
| CVE-2019-25518 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through |
| CVE-2019-25519 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the o |
| CVE-2019-25520 | Analyzed | 未確認 | CWE-89 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative a |
| CVE-2019-25521 | Analyzed | 未確認 | CWE-89 | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the gal_id parameter. A |
| CVE-2019-25522 | Analyzed | 未確認 | CWE-89 | XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through the photo_id par |
| CVE-2019-25523 | Analyzed | 未確認 | CWE-89 | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter. A |
| CVE-2019-25524 | Analyzed | 未確認 | CWE-89 | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter. Atta |
| CVE-2019-25525 | Analyzed | 未確認 | CWE-89 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the |
| CVE-2019-25526 | Analyzed | 未確認 | CWE-89 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the |
| CVE-2019-25527 | Analyzed | 未確認 | CWE-89 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the |
| CVE-2019-25528 | Analyzed | 未確認 | CWE-89 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the |
| CVE-2019-25529 | Deferred | 未確認 | CWE-89 | Placeto CMS Alpha rv.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'page' parameter |
| CVE-2019-25530 | Deferred | 未確認 | CWE-89 | uHotelBooking System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the system_page GET |
| CVE-2019-25531 | Deferred | 未確認 | CWE-89 | Netartmedia Deals Portal contains an SQL injection vulnerability in the Email parameter of loginaction.php that allows unauthenticated attackers to manipulate database queries. Att |
| CVE-2019-25532 | Deferred | 未確認 | CWE-89 | Netartmedia Jobs Portal 6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email par |
| CVE-2019-25533 | Deferred | 未確認 | CWE-89 | Netartmedia PHP Business Directory 4.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th |
| CVE-2019-25534 | Deferred | 未確認 | CWE-89 | Netartmedia PHP Car Dealer contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the fe |
| CVE-2019-25535 | Deferred | 未確認 | CWE-89 | Netartmedia PHP Dating Site contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email para |
| CVE-2019-25536 | Analyzed | 未確認 | CWE-89 | Netartmedia PHP Real Estate Agency 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code th |
| CVE-2019-25537 | Deferred | 未確認 | CWE-89 | Netartmedia Event Portal 2.0 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thro |
| CVE-2019-25538 | Analyzed | 未確認 | CWE-89 | 202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. A |
| CVE-2019-25539 | Analyzed | 未確認 | CWE-89 | 202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user paramet |
| CVE-2019-25540 | Analyzed | 未確認 | CWE-89 | Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various p |
| CVE-2019-25541 | Analyzed | 未確認 | CWE-89 | Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through unvalidated parameters. Attacke |
| CVE-2019-25542 | Analyzed | 未確認 | CWE-89 | Netartmedia Real Estate Portal 5.0 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the use |
| CVE-2019-25543 | Analyzed | 未確認 | CWE-89 | Netartmedia Real Estate Portal 5.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the pa |
| CVE-2019-25544 | Analyzed | 未確認 | CWE-807 | Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creati |
| CVE-2019-25545 | Analyzed | 未確認 | CWE-787 | Terminal Services Manager 3.2.1 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string in the compute |
| CVE-2019-25546 | Analyzed | 未確認 | CWE-787 | NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local attackers to crash the application by supplying an excessively long string. Attacke |
| CVE-2019-25547 | Analyzed | 未確認 | CWE-787 | NetAware 1.20 contains a buffer overflow vulnerability in the User Blocking feature that allows local attackers to crash the application by supplying oversized input. Attackers can |
| CVE-2019-25548 | Analyzed | 未確認 | CWE-466 | BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the search field. Attackers |
| CVE-2019-25549 | Analyzed | 未確認 | CWE-787 | VeryPDF PCL Converter 2.7 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long password string. Attacker |
| CVE-2019-25550 | Analyzed | 未確認 | CWE-787 | Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputting excessively long strings into password fields. Attackers |
| CVE-2019-25551 | Analyzed | 未確認 | CWE-1282, CWE-1284 | Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Program Alerts configu |
| CVE-2019-25552 | Analyzed | 未確認 | CWE-836 | CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field. Atta |
| CVE-2019-25553 | Analyzed | 未確認 | CWE-226 | CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file. Attackers can |
| CVE-2019-25554 | Analyzed | 未確認 | CWE-787 | Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name fie |
| CVE-2019-25555 | Analyzed | 未確認 | CWE-131 | TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an exces |
| CVE-2019-25556 | Analyzed | 未確認 | CWE-787 | TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessive |
| CVE-2019-25557 | Analyzed | 未確認 | CWE-775 | TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers c |
| CVE-2019-25558 | Analyzed | 未確認 | CWE-787 | Selfie Studio 2.17 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buf |
| CVE-2019-25559 | Analyzed | 未確認 | CWE-1260 | SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively |
| CVE-2019-25560 | Analyzed | 未確認 | CWE-226 | Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted |
| CVE-2019-25561 | Analyzed | 未確認 | CWE-787 | Lyric Maker 2.0.1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Title field. Attack |
| CVE-2019-25562 | Analyzed | 未確認 | CWE-787 | jetAudio 8.1.7 contains a buffer overflow vulnerability in the video converter component that allows local attackers to crash the application by supplying an oversized string in th |
| CVE-2019-25563 | Analyzed | 未確認 | CWE-226 | PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image file. Attackers can trigger the |
| CVE-2019-25564 | Analyzed | 未確認 | CWE-787 | PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Group field. Att |
| CVE-2019-25565 | Analyzed | 未確認 | CWE-787 | Magic Iso Maker 5.5 build 281 contains a buffer overflow vulnerability in the Serial Code registration field that allows local attackers to crash the application by submitting an o |
| CVE-2019-25566 | Analyzed | 未確認 | CWE-787 | TransMac 12.3 contains a buffer overflow vulnerability in the volume name field that allows local attackers to crash the application by supplying an excessively long string. Attack |
| CVE-2019-25567 | Analyzed | 未確認 | CWE-787 | Valentina Studio 9.0.5 Linux contains a buffer overflow vulnerability in the Host field of the connection dialog that allows local attackers to crash the application by supplying a |
| CVE-2019-25568 | Analyzed | 未確認 | CWE-306 | Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable. Attackers ca |
| CVE-2019-25569 | Analyzed | 未確認 | CWE-787 | RealTerm Serial Terminal 2.0.0.70 contains a stack-based buffer overflow vulnerability in the Echo Port field that allows local attackers to crash the application by triggering a s |
| CVE-2019-25570 | Analyzed | 未確認 | CWE-1260 | RealTerm Serial Terminal 2.0.0.70 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Por |
| CVE-2019-25571 | Analyzed | 未確認 | CWE-226 | MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing an excessively |
| CVE-2019-25572 | Analyzed | 未確認 | CWE-1260 | NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. At |
| CVE-2019-25573 | Analyzed | 未確認 | CWE-89 | Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter. At |
| CVE-2019-25574 | Analyzed | 未確認 | CWE-22 | Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences. At |
| CVE-2019-25575 | Analyzed | 未確認 | CWE-89 | SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'p' and |
| CVE-2019-25576 | Analyzed | 未確認 | CWE-89 | Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the cate |
| CVE-2019-25577 | Analyzed | 未確認 | CWE-22 | SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by manipulating path parameters in backend them |
| CVE-2019-25578 | Modified | 未確認 | CWE-89 | phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idnews parameter |
| CVE-2019-25579 | Analyzed | 未確認 | CWE-22 | phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter. Attackers can |
| CVE-2019-25580 | Analyzed | 未確認 | CWE-434 | ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter. Att |
| CVE-2019-25581 | Analyzed | 未確認 | CWE-89 | i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the objGroupID p |
| CVE-2019-25582 | Analyzed | 未確認 | CWE-434 | i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php. |
| CVE-2019-25583 | Analyzed | 未確認 | CWE-1282 | RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that allows local attackers to crash the application by submitting excessively long input. Attack |
| CVE-2019-25584 | Analyzed | 未確認 | CWE-787 | RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that allows local attackers to crash the application by supplying an excessiv |
| CVE-2019-25585 | Analyzed | 未確認 | CWE-1260 | Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attacke |
| CVE-2019-25586 | Analyzed | 未確認 | CWE-466 | Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers ca |
| CVE-2019-25587 | Analyzed | 未確認 | CWE-1282 | BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration parameter that allows local attackers to crash the application by su |
| CVE-2019-25588 | Analyzed | 未確認 | CWE-1282 | BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessiv |
| CVE-2019-25589 | Analyzed | 未確認 | CWE-787 | ZOC Terminal 7.23.4 contains a buffer overflow vulnerability in the Shell field of Program Settings that allows local attackers to crash the application by supplying an excessively |
| CVE-2019-25590 | Deferred | 未確認 | CWE-1282 | Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in t |
| CVE-2019-25591 | Deferred | 未確認 | CWE-787 | DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attackers to crash the application by submitt |
| CVE-2019-25592 | Deferred | 未確認 | CWE-1260 | PHPRunner 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the dashboard name field. |
| CVE-2019-25593 | Deferred | 未確認 | CWE-1285 | jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Log directory conf |
| CVE-2019-25594 | Deferred | 未確認 | CWE-807 | ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the table name field. |
| CVE-2019-25595 | Deferred | 未確認 | CWE-469 | jetAudio 8.1.7.20702 Basic contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string through the URL i |
| CVE-2019-25596 | Analyzed | 未確認 | CWE-1287 | SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an excessively long string |
| CVE-2019-25597 | Analyzed | 未確認 | CWE-787 | NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the application by supplying an excessively long |
| CVE-2019-25598 | Deferred | 未確認 | CWE-787 | HeidiSQL Portable 10.1.0.5464 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the passwor |
| CVE-2019-25599 | Deferred | 未確認 | CWE-466 | Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. |
| CVE-2019-25600 | Deferred | 未確認 | CWE-787 | UltraVNC Viewer 1.2.2.4 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized string to the VNC Server input field. At |
| CVE-2019-25601 | Deferred | 未確認 | CWE-787 | UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an exc |
| CVE-2019-25602 | Deferred | 未確認 | CWE-1260 | GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the search bar. Attackers |
| CVE-2019-25603 | Deferred | 未確認 | CWE-787 | TuneClone 2.20 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license co |
| CVE-2019-25604 | Deferred | 未確認 | CWE-787 | DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local attackers to execute arbitrary code by crafting malicious pla |
| CVE-2019-25605 | Deferred | 未確認 | CWE-612 | EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge |
| CVE-2019-25606 | Deferred | 未確認 | CWE-787 | Fast AVI MPEG Joiner 1.2.0812 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the License Name fi |
| CVE-2019-25607 | Deferred | 未確認 | CWE-787 | Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers to execute arbitrary code by supplying an excessively long fi |
| CVE-2019-25608 | Deferred | 未確認 | CWE-520 | Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbitrary programs with elevated privileges by creating backup jobs. A |
| CVE-2019-25609 | Deferred | 未確認 | CWE-787 | JetAudio jetCast Server 2.0 contains a stack-based buffer overflow vulnerability in the Log Directory configuration field that allows local attackers to overwrite structured except |
| CVE-2019-25610 | Deferred | 未確認 | CWE-22 | NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecting directory traversa |
| CVE-2019-25611 | Deferred | 未確認 | CWE-787 | MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attackers to execute arbitrary code by supplying oversized configuration v |
| CVE-2019-25612 | Deferred | 未確認 | CWE-787 | Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an alphanume |
| CVE-2019-25613 | Analyzed | 未確認 | CWE-940 | Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message parameter. Attackers |
| CVE-2019-25614 | Analyzed | 未確認 | CWE-787 | Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request wit |
| CVE-2019-25615 | Deferred | 未確認 | CWE-787 | Lavavo CD Ripper 4.20 contains a structured exception handling (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious st |
| CVE-2019-25616 | Deferred | 未確認 | CWE-434 | AnMing MP3 CD Burner 2.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string. Attackers can paste a 6000- |
| CVE-2019-25617 | Deferred | 未確認 | CWE-226 | Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 f |
| CVE-2019-25618 | Deferred | 未確認 | CWE-73 | AdminExpress 1.2.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the System Compare feature. |
| CVE-2019-25619 | Analyzed | 未確認 | CWE-787 | FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted strin |
| CVE-2019-25620 | Analyzed | 未確認 | CWE-168 | Tree Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attack |
| CVE-2019-25621 | Analyzed | 未確認 | CWE-807 | Pixel Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attac |
| CVE-2019-25622 | Analyzed | 未確認 | CWE-1285 | Paint Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the key entry mechanism. Atta |
| CVE-2019-25623 | Analyzed | 未確認 | CWE-641 | Luminance Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. A |
| CVE-2019-25624 | Analyzed | 未確認 | CWE-606 | Liquid Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Atta |
| CVE-2019-25625 | Analyzed | 未確認 | CWE-1285 | Blob Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the key entry mechanism. Attac |
| CVE-2019-25626 | Analyzed | 未確認 | CWE-434 | River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows local attackers to execute arbitrary code by supplying a malic |
| CVE-2019-25627 | Analyzed | 未確認 | CWE-434 | FlexHEX 2.71 contains a local buffer overflow vulnerability in the Stream Name field that allows local attackers to execute arbitrary code by triggering a structured exception hand |
| CVE-2019-25628 | Awaiting Analysis | 未確認 | CWE-787 | Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting mali |
| CVE-2019-25629 | Analyzed | 未確認 | CWE-787 | AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execute arbitrary code by |
| CVE-2019-25630 | Modified | 未確認 | CWE-434 | PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requ |
| CVE-2019-25631 | Analyzed | 未確認 | CWE-787 | AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH pointers w |
| CVE-2019-25632 | Analyzed | 未確認 | CWE-306 | phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current_dir, and fil |
| CVE-2019-25633 | Analyzed | 未確認 | CWE-787 | AIDA64 Extreme 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input t |
| CVE-2019-25634 | Analyzed | 未確認 | CWE-787 | Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler (SEH) o |
| CVE-2019-25635 | Analyzed | 未確認 | CWE-89 | Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_list endpoint. Attacke |
| CVE-2019-25636 | Analyzed | 未確認 | CWE-89 | Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' GET paramete |
| CVE-2019-25637 | Awaiting Analysis | 未確認 | CWE-787 | X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-byte buffer ov |
| CVE-2019-25638 | Deferred | 未確認 | CWE-89 | Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t |
| CVE-2019-25639 | Deferred | 未確認 | CWE-89 | Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through va |
| CVE-2019-25640 | Deferred | 未確認 | CWE-89 | Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters. Attackers can |
| CVE-2019-25641 | Deferred | 未確認 | CWE-89 | Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email paramet |
| CVE-2019-25642 | Deferred | 未確認 | CWE-89 | Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parame |
| CVE-2019-25643 | Deferred | 未確認 | CWE-89 | eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the |
| CVE-2019-25644 | Analyzed | 未確認 | CWE-787 | WinMPG Video Convert 9.3.5 and older versions contain a buffer overflow vulnerability in the registration dialog that allows local attackers to crash the application by supplying o |
| CVE-2019-25645 | Awaiting Analysis | 未確認 | CWE-226 | WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by processing malformed AVI files. Attackers |
| CVE-2019-25646 | Analyzed | 未確認 | CWE-787 | Tabs Mail Carrier 2.5.1 contains a buffer overflow vulnerability in the MAIL FROM SMTP command that allows remote attackers to execute arbitrary code by sending a crafted MAIL FROM |
| CVE-2019-25647 | Analyzed | 未確認 | CWE-434 | PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing |
| CVE-2019-25648 | Deferred | 未確認 | CWE-787 | MyVideoConverter Pro 3.14 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string to the registration |
| CVE-2019-25649 | Awaiting Analysis | 未確認 | CWE-787 | River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by supplying an o |
| CVE-2019-25650 | Deferred | 未確認 | CWE-787 | River Past CamDo 3.7.6 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious st |
| CVE-2019-25651 | Awaiting Analysis | 未確認 | CWE-327 | Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6.42), UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG F |
| CVE-2019-25652 | Awaiting Analysis | 未確認 | CWE-295 | UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent network attackers to cond |
| CVE-2019-25653 | Analyzed | 未確認 | CWE-620 | Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the password f |
| CVE-2019-25654 | Analyzed | 未確認 | CWE-787 | Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field. Attac |
| CVE-2019-25655 | Analyzed | 未確認 | CWE-1316 | Device Monitoring Studio 8.10.00.8925 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the |
| CVE-2021-35483 | Analyzed | 未確認 | CWE-79 | The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/a |
| CVE-2021-35484 | Analyzed | 未確認 | CWE-89 | Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/st |
| CVE-2021-35485 | Analyzed | 未確認 | CWE-434 | The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/ |
| CVE-2021-35486 | Analyzed | 未確認 | CWE-352 | A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application confi |
| CVE-2021-4474 | Awaiting Analysis | 未確認 | CWE-552 | Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to |
| CVE-2022-4947 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-32111. Reason: This candidate is a reservation duplicate of CVE-2024-32111. Notes: All CVE user | |
| CVE-2022-4977 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2023-27573 | Analyzed | 未確認 | CWE-1392, CWE-798 | netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSER_ |
| CVE-2023-31044 | Analyzed | 未確認 | CWE-94 | An issue was discovered in Nokia Impact before Mobile 23_FP1. In Impact DM 19.11 onwards, a remote authenticated user, using the Add Campaign functionality, can inject a malicious |
| CVE-2023-40693 | Analyzed | 未確認 | CWE-79 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, and 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1 are vulnerable to cross-site scripting |
| CVE-2023-43010 | Modified | 未確認 | CWE-120, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS 16.7.15, iOS 15.8.7 a |
| CVE-2023-7337 | Deferred | 未確認 | CWE-89 | The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the 'js-support-ticket-token-tkstatus' cookie in version 2.8.2 due |
| CVE-2023-7338 | Awaiting Analysis | 未確認 | CWE-78 | Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the sy |
| CVE-2023-7339 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. This issue affects pnGate: through 1.30 epGate: through 1.30 mbGat |
| CVE-2023-7340 | Analyzed | 未確認 | CWE-125 | Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can |
| CVE-2024-11604 | Awaiting Analysis | 未確認 | CWE-532 | Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authenticated local |
| CVE-2024-13785 | Deferred | 未確認 | CWE-94 | The The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.2. T |
| CVE-2024-14024 | Analyzed | 未確認 | CWE-295 | An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, |
| CVE-2024-14025 | Analyzed | 未確認 | CWE-89 | An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exp |
| CVE-2024-14026 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If an attacker gains local network access who have also gained a user account, |
| CVE-2024-14027 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexattr() syscall calls fdg |
| CVE-2024-14028 | Awaiting Analysis | 未確認 | CWE-416 | Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS. This issue affects: smartLink HW-DP: through 1.31 smartLink HW-PN: before 1.02 |
| CVE-2024-14030 | Analyzed | 未確認 | CWE-787 | Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Decoder embeds a version of the Zstandard (zstd) libra |
| CVE-2024-14031 | Analyzed | 未確認 | CWE-787 | Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Encoder embeds a version of the Zstandard (zstd) libra |
| CVE-2024-31119 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Vasilis Triantafyllou Special Box for Content allows DOM-Based XSS.This issue |
| CVE-2024-31328 | Modified | 未確認 | CWE-693 | In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone due to a logic |
| CVE-2024-32537 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in joshuae1974 Flash Video Player allows Cross Site Request Forgery.This issue affects Flash Video Player: from n/a through 5.0.4. |
| CVE-2024-35644 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pascal Birchler Preferred Languages allows DOM-Based XSS.This issue aff |
| CVE-2024-42210 | Modified | 未確認 | CWE-79 | A Stored cross-site scripting (XSS) vulnerability affects HCL Unica Marketing Operations v12.1.8 and lower. Stored cross-site scripting (also known as second-order or persistent X |
| CVE-2024-43035 | Deferred | 未確認 | CWE-24 | Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint. This occurs in serveFiles in mods/voice |
| CVE-2024-43766 | Modified | 未確認 | CWE-319 | In multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to Invalid error handling. This could lead to remote (proximal/adjacent) information disc |
| CVE-2024-44722 | Analyzed | 未確認 | CWE-94 | SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd. |
| CVE-2024-46878 | Analyzed | 未確認 | CWE-79 | A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitr |
| CVE-2024-46879 | Analyzed | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2. This vulnerability allows attackers to e |
| CVE-2024-47886 | Analyzed | 未確認 | CWE-502 | Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a remote code execution (RCE) within versions 1.11.12 to 1.11 |
| CVE-2024-50337 | Analyzed | 未確認 | CWE-918 | Chamilo is a learning management system. Prior to version 1.11.28, the OpenId function allows anyone to send requests to any URL on server's behalf, which results in unauthenticate |
| CVE-2024-51222 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web |
| CVE-2024-51223 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web |
| CVE-2024-51224 | Analyzed | 未確認 | CWE-79 | Multiple cross-site scripting (XSS) vulnerabilities in the component /admin/edit-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitra |
| CVE-2024-51225 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the component /admin/add-brand.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary we |
| CVE-2024-51226 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the component /admin/search-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitra |
| CVE-2024-51346 | Awaiting Analysis | 未確認 | CWE-330 | An issue in Eufy Homebase 2 version 3.3.4.1h allows a local attacker to obtain sensitive information via the cryptographic scheme. |
| CVE-2024-51347 | Awaiting Analysis | 未確認 | CWE-120 | A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The flaw exists in the handling of the Time Zone (TZ) parameter within the ONVIF configur |
| CVE-2024-51348 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with firmware 33.1.0.0818 allows unauthenticated attackers within network range to overwri |
| CVE-2024-55019 | Analyzed | 未確認 | CWE-284 | Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary files |
| CVE-2024-55020 | Analyzed | 未確認 | CWE-20, CWE-78 | A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands wit |
| CVE-2024-55021 | Analyzed | 未確認 | CWE-78, CWE-798 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol. |
| CVE-2024-55022 | Analyzed | 未確認 | CWE-94 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter. |
| CVE-2024-55023 | Analyzed | 未確認 | CWE-798 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information. |
| CVE-2024-55024 | Analyzed | 未確認 | CWE-693 | An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative a |
| CVE-2024-55025 | Analyzed | 未確認 | CWE-284 | Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system. |
| CVE-2024-55026 | Analyzed | 未確認 | CWE-256 | An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET r |
| CVE-2024-55027 | Analyzed | 未確認 | CWE-312, CWE-798 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db. |
| CVE-2024-57854 | Analyzed | 未確認 | CWE-338 | Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generatio |
| CVE-2024-58341 | Analyzed | 未確認 | CWE-89 | OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'search' paramet |
| CVE-2025-10350 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including d |
| CVE-2025-10461 | Awaiting Analysis | 未確認 | CWE-20 | Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access. This issue affec |
| CVE-2025-10551 | Analyzed | 未確認 | CWE-79 | A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERI |
| CVE-2025-10553 | Analyzed | 未確認 | CWE-79 | A Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERI |
| CVE-2025-10559 | Analyzed | 未確認 | CWE-22 | A Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows |
| CVE-2025-10679 | Deferred | 未確認 | CWE-94 | The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary method calls in all ve |
| CVE-2025-10685 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects: |
| CVE-2025-10731 | Deferred | 未確認 | CWE-285 | The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure i |
| CVE-2025-10734 | Deferred | 未確認 | CWE-922 | The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure i |
| CVE-2025-10736 | Deferred | 未確認 | CWE-285 | The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due |
| CVE-2025-11143 | Analyzed | 未確認 | CWE-20 | The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may |
| CVE-2025-11158 | Analyzed | 未確認 | CWE-862 | Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published by users, all |
| CVE-2025-11500 | Deferred | 未確認 | CWE-201, CWE-261 | Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one for protecting |
| CVE-2025-11571 | Awaiting Analysis | 未確認 | CWE-78 | Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution. The commands allowed to execute can open executables. However, the c |
| CVE-2025-11739 | Analyzed | 未確認 | CWE-502 | CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends |
| CVE-2025-11790 | Analyzed | 未確認 | CWE-732 | Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41 |
| CVE-2025-11791 | Analyzed | 未確認 | CWE-862 | Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) be |
| CVE-2025-11792 | Analyzed | 未確認 | CWE-427 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 41124. |
| CVE-2025-12345 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in LLM-Claw 0.1.0/0.1.1/0.1.1a/0.1.1a-p1. The affected element is the function agent_deploy_init of the file /agents/deploy/initiate.c of |
| CVE-2025-12453 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Refle |
| CVE-2025-12454 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Refle |
| CVE-2025-12455 | Analyzed | 未確認 | CWE-204 | Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing. The vulnerability could lead to Password Brute Forcing in Vertica management con |
| CVE-2025-12462 | Deferred | 未確認 | CWE-89 | A Blind SQL injection vulnerability has been identified in DobryCMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in multiple parameters resulting |
| CVE-2025-12473 | Deferred | 未確認 | CWE-79 | The RTMKit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'themebuilder' parameter in all versions up to, and including, 1.6.8 due to insufficient inp |
| CVE-2025-12518 | Deferred | 未確認 | CWE-79 | beefree.io SDK is vulnerable to Stored XSS in Social Media icon URL parameter in email builder functionality. Malicious attacker can inject arbitrary HTML and JS into template, whi |
| CVE-2025-12555 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain conditions, could have |
| CVE-2025-12576 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that under certain conditions could have al |
| CVE-2025-12690 | Analyzed | 未確認 | CWE-250 | Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affects NGFW Engine through 6.10.19, through 7.3.0, through 7.2.4, thro |
| CVE-2025-12697 | Analyzed | 未確認 | CWE-116 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated u |
| CVE-2025-12704 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user |
| CVE-2025-12708 | Analyzed | 未確認 | CWE-798 | IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user. |
| CVE-2025-12736 | Analyzed | 未確認 | CWE-908 | in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource. |
| CVE-2025-12801 | Modified | 未確認 | CWE-279, CWE-732 | A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /et |
| CVE-2025-12805 | Analyzed | 未確認 | CWE-653 | A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct |
| CVE-2025-12886 | Deferred | 未確認 | CWE-918 | The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laborator_calc_route AJAX action. This makes i |
| CVE-2025-13067 | Deferred | 未確認 | CWE-434 | The Royal Addons for Elementor plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.7.1049. This is due to insufficient file type val |
| CVE-2025-13078 | Analyzed | 未確認 | CWE-1284 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticate |
| CVE-2025-13212 | Analyzed | 未確認 | CWE-799 | IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency. |
| CVE-2025-13213 | Analyzed | 未確認 | CWE-644 | IBM Aspera Orchestrator 3.0.0 through 4.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to cond |
| CVE-2025-13219 | Analyzed | 未確認 | CWE-598 | IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs |
| CVE-2025-13337 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-13350 | Awaiting Analysis | 未確認 | CWE-416 | Ubuntu Linux 6.8 GA retains the legacy AF_UNIX garbage collector but backports upstream commit 8594d9b85c07 ("af_unix: Don’t call skb_get() for OOB skb"). When orphaned MSG_OOB soc |
| CVE-2025-13406 | Awaiting Analysis | 未確認 | CWE-476 | NULL Pointer Dereference vulnerability in Softing Industrial Automation GmbH smartLink SW-HT (Webserver modules) allows HTTP DoS.This issue affects smartLink SW-HT: 1.43. |
| CVE-2025-13436 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated |
| CVE-2025-13459 | Analyzed | 未確認 | CWE-841 | IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral workflow. |
| CVE-2025-13460 | Analyzed | 未確認 | CWE-204 | IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy. |
| CVE-2025-13462 | Analyzed | 未確認 | CWE-20, CWE-434, CWE-74 | The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. |
| CVE-2025-13476 | Analyzed | 未確認 | CWE-327 | Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep |
| CVE-2025-13478 | Awaiting Analysis | 未確認 | CWE-522 | Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application |
| CVE-2025-13490 | Modified | 未確認 | CWE-319 | IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Containers Oper |
| CVE-2025-13616 | Analyzed | 未確認 | CWE-497 | IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system. |
| CVE-2025-13686 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper va |
| CVE-2025-13687 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper va |
| CVE-2025-13688 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper va |
| CVE-2025-13690 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated |
| CVE-2025-13702 | Modified | 未確認 | CWE-79 | IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user t |
| CVE-2025-13718 | Analyzed | 未確認 | CWE-319 | IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote attacker to obtain sensitive information in cleartext in a communic |
| CVE-2025-13723 | Analyzed | 未確認 | CWE-324 | IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive user information using an expired access tok |
| CVE-2025-13726 | Analyzed | 未確認 | CWE-209 | IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote attacker to obtain sensitive information when detailed technical er |
| CVE-2025-13734 | Analyzed | 未確認 | CWE-862, CWE-863 | IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions. |
| CVE-2025-13777 | Deferred | 未確認 | CWE-294 | Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1. |
| CVE-2025-13778 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1. |
| CVE-2025-13779 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1. |
| CVE-2025-13901 | Analyzed | 未確認 | CWE-404 | CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends mali |
| CVE-2025-13902 | Analyzed | 未確認 | CWE-79 | CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attackers can have a |
| CVE-2025-13910 | Deferred | 未確認 | CWE-79 | The WP-WebAuthn plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the `wwa_auth` AJAX endpoint in all versions up to, and including, 1.3.4 due t |
| CVE-2025-13913 | Analyzed | 未確認 | CWE-502 | A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code. |
| CVE-2025-13929 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated |
| CVE-2025-13957 | Awaiting Analysis | 未確認 | CWE-798 | CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credent |
| CVE-2025-13995 | Analyzed | 未確認 | CWE-1286 | IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account. |
| CVE-2025-13997 | Deferred | 未確認 | CWE-200 | The King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor plugin for WordPress is vulnerable to unauthenticated API key disclo |
| CVE-2025-14031 | Analyzed | 未確認 | CWE-77 | IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow an unauthenti |
| CVE-2025-14037 | Deferred | 未確認 | CWE-352 | The Invelity Product Feeds plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 1.2.6. This is due to missing vali |
| CVE-2025-14213 | Awaiting Analysis | 未確認 | CWE-20, CWE-78 | Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute a |
| CVE-2025-14287 | Modified | 未確認 | CWE-78, CWE-94 | A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 161-167. The vulnerability arises |
| CVE-2025-14353 | Deferred | 未確認 | CWE-89 | The ZIP Code Based Content Protection plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 via the 'zipcode' parameter. This is due to in |
| CVE-2025-14456 | Analyzed | 未確認 | CWE-327 | IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1 |
| CVE-2025-14480 | Analyzed | 未確認 | CWE-327 | IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information |
| CVE-2025-14483 | Analyzed | 未確認 | CWE-201 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could disclose sensitive host |
| CVE-2025-14504 | Analyzed | 未確認 | CWE-79 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 is vulnerable to cross-site s |
| CVE-2025-14513 | Analyzed | 未確認 | CWE-1284 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticate |
| CVE-2025-14532 | Analyzed | 未確認 | CWE-434 | DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execut |
| CVE-2025-14558 | Analyzed | 未確認 | CWE-20 | The rtsol(8) and rtsold(8) programs do not validate the domain search list options provided in router advertisement messages; the option body is passed to resolvconf(8) unmodified. |
| CVE-2025-14595 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions could have al |
| CVE-2025-14604 | Analyzed | 未確認 | CWE-732 | IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissi |
| CVE-2025-14675 | Deferred | 未確認 | CWE-22 | The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_delete_file' function in all versions up to, and in |
| CVE-2025-14684 | Analyzed | 未確認 | CWE-117 | IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of specia |
| CVE-2025-14716 | Deferred | 未確認 | CWE-287 | Improper Authentication vulnerability in Secomea GateManager (webserver modules) allows Authentication Bypass.This issue affects GateManager: 11.4;0. |
| CVE-2025-14769 | Analyzed | 未確認 | CWE-476 | In some cases, the `tcp-setmss` handler may free the packet data and throw an error without halting the rule processing engine. A subsequent rule can then allow the traffic after |
| CVE-2025-14790 | Analyzed | 未確認 | CWE-522 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information due to insufficiently protected credentials. |
| CVE-2025-14806 | Analyzed | 未確認 | CWE-524 | IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing and serving sensitive, user-specific responses as publicly cac |
| CVE-2025-14807 | Analyzed | 未確認 | CWE-644 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an |
| CVE-2025-14808 | Analyzed | 未確認 | CWE-598 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request |
| CVE-2025-14810 | Analyzed | 未確認 | CWE-613 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 does not invalidate a session after privileges have been modified which could allow an authenticated user to retain acce |
| CVE-2025-14811 | Analyzed | 未確認 | CWE-598 | IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query string of an HTTP |
| CVE-2025-14912 | Analyzed | 未確認 | CWE-918 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized reque |
| CVE-2025-14915 | Analyzed | 未確認 | CWE-200 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by privilege escalation. A privileged user could gain addi |
| CVE-2025-14917 | Analyzed | 未確認 | CWE-1393 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when administering securit |
| CVE-2025-14923 | Analyzed | 未確認 | CWE-321, CWE-798 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using the Security Ut |
| CVE-2025-14974 | Analyzed | 未確認 | CWE-639 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable due to Insecure Direct Object Reference (IDOR). |
| CVE-2025-15031 | Modified | 未確認 | CWE-22 | A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of `tarfile.extractall |
| CVE-2025-15036 | Modified | 未確認 | CWE-22, CWE-29 | A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vul |
| CVE-2025-15037 | Awaiting Analysis | 未確認 | CWE-732 | An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user send |
| CVE-2025-15038 | Awaiting Analysis | 未確認 | CWE-125 | An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specia |
| CVE-2025-15051 | Analyzed | 未確認 | CWE-79 | IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a |
| CVE-2025-15060 | Awaiting Analysis | 未確認 | CWE-78 | claude-hovercraft executeClaudeCode Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa |
| CVE-2025-15101 | Modified | 未確認 | CWE-78 | An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary system commands |
| CVE-2025-15363 | Deferred | 未確認 | CWE-79 | The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks under cer |
| CVE-2025-15379 | Analyzed | 未確認 | CWE-77, CWE-78 | A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function. When deployin |
| CVE-2025-15381 | Modified | 未確認 | CWE-200, CWE-425 | In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authentic |
| CVE-2025-15433 | Deferred | 未確認 | The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal | |
| CVE-2025-15445 | Deferred | 未確認 | CWE-862 | The Restaurant Cafeteria WordPress theme through 0.4.6 exposes insecure admin-ajax actions without nonce or capability checks, allowing any logged-in user, like subscriber, to perf |
| CVE-2025-15473 | Deferred | 未確認 | CWE-862 | The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and pos |
| CVE-2025-15488 | Deferred | 未確認 | The Responsive Plus WordPress plugin before 3.4.3 is vulnerable to arbitrary shortcode execution due to the software allowing unauthenticated users to execute the update_responsiv | |
| CVE-2025-15515 | Analyzed | 未確認 | CWE-306 | The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific conditions are met on a local network, it can cause data leakage |
| CVE-2025-15517 | Analyzed | 未確認 | CWE-306 | A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated |
| CVE-2025-15518 | Analyzed | 未確認 | CWE-78 | Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating |
| CVE-2025-15519 | Analyzed | 未確認 | CWE-78 | Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating |
| CVE-2025-15540 | Analyzed | 未確認 | CWE-94 | "Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restrictions, JavaScript co |
| CVE-2025-15547 | Analyzed | 未確認 | CWE-269 | By default, jailed processes cannot mount filesystems, including nullfs(4). However, the allow.mount.nullfs option enables mounting nullfs filesystems, subject to privilege checks |
| CVE-2025-15552 | Analyzed | 未確認 | CWE-613 | Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin |
| CVE-2025-15553 | Analyzed | 未確認 | CWE-613 | Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admi |
| CVE-2025-15554 | Analyzed | 未確認 | CWE-525 | Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local adm |
| CVE-2025-15558 | Modified | 未確認 | CWE-427 | Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this dire |
| CVE-2025-15568 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform |
| CVE-2025-15576 | Analyzed | 未確認 | CWE-269, CWE-488, CWE-790 | If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the two jail root directories is an ancestor of the other, jailed processes may no |
| CVE-2025-15584 | Awaiting Analysis | 未確認 | CWE-190 | Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unpri |
| CVE-2025-15587 | Deferred | 未確認 | CWE-425 | Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessing a specific resource |
| CVE-2025-15595 | Analyzed | 未確認 | CWE-1390 | Privilege escalation via dll hijacking in Inno Setup 6.2.1 and ealier versions. |
| CVE-2025-15597 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of the file backend/apps/system/api/assistant.py of the component API Endpoint. Such |
| CVE-2025-15598 | Analyzed | 未確認 | CWE-345, CWE-347 | A vulnerability was found in Dataease SQLBot up to 1.5.1. This impacts the function validateEmbedded of the file backend/apps/system/middleware/auth.py of the component JWT Token H |
| CVE-2025-15599 | Analyzed | 未確認 | CWE-79 | DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing text |
| CVE-2025-15602 | Analyzed | 未確認 | CWE-915 | Snipe-IT versions prior to 8.3.7 contain sensitive user attributes related to account privileges that are insufficiently protected against mass assignment. An authenticated, low-pr |
| CVE-2025-15603 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a se | |
| CVE-2025-15604 | Modified | 未確認 | CWE-338, CWE-340 | Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions. In versions 6.06 through 6.16, the random_string function will attempt to |
| CVE-2025-15605 | Analyzed | 未確認 | CWE-321, CWE-798 | A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. |
| CVE-2025-15606 | Analyzed | 未確認 | CWE-20 | A Denial-of-Service (DoS) vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a processing error |
| CVE-2025-15607 | Analyzed | 未確認 | CWE-77 | A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and concatenation of |
| CVE-2025-15608 | Modified | 未確認 | CWE-121 | This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a s |
| CVE-2025-15612 | Analyzed | 未確認 | CWE-295, CWE-829 | Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. |
| CVE-2025-15615 | Analyzed | 未確認 | CWE-276 | Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows rem |
| CVE-2025-15616 | Analyzed | 未確認 | CWE-94 | Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary |
| CVE-2025-15617 | Analyzed | 未確認 | CWE-522 | Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded artifacts. Attackers ca |
| CVE-2025-15618 | Analyzed | 未確認 | CWE-338, CWE-693 | Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a |
| CVE-2025-20005 | Awaiting Analysis | 未確認 | CWE-119 | Improper buffer restrictions in some UEFI firmware for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged user comb |
| CVE-2025-20027 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged user c |
| CVE-2025-20028 | Awaiting Analysis | 未確認 | CWE-367 | Time-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a pri |
| CVE-2025-20064 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged u |
| CVE-2025-20068 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged |
| CVE-2025-20073 | Awaiting Analysis | 未確認 | CWE-119 | Improper buffer restrictions in the UEFI DXE module for some Intel(R) Reference Platforms within UEFI may allow an information disclosure. System software adversary with a privileg |
| CVE-2025-20096 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined wi |
| CVE-2025-20105 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged us |
| CVE-2025-22444 | Awaiting Analysis | 未確認 | CWE-668 | Exposure of resource to wrong sphere in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure. System software adversary with a privilege |
| CVE-2025-2274 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6. |
| CVE-2025-22850 | Awaiting Analysis | 未確認 | CWE-367 | Time-of-check time-of-use race condition in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure. System software adversary with a privi |
| CVE-2025-2399 | Awaiting Analysis | 未確認 | CWE-1285 | Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric CNC M800V Series M800VW and M800VS, M80V Series M80V and M80VW, M800 Serie |
| CVE-2025-25277 | Analyzed | 未確認 | CWE-843 | in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited |
| CVE-2025-2535 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-26474 | Analyzed | 未確認 | CWE-20 | in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios. |
| CVE-2025-27260 | Analyzed | 未確認 | CWE-790 | Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special Elements vulnerability which, if exploited, can lead to unauthorized modification o |
| CVE-2025-27769 | Awaiting Analysis | 未確認 | CWE-923 | A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC 40 kW EV Charging Station (All versions < L4.10.1). Affecte |
| CVE-2025-29165 | Analyzed | 未確認 | CWE-269 | An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component |
| CVE-2025-30035 | Deferred | 未確認 | CWE-306 | The vulnerability enables an attacker to fully bypass authentication in CGM CLININET and gain access to any active user account by supplying only the username, without requiring a |
| CVE-2025-30042 | Analyzed | 未確認 | CWE-603 | The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client device, and, in reality, only the certificate number is used |
| CVE-2025-30044 | Deferred | 未確認 | CWE-78 | In the endpoints "/cgi-bin/CliniNET.prd/utils/usrlogstat_simple.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", "/cgi-bin/CliniNET.prd/utils/userlogstat2.pl", and "/cgi-bin/Clini |
| CVE-2025-30062 | Deferred | 未確認 | CWE-89 | In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection. |
| CVE-2025-30413 | Analyzed | 未確認 | CWE-732 | Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40 |
| CVE-2025-31703 | Awaiting Analysis | 未確認 | CWE-305 | A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and by |
| CVE-2025-31966 | Analyzed | 未確認 | CWE-20 | HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypa |
| CVE-2025-32223 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2025-32313 | Modified | 未確認 | CWE-787 | In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional ex |
| CVE-2025-32957 | Analyzed | 未確認 | CWE-434 | baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is then automatically extracted. A |
| CVE-2025-32991 | Analyzed | 未確認 | CWE-362 | In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution. |
| CVE-2025-33022 | Rejected | 未確認 | Rejected reason: The reporter agreed to not assign CVE ID | |
| CVE-2025-33215 | Awaiting Analysis | 未確認 | CWE-823 | NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages. A |
| CVE-2025-33216 | Awaiting Analysis | 未確認 | CWE-131 | NVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an attacker on a VM may cause an incorrect calculation of buffer size by sending crafted confi |
| CVE-2025-33238 | Analyzed | 未確認 | CWE-362 | NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception. A successful exploit of this vulnerability may lead to denia |
| CVE-2025-33242 | Awaiting Analysis | 未確認 | CWE-1234 | NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad state. A successful exploit of this vulne |
| CVE-2025-33244 | Awaiting Analysis | 未確認 | CWE-502 | NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data. This vulnerability affects environments that use PyTo |
| CVE-2025-33247 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to |
| CVE-2025-33248 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful |
| CVE-2025-33254 | Analyzed | 未確認 | CWE-362 | NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption. A successful exploit of this vulnerability may lead to a denial of se |
| CVE-2025-36051 | Analyzed | 未確認 | CWE-538 | IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user. |
| CVE-2025-36105 | Analyzed | 未確認 | CWE-312, CWE-526 | IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables. |
| CVE-2025-36173 | Analyzed | 未確認 | CWE-79 | Affected Product(s)Version(s)InfoSphere Data Architect9.2.1 |
| CVE-2025-36187 | Analyzed | 未確認 | CWE-532 | IBM Knowledge Catalog Standard Cartridge 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.1, 5.1.1, 5,1.2, 5.1.3, 5.2.0, 5.2.1 stores potentially sensitive information in log files that could be read |
| CVE-2025-36226 | Analyzed | 未確認 | CWE-79 | IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI t |
| CVE-2025-36227 | Analyzed | 未確認 | CWE-644 | IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to cond |
| CVE-2025-36258 | Analyzed | 未確認 | CWE-256 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 product stores user credentials and other sensitive information in plain text which can be read by a local user. |
| CVE-2025-36363 | Analyzed | 未確認 | CWE-307 | IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. |
| CVE-2025-36364 | Analyzed | 未確認 | CWE-525 | IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system. |
| CVE-2025-36368 | Analyzed | 未確認 | CWE-89 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, and 6.2.1.0 through 6.2.1.1_1 are vulnerable to SQL injection. An ad |
| CVE-2025-36422 | Analyzed | 未確認 | CWE-352 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 IBM InfoSphere DataStage Flow Designer is vulnerable to cross-site request forgery which could allow an attacker to exec |
| CVE-2025-36438 | Analyzed | 未確認 | CWE-923 | IBM Concert 1.0.0 through 2.2.0 could allow a privileged user to perform unauthorized actions due to improper restriction of channel communication to intended endpoints. |
| CVE-2025-36440 | Analyzed | 未確認 | CWE-522 | IBM Concert 1.0.0 through 2.2.0 could allow a local user to obtain sensitive information due to missing function level access control. |
| CVE-2025-36920 | Analyzed | 未確認 | CWE-20, CWE-787 | In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no |
| CVE-2025-3716 | Awaiting Analysis | 未確認 | CWE-204 | User enumeration in ESET Protect (on-prem) via Response Timing. |
| CVE-2025-40638 | Analyzed | 未確認 | CWE-79 | A reflected Cross-Site Scripting (XSS) vulnerability has been found in Eventobot. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by send |
| CVE-2025-40639 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability has been found in Eventobot. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'promo_send' parameter |
| CVE-2025-40841 | Analyzed | 未確認 | CWE-352 | Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Request Forgery (CSRF) vulnerability which, if exploited, can lead to unauthorized modification of cert |
| CVE-2025-40842 | Analyzed | 未確認 | CWE-79 | Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and modification |
| CVE-2025-40894 | Modified | 未確認 | CWE-79 | A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an input parameter. A malicious authenticated use |
| CVE-2025-40895 | Analyzed | 未確認 | CWE-79 | A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on connected Guardians' properties. A malicious authenticat |
| CVE-2025-40896 | Analyzed | 未確認 | CWE-295 | The server certificate was not verified when an Arc agent connected to a Guardian or CMC. A malicious actor could perform a man-in-the-middle attack and intercept the communicat |
| CVE-2025-40926 | Modified | 未確認 | CWE-338, CWE-340 | Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in r |
| CVE-2025-40931 | Modified | 未確認 | CWE-338, CWE-340 | Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id. Apache::Session::Generate::MD5 generates session ids insecurely. The default session id g |
| CVE-2025-40943 | Awaiting Analysis | 未確認 | CWE-95 | Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the functio |
| CVE-2025-41007 | Deferred | 未確認 | CWE-89 | SQL Injection in Cuantis. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'search' parameter in the '/search.php' endpoint. |
| CVE-2025-41008 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in Sinturno. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'client' parameter in the '/_adm/script |
| CVE-2025-41026 | Analyzed | 未確認 | CWE-79 | Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious U |
| CVE-2025-41027 | Analyzed | 未確認 | CWE-79 | Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious UR |
| CVE-2025-41257 | Awaiting Analysis | 未確認 | CWE-20 | Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to una |
| CVE-2025-41258 | Analyzed | 未確認 | CWE-284 | LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises the service-level authentication of the RAG API. |
| CVE-2025-41355 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sendin |
| CVE-2025-41356 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending |
| CVE-2025-41357 | Analyzed | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending |
| CVE-2025-41359 | Analyzed | 未確認 | CWE-428 | Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files (x86)\shttps_mg\http.exe service' |
| CVE-2025-41368 | Analyzed | 未確認 | CWE-22 | Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions of SecurityManager a |
| CVE-2025-41432 | Analyzed | 未確認 | CWE-787 | in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only |
| CVE-2025-41660 | Awaiting Analysis | 未確認 | CWE-669 | A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution. |
| CVE-2025-41709 | Awaiting Analysis | 未確認 | CWE-78 | An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device. |
| CVE-2025-41710 | Awaiting Analysis | 未確認 | CWE-798 | An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges. |
| CVE-2025-41711 | Awaiting Analysis | 未確認 | CWE-327 | An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access. |
| CVE-2025-41712 | Deferred | 未確認 | CWE-732 | An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permissi |
| CVE-2025-41754 | Analyzed | 未確認 | CWE-1242 | A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the system. |
| CVE-2025-41755 | Analyzed | 未確認 | CWE-22 | A low-privileged remote attacker can exploit the ubr-logread method in wwwubr.cgi to read arbitrary files on the system. The endpoint accepts a parameter specifying the log file to |
| CVE-2025-41756 | Analyzed | 未確認 | CWE-1242 | A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to write arbitrary files on the system. |
| CVE-2025-41757 | Analyzed | 未確認 | CWE-22 | A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevated privileges and does not validate the contents of the backu |
| CVE-2025-41758 | Analyzed | 未確認 | CWE-22 | A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload.cgi endpoint. Due to path traversal this can lead to overwriting arbitrary files |
| CVE-2025-41759 | Analyzed | 未確認 | CWE-636 | An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier. However, these values are not supported and do not trigger any validation |
| CVE-2025-41760 | Analyzed | 未確認 | CWE-636 | An administrator may attempt to block all traffic by configuring a pass filter with an empty table. However, in UBR, an empty list does not enforce any restrictions and allows all |
| CVE-2025-41761 | Analyzed | 未確認 | CWE-88 | A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to obtain full system access. This is due to the service account |
| CVE-2025-41762 | Analyzed | 未確認 | CWE-328 | An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes a |
| CVE-2025-41763 | Analyzed | 未確認 | CWE-497 | A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups and certificat |
| CVE-2025-41764 | Analyzed | 未確認 | CWE-862 | Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi endpoint to upload and apply arbitrary updates. |
| CVE-2025-41765 | Analyzed | 未確認 | CWE-862 | Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data. This includes, but is not |
| CVE-2025-41766 | Analyzed | 未確認 | CWE-787 | A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request using the ubr-network method resulting in full device compromise. |
| CVE-2025-41767 | Analyzed | 未確認 | CWE-347 | A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR. |
| CVE-2025-41772 | Analyzed | 未確認 | CWE-598 | An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwwupdate.cgi endpoint in UBR. |
| CVE-2025-43534 | Analyzed | 未確認 | CWE-284 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS d |
| CVE-2025-45691 | Modified | 未確認 | CWE-22, CWE-918 | An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and s |
| CVE-2025-46108 | Analyzed | 未確認 | CWE-120 | D-link Dir-513 A1FW110 is vulnerable to Buffer Overflow in the function formTcpipSetup. |
| CVE-2025-46597 | Analyzed | 未確認 | CWE-190 | Bitcoin Core 0.13.0 through 29.x has an integer overflow. |
| CVE-2025-46598 | Analyzed | 未確認 | CWE-405 | Bitcoin Core through 29.0 allows a denial of service via a crafted transaction. |
| CVE-2025-47147 | Analyzed | 未確認 | CWE-312 | Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile dev |
| CVE-2025-47371 | Analyzed | 未確認 | CWE-617 | Transient DOS when an LTE RLC packet with invalid TB is received by UE. |
| CVE-2025-47373 | Analyzed | 未確認 | CWE-787 | Memory Corruption when accessing buffers with invalid length during TA invocation. |
| CVE-2025-47375 | Analyzed | 未確認 | CWE-416 | Memory corruption while handling different IOCTL calls from the user-space simultaneously. |
| CVE-2025-47376 | Analyzed | 未確認 | CWE-416 | Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls. |
| CVE-2025-47377 | Analyzed | 未確認 | CWE-416 | Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls. |
| CVE-2025-47378 | Analyzed | 未確認 | CWE-497 | Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain. |
| CVE-2025-47379 | Analyzed | 未確認 | CWE-416 | Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources. |
| CVE-2025-47381 | Analyzed | 未確認 | CWE-416 | Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs. |
| CVE-2025-47383 | Analyzed | 未確認 | CWE-325 | Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. |
| CVE-2025-47384 | Analyzed | 未確認 | CWE-617 | Transient DOS when MAC configures config id greater than supported maximum value. |
| CVE-2025-47385 | Analyzed | 未確認 | CWE-1262 | Memory Corruption when accessing trusted execution environment without proper privilege check. |
| CVE-2025-47386 | Analyzed | 未確認 | CWE-416 | Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs. |
| CVE-2025-47873 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-48418 | Analyzed | 未確認 | CWE-912 | A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 throu |
| CVE-2025-48567 | Modified | 未確認 | CWE-22 | In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead |
| CVE-2025-48568 | Modified | 未確認 | CWE-362 | In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges neede |
| CVE-2025-48574 | Modified | 未確認 | CWE-862 | In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events due to a missing permission check. This could lead to local es |
| CVE-2025-48577 | Modified | 未確認 | CWE-362 | In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no addition |
| CVE-2025-48578 | Modified | 未確認 | CWE-862 | In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a missing permission check. This could lead to local esc |
| CVE-2025-48579 | Modified | 未確認 | CWE-441 | In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This could lead to local escalation of privilege |
| CVE-2025-48582 | Modified | 未確認 | CWE-59 | In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an intent redirect. This could lead to local escalation of priv |
| CVE-2025-48585 | Modified | 未確認 | CWE-20 | In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with n |
| CVE-2025-48587 | Modified | 未確認 | CWE-20 | In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with n |
| CVE-2025-48602 | Modified | 未確認 | CWE-693 | In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local |
| CVE-2025-48605 | Modified | 未確認 | CWE-693 | In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege with no |
| CVE-2025-48609 | Modified | 未確認 | CWE-400 | In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. T |
| CVE-2025-48611 | Analyzed | 未確認 | CWE-120 | In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check. This could lead to local escalation of privilege with no additional execution |
| CVE-2025-48613 | Modified | 未確認 | CWE-269 | In VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the original image was previously signed with the same key. This could lead to local escal |
| CVE-2025-48619 | Modified | 未確認 | CWE-284 | In multiple functions of ContentProvider.java, there is a possible way for an app with read-only access to truncate files due to a logic error in the code. This could lead to local |
| CVE-2025-48630 | Modified | 未確認 | CWE-208 | In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure. This could lead to local escalation of pr |
| CVE-2025-48634 | Modified | 未確認 | CWE-862 | In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no addit |
| CVE-2025-48635 | Modified | 未確認 | CWE-200, CWE-532, CWE-693 | In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code. This could lead to local escalation of priv |
| CVE-2025-48636 | Modified | 未確認 | CWE-22 | In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. This could lead to local escalation of pri |
| CVE-2025-48641 | Modified | 未確認 | CWE-362 | In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges |
| CVE-2025-48642 | Modified | 未確認 | CWE-200 | In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional ex |
| CVE-2025-48644 | Modified | 未確認 | CWE-20 | In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution pr |
| CVE-2025-48645 | Modified | 未確認 | CWE-269 | In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation. This could lead to local escalation of privilege with no additi |
| CVE-2025-48646 | Modified | 未確認 | CWE-441 | In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalation of privilege with no additional executi |
| CVE-2025-48650 | Modified | 未確認 | CWE-89 | In multiple locations, there is a possible information disclosure due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges nee |
| CVE-2025-48653 | Modified | 未確認 | CWE-693 | In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due to a logic error in the code. This could lead to local escalation of privilege wi |
| CVE-2025-48654 | Modified | 未確認 | CWE-610 | In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no add |
| CVE-2025-48840 | Analyzed | 未確認 | CWE-290 | An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may |
| CVE-2025-49010 | Analyzed | 未確認 | CWE-121 | OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token c |
| CVE-2025-49784 | Analyzed | 未確認 | CWE-89 | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4 |
| CVE-2025-50001 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Reflected XSS.This issue affects tag |
| CVE-2025-50186 | Analyzed | 未確認 | CWE-79 | Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting (XSS) vulnerability exists due to insufficient sanitization of CSV filenames. An at |
| CVE-2025-50187 | Analyzed | 未確認 | CWE-95 | Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filtering which leads to Remote Code Execution. This issue has b |
| CVE-2025-50188 | Analyzed | 未確認 | CWE-89 | Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of data coming from the user from the GET value parameter with t |
| CVE-2025-50189 | Analyzed | 未確認 | CWE-89 | Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of data coming from the user from the POST resource[document][SQ |
| CVE-2025-50190 | Analyzed | 未確認 | CWE-89 | Chamilo is a learning management system. Prior to version 1.11.30, there is an error-based SQL Injection via the GET openid.assoc_handle parameter with the /index.php script. This |
| CVE-2025-50191 | Analyzed | 未確認 | CWE-89 | Chamilo is a learning management system. Prior to version 1.11.30, there is an error-based SQL Injection via POST userFile with the /main/exercise/hotpotatoes.php script. This issu |
| CVE-2025-50192 | Analyzed | 未確認 | CWE-89 | Chamilo is a learning management system. Prior to version 1.11.30, there is a time-based SQL Injection in found in /main/webservices/registration.soap.php. This issue has been patc |
| CVE-2025-50193 | Analyzed | 未確認 | CWE-78 | Chamilo is a learning management system. Prior to version 1.11.30, there is an OS command Injection vulnerability in /plugin/vchamilo/views/import.php with the POST to_main_databas |
| CVE-2025-50194 | Analyzed | 未確認 | CWE-78 | Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /main/cron/lang/check_parse_lang.php. This issue has been patch |
| CVE-2025-50195 | Analyzed | 未確認 | CWE-78 | Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/manage.controller.php. This issue has be |
| CVE-2025-50196 | Analyzed | 未確認 | CWE-78 | Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/editinstance.php via the POST main_datab |
| CVE-2025-50197 | Analyzed | 未確認 | CWE-78 | Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /main/admin/sub_language_ajax.inc.php via the POST new_language |
| CVE-2025-50198 | Analyzed | 未確認 | CWE-502 | Chamilo is a learning management system. Prior to version 1.11.30, Chamilo is vulnerable to deserialization of untrusted data in /plugin/vchamilo/views/import.php via POST configur |
| CVE-2025-50199 | Analyzed | 未確認 | CWE-918 | Chamilo is a learning management system. Prior to version 1.11.30, there is a blind SSRF vulnerability in /index.php via the POST openid_url parameter. This issue has been patched |
| CVE-2025-50881 | Deferred | 未確認 | CWE-94 | The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution. When handling GET requests, the script takes user-s |
| CVE-2025-52204 | Deferred | 未確認 | CWE-79 | A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter |
| CVE-2025-52365 | Deferred | 未確認 | CWE-77 | A command injection vulnerability in the szc script of the ccurtsinger/stabilizer repository allows remote attackers to execute arbitrary system commands via unsanitized user input |
| CVE-2025-52458 | Analyzed | 未確認 | CWE-787 | in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only |
| CVE-2025-52468 | Analyzed | 未確認 | CWE-79 | Chamilo is a learning management system. Prior to version 1.11.30, an input validation vulnerability exists when importing user data from CSV files. This flaw occurs due to insuffi |
| CVE-2025-52469 | Analyzed | 未確認 | CWE-841 | Chamilo is a learning management system. Prior to version 1.11.30, a logic vulnerability in the friend request workflow of Chamilo’s social network module allows an authenticated u |
| CVE-2025-52470 | Analyzed | 未確認 | CWE-79 | Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting (XSS) vulnerability exists in the session_category_add.php script. The vulnerabilit |
| CVE-2025-52475 | Analyzed | 未確認 | CWE-79 | Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability in the admin/user_list.php endpoint. The keyword_in |
| CVE-2025-52476 | Analyzed | 未確認 | CWE-79 | Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability due to improper sanitization of the keyword_active |
| CVE-2025-52482 | Analyzed | 未確認 | CWE-79 | Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users with the Teachers role to inject J |
| CVE-2025-52563 | Analyzed | 未確認 | CWE-79, CWE-80, CWE-87 | Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability due to insufficient sanitization of the page parame |
| CVE-2025-52564 | Analyzed | 未確認 | CWE-80 | Chamilo is a learning management system. Prior to version 1.11.30, the open parameter of help.php fails to properly sanitize user input. This allows an attacker to inject arbitrary |
| CVE-2025-52636 | Analyzed | 未確認 | CWE-400 | HCL AION is affected by a vulnerability related to the handling of upload size limits. Improper control or validation of upload sizes may allow excessive resource consumption, whic |
| CVE-2025-52637 | Analyzed | 未確認 | CWE-89 | HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Improper validation or restrictions on query |
| CVE-2025-52638 | Analyzed | 未確認 | CWE-345 | HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potenti |
| CVE-2025-52642 | Analyzed | 未確認 | CWE-538 | HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour. Exposure of internal paths may reveal envi |
| CVE-2025-52643 | Analyzed | 未確認 | CWE-693 | HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to |
| CVE-2025-52644 | Analyzed | 未確認 | CWE-778 | HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce traceability of user a |
| CVE-2025-52645 | Analyzed | 未確認 | CWE-345 | HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the possibility of un |
| CVE-2025-52646 | Analyzed | 未確認 | CWE-89 | HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Improper validation or restrictions on query |
| CVE-2025-52648 | Analyzed | 未確認 | CWE-347 | HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leadin |
| CVE-2025-52649 | Analyzed | 未確認 | CWE-200 | HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature. Predictable identifiers may allow an attacker to infer or guess system-generated val |
| CVE-2025-52998 | Analyzed | 未確認 | CWE-502 | Chamilo is a learning management system. Prior to version 1.11.30, in the application, deserialization of data is performed, the data can be spoofed. An attacker can create objects |
| CVE-2025-53222 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Reflected XSS.This issue a |
| CVE-2025-53335 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Berger berger allows PHP Local File Inclusion.This |
| CVE-2025-53517 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerabi | |
| CVE-2025-53608 | Analyzed | 未確認 | CWE-79 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSand |
| CVE-2025-53706 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerabi | |
| CVE-2025-53815 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerabi | |
| CVE-2025-54001 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Classter classter allows Object Injection.This issue affects Classter: from n/a through <= 2.5. |
| CVE-2025-54659 | Analyzed | 未確認 | CWE-22 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] vulnerability in Fortinet FortiSOAR Agent Communication Bridge 1.1.0, Forti |
| CVE-2025-54758 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerabi | |
| CVE-2025-54820 | Analyzed | 未確認 | CWE-121, CWE-787 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions m |
| CVE-2025-54920 | Analyzed | 未確認 | CWE-502 | This issue affects Apache Spark: before 3.5.7 and 4.0.1. Users are recommended to upgrade to version 3.5.7 or 4.0.1 and above, which fixes the issue. Summary Apache Spark 3.5 |
| CVE-2025-55040 | Analyzed | 未確認 | CWE-352 | The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack. The vulnerable cForm.importfo |
| CVE-2025-55041 | Analyzed | 未確認 | CWE-352 | MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to escalate privile |
| CVE-2025-55043 | Analyzed | 未確認 | CWE-352 | MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated attackers to force admini |
| CVE-2025-55044 | Analyzed | 未確認 | CWE-352 | The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF. The vulnerable cT |
| CVE-2025-55045 | Analyzed | 未確認 | CWE-352 | The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF. The vulnerable cUsers.updateAddress function |
| CVE-2025-55046 | Analyzed | 未確認 | CWE-352 | MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack. The |
| CVE-2025-55208 | Analyzed | 未確認 | CWE-79 | Chamilo is a learning management system. Versions prior to 1.11.34 have a Stored XSS through insecure file uploads in `Social Networks`. Through it, a low-privilege user can execut |
| CVE-2025-55261 | Analyzed | 未確認 | CWE-284 | HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal and |
| CVE-2025-55262 | Analyzed | 未確認 | CWE-798, CWE-89 | HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability to retrieve sensitive information from the database. |
| CVE-2025-55263 | Analyzed | 未確認 | CWE-798 | HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or if it is stored in insecure repositories, they can easily ret |
| CVE-2025-55264 | Analyzed | 未確認 | CWE-613 | HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control over the account desp |
| CVE-2025-55265 | Analyzed | 未確認 | CWE-200 | HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attac |
| CVE-2025-55266 | Analyzed | 未確認 | CWE-384 | HCL Aftermarket DPC is affected by Session Fixation which allows attacker to takeover the user's session and use it carry out unauthorized transaction behalf of the user. |
| CVE-2025-55267 | Analyzed | 未確認 | CWE-434 | HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability, allows attacker to upload and execute malicious scripts, gaining full control over the server. |
| CVE-2025-55268 | Analyzed | 未確認 | CWE-799 | HCL Aftermarket DPC is affected by Spamming Vulnerability which can allow the actor to excessive spamming can consume server bandwidth and processing resources which may lead to De |
| CVE-2025-55269 | Analyzed | 未確認 | CWE-521 | HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gain unauthorize |
| CVE-2025-55270 | Analyzed | 未確認 | CWE-20 | HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command Inject |
| CVE-2025-55271 | Analyzed | 未確認 | CWE-113 | HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execut |
| CVE-2025-55272 | Analyzed | 未確認 | CWE-200 | HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the system’s software and version details which would allow them to craft soft |
| CVE-2025-55273 | Analyzed | 未確認 | CWE-829 | HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external scripts can tamper with the DOM, altering the content or behavior of t |
| CVE-2025-55274 | Analyzed | 未確認 | CWE-942 | HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability. CORS misconfigurations includes the exposure of sensitive user information to attackers, unauthorize |
| CVE-2025-55275 | Analyzed | 未確認 | CWE-557 | HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability using which an attacker can exploit concurrent sessions to hijack or impersonate an admin user. |
| CVE-2025-55276 | Analyzed | 未確認 | CWE-200 | HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout. |
| CVE-2025-55277 | Analyzed | 未確認 | CWE-1104 | HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability using which an attacker may make use of the exploits available across the internet and craft at |
| CVE-2025-55289 | Analyzed | 未確認 | CWE-79 | Chamilo is a learning management system. Prior to version 1.11.34, there is a stored XSS vulnerability in Chamilo LMS (Verison 1.11.32) allows an attacker to inject arbitrary JavaS |
| CVE-2025-55717 | Analyzed | 未確認 | CWE-312 | A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through |
| CVE-2025-55988 | Analyzed | 未確認 | CWE-22 | An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via an unsanitized URI path. |
| CVE-2025-56421 | Modified | 未確認 | CWE-89 | SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database. |
| CVE-2025-56422 | Modified | 未確認 | CWE-502 | A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server. |
| CVE-2025-57543 | Analyzed | 未確認 | CWE-79 | Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by |
| CVE-2025-57622 | Awaiting Analysis | 未確認 | CWE-502 | An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) component |
| CVE-2025-57849 | Analyzed | 未確認 | CWE-276 | A container privilege escalation flaw was found in certain Fuse images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. |
| CVE-2025-58107 | Awaiting Analysis | 未確認 | CWE-319 | In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including |
| CVE-2025-58112 | Awaiting Analysis | 未確認 | CWE-89 | Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized reports via raw SQL queries in an upload of a .rdl (Report Definition |
| CVE-2025-58402 | Analyzed | 未確認 | CWE-639 | The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the parameter in the GET request, an attacker |
| CVE-2025-58405 | Analyzed | 未確認 | CWE-1021 | The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detect |
| CVE-2025-58406 | Analyzed | 未確認 | CWE-693 | The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑ |
| CVE-2025-58427 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-59028 | Analyzed | 未確認 | CWE-20 | When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to Do |
| CVE-2025-59031 | Analyzed | 未確認 | CWE-200 | Dovecot has provided a script to use for attachment to text conversion. This script unsafely handles zip-style attachments. Attacker can use specially crafted OOXML documents to ca |
| CVE-2025-59032 | Modified | 未確認 | CWE-20, CWE-229 | ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other user |
| CVE-2025-59059 | Analyzed | 未確認 | CWE-94 | Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes thi |
| CVE-2025-59060 | Modified | 未確認 | CWE-297 | Hostname verification bypass issue in Apache Ranger NiFiRegistryClient is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fix |
| CVE-2025-59383 | Analyzed | 未確認 | CWE-121 | A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We |
| CVE-2025-59388 | Analyzed | 未確認 | CWE-259 | A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to gain unauthorized access. W |
| CVE-2025-59540 | Analyzed | 未確認 | CWE-79, CWE-80 | Chamilo is a learning management system. Prior to version 1.11.34, a stored XSS vulnerability exists in Chamilo LMS that allows a staff account to execute arbitrary JavaScript in t |
| CVE-2025-59541 | Analyzed | 未確認 | CWE-352 | Chamilo is a learning management system. Prior to version 1.11.34, a Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to delete projects inside a course without t |
| CVE-2025-59542 | Analyzed | 未確認 | CWE-79 | Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting (XSS) vulnerability. By injecting malicious JavaScript into the course lea |
| CVE-2025-59543 | Analyzed | 未確認 | CWE-79 | Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting (XSS) vulnerability. By injecting malicious JavaScript into the course des |
| CVE-2025-59544 | Analyzed | 未確認 | CWE-862 | Chamilo is a learning management system. Prior to version 1.11.34, the functionality for the user to update the category does not implement authorization checks for the "category_i |
| CVE-2025-59600 | Analyzed | 未確認 | CWE-126 | Memory Corruption when adding user-supplied data without checking available buffer space. |
| CVE-2025-59603 | Analyzed | 未確認 | CWE-787 | Memory Corruption when processing invalid user address with nonstandard buffer address. |
| CVE-2025-59706 | Analyzed | 未確認 | CWE-290 | In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution. |
| CVE-2025-59707 | Analyzed | 未確認 | CWE-290 | In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability. |
| CVE-2025-59783 | Analyzed | 未確認 | CWE-78 | API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can onl |
| CVE-2025-59784 | Analyzed | 未確認 | CWE-117 | 2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. T |
| CVE-2025-59785 | Analyzed | 未確認 | CWE-1286 | Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can onl |
| CVE-2025-59786 | Analyzed | 未確認 | CWE-613 | 2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application. |
| CVE-2025-59787 | Analyzed | 未確認 | CWE-703 | 2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating improper handl |
| CVE-2025-60012 | Analyzed | 未確認 | CWE-20 | Malicious configuration can lead to unauthorized file access in Apache Livy. This issue affects Apache Livy 0.7.0 and 0.8.0 when connecting to Apache Spark 3.1 or later. A reques |
| CVE-2025-60233 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Themeton Zuut allows Object Injection.This issue affects Zuut: from n/a through 1.4.2. |
| CVE-2025-60237 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Themeton Finag allows Object Injection.This issue affects Finag: from n/a through 1.5.0. |
| CVE-2025-60946 | Analyzed | 未確認 | CWE-22 | Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha. |
| CVE-2025-60947 | Analyzed | 未確認 | CWE-434 | Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. Fixed in 8.1.0 alpha. |
| CVE-2025-60948 | Analyzed | 未確認 | CWE-79 | Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javascript that executes in a victim's browser |
| CVE-2025-60949 | Analyzed | 未確認 | CWE-200 | Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked |
| CVE-2025-61154 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function decompress_R20 |
| CVE-2025-61190 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality. The vulnerability exists due to imp |
| CVE-2025-61611 | Modified | 未確認 | CWE-20 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed.. |
| CVE-2025-61612 | Modified | 未確認 | CWE-20 | In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. |
| CVE-2025-61613 | Modified | 未確認 | CWE-20 | In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. |
| CVE-2025-61614 | Modified | 未確認 | CWE-20 | In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. |
| CVE-2025-61615 | Modified | 未確認 | CWE-20 | In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. |
| CVE-2025-61616 | Modified | 未確認 | CWE-20 | In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. |
| CVE-2025-61952 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-61979 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-62043 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPSight WPCasa allows DOM-Based XSS.This issue affects WPCasa: from n/a throug |
| CVE-2025-62166 | Analyzed | 未確認 | CWE-284, CWE-639 | FreshRSS is a free, self-hostable RSS aggregator. Prior 1.28.0, a bug in the auth logic related to master authentication tokens, this restriction is bypassed. Usually only the defa |
| CVE-2025-62184 | Analyzed | 未確認 | CWE-79 | Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given ex |
| CVE-2025-6229 | Deferred | 未確認 | CWE-79 | The Sina Extension for Elementor (Header Builder, Footer Builter, Theme Builder, Slider, Gallery, Form, Modal, Data Table Free Elementor Widgets & Elementor Templates) plugin for W |
| CVE-2025-62319 | Analyzed | 未確認 | CWE-89 | Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application input fields |
| CVE-2025-62320 | Analyzed | 未確認 | CWE-79 | HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage. Because of this, an attacker may ins |
| CVE-2025-62328 | Awaiting Analysis | 未確認 | CWE-1021 | HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by default which could allow an attacker to obtain sensitive inform |
| CVE-2025-62403 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-62500 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-62814 | Analyzed | 未確認 | CWE-476 | An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, and 2400. A NULL pointer dereference of ft_handle in load_fw_utc_vector() causes a denial of serv |
| CVE-2025-62815 | Analyzed | 未確認 | CWE-476 | An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of npu_proto_drv.ast.thread_ref in set_cpu_affinity() causes |
| CVE-2025-62816 | Analyzed | 未確認 | CWE-20 | An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. Unvalidated VS4L_VERTEXIOC_BOOTUP input leads to a denial of service. |
| CVE-2025-62817 | Modified | 未確認 | CWE-476 | An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of session->ncp_hdr_buf in __pilot_parsing_ncp() |
| CVE-2025-62843 | Analyzed | 未確認 | CWE-923 | An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gains physical access, they can then exploit |
| CVE-2025-62844 | Analyzed | 未確認 | CWE-1390 | A weak authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to gain sensitive informat |
| CVE-2025-62845 | Analyzed | 未確認 | CWE-150 | An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then |
| CVE-2025-62846 | Analyzed | 未確認 | CWE-89 | An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to execute unauthorize |
| CVE-2025-62879 | Analyzed | 未確認 | CWE-532 | A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's |
| CVE-2025-63260 | Modified | 未確認 | CWE-79 | SyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to comment field and Chat-UI Chat message. |
| CVE-2025-63261 | Analyzed | 未確認 | CWE-78 | AWStats 8.0 is vulnerable to Command Injection via the open function |
| CVE-2025-63909 | Analyzed | 未確認 | CWE-269 | Incorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers to escalate privileges to roo |
| CVE-2025-63910 | Analyzed | 未確認 | CWE-345 | An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbi |
| CVE-2025-63911 | Analyzed | 未確認 | CWE-78 | Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability. |
| CVE-2025-63912 | Modified | 未確認 | CWE-327 | Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allowing attackers to trivially reverse the e |
| CVE-2025-64166 | Analyzed | 未確認 | CWE-352 | Mercurius is a GraphQL adapter for Fastify. Prior to version 16.4.0, a cross-site request forgery (CSRF) vulnerability was identified. The issue arises from incorrect parsing of th |
| CVE-2025-64301 | Analyzed | 未確認 | CWE-787 | An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo |
| CVE-2025-64427 | Analyzed | 未確認 | CWE-200, CWE-918 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.0 and prior, due to insufficient validation or restriction of target U |
| CVE-2025-64646 | Analyzed | 未確認 | CWE-14 | IBM Concert 1.0.0 through 2.2.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources. |
| CVE-2025-64647 | Analyzed | 未確認 | CWE-1240 | IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information |
| CVE-2025-64648 | Analyzed | 未確認 | CWE-319 | IBM Concert 1.0.0 through 2.2.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques. |
| CVE-2025-64733 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-64735 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-64736 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (5462afb0). A specially crafted .abf file can le |
| CVE-2025-64776 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-64998 | Analyzed | 未確認 | CWE-522 | Exposure of session signing secret in Checkmk <2.4.0p23, <2.3.0p45 and 2.2.0 allows an administrator of a remote site with config sync enabled to hijack sessions on the central sit |
| CVE-2025-65119 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-65465 | Deferred | 未確認 | CWE-79 | A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script o |
| CVE-2025-65734 | Analyzed | 未確認 | CWE-79 | An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary co |
| CVE-2025-66000 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-66024 | Modified | 未確認 | CWE-79 | The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions starting with 9.15 and prior to 9.15.7 are vulnerable to Stored Cross-Site S |
| CVE-2025-66037 | Analyzed | 未確認 | CWE-125 | OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-boun |
| CVE-2025-66038 | Analyzed | 未確認 | CWE-126 | OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a compact-TLV buffer for a given tag. In compact-TLV, a single by |
| CVE-2025-66042 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-66168 | Modified | 未確認 | CWE-190 | WARNING: Users of 6.x should upgrade to 6.2.4 or later as the fix was missed in previous 6.x releases. See the following for more details: https://activemq.apache.org/security- |
| CVE-2025-66178 | Modified | 未確認 | CWE-78 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, F |
| CVE-2025-66215 | Analyzed | 未確認 | CWE-121 | OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token c |
| CVE-2025-66249 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Livy. This issue affects Apache Livy: from 0.3.0 before 0.9.0. The vulnerab |
| CVE-2025-66319 | Analyzed | 未確認 | CWE-264 | Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
| CVE-2025-66342 | Analyzed | 未確認 | CWE-843 | A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to memory corruption a |
| CVE-2025-66363 | Analyzed | 未確認 | CWE-665 | An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for memory initialization within DL NAS Transport messages. |
| CVE-2025-66413 | Analyzed | 未確認 | CWE-200, CWE-307 | Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious server. Since NTLM hashin |
| CVE-2025-66503 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-66617 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-66633 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2025-66678 | Analyzed | 未確認 | CWE-89 | An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations v |
| CVE-2025-66680 | Analyzed | 未確認 | CWE-59 | An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request. |
| CVE-2025-66687 | Deferred | 未確認 | CWE-22 | Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation during the extraction of game files |
| CVE-2025-66880 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Wethink Technology Inc 720yun pano-sdk 0.5.877 allows a remote attacker to execute arbitrary code via the LoginComp (Module 2093) and SignupCo |
| CVE-2025-66944 | Analyzed | 未確認 | CWE-89 | SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint |
| CVE-2025-66945 | Analyzed | 未確認 | CWE-787 | A path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x. When a crafted ZIP archive is processed by the backend at /api/extract, files may be written outsid |
| CVE-2025-66955 | Modified | 未確認 | CWE-552 | Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in th |
| CVE-2025-66956 | Deferred | 未確認 | CWE-284 | Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL. |
| CVE-2025-67030 | Modified | 未確認 | CWE-22 | Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attac |
| CVE-2025-67034 | Modified | 未確認 | CWE-78, CWE-94 | An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "name" parameter when deleting SSL credentials through the managem |
| CVE-2025-67035 | Modified | 未確認 | CWE-78, CWE-94 | An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of inp |
| CVE-2025-67036 | Modified | 未確認 | CWE-78, CWE-94 | An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The Log Info page allows users to see log files by specifying their names. Due to a missing sanitization in the file name pa |
| CVE-2025-67037 | Modified | 未確認 | CWE-78, CWE-94 | An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "tunnel" parameter when killing a tunnel connection. Injected comm |
| CVE-2025-67038 | Analyzed | 掲載 | CWE-78 | An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concat |
| CVE-2025-67039 | Modified | 未確認 | CWE-288 | An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authori |
| CVE-2025-67041 | Modified | 未確認 | CWE-288, CWE-620, CWE-78 | An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to e |
| CVE-2025-67112 | Awaiting Analysis | 未確認 | CWE-321 | Use of a hard-coded AES-256-CBC key in the configuration backup/restore implementation of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allo |
| CVE-2025-67113 | Awaiting Analysis | 未確認 | CWE-94 | OS command injection in the CWMP client (/ftl/bin/cwmp) of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote attackers controlling |
| CVE-2025-67114 | Awaiting Analysis | 未確認 | CWE-1391 | Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote at |
| CVE-2025-67115 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability in /ftl/web/setup.cgi in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote authenticated users to r |
| CVE-2025-67260 | Modified | 未確認 | CWE-434 | The Terrapack software, from ASTER TEC / ASTER S.p.A., with the indicated components and versions has a file upload vulnerability that may allow attackers to execute arbitrary code |
| CVE-2025-67298 | Analyzed | 未確認 | CWE-290, CWE-345, CWE-639 | An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile |
| CVE-2025-67618 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ArtstudioWorks Brookside allows Reflected XSS.This issue affects Brookside: fr |
| CVE-2025-67829 | Analyzed | 未確認 | CWE-89 | Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection. |
| CVE-2025-67830 | Analyzed | 未確認 | CWE-89 | Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection. |
| CVE-2025-67840 | Analyzed | 未確認 | CWE-78 | Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_1757588060_SEP2025_FULL.depot web applic |
| CVE-2025-68402 | Deferred | 未確認 | CWE-287 | FreshRSS is a free, self-hostable RSS aggregator. From 57e1a37 - 00f2f04, the lengths of the nonce was changed from 40 chars to 64. password_verify() is currently being called with |
| CVE-2025-68467 | Analyzed | 未確認 | CWE-200, CWE-346, CWE-668 | Dark Reader is an accessibility browser extension that makes web pages colors dark. The dynamic dark mode feature of the extension works by analyzing the colors of web pages found |
| CVE-2025-68482 | Analyzed | 未確認 | CWE-295 | A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 |
| CVE-2025-68515 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP Boo |
| CVE-2025-68553 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Lendiz lendiz allows Upload a Web Shell to a Web Server.This issue affects Lendiz: from n/a through < 2. |
| CVE-2025-68554 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Keenarch keenarch allows Using Malicious Files.This issue affects Keenarch: from n/a through < 2.0.1. |
| CVE-2025-68555 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Nutrie nutrie allows Upload a Web Shell to a Web Server.This issue affects Nutrie: from n/a through < 2. |
| CVE-2025-68623 | Awaiting Analysis | 未確認 | CWE-284 | In Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0, a low-privilege user can replace an executable file during the installation process, which may result in unintended |
| CVE-2025-68648 | Modified | 未確認 | CWE-134 | A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAn |
| CVE-2025-68836 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markbeljaars Table of Contents Creator allows Reflected XSS.This issue affects |
| CVE-2025-68971 | Deferred | 未確認 | CWE-400 | In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment (e.g., to be associated with an issue or a release). |
| CVE-2025-69090 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Remons remons allows PHP Local File Inclusion.This |
| CVE-2025-69096 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Zorka zorka allows Reflected XSS.This issue affects Zorka: from n/a th |
| CVE-2025-69196 | Modified | 未確認 | CWE-1220, CWE-863 | FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly respect the resource parameter submitted by the client in the |
| CVE-2025-69219 | Analyzed | 未確認 | CWE-913 | A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Au |
| CVE-2025-69236 | Analyzed | 未確認 | CWE-79 | Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality. Authenticated attacker with permissions to edit posts can inject arbitrary |
| CVE-2025-69237 | Analyzed | 未確認 | CWE-79 | Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality. Authenticated attacker with permissions to create content can inject arbit |
| CVE-2025-69238 | Analyzed | 未確認 | CWE-352 | Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, which when visited by the authenticated victim, will automatic |
| CVE-2025-69239 | Analyzed | 未確認 | CWE-918 | Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting ser |
| CVE-2025-69240 | Analyzed | 未確認 | CWE-348 | Raytha CMS allows an attacker to spoof `X-Forwarded-Host` or `Host` headers to attacker controlled domain. The attacker (who knows the victim's email address) can force the server |
| CVE-2025-69241 | Analyzed | 未確認 | CWE-79 | Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality. Authenticated attacker can inject arbitrary HTML and JS into website, |
| CVE-2025-69242 | Analyzed | 未確認 | CWE-79 | Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter. An attacker can craft a malicious URL which, when opened by authenticated victim, results in arbitrary Ja |
| CVE-2025-69243 | Analyzed | 未確認 | CWE-204 | Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if the login is valid or not, enabling a b |
| CVE-2025-69245 | Analyzed | 未確認 | CWE-79 | Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, resu |
| CVE-2025-69246 | Analyzed | 未確認 | CWE-307 | Raytha CMS does not have any brute force protection mechanism implemented. It allows an attacker to send multiple automated logon requests without triggering lockout, throttling, o |
| CVE-2025-69278 | Modified | 未確認 | CWE-20 | In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. |
| CVE-2025-69279 | Modified | 未確認 | CWE-20 | In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. |
| CVE-2025-69338 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Riode Core riode-core allows Blind SQL Injection.This issue affects |
| CVE-2025-69339 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Molla molla allows PHP Local File Inclusion.This |
| CVE-2025-69340 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access Control |
| CVE-2025-69343 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Schmit Theater for WordPress theatre allows Stored XSS.This issue affec |
| CVE-2025-69347 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Convers Lab WPSubscription subscription allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2025-69358 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue |
| CVE-2025-69411 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Robert Seyfriedsberger ionCube tester plus ioncube-tester-plus allows Path Traversal |
| CVE-2025-69534 | Modified | 未確認 | CWE-400, CWE-617 | Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsin |
| CVE-2025-69614 | Analyzed | 未確認 | CWE-640 | Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover. Affected Product: Deutsche Telek |
| CVE-2025-69615 | Analyzed | 未確認 | CWE-307 | Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required. Affected Product: Deutsche Tele |
| CVE-2025-69644 | Analyzed | 未確認 | CWE-400 | An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic f |
| CVE-2025-69645 | Analyzed | 未確認 | CWE-400 | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilat |
| CVE-2025-69646 | Analyzed | 未確認 | CWE-400 | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rn |
| CVE-2025-69647 | Analyzed | 未確認 | CWE-835 | GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing c |
| CVE-2025-69648 | Analyzed | 未確認 | CWE-835 | GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF pa |
| CVE-2025-69649 | Analyzed | 未確認 | CWE-476 | GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an |
| CVE-2025-69650 | Modified | 未確認 | CWE-415 | GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_reloca |
| CVE-2025-69651 | Modified | 未確認 | CWE-476 | GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump |
| CVE-2025-69652 | Analyzed | 未確認 | CWE-460 | GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due |
| CVE-2025-69653 | Analyzed | 未確認 | CWE-617 | A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09-13, fixed in commit 1dbba8a88eaa40d15a8a9b70bb1a0b8fb5b552e6 (2025-12-11), in file g |
| CVE-2025-69654 | Analyzed | 未確認 | CWE-400 | A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 (2025-12-11),`qjs` interpreter using the `-m` opti |
| CVE-2025-6969 | Analyzed | 未確認 | CWE-20 | in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input. |
| CVE-2025-69693 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). The quantization parameter (qp) validation at line 2267 only checks the lower bound (qp < 0) b |
| CVE-2025-69720 | Modified | 未確認 | CWE-120, CWE-121 | The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c. |
| CVE-2025-69727 | Deferred | 未確認 | CWE-284, CWE-639 | An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8. The affected components (index.js and composeUrlImgPhotoIndividu) allow the construct |
| CVE-2025-69765 | Analyzed | 未確認 | CWE-121 | Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution. |
| CVE-2025-69768 | Analyzed | 未確認 | CWE-89 | SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component |
| CVE-2025-69783 | Analyzed | 未確認 | CWE-250 | A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name (e.g., csrss.exe, edrsvc.exe, edrcon.exe). T |
| CVE-2025-69784 | Analyzed | 未確認 | CWE-427 | A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redire |
| CVE-2025-69808 | Analyzed | 未確認 | CWE-125 | An out-of-bounds memory access (OOB) in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to access sensitive information and cause a Denial of Service (DoS) via supplyi |
| CVE-2025-69809 | Analyzed | 未確認 | CWE-123 | A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling arbitrary code execution via a crafted pa |
| CVE-2025-69902 | Deferred | 未確認 | CWE-94 | A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to execute arbitrary commands via injecting arbitrary shell meta |
| CVE-2025-69969 | Analyzed | 未確認 | CWE-311, CWE-319 | A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers t |
| CVE-2025-69986 | Awaiting Analysis | 未確認 | CWE-121, CWE-20 | A buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Camera V7.6.32. The application fails to validate the length of the Protocol parameter insid |
| CVE-2025-69988 | Deferred | 未確認 | CWE-284 | BS Producten Petcam 33.1.0.0818 is vulnerable to Incorrect Access Control. An unauthenticated attacker in physical proximity can associate with this open network. Once connected, t |
| CVE-2025-70024 | Deferred | 未確認 | CWE-89 | An issue pertaining to CWE-89: Improper Neutralization of Special Elements used in an SQL Command was discovered in benkeen generatedata 4.0.14. |
| CVE-2025-70025 | Analyzed | 未確認 | CWE-79 | An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in benkeen generatedata 4.0.14. |
| CVE-2025-70027 | Analyzed | 未確認 | CWE-918 | An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to obtain sensitive information |
| CVE-2025-70028 | Analyzed | 未確認 | CWE-22 | An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. |
| CVE-2025-70030 | Modified | 未確認 | CWE-1333 | An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. |
| CVE-2025-70031 | Analyzed | 未確認 | CWE-352 | An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. |
| CVE-2025-70032 | Analyzed | 未確認 | CWE-601 | An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. |
| CVE-2025-70033 | Analyzed | 未確認 | CWE-79 | An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. |
| CVE-2025-70034 | Analyzed | 未確認 | CWE-1333 | An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0. |
| CVE-2025-70037 | Analyzed | 未確認 | CWE-601 | An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223. This allows attackers to obtain sensitive information and execute |
| CVE-2025-70038 | Analyzed | 未確認 | CWE-79 | An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attackers to execute arbitrar |
| CVE-2025-70039 | Analyzed | 未確認 | CWE-78 | An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223. |
| CVE-2025-70040 | Analyzed | 未確認 | CWE-532 | An issue pertaining to CWE-532: Insertion of Sensitive Information into Log File was discovered in LupinLin1 jimeng-web-mcp v2.1.2. This allows an attacker to obtain sensitive info |
| CVE-2025-70041 | Deferred | 未確認 | CWE-259 | An issue pertaining to CWE-259: Use of Hard-coded Password was discovered in oslabs-beta ThermaKube master. |
| CVE-2025-70042 | Analyzed | 未確認 | CWE-918 | An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in oslabs-beta ThermaKube master. |
| CVE-2025-70046 | Analyzed | 未確認 | CWE-829 | An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master. |
| CVE-2025-70047 | Analyzed | 未確認 | CWE-400 | An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in Nexusoft NexusInterface v3.2.0-beta.2. |
| CVE-2025-70048 | Analyzed | 未確認 | CWE-319 | An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2. |
| CVE-2025-70050 | Analyzed | 未確認 | CWE-312 | An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information. |
| CVE-2025-70059 | Analyzed | 未確認 | CWE-400 | An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in YMFE yapi v1.12.0 and allows attackers to cause a denial of service. |
| CVE-2025-70060 | Modified | 未確認 | CWE-79 | An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v1.12.0. |
| CVE-2025-70082 | Modified | 未確認 | CWE-288, CWE-620, CWE-78 | The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated |
| CVE-2025-70128 | Analyzed | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier. The application fails to properly sanitize o |
| CVE-2025-70129 | Analyzed | 未確認 | CWE-804 | If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for art |
| CVE-2025-70218 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via POST to the goform/formAdvFirewall component. |
| CVE-2025-70219 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot. |
| CVE-2025-70220 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWAN_wizard4. |
| CVE-2025-70221 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin. |
| CVE-2025-70222 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode. |
| CVE-2025-70223 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAdvNetwork. |
| CVE-2025-70225 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curtime parameter to the goform/formEasySetupWWConfig component |
| CVE-2025-70226 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formEasySetupWizard. |
| CVE-2025-70227 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the nextPage parameter to goform/formLanguageChange. |
| CVE-2025-70229 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule. |
| CVE-2025-70230 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS. |
| CVE-2025-70231 | Analyzed | 未確認 | CWE-22 | D-Link DIR-513 version 1.10 contains a critical-level vulnerability. When processing POST requests related to verification codes in /goform/formLogin, it enters /goform/getAuthCode |
| CVE-2025-70232 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetMACFilter. |
| CVE-2025-70233 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetEnableWizard. |
| CVE-2025-70234 | Modified | 未確認 | CWE-121, CWE-787 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS. |
| CVE-2025-70236 | Modified | 未確認 | CWE-121, CWE-787 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDomainFilter. |
| CVE-2025-70237 | Modified | 未確認 | CWE-121, CWE-787 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr. |
| CVE-2025-70238 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard52. |
| CVE-2025-70239 | Modified | 未確認 | CWE-121, CWE-787 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard55. |
| CVE-2025-70240 | Modified | 未確認 | CWE-121, CWE-787 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard51. |
| CVE-2025-70241 | Modified | 未確認 | CWE-121, CWE-787 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANType_Wizard5. |
| CVE-2025-70242 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formSetWanPPTP. |
| CVE-2025-70243 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard534. |
| CVE-2025-70244 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanSetup. |
| CVE-2025-70245 | Modified | 未確認 | CWE-121, CWE-787 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode. |
| CVE-2025-70246 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formVirtualServ. |
| CVE-2025-70247 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizard1. |
| CVE-2025-70249 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizard2. |
| CVE-2025-70250 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formdumpeasysetup. |
| CVE-2025-70251 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanGuestSetup. |
| CVE-2025-70252 | Analyzed | 未確認 | CWE-121 | An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced |
| CVE-2025-70330 | Deferred | 未確認 | CWE-125 | Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise v |
| CVE-2025-70341 | Analyzed | 未確認 | CWE-732, CWE-94 | Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files. |
| CVE-2025-70342 | Analyzed | 未確認 | CWE-732 | erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. This allows an unauthenticated attacker to intercept admi |
| CVE-2025-70363 | Modified | 未確認 | CWE-284 | Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive data via enumerating object ID |
| CVE-2025-70614 | Analyzed | 未確認 | CWE-284 | OpenCode Systems OC Messaging / USSD Gateway OC Release 6.32.2 contains a broken access control vulnerability in the web-based control panel allowing authenticated low-privileged a |
| CVE-2025-70616 | Analyzed | 未確認 | CWE-121 | A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (version 1.2.0.0) in the IOCTL handler for code 0x80102058. The vulnerability is cause |
| CVE-2025-70798 | Analyzed | 未確認 | CWE-259 | Tenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root. |
| CVE-2025-70802 | Analyzed | 未確認 | CWE-259 | Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root. |
| CVE-2025-70821 | Analyzed | 未確認 | CWE-89 | renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component |
| CVE-2025-70873 | Modified | 未確認 | CWE-244 | An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted |
| CVE-2025-70887 | Analyzed | 未確認 | CWE-269 | An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signed_data.py and the context.py components |
| CVE-2025-70888 | Analyzed | 未確認 | CWE-269 | An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component |
| CVE-2025-70948 | Deferred | 未確認 | CWE-644 | A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and execute an account takeover via spoofing th |
| CVE-2025-70949 | Deferred | 未確認 | CWE-208 | An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel. |
| CVE-2025-70952 | Analyzed | 未確認 | CWE-22 | pf4j before 20c2f80 has a path traversal vulnerability in the extract() function of Unzip.java, where improper handling of zip entry names can allow directory traversal or Zip Slip |
| CVE-2025-70973 | Analyzed | 未確認 | CWE-384 | ScadaBR 1.12.4 is vulnerable to Session Fixation. The application assigns a JSESSIONID session cookie to unauthenticated users and does not regenerate the session identifier after |
| CVE-2025-70995 | Deferred | 未確認 | CWE-94 | An issue in Aranda Service Desk Web Edition (ASDK API 8.6) allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files. An authenti |
| CVE-2025-71238 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() causing double free Kernel panic observed on system, [5353358.825191] BUG: unab |
| CVE-2025-71239 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2() to change attributes class fchmodat2(), introduced in version 6.6 is currently not in t | |
| CVE-2025-71257 | Analyzed | 未確認 | CWE-306 | BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API end |
| CVE-2025-71258 | Analyzed | 未確認 | CWE-918 | BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attack |
| CVE-2025-71259 | Analyzed | 未確認 | CWE-918 | BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows authenticated |
| CVE-2025-71260 | Analyzed | 未確認 | CWE-502 | BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authent |
| CVE-2025-71263 | Analyzed | 未確認 | CWE-120 | In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit th |
| CVE-2025-71264 | Analyzed | 未確認 | CWE-125 | Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash). |
| CVE-2025-71265 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata We found an infinite loop bug in |
| CVE-2025-71266 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We found an infinite loop bug in the ntfs3 f |
| CVE-2025-71267 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST We found an infinite loop bug in the ntfs3 file |
| CVE-2025-71268 | Modified | 未確認 | CWE-401, CWE-772 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent If we fail to allocate a path or |
| CVE-2025-71269 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback from inline due to -ENOSPC If we fail to create an inline exte |
| CVE-2025-71270 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable exception fixup for specific ADE subcode This patch allows the LoongArch BPF JIT to handle r | |
| CVE-2025-71275 | Rejected | 未確認 | Rejected reason: This CVE was rejected due to being a duplicate of CVE-2024-45519. | |
| CVE-2025-71276 | Analyzed | 未確認 | CWE-79 | SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories. |
| CVE-2025-7375 | Analyzed | 未確認 | CWE-20 | A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to |
| CVE-2025-7741 | Awaiting Analysis | 未確認 | CWE-259 | Hardcoded Password Vulnerability have been found in CENTUM. Affected products contain a hardcoded password for the user account (PROG) used for CENTUM Authentication Mode within th |
| CVE-2025-8766 | Modified | 未確認 | CWE-276 | A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable perm |
| CVE-2025-8899 | Deferred | 未確認 | CWE-269 | The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.20. This is due to vid |
| CVE-2025-9497 | Analyzed | 未確認 | CWE-798 | Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0. |
| CVE-2026-0005 | Modified | 未確認 | CWE-200 | In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps without knowing the LSKF du |
| CVE-2026-0006 | Modified | 未確認 | CWE-122 | In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privile |
| CVE-2026-0007 | Modified | 未確認 | CWE-1021 | In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of p |
| CVE-2026-0008 | Modified | 未確認 | CWE-441 | In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional execu |
| CVE-2026-0010 | Modified | 未確認 | CWE-787 | In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional |
| CVE-2026-0011 | Modified | 未確認 | CWE-693, CWE-703 | In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead to local escalation of |
| CVE-2026-0012 | Modified | 未確認 | CWE-284, CWE-693 | In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This could lead to local information disclosure w |
| CVE-2026-0013 | Modified | 未確認 | CWE-441 | In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local escalation of privilege w |
| CVE-2026-0014 | Modified | 未確認 | CWE-20 | In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with n |
| CVE-2026-0015 | Modified | 未確認 | CWE-20 | In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no a |
| CVE-2026-0017 | Modified | 未確認 | CWE-285, CWE-693 | In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with n |
| CVE-2026-0020 | Modified | 未確認 | CWE-639 | In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a permissions bypass. This could lead to loca |
| CVE-2026-0021 | Modified | 未確認 | CWE-441 | In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. This could lead to local escalation of privi |
| CVE-2026-0023 | Modified | 未確認 | CWE-269 | In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permission check. This could lead to local esc |
| CVE-2026-0024 | Modified | 未確認 | CWE-862 | In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check. This could lead to l |
| CVE-2026-0025 | Modified | 未確認 | CWE-200 | In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass. This could lead to local escalation of privilege with no a |
| CVE-2026-0026 | Modified | 未確認 | CWE-862 | In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local esca |
| CVE-2026-0027 | Modified | 未確認 | CWE-416 | In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privile |
| CVE-2026-0028 | Modified | 未確認 | CWE-190 | In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional |
| CVE-2026-0029 | Modified | 未確認 | CWE-269 | In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution p |
| CVE-2026-0030 | Modified | 未確認 | CWE-787 | In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with n |
| CVE-2026-0031 | Modified | 未確認 | CWE-190 | In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional exec |
| CVE-2026-0032 | Modified | 未確認 | CWE-269, CWE-787 | In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additiona |
| CVE-2026-0034 | Modified | 未確認 | CWE-20 | In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could lead to local escalation of pri |
| CVE-2026-0035 | Modified | 未確認 | CWE-125, CWE-787 | In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. This could lead to loca |
| CVE-2026-0037 | Modified | 未確認 | CWE-787 | In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional executio |
| CVE-2026-0038 | Modified | 未確認 | In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no | |
| CVE-2026-0047 | Modified | 未確認 | CWE-280 | In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local esc |
| CVE-2026-0107 | Analyzed | 未確認 | CWE-441 | In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy. This could lead to local escalation of privilege with no addit |
| CVE-2026-0108 | Analyzed | 未確認 | CWE-284 | The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interacti |
| CVE-2026-0109 | Analyzed | 未確認 | CWE-754 | In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure. This could lead to remote denial of service with no additional execu |
| CVE-2026-0110 | Analyzed | 未確認 | CWE-120 | In MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. This could lead to remote escalation of privilege with no additional execution privile |
| CVE-2026-0111 | Analyzed | 未確認 | CWE-787 | In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additi |
| CVE-2026-0112 | Analyzed | 未確認 | CWE-362, CWE-416 | In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privilege |
| CVE-2026-0113 | Analyzed | 未確認 | CWE-787 | In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additi |
| CVE-2026-0114 | Analyzed | 未確認 | CWE-787 | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User in |
| CVE-2026-0115 | Analyzed | 未確認 | CWE-1300 | In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure. This could lead to physical information disclosure with no additional exe |
| CVE-2026-0116 | Analyzed | 未確認 | CWE-787 | In __mfc_handle_released_buf of mfc_core_isr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional e |
| CVE-2026-0117 | Analyzed | 未確認 | CWE-787 | In mfc_dec_dqbuf of mfc_dec_v4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional ex |
| CVE-2026-0118 | Analyzed | 未確認 | CWE-693 | In oobconfig, there is a possible bypass of carrier restrictions due to a logic error. This could lead to local escalation of privilege with no additional execution privileges need |
| CVE-2026-0119 | Analyzed | 未確認 | CWE-787 | In usim_SendMCCMNCIndMsg of usim_Registration.c, there is a possible out of bounds write due to memory corruption. This could lead to physical escalation of privilege with no addit |
| CVE-2026-0120 | Analyzed | 未確認 | CWE-787 | In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User in |
| CVE-2026-0121 | Modified | 未確認 | CWE-362, CWE-416 | In VPU, there is a possible use-after-free read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User intera |
| CVE-2026-0122 | Analyzed | 未確認 | CWE-787 | In multiple places, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User |
| CVE-2026-0123 | Analyzed | 未確認 | CWE-787 | In EfwApTransport::ProcessRxRing of efw_ap_transport.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wit |
| CVE-2026-0124 | Analyzed | 未確認 | CWE-787 | There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interac |
| CVE-2026-0230 | Awaiting Analysis | 未確認 | CWE-754 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent. This issue could be leveraged by malwar |
| CVE-2026-0231 | Awaiting Analysis | 未確認 | CWE-497 | An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live termi |
| CVE-2026-0385 | Modified | 未確認 | CWE-290, CWE-451 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability |
| CVE-2026-0394 | Analyzed | 未確認 | CWE-22 | When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal ca |
| CVE-2026-0396 | Analyzed | 未確認 | CWE-80 | An attacker might be able to inject HTML content into the internal web dashboard by sending crafted DNS queries to a DNSdist instance where domain-based dynamic rules have been ena |
| CVE-2026-0397 | Analyzed | 未確認 | CWE-942 | When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extr |
| CVE-2026-0489 | Awaiting Analysis | 未確認 | CWE-79 | Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafte |
| CVE-2026-0520 | Analyzed | 未確認 | CWE-532 | A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could allow a local authenticated user to retrieve some sensitive dat |
| CVE-2026-0540 | Modified | 未確認 | CWE-79 | DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization |
| CVE-2026-0558 | Analyzed | 未確認 | CWE-287 | A vulnerability in parisneo/lollms, up to and including version 2.2.0, allows unauthenticated users to upload and process files through the `/api/files/extract-text` endpoint. This |
| CVE-2026-0560 | Analyzed | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the `/api/files/export-content` endpoint. The `_download_image |
| CVE-2026-0562 | Modified | 未確認 | CWE-863 | A critical security vulnerability in parisneo/lollms versions up to 2.2.0 allows any authenticated user to accept or reject friend requests belonging to other users. The `respond_r |
| CVE-2026-0596 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via ` |
| CVE-2026-0602 | Analyzed | 未確認 | CWE-288 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated u |
| CVE-2026-0609 | Deferred | 未確認 | CWE-79 | The Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt text in all versions |
| CVE-2026-0639 | Analyzed | 未確認 | CWE-401 | in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory. |
| CVE-2026-0654 | Analyzed | 未確認 | CWE-78 | Improper input handling in the administration web interface on TP-Link Deco BE25 v1.0 allows crafted input to be executed as part of an OS command. An authenticated adjacent attac |
| CVE-2026-0655 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (web modules) allows authenticated adjacent attacker to read |
| CVE-2026-0677 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Object Injection.This issue affects TotalContest Lite: from n/a through <= |
| CVE-2026-0689 | Analyzed | 未確認 | CWE-522 | In ExtremeCloud IQ – Site Engine (XIQ‑SE) before 26.2.10, a vulnerability in the NAC administration interface allows an authenticated NAC administrator to retrieve masked sensitive |
| CVE-2026-0708 | Analyzed | 未確認 | CWE-125 | A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded |
| CVE-2026-0748 | Analyzed | 未確認 | CWE-276, CWE-284 | In the Drupal 7 Internationalization (i18n) module, the i18n_node submodule allows a user with both "Translate content" and "Administer content translations" permissions to view an |
| CVE-2026-0754 | Awaiting Analysis | 未確認 | CWE-321 | An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP |
| CVE-2026-0809 | Deferred | 未確認 | CWE-261 | Use of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-Faktur) token to be guessed after analyzing how tokens with k |
| CVE-2026-0819 | Analyzed | 未確認 | CWE-121, CWE-787 | A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality. In wc_PKCS7_BuildSignedAttributes(), when adding custom signed attributes, the co |
| CVE-2026-0835 | Analyzed | 未確認 | CWE-79 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 are vulnerable to cross-site |
| CVE-2026-0846 | Modified | 未確認 | CWE-22, CWE-36 | A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function di |
| CVE-2026-0847 | Modified | 未確認 | CWE-22 | A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCor |
| CVE-2026-0848 | Analyzed | 未確認 | CWE-20 | NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar f |
| CVE-2026-0849 | Analyzed | 未確認 | CWE-120 | Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt k |
| CVE-2026-0866 | Rejected | 未確認 | Rejected reason: After the publication of the PoC by the researcher and further analysis, we have determined that this issue does not constitute a valid vulnerability. The techniqu | |
| CVE-2026-0869 | Analyzed | 未確認 | CWE-305 | Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could |
| CVE-2026-0898 | Awaiting Analysis | 未確認 | CWE-284 | An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robot Studio developers who are automating Google Chrome and Microsoft Edge using either version |
| CVE-2026-0940 | Awaiting Analysis | 未確認 | CWE-665 | A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code. |
| CVE-2026-0953 | Deferred | 未確認 | CWE-287 | The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon. This is due to the plugin fail |
| CVE-2026-0954 | Analyzed | 未確認 | CWE-787 | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted DSB file in Digilent DASYLab. This vulnerability may result in information disclo |
| CVE-2026-0955 | Analyzed | 未確認 | CWE-125 | There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab. This vulnerability may result in information disclosure |
| CVE-2026-0956 | Analyzed | 未確認 | CWE-125 | There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab. This vulnerability may result in information disclosure |
| CVE-2026-0957 | Analyzed | 未確認 | CWE-787 | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted file in Digilent DASYLab. This vulnerability may result in information disclosure |
| CVE-2026-0964 | Modified | 未確認 | CWE-22 | A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious |
| CVE-2026-0965 | Modified | 未確認 | CWE-73 | A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file |
| CVE-2026-0966 | Modified | 未確認 | CWE-124 | A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker |
| CVE-2026-0967 | Modified | 未確認 | CWE-1333 | A flaw was found in libssh. A remote attacker, by controlling client configuration files or known_hosts files, could craft specific hostnames that when processed by the `match_patt |
| CVE-2026-0968 | Modified | 未確認 | CWE-476 | A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message d |
| CVE-2026-0977 | Analyzed | 未確認 | CWE-284 | IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls. |
| CVE-2026-0995 | Analyzed | 未確認 | CWE-362 | An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME. |
| CVE-2026-1001 | Analyzed | 未確認 | CWE-79 | Domoticz versions prior to 2026.1 contain a stored cross-site scripting vulnerability in the Add Hardware and rename device functionality of the web interface that allows authentic |
| CVE-2026-1005 | Analyzed | 未確認 | CWE-191 | Integer underflow in wolfSSL packet sniffer <= 5.8.4 allows an attacker to cause a buffer overflow in the AEAD decryption path by injecting a TLS record shorter than the explicit I |
| CVE-2026-1014 | Analyzed | 未確認 | CWE-319 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of sensitive information via JSON server response manipulation. |
| CVE-2026-1015 | Analyzed | 未確認 | CWE-918 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized reque |
| CVE-2026-1032 | Deferred | 未確認 | CWE-352 | The Conditional Menus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.6. This is due to missing nonce validation on the ' |
| CVE-2026-1068 | Analyzed | 未確認 | CWE-295 | An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive us |
| CVE-2026-1069 | Analyzed | 未確認 | CWE-674 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by sendin |
| CVE-2026-1071 | Deferred | 未確認 | CWE-79 | The Carta Online plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.13.0 due to insufficient input sanitiz |
| CVE-2026-1073 | Deferred | 未確認 | CWE-352 | The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce va |
| CVE-2026-1074 | Deferred | 未確認 | CWE-79 | The WP App Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'app-bar-features' parameter in all versions up to, and including, 1.5. This is due to insu |
| CVE-2026-1085 | Deferred | 未確認 | CWE-352 | The True Ranker plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.9. This is due to missing nonce validation on the seoloca |
| CVE-2026-1086 | Deferred | 未確認 | CWE-352 | The Font Pairing Preview For Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing nonce |
| CVE-2026-1087 | Deferred | 未確認 | CWE-352 | The Guardian News Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing nonce validation on the se |
| CVE-2026-1090 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated u |
| CVE-2026-1093 | Deferred | 未確認 | CWE-79 | The WPFAQBlock– FAQ & Accordion Plugin For Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter of the 'wpfaqblock' shortcode in al |
| CVE-2026-1128 | Deferred | 未確認 | CWE-352 | The WP eCommerce WordPress plugin through 3.15.1 does not have CSRF check in place when deleting coupons, which could allow attackers to make a logged in admin remove them via a CS |
| CVE-2026-1166 | Undergoing Analysis | 未確認 | CWE-601 | Open Redirect vulnerability in Hitachi Ops Center Administrator.This issue affects Hitachi Ops Center Administrator: from 10.2.0 before 11.0.8. |
| CVE-2026-1182 | Analyzed | 未確認 | CWE-212 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated u |
| CVE-2026-1206 | Deferred | 未確認 | CWE-639 | The Elementor Website Builder plugin for WordPress is vulnerable to Incorrect Authorization to Sensitive Information Exposure in all versions up to, and including, 3.35.7. This is |
| CVE-2026-1217 | Deferred | 未確認 | CWE-862 | The Yoast Duplicate Post plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clone_bulk_action_handler() and republish_ |
| CVE-2026-1230 | Analyzed | 未確認 | CWE-706 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 1.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated us |
| CVE-2026-1236 | Deferred | 未確認 | CWE-79 | The Envira Gallery for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'justified_gallery_theme' parameter in all versions up to, and including, |
| CVE-2026-1238 | Deferred | 未確認 | CWE-79 | The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fh' (fingerprint) parameter in all versions up to, and including, 5.3.5 due to ins |
| CVE-2026-1247 | Deferred | 未確認 | CWE-79 | The Survey plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and |
| CVE-2026-1253 | Deferred | 未確認 | CWE-862 | The Group Chat & Video Chat by AtomChat plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'atomchat_update_auth_ajax' |
| CVE-2026-1261 | Deferred | 未確認 | CWE-79 | The MetForm Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Quiz feature in all versions up to, and including, 3.9.6 due to insufficient input sanitiz |
| CVE-2026-1262 | Analyzed | 未確認 | CWE-209 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability. |
| CVE-2026-1264 | Analyzed | 未確認 | CWE-306 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticat |
| CVE-2026-1265 | Analyzed | 未確認 | CWE-532 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log file. |
| CVE-2026-1267 | Analyzed | 未確認 | CWE-200 | IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of proper access c |
| CVE-2026-1273 | Deferred | 未確認 | CWE-918 | The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5. |
| CVE-2026-1275 | Deferred | 未確認 | CWE-79 | The Multi Post Carousel by Category plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slides' shortcode attribute in all versions up to, and including, 1.4 |
| CVE-2026-1276 | Analyzed | 未確認 | CWE-79 | IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in t |
| CVE-2026-1278 | Deferred | 未確認 | CWE-79 | The Mandatory Field plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.8 due to insufficient input sanit |
| CVE-2026-1286 | Analyzed | 未確認 | CWE-502 | CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an adm |
| CVE-2026-1307 | Deferred | 未確認 | CWE-200 | The Ninja Forms - The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.1 via |
| CVE-2026-1313 | Deferred | 未確認 | CWE-918 | The MimeTypes Link Icons plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.2.20. This is due to the plugin making outbound H |
| CVE-2026-1321 | Deferred | 未確認 | CWE-862 | The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.20. This is due to the `rcp_setup_regi |
| CVE-2026-1323 | Analyzed | 未確認 | CWE-502 | The extension fails to properly define allowed classes used when deserializing transport failure metadata. An attacker may exploit this to execute untrusted serialized code. Note t |
| CVE-2026-1336 | Deferred | 未確認 | CWE-862 | The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the |
| CVE-2026-1376 | Analyzed | 未確認 | CWE-770 | IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources. |
| CVE-2026-1378 | Deferred | 未確認 | CWE-352 | The WP Posts Re-order plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the `cp |
| CVE-2026-1390 | Deferred | 未確認 | CWE-352 | The Redirect countdown plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the `c |
| CVE-2026-1392 | Deferred | 未確認 | CWE-352 | The SR WP Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to missing nonce validation on the sr_ |
| CVE-2026-1393 | Deferred | 未確認 | CWE-352 | The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to mis |
| CVE-2026-1397 | Deferred | 未確認 | CWE-79 | The PQ Addons – Creative Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget attributes in all versions up to, and including, 1.0.0 due t |
| CVE-2026-1430 | Deferred | 未確認 | The WP Lightbox 2 WordPress plugin before 3.0.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site | |
| CVE-2026-1454 | Deferred | 未確認 | CWE-79 | The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.1 via form |
| CVE-2026-1463 | Deferred | 未確認 | CWE-98 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.3 via the 'te |
| CVE-2026-1468 | Deferred | 未確認 | CWE-352 | QuickCMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. An attacker can craft special website, which when visited by the victim, will automatically send a P |
| CVE-2026-1471 | Analyzed | 未確認 | CWE-863 | Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authen |
| CVE-2026-1487 | Deferred | 未確認 | CWE-89 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to SQL Injection via the JSON Import in all versions up to, and including, 5. |
| CVE-2026-1492 | Deferred | 未確認 | CWE-269 | The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable t |
| CVE-2026-1496 | Awaiting Analysis | 未確認 | CWE-639 | Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious |
| CVE-2026-1497 | Analyzed | 未確認 | CWE-863 | Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.22 can lead to the following scenario: an admin that intend |
| CVE-2026-1503 | Deferred | 未確認 | CWE-352 | The login_register plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.2.0. This is due to missi |
| CVE-2026-1508 | Deferred | 未確認 | CWE-352 | The Court Reservation WordPress plugin before 1.10.9 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete them via |
| CVE-2026-1519 | Modified | 未確認 | CWE-606, CWE-770 | If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaff |
| CVE-2026-1524 | Analyzed | 未確認 | CWE-287, CWE-863 | An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised access under the following conditions: If a neo4j admin c |
| CVE-2026-1525 | Analyzed | 未確認 | CWE-444 | Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length). This produces malformed HT |
| CVE-2026-1526 | Modified | 未確認 | CWE-409, CWE-770 | The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression. When a WebSocket connection negoti |
| CVE-2026-1527 | Analyzed | 未確認 | CWE-93 | ImpactWhen an application passes user-controlled input to the upgrade option of client.request(), an attacker can inject CRLF sequences (\r\n) to: * Inject arbitrary HTTP heade |
| CVE-2026-1528 | Modified | 未確認 | CWE-1284, CWE-248 | ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length. undici's ByteParser overflows internal math, ends up in an invalid state |
| CVE-2026-1556 | Analyzed | 未確認 | CWE-200 | Information disclosure in the file URI processing of File (Field) Paths in Drupal File (Field) Paths 7.x prior to 7.1.3 on Drupal 7.x allows authenticated users to disclose other u |
| CVE-2026-1561 | Analyzed | 未確認 | CWE-918 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow re |
| CVE-2026-1566 | Deferred | 未確認 | CWE-269 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and includi |
| CVE-2026-1567 | Analyzed | 未確認 | CWE-611 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow attackers to retrieve sensit |
| CVE-2026-1569 | Deferred | 未確認 | CWE-79 | The Wueen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wueen-blocket` shortcode in all versions up to, and including, 0.2.0 due to insufficie |
| CVE-2026-1574 | Deferred | 未確認 | CWE-79 | The MyQtip – easy qTip2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `myqtip` shortcode in all versions up to, and including, 2.0.5 due to ins |
| CVE-2026-1575 | Deferred | 未確認 | CWE-79 | The Schema Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `itemscope` shortcode in all versions up to, and including, 1.0 due to insuf |
| CVE-2026-1579 | Analyzed | 未確認 | CWE-306 | The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message -- including SERIAL_CONT |
| CVE-2026-1605 | Modified | 未確認 | CWE-400, CWE-401, CWE-772 | In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and |
| CVE-2026-1612 | Awaiting Analysis | 未確認 | CWE-798 | AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater ac |
| CVE-2026-1628 | Analyzed | 未確認 | CWE-829 | Mattermost Desktop App versions <=5.13.3 fail to attach listeners restricting navigation to external sites within the Mattermost app which allows a malicious server to expose prelo |
| CVE-2026-1629 | Analyzed | 未確認 | CWE-672 | Mattermost versions 10.11.x <= 10.11.10 Fail to invalidate cached permalink preview data when a user loses channel access which allows the user to continue viewing private channel |
| CVE-2026-1644 | Deferred | 未確認 | CWE-352 | The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the |
| CVE-2026-1647 | Deferred | 未確認 | CWE-79 | The Comment Genius plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 1.2.5 due to |
| CVE-2026-1648 | Deferred | 未確認 | CWE-918 | The Performance Monitor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.6. This is due to insufficient validation of the |
| CVE-2026-1650 | Deferred | 未確認 | CWE-862 | The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'custom_fields_controller' function in all v |
| CVE-2026-1651 | Deferred | 未確認 | CWE-89 | The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the 'workflow_ids' parameter in all versions up to, and including, 5.9.16 due to in |
| CVE-2026-1652 | Analyzed | 未確認 | CWE-122 | A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to corrupt memory and caus |
| CVE-2026-1653 | Analyzed | 未確認 | CWE-369 | A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to cause a Windows blue scr |
| CVE-2026-1663 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated u |
| CVE-2026-1668 | Analyzed | 未確認 | CWE-20, CWE-787 | The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. U |
| CVE-2026-1674 | Deferred | 未確認 | CWE-862 | The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to mi |
| CVE-2026-1678 | Analyzed | 未確認 | CWE-787 | dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cached size becomes incorrect, and the final null terminator ca |
| CVE-2026-1679 | Analyzed | 未確認 | CWE-120 | The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; oversized sends overflow `eswifi->buf`, corrupting kernel memor |
| CVE-2026-1704 | Deferred | 未確認 | CWE-639 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inc |
| CVE-2026-1706 | Deferred | 未確認 | CWE-79 | The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter in all versions up to, and including, 4.7.1 due to insuffic |
| CVE-2026-1708 | Deferred | 未確認 | CWE-89 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection in all versions up to, and including, 1.6.9 |
| CVE-2026-1710 | Deferred | 未確認 | CWE-285 | The WooPayments: Integrated WooCommerce Payments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_upe_appearan |
| CVE-2026-1712 | Awaiting Analysis | 未確認 | CWE-266 | Incorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This issue affects HYPR Server: from 10.5.1 before 10.7. |
| CVE-2026-1713 | Analyzed | 未確認 | CWE-305 | IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 through 9.4.4. |
| CVE-2026-1715 | Analyzed | 未確認 | CWE-88 | An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify arbi |
| CVE-2026-1716 | Analyzed | 未確認 | CWE-88 | An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete arbi |
| CVE-2026-1717 | Analyzed | 未確認 | CWE-88 | An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to termina |
| CVE-2026-1720 | Deferred | 未確認 | CWE-862 | The WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a |
| CVE-2026-1724 | Analyzed | 未確認 | CWE-306 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated |
| CVE-2026-1732 | Analyzed | 未確認 | CWE-212 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated u |
| CVE-2026-1753 | Deferred | 未確認 | CWE-639 | The Gutena Forms WordPress plugin before 1.6.1 does not validate option to be updated, which could allow contributors and above role to update arbitrary boolean and array options |
| CVE-2026-1775 | Awaiting Analysis | 未確認 | CWE-306 | The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands |
| CVE-2026-1776 | Analyzed | 未確認 | CWE-22 | Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenticated users t |
| CVE-2026-1780 | Deferred | 未確認 | CWE-79 | The [CR]Paid Link Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.5 due to insufficient input |
| CVE-2026-1781 | Deferred | 未確認 | CWE-862 | The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 4.11.1. This is due to the plugin trusting the |
| CVE-2026-1797 | Deferred | 未確認 | CWE-862 | The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 through v |
| CVE-2026-1799 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate has been determined not to be a valid vulnerability. Notes: All references and descriptions i | |
| CVE-2026-1800 | Deferred | 未確認 | CWE-89 | The Fonts Manager | Custom Fonts plugin for WordPress is vulnerable to time-based SQL Injection via the ‘fmcfIdSelectedFnt’ parameter in all versions up to, and including, 1.2 due |
| CVE-2026-1805 | Deferred | 未確認 | CWE-79 | The DA Media GigList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's damedia_giglist shortcode in all versions up to, and including, 1.9.0 due to |
| CVE-2026-1806 | Deferred | 未確認 | CWE-79 | The Tour & Activity Operator Plugin for TourCMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' parameter of the tourcms_doc_link shortcode in al |
| CVE-2026-1820 | Deferred | 未確認 | CWE-79 | The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmalt_sc_div_update_alt_text' shortcode in all versions up to |
| CVE-2026-1822 | Deferred | 未確認 | CWE-79 | The WP NG Weather plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ng-weather' shortcode in all versions up to, and including, 1.0.9 due to insuf |
| CVE-2026-1823 | Deferred | 未確認 | CWE-79 | The Consensus Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's consensus shortcode in all versions up to, and including, 1.6 due to insuffic |
| CVE-2026-1824 | Deferred | 未確認 | CWE-79 | The Infomaniak Connect for OpenID plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'endpoint_login' parameter of the infomaniak_connect_generic_auth_url sh |
| CVE-2026-1825 | Deferred | 未確認 | CWE-79 | The Show YouTube video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'syv' shortcode in all versions up to, and including, 1.1 due to insuffici |
| CVE-2026-1834 | Deferred | 未確認 | CWE-80 | The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ive' shortcode in all versions up to, and including, 1.2. |
| CVE-2026-1851 | Deferred | 未確認 | CWE-79 | The iVysilani Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' shortcode attribute in all versions up to, and including, 3.0 due to insuf |
| CVE-2026-1854 | Deferred | 未確認 | CWE-79 | The Post Flagger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'flag' shortcode in all versions up to, and including, 1.1 due to insufficient i |
| CVE-2026-1867 | Deferred | 未確認 | CWE-200 | The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially cr |
| CVE-2026-1870 | Deferred | 未確認 | CWE-862 | The Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing validation checks on the |
| CVE-2026-1874 | Analyzed | 未確認 | CWE-670 | Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior an |
| CVE-2026-1875 | Analyzed | 未確認 | CWE-404 | Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remot |
| CVE-2026-1876 | Analyzed | 未確認 | CWE-404 | Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attac |
| CVE-2026-1877 | Deferred | 未確認 | CWE-79 | The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.84. This is due to missing nonce validation on the |
| CVE-2026-1878 | Awaiting Analysis | 未確認 | CWE-494 | An Insufficient Integrity Verification vulnerability in the ASUS ROG peripheral driver installation process allows privilege escalation to SYSTEM. The vulnerability is due to impro |
| CVE-2026-1883 | Deferred | 未確認 | CWE-639 | The Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and incl |
| CVE-2026-1886 | Deferred | 未確認 | CWE-79 | The Go Night Pro | WordPress Dark Mode Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'go-night-pro-shortcode' shortcode in all versions up to, |
| CVE-2026-1889 | Deferred | 未確認 | CWE-79 | The Outgrow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the 'outgrow' shortcode in all versions up to, and including, 2.1. This is d |
| CVE-2026-1890 | Deferred | 未確認 | The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing data | |
| CVE-2026-1891 | Deferred | 未確認 | CWE-79 | The Simple Football Scoreboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ytmr_fb_scoreboard' shortcode in all versions up to, and including, 1.0 du |
| CVE-2026-1899 | Deferred | 未確認 | CWE-79 | The Any Post Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aps_slider shortcode in all versions up to, and including, 1.0.4 due to insuf |
| CVE-2026-1902 | Deferred | 未確認 | CWE-79 | The Hammas Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'apix' parameter in the 'hp-calendar-manage-redirect' shortcode in all versions up to, |
| CVE-2026-1908 | Deferred | 未確認 | CWE-79 | The Integration with Hubspot Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hubspotform' shortcode in all versions up to, and including, 1.2.2 due |
| CVE-2026-1911 | Deferred | 未確認 | CWE-79 | The Twitter Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tweet_title' parameter in the 'TwitterFeeds' shortcode in all versions up to, and inclu |
| CVE-2026-1914 | Deferred | 未確認 | CWE-79 | The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fusedesk_newcase shortcode in all versions up to, and including, 6.8 due to insuffic |
| CVE-2026-1917 | Analyzed | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3 |
| CVE-2026-1919 | Deferred | 未確認 | CWE-306 | The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multi |
| CVE-2026-1920 | Deferred | 未確認 | CWE-306 | The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on |
| CVE-2026-1926 | Deferred | 未確認 | CWE-862 | The Subscriptions for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `wps_sfw_admin_cancel_susbcriptio |
| CVE-2026-1935 | Deferred | 未確認 | CWE-862 | The Company Posts for LinkedIn plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.0. This is due to a missing capability check on |
| CVE-2026-1940 | Analyzed | 未確認 | CWE-125 | An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not a |
| CVE-2026-1945 | Deferred | 未確認 | CWE-79 | The WPBookit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpb_user_name' and 'wpb_user_email' parameters in all versions up to, and including, 1.0.8 d |
| CVE-2026-1947 | Deferred | 未確認 | CWE-639 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.9 via the submi |
| CVE-2026-1948 | Deferred | 未確認 | CWE-862 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deactivate_lice |
| CVE-2026-1958 | Deferred | 未確認 | CWE-798 | Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FT |
| CVE-2026-1961 | Analyzed | 未確認 | CWE-78 | A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the syste |
| CVE-2026-1965 | Modified | 未確認 | CWE-305 | libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a pool of recent connections so th |
| CVE-2026-1969 | Deferred | 未確認 | CWE-434 | The trx_addons WordPress plugin before 2.38.5 does not correctly validate file types in one of its AJAX action, allowing unauthenticated users to upload arbitrary file. This is due |
| CVE-2026-1980 | Deferred | 未確認 | CWE-200 | The WPBookit plugin for WordPress is vulnerable to unauthorized data disclosure due to a missing authorization check on the 'get_customer_list' route in all versions up to, and inc |
| CVE-2026-1981 | Deferred | 未確認 | CWE-862 | The HUMN-1 AI Website Scanner & Human Certification by Winston AI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the w |
| CVE-2026-1986 | Deferred | 未確認 | CWE-79 | The FloristPress for Woo – Customize your eCommerce store for your Florist plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'noresults' parameter in all |
| CVE-2026-1992 | Deferred | 未確認 | CWE-639 | The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Insecure Direct Object Reference in versions 8.6.0 through 9.0.2. This is due to the `store_sett |
| CVE-2026-1993 | Deferred | 未確認 | CWE-269 | The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Improper Privilege Management in versions 7.1.0 through 9.0.2. This is due to the `update_settin |
| CVE-2026-1995 | Awaiting Analysis | 未確認 | In versions before 7.0.0.64, IDrive’s id_service.exe process runs with elevated privileges and regularly reads from several files under the C:\ProgramData\IDrive\ directory. The UT | |
| CVE-2026-20001 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerabi |
| CVE-2026-20002 | Analyzed | 未確認 | CWE-89 | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected sys |
| CVE-2026-20003 | Analyzed | 未確認 | CWE-89 | A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerabi |
| CVE-2026-20004 | Analyzed | 未確認 | CWE-771 | A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device. This vulnera |
| CVE-2026-20005 | Analyzed | 未確認 | CWE-392 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine t |
| CVE-2026-20006 | Analyzed | 未確認 | CWE-388 | A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote |
| CVE-2026-20007 | Analyzed | 未確認 | CWE-284 | A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass c |
| CVE-2026-20008 | Analyzed | 未確認 | CWE-78 | A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) S |
| CVE-2026-20009 | Analyzed | 未確認 | CWE-138 | A vulnerability in the implementation of the proprietary SSH stack with SSH key-based authentication in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow |
| CVE-2026-20012 | Analyzed | 未確認 | CWE-401 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwar |
| CVE-2026-20013 | Analyzed | 未確認 | CWE-401 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on |
| CVE-2026-20014 | Analyzed | 未確認 | CWE-401 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user credentia |
| CVE-2026-20015 | Analyzed | 未確認 | CWE-401 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on |
| CVE-2026-20016 | Analyzed | 未確認 | CWE-88 | A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute arbitr |
| CVE-2026-20017 | Analyzed | 未確認 | CWE-250 | A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. To ex |
| CVE-2026-20018 | Awaiting Analysis | 未確認 | CWE-27 | A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authe |
| CVE-2026-20020 | Analyzed | 未確認 | CWE-20 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected devi |
| CVE-2026-20021 | Analyzed | 未確認 | CWE-401 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an auth |
| CVE-2026-20022 | Analyzed | 未確認 | CWE-823 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected devi |
| CVE-2026-20023 | Analyzed | 未確認 | CWE-787 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unau |
| CVE-2026-20024 | Analyzed | 未確認 | CWE-119 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device |
| CVE-2026-20025 | Analyzed | 未確認 | CWE-190 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device |
| CVE-2026-20031 | Undergoing Analysis | 未確認 | CWE-248 | A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affecte |
| CVE-2026-20039 | Analyzed | 未確認 | CWE-244 | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an una |
| CVE-2026-20040 | Analyzed | 未確認 | CWE-78 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affe |
| CVE-2026-20044 | Analyzed | 未確認 | CWE-269 | A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as ro |
| CVE-2026-20046 | Analyzed | 未確認 | CWE-264 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full admini |
| CVE-2026-20049 | Analyzed | 未確認 | CWE-131 | A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance |
| CVE-2026-20050 | Analyzed | 未確認 | CWE-404 | A vulnerability in the Do Not Decrypt exclusion feature of the SSL decryption feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote |
| CVE-2026-20052 | Analyzed | 未確認 | CWE-788 | A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote att |
| CVE-2026-20053 | Analyzed | 未確認 | CWE-122 | Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to cra |
| CVE-2026-20054 | Analyzed | 未確認 | CWE-835 | Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to cra |
| CVE-2026-20057 | Analyzed | 未確認 | CWE-369 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause th |
| CVE-2026-20058 | Analyzed | 未確認 | CWE-786 | Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to cra |
| CVE-2026-20062 | Awaiting Analysis | 未確認 | CWE-279 | A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authenticated, local attacker with administra |
| CVE-2026-20063 | Awaiting Analysis | 未確認 | CWE-88 | A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. To ex |
| CVE-2026-20064 | Analyzed | 未確認 | CWE-476 | A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial |
| CVE-2026-20065 | Analyzed | 未確認 | CWE-667 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine t |
| CVE-2026-20066 | Analyzed | 未確認 | CWE-400 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine t |
| CVE-2026-20067 | Analyzed | 未確認 | CWE-787 | Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine t |
| CVE-2026-20068 | Analyzed | 未確認 | CWE-248 | Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine t |
| CVE-2026-20069 | Analyzed | 未確認 | CWE-444 | A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could |
| CVE-2026-20070 | Analyzed | 未確認 | CWE-80 | A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could |
| CVE-2026-20073 | Analyzed | 未確認 | CWE-284 | A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote a |
| CVE-2026-20074 | Analyzed | 未確認 | CWE-1287 | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker |
| CVE-2026-20079 | Analyzed | 掲載 | CWE-288 | A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute |
| CVE-2026-20082 | Analyzed | 未確認 | CWE-772 | A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attack |
| CVE-2026-20083 | Awaiting Analysis | 未確認 | CWE-235 | A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of serv |
| CVE-2026-20084 | Analyzed | 未確認 | CWE-400 | A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resultin |
| CVE-2026-20086 | Awaiting Analysis | 未確認 | CWE-230 | A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family |
| CVE-2026-20100 | Analyzed | 未確認 | CWE-120 | A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense ( |
| CVE-2026-20101 | Analyzed | 未確認 | CWE-330 | A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause |
| CVE-2026-20102 | Analyzed | 未確認 | CWE-79 | A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenti |
| CVE-2026-20103 | Analyzed | 未確認 | CWE-770 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software cou |
| CVE-2026-20104 | Analyzed | 未確認 | CWE-124 | A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE932 |
| CVE-2026-20105 | Analyzed | 未確認 | CWE-401 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software cou |
| CVE-2026-20106 | Analyzed | 未確認 | CWE-401 | A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat |
| CVE-2026-20108 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack |
| CVE-2026-20110 | Awaiting Analysis | 未確認 | CWE-266 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnera |
| CVE-2026-20112 | Awaiting Analysis | 未確認 | CWE-79 | A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a |
| CVE-2026-20113 | Awaiting Analysis | 未確認 | CWE-93 | A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform |
| CVE-2026-20114 | Awaiting Analysis | 未確認 | CWE-1286 | A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access manag |
| CVE-2026-20115 | Awaiting Analysis | 未確認 | CWE-319 | A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information. This vulnerability is due to a |
| CVE-2026-20116 | Undergoing Analysis | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact Center Enterprise (Unif |
| CVE-2026-20117 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site sc |
| CVE-2026-20118 | Awaiting Analysis | 未確認 | CWE-460 | A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series with |
| CVE-2026-20125 | Awaiting Analysis | 未確認 | CWE-228 | A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to r |
| CVE-2026-20131 | Analyzed | 掲載 | CWE-502 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary |
| CVE-2026-20149 | Analyzed | 未確認 | CWE-79 | A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability, and no |
| CVE-2026-20162 | Analyzed | 未確認 | CWE-79 | In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123, a low-priv |
| CVE-2026-20163 | Analyzed | 未確認 | CWE-77 | In Splunk Enterprise versions below 10.2.0, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.0.2503.12, 10.1.2507.16, and 9.3.2411.124, a user wh |
| CVE-2026-20164 | Analyzed | 未確認 | CWE-200 | In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, 10.0.2503.11, and 9.3.2411.123, a low-pri |
| CVE-2026-20165 | Analyzed | 未確認 | CWE-532 | In Splunk Enterprise versions below 10.2.1, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.7, 10.1.2507.17, 10.0.2503.12, and 9.3.2411.124, a low-pri |
| CVE-2026-20166 | Analyzed | 未確認 | CWE-200 | In Splunk Enterprise versions below 10.2.1 and 10.0.4, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, and 10.0.2503.12, a low-privileged user that does not hol |
| CVE-2026-2020 | Deferred | 未確認 | CWE-502 | The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute. This is due to th |
| CVE-2026-2025 | Deferred | 未確認 | CWE-200 | The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresse |
| CVE-2026-20416 | Analyzed | 未確認 | CWE-787 | In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Syste |
| CVE-2026-20423 | Modified | 未確認 | CWE-749, CWE-787 | In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. U |
| CVE-2026-20424 | Analyzed | 未確認 | CWE-125 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the Syst |
| CVE-2026-20425 | Analyzed | 未確認 | CWE-787 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy |
| CVE-2026-20426 | Analyzed | 未確認 | CWE-787 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy |
| CVE-2026-20427 | Analyzed | 未確認 | CWE-787 | In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained th |
| CVE-2026-20428 | Analyzed | 未確認 | CWE-787 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy |
| CVE-2026-20429 | Analyzed | 未確認 | CWE-125 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the Syst |
| CVE-2026-20430 | Analyzed | 未確認 | CWE-787 | In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional ex |
| CVE-2026-20434 | Analyzed | 未確認 | CWE-787 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station co |
| CVE-2026-20435 | Analyzed | 未確認 | CWE-522 | In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the |
| CVE-2026-20436 | Analyzed | 未確認 | CWE-120 | In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obt |
| CVE-2026-20437 | Analyzed | 未確認 | CWE-416 | In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User inte |
| CVE-2026-20438 | Analyzed | 未確認 | CWE-367 | In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privi |
| CVE-2026-20439 | Analyzed | 未確認 | CWE-416 | In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User i |
| CVE-2026-20440 | Analyzed | 未確認 | CWE-1285, CWE-787 | In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System |
| CVE-2026-20441 | Analyzed | 未確認 | CWE-787 | In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System |
| CVE-2026-20442 | Analyzed | 未確認 | CWE-416 | In display, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User |
| CVE-2026-20443 | Analyzed | 未確認 | CWE-416 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privi |
| CVE-2026-20444 | Analyzed | 未確認 | CWE-787 | In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Syst |
| CVE-2026-20445 | Analyzed | 未確認 | CWE-367 | In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User i |
| CVE-2026-20607 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access pro |
| CVE-2026-20622 | Modified | 未確認 | CWE-284 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to c |
| CVE-2026-20631 | Modified | 未確認 | A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user may be able to elevate privileges. | |
| CVE-2026-20632 | Analyzed | 未確認 | CWE-284 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user |
| CVE-2026-20633 | Analyzed | 未確認 | CWE-59 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access user-s |
| CVE-2026-20637 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Son |
| CVE-2026-20639 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously craft |
| CVE-2026-20643 | Modified | 未確認 | CWE-20, CWE-346 | A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadOS, and macOS, Safari |
| CVE-2026-20651 | Analyzed | 未確認 | CWE-377 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to a |
| CVE-2026-20657 | Modified | 未確認 | CWE-119, CWE-125, CWE-787 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sono |
| CVE-2026-20664 | Modified | 未確認 | CWE-120, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted |
| CVE-2026-20665 | Analyzed | 未確認 | CWE-693 | This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, |
| CVE-2026-20668 | Analyzed | 未確認 | CWE-532 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5 |
| CVE-2026-20670 | Modified | 未確認 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to acces | |
| CVE-2026-20684 | Modified | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.4. An app may bypass Gatekeeper checks. |
| CVE-2026-20686 | Analyzed | 未確認 | CWE-20 | This issue was addressed with improved input validation. This issue is fixed in iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data. |
| CVE-2026-20687 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tah |
| CVE-2026-20688 | Analyzed | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS |
| CVE-2026-20690 | Analyzed | 未確認 | CWE-125 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macO |
| CVE-2026-20691 | Analyzed | 未確認 | CWE-497 | An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A |
| CVE-2026-20692 | Modified | 未確認 | A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26 | |
| CVE-2026-20693 | Analyzed | 未確認 | CWE-732 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An attacker with root privileges may |
| CVE-2026-20694 | Modified | 未確認 | CWE-59, CWE-61 | This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS |
| CVE-2026-20695 | Analyzed | 未確認 | An information disclosure issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be abl | |
| CVE-2026-20697 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access sen |
| CVE-2026-20698 | Modified | 未確認 | CWE-119, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able |
| CVE-2026-20699 | Analyzed | 未確認 | CWE-347 | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, mac |
| CVE-2026-20701 | Analyzed | 未確認 | CWE-693 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to connec |
| CVE-2026-20719 | Analyzed | 未確認 | CWE-754 | Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows unauthenticated |
| CVE-2026-2072 | Analyzed | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Analytics probe component), Hitachi Ops Center Analyzer.This issue affects Hitachi Infrastructure An |
| CVE-2026-20726 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2026-20748 | Analyzed | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementati |
| CVE-2026-20757 | Analyzed | 未確認 | CWE-667 | Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centre Server. This iss |
| CVE-2026-20777 | Analyzed | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63). A specially crafted . |
| CVE-2026-20801 | Analyzed | 未確認 | CWE-319 | Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with lo |
| CVE-2026-20882 | Analyzed | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-o |
| CVE-2026-20892 | Deferred | 未確認 | CWE-94 | Code injection vulnerability exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker with administrative privileges to execute arbitrary commands. |
| CVE-2026-20915 | Analyzed | 未確認 | CWE-79 | Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicious JavaScript |
| CVE-2026-2092 | Modified | 未確認 | CWE-1287 | A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is |
| CVE-2026-20967 | Analyzed | 未確認 | CWE-20 | Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-20988 | Analyzed | 未確認 | Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary activity with Settings privilege. User i | |
| CVE-2026-20989 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attackers to use custom font. |
| CVE-2026-20990 | Analyzed | 未確認 | Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege. | |
| CVE-2026-20991 | Analyzed | 未確認 | Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents. | |
| CVE-2026-20992 | Analyzed | 未確認 | CWE-863 | Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application. |
| CVE-2026-20993 | Analyzed | 未確認 | Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information. | |
| CVE-2026-20994 | Analyzed | 未確認 | CWE-601 | URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token. |
| CVE-2026-20995 | Analyzed | 未確認 | CWE-306 | Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration. |
| CVE-2026-20996 | Analyzed | 未確認 | CWE-327 | Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication. |
| CVE-2026-20997 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication. |
| CVE-2026-20998 | Analyzed | 未確認 | Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication. | |
| CVE-2026-20999 | Analyzed | 未確認 | CWE-294 | Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions. |
| CVE-2026-2100 | Modified | 未確認 | CWE-824 | A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mech |
| CVE-2026-21000 | Analyzed | 未確認 | CWE-22 | Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege. |
| CVE-2026-21001 | Analyzed | 未確認 | CWE-22 | Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege. |
| CVE-2026-21002 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application. |
| CVE-2026-21004 | Analyzed | 未確認 | CWE-287 | Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service. |
| CVE-2026-21005 | Analyzed | 未確認 | CWE-22 | Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege. |
| CVE-2026-2121 | Deferred | 未確認 | CWE-79 | The Weaver Show Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_class' parameter in all versions up to, and including, 1.8.1. This is due to in |
| CVE-2026-2123 | Analyzed | 未確認 | CWE-280 | A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run executables from spe |
| CVE-2026-21262 | Analyzed | 未確認 | CWE-284 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-21282 | Analyzed | 未確認 | CWE-20 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that could lead to |
| CVE-2026-21284 | Analyzed | 未確認 | CWE-79 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could b |
| CVE-2026-21285 | Analyzed | 未確認 | CWE-863 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in |
| CVE-2026-21286 | Analyzed | 未確認 | CWE-863 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in |
| CVE-2026-21289 | Analyzed | 未確認 | CWE-863 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in |
| CVE-2026-21290 | Analyzed | 未確認 | CWE-79 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could b |
| CVE-2026-21291 | Analyzed | 未確認 | CWE-79 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could b |
| CVE-2026-21292 | Analyzed | 未確認 | CWE-79 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could b |
| CVE-2026-21293 | Analyzed | 未確認 | CWE-918 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could |
| CVE-2026-21294 | Analyzed | 未確認 | CWE-918 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could |
| CVE-2026-21295 | Analyzed | 未確認 | CWE-601 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerab |
| CVE-2026-21296 | Analyzed | 未確認 | CWE-863 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in |
| CVE-2026-21297 | Analyzed | 未確認 | CWE-863 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in |
| CVE-2026-21309 | Analyzed | 未確認 | CWE-863 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in |
| CVE-2026-21310 | Analyzed | 未確認 | CWE-20 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that could result i |
| CVE-2026-21311 | Analyzed | 未確認 | CWE-79 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could b |
| CVE-2026-21333 | Analyzed | 未確認 | CWE-426 | Illustrator versions 29.8.4, 30.1 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the curr |
| CVE-2026-21359 | Analyzed | 未確認 | CWE-863 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in |
| CVE-2026-21360 | Analyzed | 未確認 | CWE-22 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory |
| CVE-2026-21361 | Analyzed | 未確認 | CWE-79 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vvulnerability that could |
| CVE-2026-21362 | Analyzed | 未確認 | CWE-787 | Illustrator versions 29.8.4, 30.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
| CVE-2026-21363 | Analyzed | 未確認 | CWE-476 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could explo |
| CVE-2026-21364 | Analyzed | 未確認 | CWE-476 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could explo |
| CVE-2026-21365 | Analyzed | 未確認 | CWE-125 | Substance3D - Painter versions 11.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabil |
| CVE-2026-21385 | Analyzed | 掲載 | CWE-190 | Memory corruption while using alignments for memory allocation. |
| CVE-2026-21386 | Analyzed | 未確認 | CWE-203 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when handling the /mute command which allows an authenticated tea |
| CVE-2026-21421 | Analyzed | 未確認 | CWE-250 | Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacke |
| CVE-2026-21422 | Modified | 未確認 | CWE-15 | Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local acce |
| CVE-2026-21423 | Analyzed | 未確認 | CWE-276 | Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privileged attacker with l |
| CVE-2026-21424 | Analyzed | 未確認 | CWE-250 | Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacke |
| CVE-2026-21425 | Analyzed | 未確認 | CWE-266 | Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privilege assignment vulnerability. A low privileged attacker with l |
| CVE-2026-21426 | Analyzed | 未確認 | CWE-250 | Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacke |
| CVE-2026-21536 | Analyzed | 未確認 | CWE-434 | Microsoft Devices Pricing Program Remote Code Execution Vulnerability |
| CVE-2026-21570 | Analyzed | 未確認 | CWE-94 | This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center. |
| CVE-2026-21621 | Modified | 未確認 | CWE-863 | Incorrect Authorization vulnerability in hexpm hexpm/hexpm ('Elixir.HexpmWeb.API.OAuthController' module) allows Privilege Escalation. An API key created with read-only permission |
| CVE-2026-21622 | Modified | 未確認 | CWE-613 | Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows Account Takeover. Password reset tokens generated via the |
| CVE-2026-21628 | Analyzed | 未確認 | CWE-434 | A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution. |
| CVE-2026-21666 | Analyzed | 未確認 | CWE-284 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. |
| CVE-2026-21667 | Analyzed | 未確認 | CWE-284 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. |
| CVE-2026-21668 | Modified | 未確認 | CWE-693, CWE-862 | A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. |
| CVE-2026-21669 | Modified | 未確認 | CWE-693, CWE-94 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. |
| CVE-2026-21670 | Modified | 未確認 | CWE-522 | A vulnerability allowing a low-privileged user to extract saved SSH credentials. |
| CVE-2026-21671 | Modified | 未確認 | CWE-693, CWE-94 | A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & Rep |
| CVE-2026-21672 | Awaiting Analysis | 未確認 | CWE-538 | A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers. |
| CVE-2026-21708 | Analyzed | 未確認 | CWE-89 | A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user. |
| CVE-2026-21710 | Analyzed | 未確認 | CWE-770, CWE-843 | A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct` |
| CVE-2026-21711 | Analyzed | 未確認 | CWE-284 | A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operations without the required permission checks, while all comparable network paths |
| CVE-2026-21712 | Analyzed | 未確認 | CWE-20 | A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid ch |
| CVE-2026-21713 | Analyzed | 未確認 | CWE-208 | A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number |
| CVE-2026-21714 | Analyzed | 未確認 | CWE-401 | A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to exceed the maximum valu |
| CVE-2026-21715 | Analyzed | 未確認 | CWE-732 | A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync.native()` without the required read permission checks, while all comparable filesystem functions c |
| CVE-2026-21716 | Analyzed | 未確認 | CWE-862 | An incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the promises API without the required permission checks, while their callback-based equ |
| CVE-2026-21717 | Analyzed | 未確認 | CWE-328 | A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that ca |
| CVE-2026-21724 | Analyzed | 未確認 | CWE-285 | A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook UR |
| CVE-2026-21732 | Analyzed | 未確認 | CWE-787, CWE-823 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On ce |
| CVE-2026-21736 | Analyzed | 未確認 | CWE-280 | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory. This is caused by imprope |
| CVE-2026-21783 | Analyzed | 未確認 | CWE-209 | HCL Traveler is affected by sensitive information disclosure. The application generates some error messages that provide detailed information about errors and failures, such as in |
| CVE-2026-21786 | Analyzed | 未確認 | CWE-532 | HCL Sametime for iOS is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URLs. |
| CVE-2026-21788 | Analyzed | 未確認 | CWE-79 | HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user whi |
| CVE-2026-21790 | Awaiting Analysis | 未確認 | CWE-346 | HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks. |
| CVE-2026-21791 | Analyzed | 未確認 | CWE-532 | HCL Sametime for Android is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URL |
| CVE-2026-21853 | Analyzed | 未確認 | CWE-94 | AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.25.4, there is a one-click remote code execution vulnerability. This vulnerability can be |
| CVE-2026-21861 | Analyzed | 未確認 | CWE-78 | baserCMS is a website development framework. Prior to version 5.2.3, baserCMS contains an OS command injection vulnerability in the core update functionality. An authenticated admi |
| CVE-2026-21866 | Analyzed | 未確認 | CWE-79 | Dify is an open-source LLM app development platform. Prior to 1.11.2, Dify is vulnerable to a stored XSS issue when rendering Mermaid diagrams within chats. This occurs because Dif |
| CVE-2026-21882 | Deferred | 未確認 | CWE-250, CWE-269, CWE-273 | theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege |
| CVE-2026-21886 | Analyzed | 未確認 | CWE-285, CWE-566, CWE-915 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.9.1, the GraphQL mutations "IndividualDeletionDeleteMutation |
| CVE-2026-21887 | Analyzed | 未確認 | CWE-918 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.8.16, the OpenCTI platform’s data ingestion feature accepts user-sup |
| CVE-2026-21888 | Analyzed | 未確認 | CWE-125 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer() accepts 5-byte varints without bounds c |
| CVE-2026-21991 | Analyzed | 未確認 | CWE-22 | A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names. |
| CVE-2026-21992 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager product of Oracle Fusion Middleware ( |
| CVE-2026-21994 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: Desktop). The supported version that i |
| CVE-2026-22040 | Analyzed | 未確認 | CWE-416 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In version 0.24.6, by generating a combined traffic pattern of high-frequency publishes and rapid reconnect/ki |
| CVE-2026-22052 | Analyzed | 未確認 | CWE-209 | ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a |
| CVE-2026-22163 | Analyzed | 未確認 | CWE-820 | Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to |
| CVE-2026-22168 | Analyzed | 未確認 | CWE-88 | OpenClaw versions prior to 2026.2.21 contain an approval-integrity mismatch vulnerability in system.run that allows authenticated operators to execute arbitrary trailing arguments |
| CVE-2026-22169 | Modified | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safeBins configuration that allows attackers to invoke external helpers through the compress-p |
| CVE-2026-22170 | Modified | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.22 with the optional BlueBubbles plugin contain an access control bypass vulnerability where empty allowFrom configuration causes dmPolicy pairing |
| CVE-2026-22171 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly into temporary fi |
| CVE-2026-22172 | Analyzed | 未確認 | CWE-862 | OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to s |
| CVE-2026-22173 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-22174 | Modified | 未確認 | CWE-306 | OpenClaw versions prior to 2026.2.22 inject the x-OpenClaw-relay-token header into Chrome CDP probe traffic on loopback interfaces, allowing local processes to capture the Gateway |
| CVE-2026-22175 | Analyzed | 未確認 | CWE-184 | OpenClaw versions prior to 2026.2.23 contain an exec approval bypass vulnerability in allowlist mode where allow-always grants could be circumvented through unrecognized multiplexe |
| CVE-2026-22176 | Analyzed | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in Windows Scheduled Task script generation where environment variables are written to gateway.cmd us |
| CVE-2026-22177 | Modified | 未確認 | CWE-15 | OpenClaw versions prior to 2026.2.21 fail to filter dangerous process-control environment variables from config env.vars, allowing startup-time code execution. Attackers can inject |
| CVE-2026-22178 | Analyzed | 未確認 | CWE-1333 | OpenClaw versions prior to 2026.2.19 construct RegExp objects directly from unescaped Feishu mention metadata in the stripBotMention function, allowing regex injection and denial o |
| CVE-2026-22179 | Modified | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.22 in macOS node-host system.run contain an allowlist bypass vulnerability that allows remote attackers to execute non-allowlisted commands by exp |
| CVE-2026-22180 | Analyzed | 未確認 | CWE-59 | OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root directories. Attackers can e |
| CVE-2026-22181 | Modified | 未確認 | CWE-918 | OpenClaw versions prior to 2026.3.2 contain a DNS pinning bypass vulnerability in strict URL fetch paths that allows attackers to circumvent SSRF guards when environment proxy vari |
| CVE-2026-22182 | Analyzed | 未確認 | CWE-770, CWE-862 | wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigger mass notification emails by exploiting the checkNotificati |
| CVE-2026-22183 | Analyzed | 未確認 | CWE-79 | wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment preview functionality that allows authenticated users to inject malicious scripts |
| CVE-2026-2219 | Analyzed | 未確認 | CWE-835 | It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compress |
| CVE-2026-22191 | Modified | 未確認 | CWE-1336 | Beghelli Sicuro24 SicuroWeb contains a template injection vulnerability that allows attackers to inject arbitrary AngularJS expressions by exploiting improper rendering of untruste |
| CVE-2026-22192 | Modified | 未確認 | CWE-306 | Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipula |
| CVE-2026-22193 | Analyzed | 未確認 | CWE-89 | wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions() function where string parameters lack proper quote escaping in SQL queries. Attackers ca |
| CVE-2026-22199 | Modified | 未確認 | CWE-22 | Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to read arbitra |
| CVE-2026-22201 | Analyzed | 未確認 | CWE-348 | wpDiscuz before 7.6.47 contains an IP spoofing vulnerability in the getIP() function that allows attackers to bypass IP-based rate limiting and ban enforcement by trusting untruste |
| CVE-2026-22202 | Analyzed | 未確認 | CWE-352 | wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a malicious GET |
| CVE-2026-22203 | Analyzed | 未確認 | CWE-200 | wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attack |
| CVE-2026-22204 | Analyzed | 未確認 | CWE-20 | wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting malicious data into the comment_author_emai |
| CVE-2026-22209 | Modified | 未確認 | CWE-79 | wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious scripts by breaking out of style tags. At |
| CVE-2026-22210 | Analyzed | 未確認 | CWE-79 | wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through unescaped attachment URLs in HTML output by exploiting t |
| CVE-2026-22215 | Analyzed | 未確認 | CWE-352 | wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability in the getFollowsPage() function that allows attackers to trigger unauthorized actions without nonce vali |
| CVE-2026-22216 | Analyzed | 未確認 | CWE-799 | wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notifications by sending |
| CVE-2026-22217 | Modified | 未確認 | CWE-829 | OpenClaw version 2026.2.22 prior to 2026.2.23 contains an arbitrary code execution vulnerability in shell-env that allows attackers to execute attacker-controlled binaries by explo |
| CVE-2026-22248 | Analyzed | 未確認 | CWE-502 | GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. From 11.0.0 to before 11.0.5, an |
| CVE-2026-22270 | Analyzed | 未確認 | CWE-427 | Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled search path element vulnerability. A high privileged attacker wit |
| CVE-2026-22285 | Analyzed | 未確認 | CWE-256 | Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of Password vulnerability. A high privileged attacker with local access could potentially |
| CVE-2026-2229 | Modified | 未確認 | CWE-1284, CWE-248 | ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of the server_max_window_bits parameter in the permessage-deflate extension |
| CVE-2026-2231 | Deferred | 未確認 | CWE-79 | The Fluent Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.01 due to insufficient input |
| CVE-2026-22316 | Awaiting Analysis | 未確認 | CWE-121 | A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to trigger a stack-based Buffer Overflow, resulting in a DoS attac |
| CVE-2026-22317 | Awaiting Analysis | 未確認 | CWE-77 | A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrar |
| CVE-2026-22318 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the device's file transfer parameter workflow allows a high-privileged attacker to send oversized POST parameters, causing memory cor |
| CVE-2026-22319 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size stack buffer |
| CVE-2026-22320 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying une |
| CVE-2026-22321 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input. An overflow condit |
| CVE-2026-22322 | Deferred | 未確認 | CWE-79 | A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry containing malic |
| CVE-2026-22323 | Deferred | 未確認 | CWE-352 | A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized POST requests |
| CVE-2026-22324 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Melania allows PHP Local File Inclusion.This issue |
| CVE-2026-2233 | Deferred | 未確認 | CWE-862 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due |
| CVE-2026-22385 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Wolmart wolmart allows PHP Local File Inclusion. |
| CVE-2026-22387 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Aviana aviana allows PHP Local File Inclusion |
| CVE-2026-22389 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Cocco cocco allows PHP Local File Inclusion.T |
| CVE-2026-2239 | Analyzed | 未確認 | CWE-170 | A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the fread_pascal_string function when processing a specially crafted PSD (Photoshop Document) file. This occu |
| CVE-2026-22390 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue af |
| CVE-2026-22392 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Cortex cortex allows PHP Local File Inclusion |
| CVE-2026-22394 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Evently evently allows PHP Local File Inclusi |
| CVE-2026-22395 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fiorello fiorello allows PHP Local File Inclu |
| CVE-2026-22397 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fleur fleur allows PHP Local File Inclusion.T |
| CVE-2026-22399 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Holmes holmes allows PHP Local File Inclusion |
| CVE-2026-22403 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Innovio innovio allows PHP Local File Inclusi |
| CVE-2026-22405 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Overton overton allows PHP Local File Inclusi |
| CVE-2026-22408 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Justicia justicia allows PHP Local File Inclu |
| CVE-2026-22410 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dolcino dolcino allows PHP Local File Inclusi |
| CVE-2026-22412 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Eona eona allows PHP Local File Inclusion.Thi |
| CVE-2026-22413 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Malgré malgre allows PHP Local File Inclusion |
| CVE-2026-22414 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Marra marra allows PHP Local File Inclusion.T |
| CVE-2026-22415 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes The Mounty the-mounty allows PHP Local File In |
| CVE-2026-22416 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes FixTeam fixteam allows PHP Local File Inclusio |
| CVE-2026-22417 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Wedding grandwedding allows Object Injection.This issue affects Grand Wedding: from n/a through < 3.1.11. |
| CVE-2026-22418 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Great Lotus great-lotus allows PHP Local File |
| CVE-2026-22419 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Honor honor allows PHP Local File Inclusion.Th |
| CVE-2026-22420 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Horizon horizon allows PHP Local File Inclusio |
| CVE-2026-22421 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Quantum quantum allows PHP Local File Inclusio |
| CVE-2026-22423 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local File Inclusi |
| CVE-2026-22424 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Shaha shaha allows PHP Local File Inclusion.Th |
| CVE-2026-22425 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Sweet Jane sweetjane allows PHP Local File In |
| CVE-2026-22427 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes GoTravel gotravel allows PHP Local File Inclu |
| CVE-2026-22428 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tooth Fairy tooth-fairy allows PHP Local File |
| CVE-2026-22429 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Verdure verdure allows PHP Local File Inclusi |
| CVE-2026-22431 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wabi-Sabi wabi-sabi allows PHP Local File Incl |
| CVE-2026-22432 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Woopy woopy allows PHP Local File Inclusion.Th |
| CVE-2026-22433 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CloudMe cloudme allows PHP Local File Inclusio |
| CVE-2026-22434 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Crown Art crown-art allows PHP Local File Incl |
| CVE-2026-22435 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes ElectroServ electroserv allows PHP Local File |
| CVE-2026-22436 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Helvig helvig allows PHP Local File Inclusion |
| CVE-2026-22437 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Playa playa allows PHP Local File Inclusion.Th |
| CVE-2026-22438 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in foreverpinetree TheBi thebi allows Reflected XSS.This issue affects TheBi: fro |
| CVE-2026-22439 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Green Planet green-planet allows PHP Local Fil |
| CVE-2026-22440 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in foreverpinetree Thecs thecs allows Reflected XSS.This issue affects Thecs: fro |
| CVE-2026-22441 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Zentrum zentrum allows PHP Local File Inclusi |
| CVE-2026-22442 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LaunchandSell Tribe tribe allows PHP Local File Inclusion.T |
| CVE-2026-22443 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Alliance alliance allows PHP Local File Inclusion. |
| CVE-2026-22446 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusi |
| CVE-2026-22448 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in flexcubed PitchPrint pitchprint allows Path Traversal.This issue affects PitchPrint: |
| CVE-2026-22449 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Don Peppe donpeppe allows PHP Local File Incl |
| CVE-2026-22451 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This issue affects Handyman: from n/a through <= 1.4.7. |
| CVE-2026-22452 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Hoverex hoverex allows PHP Local File Inclusion.Th |
| CVE-2026-22453 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through <= 2.3. |
| CVE-2026-22454 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Solaris solaris allows Object Injection.This issue affects Solaris: from n/a through <= 2.5. |
| CVE-2026-22455 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in foreverpinetree Thebe thebe allows Reflected XSS.This issue affects Thebe: fro |
| CVE-2026-22456 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Askka askka allows PHP Local File Inclusion.T |
| CVE-2026-22457 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File I |
| CVE-2026-22459 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Word |
| CVE-2026-22460 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpWax FormGent formgent allows Path Traversal.This issue affects FormGent: from n/a |
| CVE-2026-22465 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen BuddyApp buddyapp allows Reflected XSS.This issue affects BuddyAp |
| CVE-2026-22467 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mwtemplates DeepDigital deepdigital allows Reflected XSS.This issue affects De |
| CVE-2026-22471 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in maximsecudeal Secudeal Payments for Ecommerce secudeal-payments-for-ecommerce allows Object Injection.This issue affects Secudeal |
| CVE-2026-22473 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in designthemes Dental Clinic dental allows Object Injection.This issue affects Dental Clinic: from n/a through <= 3.7. |
| CVE-2026-22474 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection.This issue affects Equestrian Centre: from n/a through <= 1. |
| CVE-2026-22475 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4. |
| CVE-2026-22476 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Etchy etchy allows PHP Local File Inclusion.T |
| CVE-2026-22477 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Felizia felizia allows PHP Local File Inclusio |
| CVE-2026-22478 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes FindAll findall allows PHP Local File Inclusi |
| CVE-2026-22479 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect |
| CVE-2026-22480 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Object Injection.This issue affects Product Feed for WooComm |
| CVE-2026-22484 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pebas Lisfinity Core lisfinity-core allows SQL Injection.This issue affects Li |
| CVE-2026-22485 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ruhul Amin My Album Gallery my-album-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Al |
| CVE-2026-22491 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected |
| CVE-2026-22493 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gaspard gaspard allows PHP Local File Inclusi |
| CVE-2026-22494 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Good Homes good-homes allows PHP Local File Inclus |
| CVE-2026-22495 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Greenville greenville allows PHP Local File In |
| CVE-2026-22496 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hypnotherapy hypnotherapy allows PHP Local Fil |
| CVE-2026-22497 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in AncoraThemes Jardi jardi allows Object Injection.This issue affects Jardi: from n/a through <= 1.7.2. |
| CVE-2026-22498 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusi |
| CVE-2026-22499 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Lella lella allows PHP Local File Inclusion.T |
| CVE-2026-22500 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in axiomthemes m2 | Construction and Tools Store m2-ce allows Object Injection.This issue affects m2 | Construction and Tools Store: |
| CVE-2026-22501 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through <= 1.3.2. |
| CVE-2026-22502 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Mr. Cobbler mr-cobbler allows PHP Local File I |
| CVE-2026-22503 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nelson nelson allows PHP Local File Inclusion.This |
| CVE-2026-22504 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ProLingua prolingua allows PHP Local File Inclusio |
| CVE-2026-22505 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in AncoraThemes Morning Records morning-records allows Object Injection.This issue affects Morning Records: from n/a through <= 1.2. |
| CVE-2026-22506 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Amoli amoli allows PHP Local File Inclusion.T |
| CVE-2026-22507 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in AncoraThemes Beelove beelove allows Object Injection.This issue affects Beelove: from n/a through <= 1.2.6. |
| CVE-2026-22508 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Dentalux dentalux allows PHP Local File Inclus |
| CVE-2026-22509 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gioia gioia allows PHP Local File Inclusion.T |
| CVE-2026-22510 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in AncoraThemes Melody melodyschool allows Object Injection.This issue affects Melody: from n/a through <= 1.6.3. |
| CVE-2026-22511 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes NeoBeat neobeat allows PHP Local File Inclusi |
| CVE-2026-22512 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Roisin roisin allows PHP Local File Inclusion |
| CVE-2026-22513 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Triompher triompher allows PHP Local File Incl |
| CVE-2026-22514 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Unica unica allows PHP Local File Inclusion.Th |
| CVE-2026-22515 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes VegaDays vegadays allows PHP Local File Inclus |
| CVE-2026-22516 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wizor's wizors-investments allows PHP Local Fi |
| CVE-2026-22520 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Handmade Framework handmade-framework allows Reflected XSS.This issue |
| CVE-2026-22523 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Ultra WordPress Admin ultra-admin allows Reflected XSS.This issue |
| CVE-2026-22524 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Legacy Admin legacy-admin allows Reflected XSS.This issue affects |
| CVE-2026-22545 | Analyzed | 未確認 | CWE-863 | Mattermost versions 10.11.x <= 10.11.10 fail to validate user's authentication method when processing account auth type switch which allows an authenticated attacker to change acco |
| CVE-2026-22552 | Analyzed | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthentica |
| CVE-2026-22557 | Deferred | 未確認 | CWE-22 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could |
| CVE-2026-22558 | Deferred | 未確認 | CWE-943 | An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges. |
| CVE-2026-22559 | Deferred | 未確認 | CWE-20 | An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious |
| CVE-2026-2256 | Awaiting Analysis | 未確認 | CWE-77 | A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafte |
| CVE-2026-22561 | Modified | 未確認 | CWE-427 | Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hija |
| CVE-2026-22569 | Analyzed | 未確認 | CWE-1289 | An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances. |
| CVE-2026-2257 | Deferred | 未確認 | CWE-639 | The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2 due to missing validation on a user controlled key i |
| CVE-2026-22572 | Modified | 未確認 | CWE-288 | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.2 thro |
| CVE-2026-22593 | Analyzed | 未確認 | CWE-193 | EVerest is an EV charging software stack. Prior to version 2026.02.0, an off-by-one check in IsoMux certificate filename handling causes a stack-based buffer overflow when a filena |
| CVE-2026-2261 | Analyzed | 未確認 | CWE-772 | Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes |
| CVE-2026-22614 | Analyzed | 未確認 | CWE-257 | The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine |
| CVE-2026-22627 | Analyzed | 未確認 | CWE-120 | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker with |
| CVE-2026-22628 | Analyzed | 未確認 | CWE-284 | An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted S |
| CVE-2026-22629 | Analyzed | 未確認 | CWE-307 | An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all vers |
| CVE-2026-2266 | Analyzed | 未確認 | CWE-79 | An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based cross-site scripting via task list content. The task list conten |
| CVE-2026-2269 | Deferred | 未確認 | CWE-434 | The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, an |
| CVE-2026-2271 | Analyzed | 未確認 | CWE-190 | A flaw was found in GIMP's PSP (Paint Shop Pro) file parser. A remote attacker could exploit an integer overflow vulnerability in the read_creator_block() function by providing a s |
| CVE-2026-2272 | Analyzed | 未確認 | CWE-190 | A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the `ico_read_info` and `ico_read_icon` functions. This issue ar |
| CVE-2026-22723 | Modified | 未確認 | CWE-640, CWE-693 | Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48. |
| CVE-2026-22727 | Awaiting Analysis | 未確認 | CWE-306 | Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed the firewall t |
| CVE-2026-22729 | Analyzed | 未確認 | CWE-917 | A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted filter expre |
| CVE-2026-2273 | Analyzed | 未確認 | CWE-94 | CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could re |
| CVE-2026-22730 | Analyzed | 未確認 | CWE-89 | A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands. |
| CVE-2026-22731 | Analyzed | 未確認 | CWE-288, CWE-306 | Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under a s |
| CVE-2026-22732 | Analyzed | 未確認 | CWE-425 | When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. This issue affe |
| CVE-2026-22733 | Analyzed | 未確認 | CWE-288 | Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under the |
| CVE-2026-22735 | Analyzed | 未確認 | CWE-667 | Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE). This issue affects Spring Foundation: from 7.0.0 through 7.0.5, from 6. |
| CVE-2026-22737 | Analyzed | 未確認 | CWE-22 | Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the co |
| CVE-2026-22738 | Modified | 未確認 | CWE-88, CWE-917 | In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to exec |
| CVE-2026-22739 | Undergoing Analysis | 未確認 | CWE-22 | Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, becau |
| CVE-2026-22742 | Modified | 未確認 | CWE-918 | Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that include user-su |
| CVE-2026-22743 | Analyzed | 未確認 | CWE-89 | Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression |
| CVE-2026-22744 | Modified | 未確認 | CWE-74 | In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly into |
| CVE-2026-2275 | Awaiting Analysis | 未確認 | CWE-749 | The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling. |
| CVE-2026-22760 | Analyzed | 未確認 | CWE-754 | Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Improper Check for Unusual or Exceptional Conditions vulnerability. A low privileged attacker with local ac |
| CVE-2026-2277 | Deferred | 未確認 | CWE-79 | The rexCrawler plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' and 'regex' parameters in the search-pattern tester page in all versions up to, an |
| CVE-2026-2279 | Deferred | 未確認 | CWE-89 | The myLinksDump plugin for WordPress is vulnerable to SQL Injection via the 'sort_by' and 'sort_order' parameters in all versions up to, and including, 1.6 due to insufficient esca |
| CVE-2026-22790 | Analyzed | 未確認 | CWE-121 | EVerest is an EV charging software stack. Prior to version 2026.02.0, `HomeplugMessage::setup_payload` trusts `len` after an `assert`; in release builds the check is removed, so ov |
| CVE-2026-2285 | Analyzed | 未確認 | CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server. | |
| CVE-2026-2286 | Analyzed | 未確認 | CWE-918 | CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly vali |
| CVE-2026-2287 | Analyzed | 未確認 | CWE-94 | CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation. |
| CVE-2026-22882 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfor |
| CVE-2026-22886 | Analyzed | 未確認 | CWE-1391, CWE-1392, CWE-1393 | OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication. However, the product ships with a default administrative account (admin/ admin) |
| CVE-2026-2289 | Deferred | 未確認 | CWE-79 | The Taskbuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.0.3 due to insufficient input sanitizat |
| CVE-2026-22891 | Analyzed | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63). A specially crafted Int |
| CVE-2026-22895 | Modified | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can then exploit the vulnerability t |
| CVE-2026-22897 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to execute arbitrary commands. We have already f |
| CVE-2026-22898 | Analyzed | 未確認 | CWE-306 | A missing authentication for critical function vulnerability has been reported to affect QVR Pro. The remote attackers can then exploit the vulnerability to gain access to the syst |
| CVE-2026-2290 | Deferred | 未確認 | CWE-918 | The Post Affiliate Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.28.0. This makes it possible for authenticated atta |
| CVE-2026-22900 | Analyzed | 未確認 | CWE-798 | A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have |
| CVE-2026-22901 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability has been reported to affect QuNetSwitch. If a remote attacker gains a user account, they can then exploit the vulnerability to execute arbitrary c |
| CVE-2026-22902 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability has been reported to affect QuNetSwitch. If a local attacker gains an administrator account, they can then exploit the vulnerability to execute ar |
| CVE-2026-2292 | Deferred | 未確認 | CWE-79 | The Morkva UA Shipping plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7.9 due to insufficient input sa |
| CVE-2026-2294 | Deferred | 未確認 | CWE-285 | The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on |
| CVE-2026-2297 | Awaiting Analysis | 未確認 | CWE-668 | The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the |
| CVE-2026-2298 | Awaiting Analysis | 未確認 | CWE-88 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. |
| CVE-2026-23231 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addchain() publishes the chain to t |
| CVE-2026-23232 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()" This reverts commit 196c81fdd438f7ac429d5 |
| CVE-2026-23233 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid mapping wrong physical block for swapfile Xiaolong Guo reported a f2fs bug in bugzilla [1] |
| CVE-2026-23234 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_write_end_io() As syzbot reported an use-after-free issue in f2fs_write_end_io( |
| CVE-2026-23235 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix out-of-bounds access in sysfs attribute read/write Some f2fs sysfs attributes suffer from out-of-bou |
| CVE-2026-23236 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kernelspace The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly | |
| CVE-2026-23237 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: classmate-laptop: Add missing NULL pointer checks In a few places in the Classmate laptop driver |
| CVE-2026-23238 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: romfs: check sb_set_blocksize() return value romfs_fill_super() ignores the return value of sb_set_blocksize() |
| CVE-2026-23239 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: espintcp: Fix race condition in espintcp_close() This issue was discovered during a code audit. After cancel_ |
| CVE-2026-2324 | Deferred | 未確認 | CWE-352 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.7. Th |
| CVE-2026-23240 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After cance |
| CVE-2026-23241 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The "at" variant of getxattr() and listxattr() are missing from the | |
| CVE-2026-23242 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siw_get_hdr() returns -EINVAL before |
| CVE-2026-23243 | Modified | 未確認 | CWE-190, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled coun |
| CVE-2026-23244 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvme_pr_read_keys() nvme_pr_read_keys() takes num_keys from userspace and uses |
| CVE-2026-23245 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with RCU on replace The gate action can be replaced while the hrtimer | |
| CVE-2026-23246 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration link_id is taken from the ML Reconfigurat |
| CVE-2026-23247 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: secure_seq: add back ports to TS offset This reverts 28ee1b746f49 ("secure_seq: downgrade to per-host tim | |
| CVE-2026-23248 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF in perf_mmap Syzkaller reported a refcount_t: addition on 0; use |
| CVE-2026-23249 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: xfs: check for deleted cursors when revalidating two btrees The free space and inode btree repair functions wi |
| CVE-2026-23250 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord Fix this function to return NULL instead of a mangled ENOM |
| CVE-2026-23251 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: xfs: only call xf{array,blob}_destroy if we have a valid pointer Only call the xfarray and xfblob destructor i |
| CVE-2026-23252 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls The xchk_xfile_*_descr macros call kasprintf, which can fail to a | |
| CVE-2026-23253 | Modified | 未確認 | CWE-665 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of ringbuffer on reopen dvb_dvr_open() calls dvb_ringbuffer_init() |
| CVE-2026-23254 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO complete stage assumes that all the packets inserted the RX hav | |
| CVE-2026-23255 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: add proper RCU protection to /proc/net/ptype Yin Fengwei reported an RCU stall in ptype_seq_show() and pr | |
| CVE-2026-23256 | Analyzed | 未確認 | CWE-193 | In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup In setup_nic_devices(), the initializati |
| CVE-2026-23257 | Analyzed | 未確認 | CWE-193 | In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup In setup_nic_devices(), the initializati |
| CVE-2026-23258 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before queue setup In setup_nic_devices(), the netdev is allocated us |
| CVE-2026-23259 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: free potentially allocated iovec on cache put failure If a read/write request goes through io_req | |
| CVE-2026-2326 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-23260 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: regmap: maple: free entry on mas_store_gfp() failure regcache_maple_write() allocates a new block ('entry') to |
| CVE-2026-23261 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: release admin tagset if init fails nvme_fabrics creates an NVMe/FC controller in following path: |
| CVE-2026-23262 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for sta |
| CVE-2026-23263 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix page array leak d9f595b9a65e ("io_uring/zcrx: fix leaking pages on sg init fail") fixed a p |
| CVE-2026-23264 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478 | |
| CVE-2026-23265 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer in {read,write}_end_io -----------[ cut here ]------------ kernel | |
| CVE-2026-23266 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: fbdev: rivafb: fix divide error in nv3_arb() A userspace program can trigger the RIVA NV3 arbitration code by |
| CVE-2026-23267 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes Du | |
| CVE-2026-23268 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unprivileged local user can do privileged policy management An unprivileged local user can load, | |
| CVE-2026-23269 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: apparmor: validate DFA start states are in bounds in unpack_pdb Start states are read from untrusted data and |
| CVE-2026-23270 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "S |
| CVE-2026-23271 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Make sure that __perf_event_overflow() ru |
| CVE-2026-23272 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case that the set is full, a new el |
| CVE-2026-23273 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlan_common_newlink() error path valis reported that a race conditi |
| CVE-2026-23274 | Modified | 未確認 | CWE-758 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels IDLETIMER revision 0 rules reuse existing tim |
| CVE-2026-23275 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure ctx->rings is stable for task work flags manipulation If DEFER_TASKRUN | SETUP_TASKRUN is use |
| CVE-2026-23276 | Modified | 未確認 | CWE-674 | In the Linux kernel, the following vulnerability has been resolved: net: add xmit recursion limit to tunnel xmit functions Tunnel xmit functions (iptunnel_xmit, ip6tunnel_xmit) l |
| CVE-2026-23277 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit teql_master_xmit() calls net |
| CVE-2026-23278 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transaction processing we might have mo |
| CVE-2026-23279 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() In mesh_rx_csa_frame(), elems->mesh_chansw |
| CVE-2026-2328 | Awaiting Analysis | 未確認 | CWE-790 | An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of s |
| CVE-2026-23280 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent ubuf size overflow The ubuf size calculation may overflow, resulting in an undersized a | |
| CVE-2026-23281 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbs_free_adapter() The lbs_free_adapter() function uses timer_delete() ( |
| CVE-2026-23282 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to uninitialised var in smb2_unlink() If SMB2_open_init() or SMB2_close_init() fails |
| CVE-2026-23283 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix PM runtime reference leak in fp9931_hwmon_read() In fp9931_hwmon_read(), if regmap_read | |
| CVE-2026-23284 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() Reset eBPF program | |
| CVE-2026-23285 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drbd: fix null-pointer dereference on local read error In drbd_request_endio(), READ_COMPLETED_WITH_ERROR is p |
| CVE-2026-23286 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix null-ptr-deref in lec_arp_clear_vccs syzkaller reported a null-ptr-deref in lec_arp_clear_vccs() |
| CVE-2026-23287 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/sifive-plic: Fix frozen interrupt due to affinity setting PLIC ignores interrupt completion message fo | |
| CVE-2026-23288 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix out-of-bounds memset in command slot handling The remaining space in a command slot may be |
| CVE-2026-23289 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Fix a user triggerable leak on the system ca | |
| CVE-2026-23290 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: validate USB endpoints The pegasus driver should validate that the device it is probing has | |
| CVE-2026-23291 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: properly drop the usb interface reference on disconnect When the device is disconnected from the d | |
| CVE-2026-23292 | Modified | 未確認 | CWE-674 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in __configfs_open_file() In flush_write_buffer, &p->frag_sem is acquired |
| CVE-2026-23293 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter |
| CVE-2026-23294 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in devmap on PREEMPT_RT On PREEMPT_RT kernels, the per-CPU xdp_dev_bulk_queue (bq) can be access |
| CVE-2026-23295 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix dead lock for suspend and resume When an application issues a query IOCTL while auto suspen |
| CVE-2026-23296 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix refcount leak for tagset_refcnt This leak will cause a hang when tearing down the SCSI host. F | |
| CVE-2026-23297 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). syzbot reported memory leak of struct cred. [0] nfsd_n |
| CVE-2026-23298 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message with the message |
| CVE-2026-23299 | Analyzed | 未確認 | CWE-772 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: purge error queues in socket destructors When TX timestamping is enabled via SO_TIMESTAMPING, SKBs |
| CVE-2026-2330 | Awaiting Analysis | 未確認 | CWE-552 | An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement. Certain directories intended for internal tes |
| CVE-2026-23300 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop When a standalone IPv6 nexthop object is |
| CVE-2026-23301 | Analyzed | 未確認 | CWE-252 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Add allocation failure check for Entity name Currently find_sdca_entity_iot() can allocate a strin |
| CVE-2026-23302 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing |
| CVE-2026-23303 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifs_set_cifscreds When debug logging is enabled, cifs_set_cif | |
| CVE-2026-23304 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() l3mdev_master_dev_rcu() can return NULL when the slave de |
| CVE-2026-23305 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix unwinding in error path in rocket_probe When rocket_core_init() fails (as could be the case |
| CVE-2026-23306 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free in pm8001_queue_command() Commit e29c47fe8946 ("scsi: pm8001: Simplify pm8001 |
| CVE-2026-23307 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message When looking at the data in a | |
| CVE-2026-23308 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: equilibrium: fix warning trace on load The callback functions 'eqbr_irq_mask()' and 'eqbr_irq_ack()' | |
| CVE-2026-23309 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: tracing: Add NULL pointer check to trigger_data_free() If trigger_data_alloc() fails and returns NULL, event_h |
| CVE-2026-2331 | Awaiting Analysis | 未確認 | CWE-552 | An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critic |
| CVE-2026-23310 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded bond_option_mode_set() already reje | |
| CVE-2026-23311 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix invalid wait context in ctx_sched_in() Lockdep found a bug in the event scheduling when a pinne |
| CVE-2026-23312 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: validate USB endpoints The kaweth driver should validate that the device it is probing has t | |
| CVE-2026-23313 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix preempt count leak in napi poll tracepoint Using get_cpu() in the tracepoint assignment causes an ob | |
| CVE-2026-23314 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: bq257xx: Fix device node reference leak in bq257xx_reg_dt_parse_gpio() In bq257xx_reg_dt_parse_gpio | |
| CVE-2026-23315 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Check frame length before accessing |
| CVE-2026-23316 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix ARM64 alignment fault in multipath hash seed `struct sysctl_fib_multipath_hash_seed` contains t | |
| CVE-2026-23317 | Modified | 未確認 | CWE-457, CWE-908 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Before the referenced fixes these function |
| CVE-2026-23318 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Use correct version for UAC3 header validation The entry of the validators table for UAC3 AC |
| CVE-2026-23319 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim The root cause of this bug is that when 'bpf_link_put' |
| CVE-2026-23320 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-23321 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always mark signal+subflow endp as used Syzkaller managed to find a combination of actio | |
| CVE-2026-23322 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free and list corruption on sender error The analysis from Breno: When the SMI sender ret |
| CVE-2026-23323 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver conta |
| CVE-2026-23324 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: usb: etas_es58x: correctly anchor the urb in the read bulk callback When submitting an urb, that is using | |
| CVE-2026-23325 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() Check frame length before accessi |
| CVE-2026-23326 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix fragment node deletion to prevent buffer leak After commit b692bf9a7543 ("xsk: Get rid of xdp_buff_xs |
| CVE-2026-23327 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() cxl_payload_from_ |
| CVE-2026-23328 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to NULL if the firmware return |
| CVE-2026-23329 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libie: don't unroll if fwlog isn't supported The libie_fwlog_deinit() function can be called during driver unl | |
| CVE-2026-23330 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nci_close_device(), complete any pending data exch |
| CVE-2026-23331 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected. Let's say we bind() an UDP sock | |
| CVE-2026-23332 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix crash during turbo disable When the system is booted with kernel command line argum |
| CVE-2026-23333 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-23334 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: handle short interrupt urb messages properly If an interrupt urb is received that is not the | |
| CVE-2026-23335 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() struct irdma_create_ah_resp { // 8 bytes, no padd |
| CVE-2026-23336 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There is a use-after-free error in cfg80211_shu |
| CVE-2026-23337 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf_generic_parse_dt_con |
| CVE-2026-23338 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately | |
| CVE-2026-23339 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on nci_transceive early error paths nci_transceive() takes ownership of the skb passed by t |
| CVE-2026-23340 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs When shrinking the number of rea |
| CVE-2026-23341 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues an ioctl to destroy |
| CVE-2026-23342 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPT_RT On PREEMPT_RT kernels, the per-CPU xdp_bulk_queue (bq) can be accessed c |
| CVE-2026-23343 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: xdp: produce a warning when calculated tailroom is negative Many ethernet drivers report xdp Rx queue frag siz |
| CVE-2026-23344 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix use-after-free on error path In the error path of sev_tsm_init_locked(), the code dereferenc |
| CVE-2026-23345 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabled When FEAT_LPA2 is enabled, bits 8-9 | |
| CVE-2026-23346 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: io: Extract user memory type in ioremap_prot() The only caller of ioremap_prot() outside of the generic | |
| CVE-2026-23347 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: correctly anchor the urb in the read bulk callback When submitting an urb, that is using the | |
| CVE-2026-23348 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: cxl: Fix race of nvdimm_bus object when creating nvdimm objects Found issue during running of cxl-translate.sh |
| CVE-2026-23349 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix condition effect bit clearing As reported by MPDarkGuy on discord, NULL pointer dereferences w |
| CVE-2026-23350 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/queue: Call fini on exec queue creation fail Every call to queue init should have a corresponding fini |
| CVE-2026-23351 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Yiming Qian reports Use-after-free in the pi |
| CVE-2026-23352 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: x86/efi: defer freeing of boot services memory efi_free_boot_services() frees memory occupied by EFI_BOOT_SERV |
| CVE-2026-23353 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ice: fix crash in ethtool offline loopback test Since the conversion of ice to page pool, the ethtool loopback |
| CVE-2026-23354 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: x86/fred: Correct speculative safety in fred_extint() array_index_nospec() is no use if the result gets spille |
| CVE-2026-23355 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: libata: cancel pending work after clearing deferred_qc Syzbot reported a WARN_ON() in ata_scsi_deferred_q | |
| CVE-2026-23356 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Even though we check that we "should" be able to do lc_ge |
| CVE-2026-23357 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock in error path of mcp251x_open The mcp251x_open() function call free_irq() in its er |
| CVE-2026-23358 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix error handling in slot reset If the device has not recovered after slot reset is called, it go |
| CVE-2026-23359 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack-out-of-bounds write in devmap get_upper_ifindexes() iterates over all upper devices and writes |
| CVE-2026-23360 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvme_alloc_admin_tag_set() is called during a controller r |
| CVE-2026-23361 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dw_pcie_ep_raise_msix_irq( |
| CVE-2026-23362 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix locking for bcm_op runtime updates Commit c2aba69d0c36 ("can: bcm: add locking for bcm_op runtim |
| CVE-2026-23363 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() Check frame length before accessi |
| CVE-2026-23364 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Repl | |
| CVE-2026-23365 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has t | |
| CVE-2026-23366 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' in drm_client_modeset_probe may fail to kcalloc. If this occurs |
| CVE-2026-23367 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: radiotap: reject radiotap with unknown bits The radiotap parser is currently only used with the radiotap | |
| CVE-2026-23368 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock There is an AB-BA deadlock when both |
| CVE-2026-23369 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" This reverts commit f707d6b9e7c18f669adfdb4 |
| CVE-2026-23370 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data set_new_password() hex dumps the entire | |
| CVE-2026-23371 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting Running stress-ng --schedpolicy 0 on an RT | |
| CVE-2026-23372 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel tx_work before socket teardown In rawsock_release(), cancel any pending tx_work and purge | |
| CVE-2026-23373 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config This triggers a WARN_ON in ieee80211_hw_conf_in | |
| CVE-2026-23374 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: blktrace: fix __this_cpu_read/write in preemptible context tracing_record_cmdline() internally uses __this_cpu | |
| CVE-2026-23375 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes file_thp_enabled() incorrectly allows THP for files on anonymo |
| CVE-2026-23376 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-fcloop: Check remoteport port_state before calling done callback In nvme_fc_handle_ls_rqst_work, the lsr | |
| CVE-2026-23377 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz The only user of frag_size field in XDP Rx | |
| CVE-2026-23378 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: Fix metalist update behavior Whenever an ife action replace changes the metalist, instead |
| CVE-2026-23379 | Modified | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: fix divide by zero in the offload path Offloading ETS requires computing each class' WRR weigh |
| CVE-2026-23380 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARN_ON in tracing_buffers_mmap_close When a process forks, the child process copies the parent's |
| CVE-2026-23381 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' paramete |
| CVE-2026-23382 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: F |
| CVE-2026-23383 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing struct bpf_plt contains a u64 targ | |
| CVE-2026-23384 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ionic_create_cq() struct ionic_cq_resp resp { __u32 cqid[2]; |
| CVE-2026-23385 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: clone set on flush only Syzbot with fault injection triggered a failing memory allocatio | |
| CVE-2026-23386 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL In DQ-QPL mode, gve_tx_clean_pending | |
| CVE-2026-23387 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() devm_add_action_or_reset() already invokes the |
| CVE-2026-23388 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check metadata block offset is within range Syzkaller reports a "general protection fault in squashf |
| CVE-2026-23389 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in ice_set_ringparam() In ice_set_ringparam, tx_rings and xdp_rings are allocated before |
| CVE-2026-2339 | Deferred | 未確認 | CWE-306 | Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Comm |
| CVE-2026-23390 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow The dma_map_sg tracepoint can trigger |
| CVE-2026-23391 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_CT: drop pending enqueued packets on template removal Templates refer to objects that can go awa |
| CVE-2026-23392 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_rcu() after unregiste |
| CVE-2026-23393 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: Fix race condition in peer_mep deletion When a peer MEP is being deleted, cancel_delayed_work_syn |
| CVE-2026-23394 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Give up GC if MSG_PEEK intervened. Igor Ushakov reported that GC purged the receive queue of an alive |
| CVE-2026-23395 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Currently the code attempts to accept requests r |
| CVE-2026-23396 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in mesh_matches_local() mesh_matches_local() unconditionally dereferences ie->m |
| CVE-2026-23397 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: nfnetlink_osf: validate individual option lengths in fingerprints nfnl_osf_add_callback() validates opt_num bo |
| CVE-2026-23398 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmp_tag_validation() icmp_tag_validation() unconditionally dereferences |
| CVE-2026-23399 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nf_tables: nft_dynset: fix possible stateful expression memleak in error path If cloning the second stateful e |
| CVE-2026-23400 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: call set_notification_done() without proc lock Consider the following sequence of events on a dea |
| CVE-2026-2343 | Deferred | 未確認 | The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing exported invoice PDFs. The ZIP files are nam | |
| CVE-2026-2348 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Quick Edit allows Cross-Site Scripting (XSS).This issue affects Quick E |
| CVE-2026-23480 | Analyzed | 未確認 | CWE-288 | Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAd |
| CVE-2026-23481 | Analyzed | 未確認 | CWE-22 | Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is an authenticated arbitrary file write vulnerability in saveAdditionalDevFile. This issue has been |
| CVE-2026-23482 | Analyzed | 未確認 | CWE-22 | Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the file server endpoint does not perform permission checks on the temp/ path and does not filter path tra |
| CVE-2026-23483 | Analyzed | 未確認 | CWE-22 | Blinko is an AI-powered card note-taking project. In versions from 1.8.3 and prior, the plugin file server endpoint uses join() to concatenate paths but does not verify if the fina |
| CVE-2026-23484 | Analyzed | 未確認 | CWE-22 | Blinko is an AI-powered card note-taking project. In versions from 1.8.3 and prior, the fileName parameter is not filtered, allowing path traversal to write files anywhere on the f |
| CVE-2026-23485 | Analyzed | 未確認 | CWE-22 | Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the filePath parameter accepts path traversal sequences, allowing enumeration of file existence on the ser |
| CVE-2026-23486 | Analyzed | 未確認 | CWE-200 | Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creat |
| CVE-2026-23487 | Analyzed | 未確認 | CWE-639 | Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is an IDOR vulnerability where user.detail Endpoint Leaks the Superadmin Token. This issue has been |
| CVE-2026-23488 | Analyzed | 未確認 | CWE-639 | Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post c |
| CVE-2026-23489 | Analyzed | 未確認 | CWE-20 | Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowe |
| CVE-2026-2349 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS).This issue affects UI Icons: |
| CVE-2026-2351 | Deferred | 未確認 | CWE-73 | The Task Manager plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.0.2 via the callback_get_text_from_url() function. This makes it |
| CVE-2026-23514 | Analyzed | 未確認 | CWE-282 | Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized co |
| CVE-2026-2352 | Deferred | 未確認 | CWE-79 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ao_post_preload' meta value in all versions up to, and including, 3.1.14. This is due to |
| CVE-2026-23536 | Awaiting Analysis | 未確認 | CWE-22 | A security issue was discovered in the Feast Feature Server's `/read-document` endpoint that allows an unauthenticated remote attacker to read any file accessible to the server pro |
| CVE-2026-23546 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme Classified Listing classified-listing allows Retrieve Embedded Sensitive Data.This issue affects Clas |
| CVE-2026-2355 | Deferred | 未確認 | CWE-79 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `template` attribute of the `[my_calendar_upcoming]` shortcode |
| CVE-2026-23554 | Analyzed | 未確認 | CWE-367 | The Intel EPT paging code uses an optimization to defer flushing of any cached EPT state until the p2m lock is dropped, so that multiple modifications done under the same locked re |
| CVE-2026-23555 | Analyzed | 未確認 | CWE-617 | Any guest issuing a Xenstore command accessing a node using the (illegal) node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when veri |
| CVE-2026-2358 | Deferred | 未確認 | CWE-79 | The WP ULike plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[wp_ulike_likers_box]` shortcode `template` attribute in all versions up to, and including, |
| CVE-2026-23600 | Analyzed | 未確認 | CWE-287 | A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS). |
| CVE-2026-23601 | Analyzed | 未確認 | CWE-327 | A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing tar |
| CVE-2026-2363 | Deferred | 未確認 | CWE-89 | The WP-Members Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'order_by' attribute of the [wpmem_user_membership_posts] shortcode in all versions up |
| CVE-2026-23635 | Analyzed | 未確認 | CWE-523 | Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotecte |
| CVE-2026-23636 | Analyzed | 未確認 | CWE-434 | Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, the manager of a form could potentially exploit an Unrestricted Upload of File wit |
| CVE-2026-2364 | Awaiting Analysis | 未確認 | CWE-367 | If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a TO |
| CVE-2026-2365 | Deferred | 未確認 | CWE-79 | The Fluent Forms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `fluentform_step_form_save_data` AJAX action in all versions up to, and including, 6. |
| CVE-2026-23651 | Analyzed | 未確認 | CWE-625 | Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally. |
| CVE-2026-23654 | Analyzed | 未確認 | Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-23656 | Analyzed | 未確認 | CWE-345 | Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-23658 | Analyzed | 未確認 | CWE-522 | Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-23659 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-2366 | Analyzed | 未確認 | CWE-639 | A flaw was found in Keycloak. An authorization bypass vulnerability in the Keycloak Admin API allows any authenticated user, even those without administrative privileges, to enumer |
| CVE-2026-23660 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally. |
| CVE-2026-23661 | Analyzed | 未確認 | CWE-319 | Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-23662 | Analyzed | 未確認 | CWE-306, CWE-319 | Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-23664 | Analyzed | 未確認 | CWE-923 | Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-23665 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally. |
| CVE-2026-23667 | Analyzed | 未確認 | CWE-416 | Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally. |
| CVE-2026-23668 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges loca |
| CVE-2026-23669 | Modified | 未確認 | CWE-416 | Use after free in RPC Runtime allows an authorized attacker to execute code over a network. |
| CVE-2026-23671 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate priv |
| CVE-2026-23672 | Analyzed | 未確認 | CWE-125 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-23673 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-23674 | Analyzed | 未確認 | CWE-41 | Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-2368 | Analyzed | 未確認 | CWE-295 | An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary c |
| CVE-2026-2369 | Analyzed | 未確認 | CWE-191 | A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker |
| CVE-2026-2370 | Modified | 未確認 | CWE-233 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 affecting Jira Connect installations tha |
| CVE-2026-2371 | Deferred | 未確認 | CWE-862 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 12.8.3. This is due |
| CVE-2026-2373 | Deferred | 未確認 | CWE-862 | The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.7.1049 vi |
| CVE-2026-2375 | Deferred | 未確認 | CWE-269 | The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.5.10. This is du |
| CVE-2026-23759 | Deferred | 未確認 | CWE-78 | Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH. The sh |
| CVE-2026-2376 | Analyzed | 未確認 | CWE-601 | A flaw was found in mirror-registry where an authenticated user can trick the system into accessing unintended internal or restricted systems by providing malicious web addresses. |
| CVE-2026-23767 | Analyzed | 未確認 | CWE-306 | ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict s |
| CVE-2026-2378 | Analyzed | 未確認 | CWE-1021 | ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interactio |
| CVE-2026-23798 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through <= 11 |
| CVE-2026-23799 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a throug |
| CVE-2026-23801 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes The Issue theissue allows PHP Local File Inclusi |
| CVE-2026-23802 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine ai-engine allows Using Malicious Files.This issue affects AI Engine: from n/a through <= 3.3.2 |
| CVE-2026-23806 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in BlueGlass Interactive AG Jobs for WordPress job-postings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a |
| CVE-2026-23807 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected X |
| CVE-2026-23808 | Analyzed | 未確認 | CWE-94 | A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a |
| CVE-2026-23809 | Analyzed | 未確認 | CWE-400 | A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs. By leveraging the relationship between BSSIDs and their ass |
| CVE-2026-23810 | Analyzed | 未確認 | CWE-300 | A vulnerability in the packet processing logic may allow an authenticated attacker to craft and transmit a malicious Wi-Fi frame that causes an Access Point (AP) to classify the fr |
| CVE-2026-23811 | Analyzed | 未確認 | CWE-300 | A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In a |
| CVE-2026-23812 | Analyzed | 未確認 | CWE-300 | A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-based |
| CVE-2026-23813 | Analyzed | 未確認 | CWE-287 | A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing aut |
| CVE-2026-23814 | Analyzed | 未確認 | CWE-77 | A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwant |
| CVE-2026-23815 | Analyzed | 未確認 | CWE-77 | A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitat |
| CVE-2026-23816 | Analyzed | 未確認 | CWE-78 | A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. |
| CVE-2026-23817 | Analyzed | 未確認 | CWE-601 | A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL. |
| CVE-2026-23862 | Analyzed | 未確認 | CWE-77 | Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged |
| CVE-2026-23865 | Analyzed | 未確認 | CWE-125 | An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsin |
| CVE-2026-23868 | Modified | 未確認 | CWE-415, CWE-825 | Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerabil |
| CVE-2026-23882 | Analyzed | 未確認 | CWE-78 | Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP (Model Context Protocol) server creation function allows specifying arbitrary commands and argumen |
| CVE-2026-2389 | Deferred | 未確認 | CWE-79 | The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.4.4.2. This is due to the `revert |
| CVE-2026-23907 | Analyzed | 未確認 | CWE-22 | This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6. The ExtractEmbeddedFiles example contains a path trav |
| CVE-2026-23919 | Analyzed | 未確認 | CWE-488 | For performance reasons Zabbix Server/Proxy reuses JavaScript (Duktape) contexts (used in script items, JavaScript reprocessing, Webhooks). This can lead to confidentiality loss wh |
| CVE-2026-23920 | Analyzed | 未確認 | CWE-78 | Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input valida |
| CVE-2026-23921 | Analyzed | 未確認 | CWE-89 | A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL selects via the sortfiel |
| CVE-2026-23923 | Analyzed | 未確認 | CWE-470 | An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes. The impact depends on environment setup but appears limited at |
| CVE-2026-23924 | Analyzed | 未確認 | CWE-88 | Zabbix Agent 2 Docker plugin does not properly sanitize the 'docker.container_info' parameters when forwarding them to the Docker daemon. An attacker capable of invoking Agent 2 ca |
| CVE-2026-23925 | Analyzed | 未確認 | CWE-863 | An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by c |
| CVE-2026-23940 | Modified | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in hexpm hexpm/hexpm allows Excessive Allocation. Publishing an oversized package can cause Hex.pm to run out of memory while extra |
| CVE-2026-23941 | Modified | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling. This vulnerability is assoc |
| CVE-2026-23942 | Modified | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (ssh_sftpd module) allows Path Traversal. This vulnerability is associat |
| CVE-2026-23943 | Modified | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP ssh (ssh_transport modules) allows Denial of Service via Resource Depletion. The SSH tra |
| CVE-2026-23971 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in xtemos WoodMart woodmart allows Object Injection.This issue affects WoodMart: from n/a through <= 8.3.8. |
| CVE-2026-23972 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control |
| CVE-2026-23973 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo golo allows Reflected XSS.This issue affects Golo: from n/a through |
| CVE-2026-23977 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Configured Acces |
| CVE-2026-23979 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Softwebmedia Gyan Elements gyan-elements allows Reflected XSS.This issue affec |
| CVE-2026-23995 | Analyzed | 未確認 | CWE-121 | EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ (1 |
| CVE-2026-24015 | Analyzed | 未確認 | CWE-1327 | A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, wh |
| CVE-2026-24017 | Analyzed | 未確認 | CWE-799 | An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7. |
| CVE-2026-24018 | Analyzed | 未確認 | CWE-61 | A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged us |
| CVE-2026-24028 | Analyzed | 未確認 | CWE-126 | An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of- |
| CVE-2026-24029 | Analyzed | 未確認 | CWE-863 | When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing al |
| CVE-2026-24030 | Analyzed | 未確認 | CWE-789 | An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups w |
| CVE-2026-24031 | Modified | 未確認 | CWE-89 | Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin. This vulnerability allows bypassing authentication for any user and user enumeration. |
| CVE-2026-24060 | Awaiting Analysis | 未確認 | CWE-319 | Service information is not encrypted when transmitted as BACnet packets over the wire, and can be sniffed, intercepted, and modified by an attacker. Valuable information such as |
| CVE-2026-24062 | Deferred | 未確認 | CWE-306 | The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signature validation when a client connects. This leads to an attac |
| CVE-2026-24063 | Deferred | 未確認 | CWE-276 | When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a root owned path. This script is written to disk with the fil |
| CVE-2026-24068 | Deferred | 未確認 | CWE-306 | The VSL privileged helper does utilize NSXPC for IPC. The implementation of the "shouldAcceptNewConnection" function, which is used by the NSXPC framework to validate if a client s |
| CVE-2026-24097 | Analyzed | 未確認 | CWE-204 | Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observin |
| CVE-2026-24101 | Analyzed | 未確認 | CWE-78 | An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, concatenated into `doSystemCmd` |
| CVE-2026-24103 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi. |
| CVE-2026-24105 | Analyzed | 未確認 | CWE-94 | An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi. The value of `v1` was not checked, potentially leading to a command injection vulnerability |
| CVE-2026-24107 | Analyzed | 未確認 | CWE-94 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the value of `usbPartitionName`, which is directly used in `doSystemCmd`, may lead to critical command |
| CVE-2026-24108 | Analyzed | 未確認 | CWE-120 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value is passed into the `getMibPrefi |
| CVE-2026-24109 | Modified | 未確認 | CWE-120 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `picName`. When this value is used in `sprintf` without |
| CVE-2026-24110 | Analyzed | 未確認 | CWE-120 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may send overly long `addDhcpRules` data. When these rules enter the `addDhcpRule` function and are processed by |
| CVE-2026-24111 | Modified | 未確認 | CWE-120 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addAuthU |
| CVE-2026-24112 | Modified | 未確認 | CWE-120 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addWewif |
| CVE-2026-24113 | Modified | 未確認 | CWE-120 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value is passed into the `getMibPrefi |
| CVE-2026-24114 | Modified | 未確認 | CWE-120 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate `pPortMapIndex` may lead to buffer overflows when using `strcpy`. |
| CVE-2026-24115 | Modified | 未確認 | CWE-120 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the sizes of `gstup` and `gstdwn` before concatenating them into `gstruleQos` may lead to buffer overfl |
| CVE-2026-2412 | Deferred | 未確認 | CWE-89 | The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to SQL Injection via the 'merged_question' parameter in all versions up to, and including, 10.3.5. This is due t |
| CVE-2026-24125 | Analyzed | 未確認 | CWE-22 | Tina is a headless content management system. Prior to 2.1.2, TinaCMS allows users to create, update, and delete content documents using relative file paths (relativePath, newRelat |
| CVE-2026-2413 | Deferred | 未確認 | CWE-89 | The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficie |
| CVE-2026-2414 | Analyzed | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2. |
| CVE-2026-24141 | Awaiting Analysis | 未確認 | CWE-502 | NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a specially cra |
| CVE-2026-24148 | Analyzed | 未確認 | CWE-1188 | NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure |
| CVE-2026-24150 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit o |
| CVE-2026-24151 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input. A successful exploit of this |
| CVE-2026-24152 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit o |
| CVE-2026-24153 | Analyzed | 未確認 | CWE-501 | NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclo |
| CVE-2026-24154 | Analyzed | 未確認 | CWE-78 | NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vuln |
| CVE-2026-24157 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to c |
| CVE-2026-24158 | Analyzed | 未確認 | CWE-789 | NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of service by providing a large compressed payload. A successful e |
| CVE-2026-24159 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalatio |
| CVE-2026-24164 | Analyzed | 未確認 | CWE-502 | NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denia |
| CVE-2026-24165 | Analyzed | 未確認 | CWE-502 | NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denia |
| CVE-2026-2417 | Awaiting Analysis | 未確認 | CWE-306 | A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass aut |
| CVE-2026-2418 | Deferred | 未確認 | The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as | |
| CVE-2026-2420 | Deferred | 未確認 | CWE-79 | The LotekMedia Popup Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.0.6 due to insufficient |
| CVE-2026-2421 | Deferred | 未確認 | CWE-22 | The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the 'cert' parameter of the 'wccd-del |
| CVE-2026-2424 | Deferred | 未確認 | CWE-79 | The Reward Video Ad for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6. This is due to ins |
| CVE-2026-2427 | Deferred | 未確認 | CWE-79 | The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'day_from' and 'day_to' parameters in all versions up to, and including, 0.1.2 due to ins |
| CVE-2026-24281 | Modified | 未確認 | CWE-295, CWE-350 | Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impers |
| CVE-2026-24282 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally. |
| CVE-2026-24283 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-24285 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-24287 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-24288 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-24289 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-2429 | Deferred | 未確認 | CWE-89 | The Community Events plugin for WordPress is vulnerable to SQL Injection via the 'ce_venue_name' CSV field in the `on_save_changes_venues` function in all versions up to, and inclu |
| CVE-2026-24290 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-24291 | Modified | 未確認 | CWE-732 | Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-24292 | Analyzed | 未確認 | CWE-416 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-24293 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-24294 | Modified | 未確認 | CWE-287 | Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-24295 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privilege |
| CVE-2026-24296 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privilege |
| CVE-2026-24297 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a |
| CVE-2026-24299 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-2430 | Deferred | 未確認 | CWE-79 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including, 3.1.14. This is due to |
| CVE-2026-24308 | Modified | 未確認 | CWE-117, CWE-532 | Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client confi |
| CVE-2026-24309 | Analyzed | 未確認 | CWE-862 | Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert ent |
| CVE-2026-2431 | Deferred | 未確認 | CWE-79 | The CM Custom Reports plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date_from' and 'date_to' parameters in all versions up to, and including, 1.2.7 |
| CVE-2026-24310 | Analyzed | 未確認 | CWE-862 | Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive inform |
| CVE-2026-24311 | Awaiting Analysis | 未確認 | CWE-312 | The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this d |
| CVE-2026-24313 | Awaiting Analysis | 未確認 | CWE-862 | SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system information to be di |
| CVE-2026-24316 | Analyzed | 未確認 | CWE-918 | SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints. The report i |
| CVE-2026-24317 | Awaiting Analysis | 未確認 | CWE-427 | SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a vi |
| CVE-2026-2432 | Deferred | 未確認 | CWE-79 | The CM Custom Reports – Flexible reporting to track what matters most plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, an |
| CVE-2026-2433 | Deferred | 未確認 | CWE-79 | The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via postMessage in all versions up |
| CVE-2026-24359 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Dokan, Inc. Dokan dokan-lite allows Authentication Abuse.This issue affects Dokan: from n/a through <= 4.2 |
| CVE-2026-2436 | Analyzed | 未確認 | CWE-825 | A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup_server_disconnect()` function frees connection objects prem |
| CVE-2026-24362 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultim |
| CVE-2026-24363 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in loopus WP Cost Estimation & Payment Forms Builder WP_Estimation_Form allows Exploiting Incorrectly Configured Access Control Security Levels. |
| CVE-2026-24364 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User F |
| CVE-2026-24369 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8 |
| CVE-2026-24370 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeOne The Grid allows Stored XSS. This issue affects The Grid: from n/a th |
| CVE-2026-24372 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in WP Swings Subscriptions for WooCommerce subscriptions-for-woocommerce allows Input Data Manipulation.This issue affects Subscript |
| CVE-2026-24373 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Privilege Escalation.This issue affects |
| CVE-2026-24376 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Javier Casares WPVulnerability wpvulnerability allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPV |
| CVE-2026-24378 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Object Injection.This issue affects EventPrime: from n/a through |
| CVE-2026-24382 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wproyal News Magazine X news-magazine-x allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects News Magaz |
| CVE-2026-24385 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in gerritvanaaken Podlove Web Player podlove-web-player allows Object Injection.This issue affects Podlove Web Player: from n/a thro |
| CVE-2026-24391 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeMakers Car Dealer cardealer allows Reflected XSS.This issue affects Car D |
| CVE-2026-2440 | Deferred | 未確認 | CWE-79 | The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.3 via survey result submissions. This is due to insufficien |
| CVE-2026-24415 | Analyzed | 未確認 | CWE-79 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contains Reflected XSS vulnerabilities in invoice/ord |
| CVE-2026-2442 | Deferred | 未確認 | CWE-93 | The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences ('CRLF Injection') in all versions up to |
| CVE-2026-24448 | Deferred | 未確認 | CWE-798 | Use of hard-coded credentials issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to obtain administrative access. |
| CVE-2026-24457 | Modified | 未確認 | CWE-22, CWE-27 | An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation co |
| CVE-2026-24458 | Analyzed | 未確認 | CWE-770 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly handle very long passwords, which allows an attacker to overload the server CPU and mem |
| CVE-2026-2446 | Deferred | 未確認 | CWE-862 | The PowerPack for LearnDash WordPress plugin before 1.3.0 does not have authorization and CRSF checks in an AJAX action, allowing unauthenticated users to update arbitrary WordPres |
| CVE-2026-2448 | Deferred | 未確認 | CWE-22 | The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.5 via the locate_template() function. This make |
| CVE-2026-24502 | Analyzed | 未確認 | CWE-427 | Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potenti |
| CVE-2026-24508 | Analyzed | 未確認 | CWE-295 | Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could poten |
| CVE-2026-24509 | Analyzed | 未確認 | CWE-284 | Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially e |
| CVE-2026-24510 | Analyzed | 未確認 | CWE-269 | Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potenti |
| CVE-2026-24516 | Awaiting Analysis | 未確認 | CWE-94 | A command injection vulnerability exists in DigitalOcean Droplet Agent through 1.3.2. The troubleshooting actioner component (internal/troubleshooting/actioner/actioner.go) process |
| CVE-2026-2454 | Analyzed | 未確認 | CWE-1287 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to handle incorrectly reported array lengths which allows malicious user to cause OOM errors and cr |
| CVE-2026-2455 | Analyzed | 未確認 | CWE-918 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation which allows an attacker t |
| CVE-2026-2456 | Analyzed | 未確認 | CWE-789 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to limit the size of responses from integration action endpoints, which allows an authe |
| CVE-2026-2457 | Analyzed | 未確認 | CWE-346 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to sanitize client-supplied post metadata which allows an authenticated attacker to spoof permalink |
| CVE-2026-2458 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed team member to |
| CVE-2026-2461 | Analyzed | 未確認 | CWE-639 | Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor p |
| CVE-2026-2462 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials which allows an |
| CVE-2026-2463 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control |
| CVE-2026-24640 | Analyzed | 未確認 | CWE-121, CWE-787 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 |
| CVE-2026-24641 | Analyzed | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all |
| CVE-2026-2466 | Deferred | 未確認 | CWE-79 | The DukaPress WordPress plugin through 3.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could |
| CVE-2026-2468 | Deferred | 未確認 | CWE-89 | The Quentn WP plugin for WordPress is vulnerable to SQL Injection via the 'qntn_wp_access' cookie in all versions up to, and including, 1.2.12. This is due to insufficient escaping |
| CVE-2026-24692 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read |
| CVE-2026-24696 | Analyzed | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-o |
| CVE-2026-24713 | Analyzed | 未確認 | CWE-20, CWE-917 | Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to ve |
| CVE-2026-24732 | Deferred | 未確認 | CWE-552, CWE-732 | Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFileRepo modules |
| CVE-2026-24750 | Analyzed | 未確認 | CWE-79 | Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, an authenticated attacker could exploit an Improper Neutralization of Input During |
| CVE-2026-2476 | Analyzed | 未確認 | CWE-200 | Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original plugin setting |
| CVE-2026-2480 | Deferred | 未確認 | CWE-79 | The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'max_width' attribute of the `su_box` shortcode in all vers |
| CVE-2026-2483 | Analyzed | 未確認 | CWE-79 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI |
| CVE-2026-2484 | Analyzed | 未確認 | CWE-209 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information exposure vulnerability caused by overly verbose error messages |
| CVE-2026-24848 | Analyzed | 未確認 | CWE-22 | OpenEMR is a free and open source electronic health records and medical practice management application. In 7.0.4 and earlier, the disposeDocument() method in EtherFaxActions.php a |
| CVE-2026-2485 | Analyzed | 未確認 | CWE-79 | IBM Infosphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript |
| CVE-2026-2488 | Deferred | 未確認 | CWE-862 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized message deletion due to a missing capability check on the pg_delete_msg() |
| CVE-2026-24898 | Analyzed | 未確認 | CWE-287 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0, an unauthenticated token disclosure vulnerability in the Me |
| CVE-2026-24901 | Analyzed | 未確認 | CWE-639 | Outline is a service that allows for collaborative documentation. Prior to 1.4.0, an Insecure Direct Object Reference (IDOR) vulnerability in the document restoration logic allows |
| CVE-2026-2491 | Awaiting Analysis | 未確認 | CWE-306 | Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Socomec |
| CVE-2026-24912 | Analyzed | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementati |
| CVE-2026-2493 | Awaiting Analysis | 未確認 | CWE-22 | IceWarp collaboration Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installatio |
| CVE-2026-2494 | Deferred | 未確認 | CWE-352 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.9.8.2. This is due |
| CVE-2026-2496 | Deferred | 未確認 | CWE-79 | The Ed's Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `eds_font_awesome` shortcode in all versions up to, and including, 2.0. Thi |
| CVE-2026-24960 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through < 2.0.2. |
| CVE-2026-24963 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in ameliabooking Amelia ameliabooking allows Privilege Escalation.This issue affects Amelia: from n/a through <= 1.2.38. |
| CVE-2026-24964 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This issue affect |
| CVE-2026-24968 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Xagio SEO Xagio SEO xagio-seo allows Privilege Escalation.This issue affects Xagio SEO: from n/a through <= 7.1.0.30. |
| CVE-2026-24969 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Instant VA instantva allows Path Traversal.This issue affects Instant |
| CVE-2026-24970 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Energox energox allows Path Traversal.This issue affects Energox: fro |
| CVE-2026-24971 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Elated-Themes Search & Go searchgo allows Privilege Escalation.This issue affects Search & Go: from n/a through <= 2.8. |
| CVE-2026-24972 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Elated-Themes Elated Listing eltd-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elated L |
| CVE-2026-24973 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme CitiLights noo-citilights allows Reflected XSS.This issue affects Cit |
| CVE-2026-24974 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in NooTheme CitiLights noo-citilights allows Object Injection.This issue affects CitiLights: from n/a through <= 3.7.1. |
| CVE-2026-24975 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Organici Library noo-organici-library allows Reflected XSS.This issue |
| CVE-2026-24976 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in NooTheme Organici Library noo-organici-library allows Object Injection.This issue affects Organici Library: from n/a through <= 2 |
| CVE-2026-24977 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NooTheme Organici Library noo-organici-library allows Blind SQL Injection.This |
| CVE-2026-24978 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in NooTheme Jobica Core jobica-core allows Object Injection.This issue affects Jobica Core: from n/a through <= 1.4.1. |
| CVE-2026-24979 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobica Core jobica-core allows Reflected XSS.This issue affects Jobic |
| CVE-2026-24980 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Visionary Core noo-visionary-core allows Reflected XSS.This issue aff |
| CVE-2026-24981 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in NooTheme Visionary Core noo-visionary-core allows Object Injection.This issue affects Visionary Core: from n/a through <= 1.4.9. |
| CVE-2026-24983 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpS |
| CVE-2026-24987 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in activity-log.com WP System Log winterlock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Syste |
| CVE-2026-24989 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Object Injection.This issue affects SUMO Affiliates Pro: from n/a through < 11.4 |
| CVE-2026-24993 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanc |
| CVE-2026-25001 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: fro |
| CVE-2026-25002 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in ThimPress LearnPress – Sepay Payment learnpress-sepay-payment allows Authentication Abuse.This issue affec |
| CVE-2026-25007 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for- |
| CVE-2026-25009 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Education Zone education-zone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Education |
| CVE-2026-2501 | Deferred | 未確認 | CWE-79 | The Ed's Social Share plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `social_share` shortcode in all versions up to, and including, 2.0. This is |
| CVE-2026-25013 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WHMCSdes Phox Hosting phox-host allows Reflected XSS.This issue affects Phox H |
| CVE-2026-25017 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan NaturaLife Extensions naturalife-extensions allows P |
| CVE-2026-25018 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan NaturaLife Extensions naturalife-extensions allows Reflected XSS.This i |
| CVE-2026-25025 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRestaurants vikrestaurants allows Reflected XSS.This issue affects |
| CVE-2026-25026 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through < |
| CVE-2026-25029 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in park_of_ideas KIDZ kidz allows Object Injection.This issue affects KIDZ: from n/a through <= 5.24. |
| CVE-2026-2503 | Deferred | 未確認 | CWE-89 | The ElementCamp plugin for WordPress is vulnerable to time-based SQL Injection via the 'meta_query[compare]' parameter in the 'tcg_select2_search_post' AJAX action in all versions |
| CVE-2026-25030 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in park_of_ideas Goldish goldish allows Object Injection.This issue affects Goldish: from n/a through < 3.47. |
| CVE-2026-25031 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in park_of_ideas Tasty Daily tastydaily allows Object Injection.This issue affects Tasty Daily: from n/a through < 1.27. |
| CVE-2026-25032 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in park_of_ideas Ricky ricky allows Object Injection.This issue affects Ricky: from n/a through < 2.31. |
| CVE-2026-25033 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uixthemes Motta Addons motta-addons allows Reflected XSS.This issue affects Mo |
| CVE-2026-25034 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a |
| CVE-2026-25035 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.Th |
| CVE-2026-25041 | Analyzed | 未確認 | CWE-78 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.23.22 and earlier, the PostgreSQL integration constructs shell commands using user-co |
| CVE-2026-25045 | Analyzed | 未確認 | CWE-862 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. This issue is a combination of Vertical Privilege Escalation and IDOR (Insecure Direct Obj |
| CVE-2026-25048 | Modified | 未確認 | CWE-674 | xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32, the multi-level nested syntax caused a segmentation fault ( |
| CVE-2026-25070 | Analyzed | 未確認 | CWE-78 | XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows unauthenticate |
| CVE-2026-25071 | Analyzed | 未確認 | CWE-306 | XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a missing authentication vulnerability in the /switch_config.src endpoint that allows unauthenticate |
| CVE-2026-25072 | Analyzed | 未確認 | CWE-330 | XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a predictable session identifier vulnerability in the /goform/SetLogin endpoint that allows remote a |
| CVE-2026-25073 | Analyzed | 未確認 | CWE-79 | XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary |
| CVE-2026-25075 | Deferred | 未確認 | CWE-191, CWE-476 | strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of ser |
| CVE-2026-25076 | Deferred | 未確認 | CWE-89 | Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenticated attacker that is able to access the GraphQL API could |
| CVE-2026-25083 | Deferred | 未確認 | CWE-862 | GROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and earlier versions. A logged-in user who knows a shared AI assistant's identifier may |
| CVE-2026-25086 | Awaiting Analysis | 未確認 | CWE-605 | Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impersonate the WebCTRL s |
| CVE-2026-25099 | Analyzed | 未確認 | CWE-434 | Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be executed, leading to Re |
| CVE-2026-25100 | Analyzed | 未確認 | CWE-79 | Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its image upload functionality. An authenticated attacker with content upload privileges (such as Author, Editor, or Ad |
| CVE-2026-25101 | Analyzed | 未確認 | CWE-384 | Bludit allows user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behavior enables an attacker to fix |
| CVE-2026-2511 | Deferred | 未確認 | CWE-89 | The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the `multiformid` parameter in the `storeTickets()` function in all |
| CVE-2026-2512 | Deferred | 未確認 | CWE-79 | The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in all versions up to, and including, 2.5.1. This is due to the plugin |
| CVE-2026-2513 | Analyzed | 未確認 | CWE-79 | A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently t |
| CVE-2026-2514 | Analyzed | 未確認 | CWE-79 | In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data th |
| CVE-2026-25146 | Analyzed | 未確認 | CWE-200 | OpenEMR is a free and open source electronic health records and medical practice management application. From 5.0.2 to before 8.0.0, there are (at least) two paths where the gatewa |
| CVE-2026-25165 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally. |
| CVE-2026-25166 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally. |
| CVE-2026-25167 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-25168 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally. |
| CVE-2026-25169 | Analyzed | 未確認 | CWE-369 | Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally. |
| CVE-2026-25170 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-25171 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. |
| CVE-2026-25172 | Modified | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. |
| CVE-2026-25173 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. |
| CVE-2026-25174 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-25175 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-25176 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-25177 | Analyzed | 未確認 | CWE-641 | Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-25178 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-25179 | Analyzed | 未確認 | CWE-1287 | Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-25180 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally. |
| CVE-2026-25181 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-25185 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-25186 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to disclose information locally. |
| CVE-2026-25187 | Modified | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally. |
| CVE-2026-25188 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-25189 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-25190 | Analyzed | 未確認 | CWE-426 | Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally. |
| CVE-2026-25192 | Analyzed | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthentica |
| CVE-2026-25304 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Jaroti jaroti allows Reflected XSS.This issue affects Jaroti: from n/ |
| CVE-2026-25306 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected XSS.This issue affects XSto |
| CVE-2026-25309 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PublishPress PublishPress Authors publishpress-authors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff |
| CVE-2026-25312 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue |
| CVE-2026-25317 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Cont |
| CVE-2026-25327 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels. |
| CVE-2026-25328 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org Product File Upload for WooCommerce products-file-upload-for-woocommerce |
| CVE-2026-25334 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in wordpresschef Salon Booking System Pro salon-booking-plugin-pro allows Privilege Escalation.This issue affects Salon Booking System |
| CVE-2026-25339 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Retrieve Embedded Sensitive Data.This issue affects Conta |
| CVE-2026-25340 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NooTheme Jobmonster noo-jobmonster allows Blind SQL Injection.This issue affec |
| CVE-2026-25341 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RSJoomla! RSFirewall! rsfirewall allows Stored XSS.This issue affects RSFirewa |
| CVE-2026-25342 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Bout |
| CVE-2026-25344 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This iss |
| CVE-2026-25345 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in GalleryCreator SimpLy Gallery simply-gallery-block allows Accessing Functionality Not Properly Constrained by AC |
| CVE-2026-25346 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ Builder AYS faq-builder-ays allows Exploiting Incorrectly Configur |
| CVE-2026-25347 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acato WP REST Cache wp-rest-cache allows Stored XSS.This issue affects WP REST |
| CVE-2026-25349 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Loobek loobek allows Reflected XSS.This issue affects Loobek: from n/ |
| CVE-2026-25350 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Miti miti allows Reflected XSS.This issue affects Miti: from n/a thro |
| CVE-2026-25351 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyMedi mymedi allows Reflected XSS.This issue affects MyMedi: from n/ |
| CVE-2026-25352 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyDecor mydecor allows Reflected XSS.This issue affects MyDecor: from |
| CVE-2026-25353 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Nooni nooni allows Reflected XSS.This issue affects Nooni: from n/a t |
| CVE-2026-25354 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Reebox reebox allows Reflected XSS.This issue affects Reebox: from n/ |
| CVE-2026-25355 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Sanzo sanzo allows Stored XSS.This issue affects Sanzo: from n/a thro |
| CVE-2026-25356 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Yobazar yobazar allows Reflected XSS.This issue affects Yobazar: from |
| CVE-2026-25357 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro allows Authentication Abuse.This issue affects Ulti |
| CVE-2026-25358 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in rascals Meloo meloo allows Object Injection.This issue affects Meloo: from n/a through < 2.8.2. |
| CVE-2026-25359 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in rascals Pendulum pendulum allows Object Injection.This issue affects Pendulum: from n/a through < 3.1.5. |
| CVE-2026-25360 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in rascals Vex vex allows Object Injection.This issue affects Vex: from n/a through < 1.2.9. |
| CVE-2026-25361 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam WpEvently mage-eventpress allows Reflected XSS.This issue affec |
| CVE-2026-25365 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Özgür KARALAR Kargo Takip kargo-takip-turkiye allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Karg |
| CVE-2026-25366 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Themeisle Woody ad snippets insert-php allows Code Injection.This issue affects Woody ad snippets: from n |
| CVE-2026-25369 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.This issue affects Flexm |
| CVE-2026-25371 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in King-Theme Lumise Product Designer lumise allows Blind SQL Injection.This issu |
| CVE-2026-25373 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProgressionStudios Vayvo vayvo-progression allows Reflected XSS.This issue aff |
| CVE-2026-25376 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix Addon Jobsearch Chat addon-jobsearch-chat allows Reflected XSS.This iss |
| CVE-2026-25377 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eyecix Addon Jobsearch Chat addon-jobsearch-chat allows SQL Injection.This iss |
| CVE-2026-25379 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes StreamVid streamvid allows PHP Local File Inclusi |
| CVE-2026-25380 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Feedy feedy allows PHP Local File Inclusion.This |
| CVE-2026-25381 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes LoveDate lovedate allows PHP Local File Inclusion |
| CVE-2026-25382 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes IdealAuto idealauto allows PHP Local File Inclusi |
| CVE-2026-25383 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Reflected XSS. |
| CVE-2026-25390 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New U |
| CVE-2026-25396 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in CoderPress Commerce Coinbase For WooCommerce commerce-coinbase-for-woocommerce allows Exploiting Incorrectly Configured Access Control Securi |
| CVE-2026-25397 | Deferred | 未確認 | CWE-35 | Path Traversal: '.../...//' vulnerability in Snowray Software File Uploader for WooCommerce file-uploader-for-woocommerce allows Path Traversal.This issue affects File Uploader for |
| CVE-2026-25398 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Exploiting Incorrectly Configured Access Control Security Levels |
| CVE-2026-25400 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in thememount Apicona apicona allows Object Injection.This issue affects Apicona: from n/a through <= 24.1.0. |
| CVE-2026-25401 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo T |
| CVE-2026-25406 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeum Tutor LMS Pro tutor-pro allows Authentication Abuse.This issue affects Tutor LMS Pro: from n/a thr |
| CVE-2026-25413 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in iqonicdesign WPBookit Pro wpbookit-pro allows Using Malicious Files.This issue affects WPBookit Pro: from n/a throu |
| CVE-2026-25414 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in iqonicdesign WPBookit Pro wpbookit-pro allows Privilege Escalation.This issue affects WPBookit Pro: from n/a through <= 1.6.18. |
| CVE-2026-25417 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows |
| CVE-2026-25429 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in wpdive Nexa Blocks nexa-blocks allows Object Injection.This issue affects Nexa Blocks: from n/a through <= 1.1.1. |
| CVE-2026-25430 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in CRM Perks Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms cf7-mailchimp allows Exploiting Incorrectly Configure |
| CVE-2026-25435 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows |
| CVE-2026-25437 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in سید محمدامین هاشمی GZSEO gzseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GZSEO: from n/a thr |
| CVE-2026-25438 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Gutenberg Blocks unlimited-blocks allows Reflected XSS.This issue af |
| CVE-2026-25442 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QantumThemes Kentha kentha allows Reflected XSS.This issue affects Kentha: fro |
| CVE-2026-25443 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Exploiting Incorrectly Co |
| CVE-2026-25445 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Membership Software WishList Member X allows Object Injection.This issue affects WishList Member X: from n/a through 3.29.0. |
| CVE-2026-25447 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Jonathan Daggerhart Widget Wrangler widget-wrangler allows Code Injection.This issue affects Widget Wrang |
| CVE-2026-25449 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue affects Traveler: from n/a through < 3.2.8.1. |
| CVE-2026-25452 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDO Remoji remoji allows Stored XSS.This issue affects Remoji: from n/a throu |
| CVE-2026-25454 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in MVPThemes The League the-league allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The League: from n |
| CVE-2026-25455 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PickPlugins Product Slider for WooCommerce woocommerce-products-slider allows Exploiting Incorrectly Configured Access Control Security Level |
| CVE-2026-25456 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Aarsiv Groups Automated FedEx live/manual rates with shipping labels a2z-fedex-shipping allows Exploiting Incorrectly Configured Access Contr |
| CVE-2026-25457 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Mixtape mixtape allows PHP Local File Inclusi |
| CVE-2026-25458 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Moments moments allows PHP Local File Inclusi |
| CVE-2026-25460 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in LiquidThemes Ave Core ave-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ave Core: from n/a |
| CVE-2026-25461 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes Listeo Core listeo-core allows Reflected XSS.This issue affects Lis |
| CVE-2026-25462 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in avalex avalex avalex allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects avalex: from n/a through <= 3 |
| CVE-2026-25464 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This |
| CVE-2026-25465 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Stored |
| CVE-2026-25469 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ViaBill for WooCommerce ViaBill – WooCommerce viabill-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.Thi |
| CVE-2026-25471 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard admin-safety-guard allows Password Recovery Exploitation.This issue affects |
| CVE-2026-25477 | Analyzed | 未確認 | CWE-601 | AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.26.0, there is an Open Redirect vulnerability located at the /redirect-proxy endpoint. Th |
| CVE-2026-25529 | Analyzed | 未確認 | CWE-79 | Postal is an open source SMTP server. Postal versions less than 3.3.5 had a HTML injection vulnerability that allowed unescaped data to be included in the admin interface. The prim |
| CVE-2026-25534 | Deferred | 未確認 | CWE-918 | ### Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver. However, they missed that Java URL objects do not corr |
| CVE-2026-25569 | Analyzed | 未確認 | CWE-787 | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability exists in SICAM SIAPP SDK. This could allow an attacker to writ |
| CVE-2026-25570 | Analyzed | 未確認 | CWE-121 | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. |
| CVE-2026-25571 | Analyzed | 未確認 | CWE-130 | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK client component does not enforce maximum length checks on certain variables bef |
| CVE-2026-25572 | Analyzed | 未確認 | CWE-130 | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK server component does not enforce maximum length checks on certain variables bef |
| CVE-2026-25573 | Analyzed | 未確認 | CWE-73 | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell commands with caller-provided strings and executes them. An at |
| CVE-2026-2559 | Deferred | 未確認 | CWE-862 | The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `handle_office365_oauth_redirect()` function in all v |
| CVE-2026-25590 | Analyzed | 未確認 | CWE-79 | The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, there is a reflected XSS vulnerability in |
| CVE-2026-25604 | Analyzed | 未確認 | CWE-346 | In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to |
| CVE-2026-25605 | Analyzed | 未確認 | CWE-73 | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file deletion without properly validating the file path or target. |
| CVE-2026-25627 | Analyzed | 未確認 | CWE-125 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to version 0.24.8, NanoMQ’s MQTT-over-WebSocket transport can be crashed by sending an MQTT packet with |
| CVE-2026-25645 | Analyzed | 未確認 | CWE-377 | Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archive |
| CVE-2026-25667 | Modified | 未確認 | CWE-400 | ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet, be |
| CVE-2026-25673 | Modified | 未確認 | CWE-400, CWE-770 | An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. `URLField.to_python()` in Django calls `urllib.parse.urlsplit()`, which performs NFKC normali |
| CVE-2026-25674 | Analyzed | 未確認 | CWE-362 | An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attac |
| CVE-2026-25679 | Modified | 未確認 | CWE-1286, CWE-425 | url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. |
| CVE-2026-2568 | Deferred | 未確認 | CWE-79 | The WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission data in all |
| CVE-2026-25689 | Analyzed | 未確認 | CWE-88 | An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.0 all versions, FortiDeceptor 5 |
| CVE-2026-2569 | Deferred | 未確認 | CWE-79 | The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, an |
| CVE-2026-25702 | Analyzed | 未確認 | CWE-284 | A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.T |
| CVE-2026-25704 | Awaiting Analysis | 未確認 | CWE-271, CWE-367 | A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should hav |
| CVE-2026-2571 | Deferred | 未確認 | CWE-200 | The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'reviewUserStatus' function in all versions up to, a |
| CVE-2026-25737 | Analyzed | 未確認 | CWE-602, CWE-79, CWE-918 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.24.0 and earlier, an arbitrary file upload vulnerability exists even though file exte |
| CVE-2026-25744 | Analyzed | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, the encounter vitals API accepts an `id` in the request b |
| CVE-2026-25745 | Modified | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. In versions up to and including 8.0.0, the message/note update endpoint (e. |
| CVE-2026-2575 | Modified | 未確認 | CWE-409 | A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service (DoS) by sending a highly compressed SAMLRequest through the SAM |
| CVE-2026-25750 | Analyzed | 未確認 | CWE-74 | Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existe |
| CVE-2026-25769 | Analyzed | 未確認 | CWE-502 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution (RCE) vulnerability due to |
| CVE-2026-25770 | Analyzed | 未確認 | CWE-22, CWE-269, CWE-732 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, a privilege escalation vulnerab |
| CVE-2026-25771 | Analyzed | 未確認 | CWE-400 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.3.0 and prior to version 4.14.3, a Denial of Service (DoS) vulne |
| CVE-2026-25772 | Analyzed | 未確認 | CWE-121, CWE-191 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow v |
| CVE-2026-2578 | Analyzed | 未確認 | CWE-201 | Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-on-read messag |
| CVE-2026-25780 | Analyzed | 未確認 | CWE-789 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to bound memory allocation when processing DOC files which allows an authenticated attacker to caus |
| CVE-2026-25783 | Analyzed | 未確認 | CWE-1287 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker to cause a req |
| CVE-2026-2579 | Deferred | 未確認 | CWE-89 | The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the ‘search’ parameter in all versions up to, and including, 4 |
| CVE-2026-25790 | Analyzed | 未確認 | CWE-121, CWE-787 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, multiple stack-based buffer ove |
| CVE-2026-25792 | Analyzed | 未確認 | CWE-426 | Greenshot is an open source Windows screenshot utility. Versions 1.3.312 and below have untrusted executable search path / binary hijacking vulnerability that allows a local attack |
| CVE-2026-2580 | Deferred | 未確認 | CWE-89 | The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter |
| CVE-2026-2581 | Analyzed | 未確認 | CWE-770 | This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS). In vulnerable Undici versions, when interceptors.deduplicate() is en |
| CVE-2026-25817 | Deferred | 未確認 | CWE-94 | HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization of special el |
| CVE-2026-25818 | Deferred | 未確認 | CWE-315 | HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cooki |
| CVE-2026-25819 | Deferred | 未確認 | CWE-400 | HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attackers to cause |
| CVE-2026-25823 | Deferred | 未確認 | CWE-121 | HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have a stack buffer overflow that leads to |
| CVE-2026-2583 | Deferred | 未確認 | CWE-79 | The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `blocksy_meta` metadata fields in all versions up to, and including, 2.1.30 due to insufficient |
| CVE-2026-25836 | Modified | 未確認 | CWE-78 | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow |
| CVE-2026-2584 | Deferred | 未確認 | CWE-89 | A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker (AV:N/PR:N) can exploit this flaw |
| CVE-2026-25866 | Analyzed | 未確認 | CWE-428 | MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully qualified executable |
| CVE-2026-25873 | Awaiting Analysis | 未確認 | CWE-502 | OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands by sending mal |
| CVE-2026-25877 | Analyzed | 未確認 | CWE-284, CWE-639 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, the application performs auth |
| CVE-2026-25884 | Analyzed | 未確認 | CWE-125 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found |
| CVE-2026-25887 | Analyzed | 未確認 | CWE-94 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execut |
| CVE-2026-25888 | Analyzed | 未確認 | CWE-94 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execut |
| CVE-2026-2589 | Deferred | 未確認 | CWE-200 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 12.8.3 via the automat |
| CVE-2026-2590 | Modified | 未確認 | CWE-20, CWE-295 | Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an auth |
| CVE-2026-25906 | Analyzed | 未確認 | CWE-59 | Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could |
| CVE-2026-25907 | Analyzed | 未確認 | CWE-645 | Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated attacker with remote access could potentially ex |
| CVE-2026-25921 | Analyzed | 未確認 | CWE-345 | Gogs is an open source self-hosted Git service. Prior to version 0.14.2, overwritable LFS object across different repos leads to supply-chain attack, all LFS objects are vulnerable |
| CVE-2026-25928 | Analyzed | 未確認 | CWE-22 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, the DICOM zip/export feature uses a user-supplied destina |
| CVE-2026-2593 | Deferred | 未確認 | CWE-79 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `_gspb_post_css` post meta value and the `dynamicAttrib |
| CVE-2026-25936 | Analyzed | 未確認 | CWE-89 | GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, an authenticated user can perfom a SQL injection. Version 11.0.6 fi |
| CVE-2026-25937 | Analyzed | 未確認 | CWE-287 | GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, a malicious actor with knowledge of a user's credentials can bypass |
| CVE-2026-2595 | Deferred | 未確認 | CWE-79 | The Quads Ads Manager for Google AdSense plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.98.1 due to insufficient input sani |
| CVE-2026-25960 | Modified | 未確認 | CWE-474, CWE-918 | vLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in the load_from_url_async method |
| CVE-2026-25962 | Analyzed | 未確認 | CWE-409 | MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs currently extracts zip files without any size or entry-count limit |
| CVE-2026-25972 | Analyzed | 未確認 | CWE-79 | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote |
| CVE-2026-2598 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-2599 | Deferred | 未確認 | CWE-502 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.7 via deserialization |
| CVE-2026-26001 | Analyzed | 未確認 | CWE-89 | The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, non sanitized user input can lend to an SQ |
| CVE-2026-26002 | Analyzed | 未確認 | CWE-74 | Open OnDemand is an open-source high-performance computing portal. The Files application in OnDemand versions prior to 4.0.9 and 4.1.3 is susceptible to malicious input when naviga |
| CVE-2026-26004 | Analyzed | 未確認 | CWE-639 | Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability |
| CVE-2026-26008 | Analyzed | 未確認 | CWE-125 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have an out-of-bounds access (std::vector) that leads to possible remote crash/memory corruption. This is beca |
| CVE-2026-26017 | Modified | 未確認 | CWE-367 | CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default execution orde |
| CVE-2026-26018 | Modified | 未確認 | CWE-1241, CWE-337, CWE-400, CWE-770 | CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows an attacker to crash t |
| CVE-2026-2602 | Deferred | 未確認 | CWE-79 | The Twentig plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'featuredImageSizeWidth' parameter in versions up to, and including, 1.9.7 due to insufficient |
| CVE-2026-26022 | Analyzed | 未確認 | CWE-79 | Gogs is an open source self-hosted Git service. Prior to version 0.14.2, a stored cross-site scripting (XSS) vulnerability exists in the comment and issue description functionality |
| CVE-2026-2603 | Analyzed | 未確認 | CWE-306 | A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider (IdP) to the Keycloak SAML endpoi |
| CVE-2026-26033 | Analyzed | 未確認 | CWE-428 | UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with write access to a dir |
| CVE-2026-26034 | Analyzed | 未確認 | CWE-276, CWE-428 | UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code |
| CVE-2026-26051 | Analyzed | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthentica |
| CVE-2026-2606 | Analyzed | 未確認 | CWE-22 | IBM webMethods API Gateway (on-prem) 10.11 through 10.11_Fix3210.15 to 10.15_Fix2711.1 to 11.1_Fix7 IBM webMethods API Management (on-prem) fails to properly validate user-supplied |
| CVE-2026-26060 | Analyzed | 未確認 | CWE-613 | Fleet is open source device management software. Prior to 4.81.0, a vulnerability in Fleet’s password management logic could allow previously issued password reset tokens to remain |
| CVE-2026-26061 | Analyzed | 未確認 | CWE-770 | Fleet is open source device management software. Prior to 4.81.0, Fleet contained multiple unauthenticated HTTP endpoints that read request bodies without enforcing a size limit. A |
| CVE-2026-26070 | Analyzed | 未確認 | CWE-362 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::map<std::optional>` concurrent access (container/optional corruption possibl |
| CVE-2026-26071 | Analyzed | 未確認 | CWE-362, CWE-416 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::string` concurrent access. with heap-use-after-free possible. This is trigge |
| CVE-2026-26072 | Analyzed | 未確認 | CWE-362 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::map<std::optional>` concurrent access (container/optional corruption possibl |
| CVE-2026-26073 | Analyzed | 未確認 | CWE-122, CWE-787 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible `std::queue`/`std::deque` corruption. The trigger is powermeter public ke |
| CVE-2026-26074 | Analyzed | 未確認 | CWE-362 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible `std::map<std::queue>` corruption. The trigger is CSMS GetLog/UpdateFirmw |
| CVE-2026-26105 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-26106 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-26107 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-26108 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-26109 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-26110 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-26111 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. |
| CVE-2026-26112 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-26113 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-26114 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-26115 | Analyzed | 未確認 | CWE-1287 | Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-26116 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-26117 | Analyzed | 未確認 | CWE-288 | Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26118 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-26120 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-26121 | Analyzed | 未確認 | CWE-20, CWE-918 | Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-26122 | Analyzed | 未確認 | CWE-1188 | Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network. |
| CVE-2026-26123 | Analyzed | 未確認 | CWE-939 | Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally. |
| CVE-2026-26124 | Analyzed | 未確認 | CWE-22, CWE-35 | '.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26125 | Analyzed | 未確認 | CWE-306 | Payment Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2026-26127 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-26128 | Modified | 未確認 | CWE-287 | Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26130 | Modified | 未確認 | CWE-770 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-26131 | Analyzed | 未確認 | CWE-276 | Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26132 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26133 | Modified | 未確認 | CWE-77 | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-26134 | Analyzed | 未確認 | CWE-190, CWE-416 | Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26136 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-26137 | Modified | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-26138 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-26139 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-26141 | Analyzed | 未確認 | CWE-287, CWE-863 | Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26144 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information over a networ |
| CVE-2026-26148 | Analyzed | 未確認 | CWE-454 | External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-26194 | Analyzed | 未確認 | CWE-88 | Gogs is an open source self-hosted Git service. Prior to version 0.14.2, there's a security issue in gogs where deleting a release can fail if a user controlled tag name is passed |
| CVE-2026-26195 | Analyzed | 未確認 | CWE-79 | Gogs is an open source self-hosted Git service. Prior to version 0.14.2, stored xss is still possible through unsafe template rendering that mixes user input with safe plus permiss |
| CVE-2026-26196 | Analyzed | 未確認 | CWE-598 | Gogs is an open source self-hosted Git service. Prior to version 0.14.2, gogs api still accepts tokens in url params like token and access_token, which can leak through logs, brows |
| CVE-2026-26209 | Analyzed | 未確認 | CWE-674 | cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service (DoS) a |
| CVE-2026-26213 | Analyzed | 未確認 | CWE-78 | thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows re |
| CVE-2026-26230 | Analyzed | 未確認 | CWE-863 | Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to demote members t |
| CVE-2026-26233 | Analyzed | 未確認 | CWE-400 | Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to rate limit login requests which allows unauthenticated remote attackers to cau |
| CVE-2026-26246 | Analyzed | 未確認 | CWE-789 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to bound memory allocation when processing PSD image files which allows an authenticated attacker t |
| CVE-2026-2626 | Deferred | 未確認 | CWE-352, CWE-502 | The divi-booster WordPress plugin before 5.0.2 does not have authorization and CSRF checks in one of its fixing function, allowing unauthenticated users to modify stored divi-boost |
| CVE-2026-26266 | Analyzed | 未確認 | CWE-79 | AliasVault is a privacy-first password manager with built-in email aliasing. A stored cross-site scripting (XSS) vulnerability was identified in the email rendering feature of Alia |
| CVE-2026-26272 | Analyzed | 未確認 | CWE-79 | HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, a stored cross-site scripting (XSS) vulnerability exists in the item attachment upload functionality. The |
| CVE-2026-26276 | Analyzed | 未確認 | CWE-79 | Gogs is an open source self-hosted Git service. Prior to version 0.14.2, an attacker can store an HTML/JavaScript payload in a repository’s Milestone name, and when another user se |
| CVE-2026-26279 | Analyzed | 未確認 | CWE-482, CWE-78 | Froxlor is open source server administration software. Prior to 2.3.4, a typo in Froxlor's input validation code (== instead of =) completely disables email format checking for all |
| CVE-2026-2628 | Deferred | 未確認 | CWE-288 | The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5. This makes it |
| CVE-2026-26288 | Analyzed | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthentica |
| CVE-2026-26304 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2 fail to verify run_create permission for empty playbookId, which allows team members to create unauthorized runs via the play |
| CVE-2026-26306 | Awaiting Analysis | 未確認 | CWE-427 | The installer for OM Workspace (Windows Edition) Ver 2.4 and earlier insecurely loads Dynamic Link Libraries (DLLs), which could allow an attacker to execute arbitrary code with th |
| CVE-2026-26308 | Analyzed | 未確認 | CWE-863 | Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC (Role-Based Access Control) filter contains a logic vulnerabilit |
| CVE-2026-26309 | Analyzed | 未確認 | CWE-193 | Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, an off-by-one write in Envoy::JsonEscaper::escapeString() can corrupt std::stri |
| CVE-2026-2631 | Deferred | 未確認 | CWE-269 | The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an unauthenticated REST endpoint that allows any remote user to modify the option `datalogics_token` witho |
| CVE-2026-26310 | Analyzed | 未確認 | CWE-20 | Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, calling Utility::getAddressWithPort with a scoped IPv6 addresses causes a crash |
| CVE-2026-26311 | Analyzed | 未確認 | CWE-416 | Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, a logic vulnerability in Envoy's HTTP connection manager (FilterManager) that a |
| CVE-2026-26330 | Analyzed | 未確認 | CWE-416 | Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, At the rate limit filter, if the response phase limit with apply_on_stream_done |
| CVE-2026-26352 | Analyzed | 未確認 | CWE-79 | Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of the VPN_IP p |
| CVE-2026-2637 | Analyzed | 未確認 | CWE-732 | iBoysoft NTFS for Mac contains a local privilege escalation vulnerability in its privileged helper daemon ntfshelperd. The daemon exposes an NSConnection service that runs as root |
| CVE-2026-26377 | Modified | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function. |
| CVE-2026-2640 | Analyzed | 未確認 | CWE-269 | During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes. |
| CVE-2026-26416 | Analyzed | 未確認 | CWE-269 | An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted req |
| CVE-2026-26417 | Analyzed | 未確認 | CWE-284 | A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arb |
| CVE-2026-26418 | Analyzed | 未確認 | CWE-284 | Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without re |
| CVE-2026-2645 | Analyzed | 未確認 | CWE-358 | In wolfSSL 5.8.2 and earlier, a logic flaw existed in the TLS 1.2 server state machine implementation. The server could incorrectly accept the CertificateVerify message before the |
| CVE-2026-2646 | Analyzed | 未確認 | CWE-122, CWE-787 | A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSL_d2i_SSL_SESSION() function. When deserializing session data with SESSION_CERTS enabled, certificate and session id |
| CVE-2026-26478 | Analyzed | 未確認 | CWE-78 | A shell command injection vulnerability in Mobvoi Tichome Mini smart speaker 012-18853 and 027-58389 allows remote attackers to send a specially crafted UDP datagram and execute ar |
| CVE-2026-26514 | Analyzed | 未確認 | CWE-88 | An Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e. The traceroute module uses shlex.Split to parse user input without validation, allowing remote attac |
| CVE-2026-26673 | Analyzed | 未確認 | CWE-400 | An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsy |
| CVE-2026-26694 | Analyzed | 未確認 | CWE-89 | code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal_view.php. |
| CVE-2026-26695 | Modified | 未確認 | CWE-89 | code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php. |
| CVE-2026-26696 | Analyzed | 未確認 | CWE-89 | code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php. |
| CVE-2026-26697 | Analyzed | 未確認 | CWE-89 | code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_view.php?teacherID=. |
| CVE-2026-26698 | Analyzed | 未確認 | CWE-89 | code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php. |
| CVE-2026-26699 | Modified | 未確認 | CWE-94 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/admin_change_picture.php. |
| CVE-2026-26700 | Modified | 未確認 | CWE-89 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_employee.php. |
| CVE-2026-26701 | Modified | 未確認 | CWE-89 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_tecnical_user.php. |
| CVE-2026-26702 | Modified | 未確認 | CWE-89 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php. |
| CVE-2026-26703 | Modified | 未確認 | CWE-89 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php. |
| CVE-2026-26704 | Analyzed | 未確認 | CWE-89 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_category.php. |
| CVE-2026-26705 | Analyzed | 未確認 | CWE-89 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_product.php. |
| CVE-2026-26706 | Modified | 未確認 | CWE-89 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_receipt.php. |
| CVE-2026-26707 | Modified | 未確認 | CWE-89 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_supplier.php. |
| CVE-2026-26708 | Analyzed | 未確認 | CWE-89 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_user.php. |
| CVE-2026-26709 | Analyzed | 未確認 | CWE-89 | code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer_search.php. |
| CVE-2026-2671 | Deferred | 未確認 | CWE-310, CWE-319 | A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing |
| CVE-2026-26710 | Modified | 未確認 | CWE-89 | code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php. |
| CVE-2026-26711 | Modified | 未確認 | CWE-89 | code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket.php. |
| CVE-2026-26712 | Modified | 未確認 | CWE-89 | code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php. |
| CVE-2026-26713 | Modified | 未確認 | CWE-89 | code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php. |
| CVE-2026-26720 | Analyzed | 未確認 | CWE-94 | An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module. |
| CVE-2026-2673 | Analyzed | 未確認 | CWE-757 | Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the |
| CVE-2026-26738 | Analyzed | 未確認 | CWE-121 | Buffer Overflow vulnerability in Uderzo Software SpaceSniffer v.2.0.5.18 allows a remote attacker to execute arbitrary code via a crafted .sns snapshot file. |
| CVE-2026-26740 | Modified | 未確認 | CWE-787 | Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension b |
| CVE-2026-26741 | Analyzed | 未確認 | CWE-862 | PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. When switching from Auto mode to Manual mode while the drone is in the "ARMED" st |
| CVE-2026-26742 | Analyzed | 未確認 | CWE-862 | PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic. The system incorrectly applies the in-air emergency re-arm l |
| CVE-2026-26791 | Modified | 未確認 | CWE-77 | GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_server function. This vulnerability allows |
| CVE-2026-26792 | Modified | 未確認 | CWE-77 | GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version, current_version, fir |
| CVE-2026-26793 | Analyzed | 未確認 | CWE-77 | GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function. This vulnerability allows attackers to execute arbitrary comman |
| CVE-2026-26794 | Modified | 未確認 | CWE-89 | GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function. This vulnerability allows attackers to execute arbitrary SQL datab |
| CVE-2026-26795 | Modified | 未確認 | CWE-77 | GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function. This vulnerability allows attacke |
| CVE-2026-26801 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive information via the src/URLResolver.js |
| CVE-2026-26809 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-26828 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the daap_reply_playlists function (src/httpd_daap.c) of owntone-server commit 3d1652d allows attackers to cause a Denial of Service (DoS) via sending |
| CVE-2026-26829 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the safe_atou64 function (src/misc.c) of owntone-server through commit c4d57aa allows attackers to cause a Denial of Service (DoS) via sending a serie |
| CVE-2026-26830 | Analyzed | 未確認 | CWE-94 | pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter. The constructGetInfoCommand and constructConvertCommandForPage functions us |
| CVE-2026-26831 | Analyzed | 未確認 | CWE-78, CWE-94 | textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. When processing files with malicious filenames, the filePath is pas |
| CVE-2026-26832 | Analyzed | 未確認 | CWE-78 | node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR. In all versions through 2.2.1, the recognize() function in src/index.js is vulnerable to OS |
| CVE-2026-26833 | Analyzed | 未確認 | CWE-78, CWE-94 | thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because user input is concatenated into a shell comman |
| CVE-2026-2687 | Deferred | 未確認 | CWE-79 | The Reading progressbar WordPress plugin before 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cros |
| CVE-2026-26883 | Analyzed | 未確認 | CWE-89 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=delete_appointment. |
| CVE-2026-26884 | Analyzed | 未確認 | CWE-89 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view_appointment.php. |
| CVE-2026-26885 | Analyzed | 未確認 | CWE-89 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=delete_service. |
| CVE-2026-26886 | Analyzed | 未確認 | CWE-89 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manage_service.php. |
| CVE-2026-26887 | Analyzed | 未確認 | CWE-89 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_supplier.php. |
| CVE-2026-26888 | Analyzed | 未確認 | CWE-89 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_stock.php. |
| CVE-2026-26889 | Analyzed | 未確認 | CWE-89 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_category.php. |
| CVE-2026-26890 | Analyzed | 未確認 | CWE-89 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_product.php. |
| CVE-2026-26891 | Analyzed | 未確認 | CWE-89 | Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_parcel_type.php. |
| CVE-2026-26892 | Modified | 未確認 | CWE-89 | Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_carrier.php. |
| CVE-2026-26929 | Modified | 未確認 | CWE-732 | Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id set to "~" (wildcard |
| CVE-2026-26931 | Analyzed | 未確認 | CWE-789 | Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130). |
| CVE-2026-26933 | Analyzed | 未確認 | CWE-129 | Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker wi |
| CVE-2026-26939 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration (host isolation, process terminati |
| CVE-2026-26940 | Analyzed | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vu |
| CVE-2026-26945 | Awaiting Analysis | 未確認 | CWE-114 | Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 1 |
| CVE-2026-26948 | Awaiting Analysis | 未確認 | CWE-1258 | Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information Du |
| CVE-2026-26949 | Analyzed | 未確認 | CWE-863 | Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploi |
| CVE-2026-26954 | Analyzed | 未確認 | CWE-94 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.34, it is possible to obtain arrays containing Function, which allows escaping the sandbox. Given an array containing Fun |
| CVE-2026-26982 | Analyzed | 未確認 | CWE-78 | Ghostty is a cross-platform terminal emulator. Ghostty allows control characters such as 0x03 (Ctrl+C) in pasted and dropped text. These can be used to execute arbitrary commands i |
| CVE-2026-26998 | Analyzed | 未確認 | CWE-770 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing the ForwardAuth middleware responses |
| CVE-2026-26999 | Modified | 未確認 | CWE-400, CWE-772 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When T |
| CVE-2026-27005 | Analyzed | 未確認 | CWE-89 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.3, an unauthenticated attacker c |
| CVE-2026-27012 | Analyzed | 未確認 | CWE-306 | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vulnerability in |
| CVE-2026-27018 | Analyzed | 未確認 | CWE-22, CWE-918 | Gotenberg is an API for converting document formats. Prior to version 8.29.0, the fix introduced for CVE-2024-21527 can be bypassed using mixed-case or uppercase URL schemes. This |
| CVE-2026-27023 | Analyzed | 未確認 | CWE-918 | Twenty is an open source CRM. Prior to version 1.18, the SSRF protection in SecureHttpClientService validated request URLs at the request level but did not validate redirect target |
| CVE-2026-27027 | Awaiting Analysis | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-27039 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affects WZone: fro |
| CVE-2026-27040 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: from n/a throu |
| CVE-2026-27043 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a before 7.7.6. |
| CVE-2026-27044 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite |
| CVE-2026-27045 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCommerce Infini |
| CVE-2026-27046 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kaira StoreCustomizer woocustomizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StoreCustomize |
| CVE-2026-27047 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly Core curly-core allows PHP Local File I |
| CVE-2026-27048 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle Core theaisle-core allows PHP Local |
| CVE-2026-27049 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobica Core jobica-core allows Authentication Abuse.This issue affects Jobica Core: from n/a thro |
| CVE-2026-27051 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in uxper Golo golo allows Privilege Escalation.This issue affects Golo: from n/a through <= 1.7.0. |
| CVE-2026-27054 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Soledad Data Migrator penci-data-migrator allows Reflected X |
| CVE-2026-27065 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress BuilderPress builderpress allows PHP Local File I |
| CVE-2026-27067 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Syarif Mobile App Editor mobile-app-editor allows Upload a Web Shell to a Web Server.This issue affects Mobile App |
| CVE-2026-27068 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Howard Website LLMs.txt website-llms-txt allows Reflected XSS.This issue |
| CVE-2026-2707 | Deferred | 未確認 | CWE-79 | The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API entry submission endpoint in all versions up to, and including, 1.6.27. This is due t |
| CVE-2026-27070 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPEverest Everest Forms Pro allows Stored XSS.This issue affects Everest Forms |
| CVE-2026-27071 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through |
| CVE-2026-27073 | Deferred | 未確認 | CWE-798 | Use of Hard-coded Credentials vulnerability in Addi Addi – Cuotas que se adaptan a ti buy-now-pay-later-addi allows Password Recovery Exploitation.This issue affects Addi – Cuotas |
| CVE-2026-27075 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Belfort belfort allows PHP Local File Inclusi |
| CVE-2026-27076 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes LuxeDrive luxedrive allows PHP Local File Inc |
| CVE-2026-27077 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes MultiOffice multioffice allows PHP Local File |
| CVE-2026-27078 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Emaurri emaurri allows PHP Local File Inclusi |
| CVE-2026-27079 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Amfissa amfissa allows PHP Local File Inclusi |
| CVE-2026-27080 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Deston deston allows PHP Local File Inclusion |
| CVE-2026-27081 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Rosebud rosebud allows PHP Local File Inclusi |
| CVE-2026-27082 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Love Story lovestory allows Object Injection.This issue affects Love Story: from n/a through <= 1.3.12. |
| CVE-2026-27083 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Work & Travel Company work-travel-company allows Object Injection.This issue affects Work & Travel Company: from n/a thr |
| CVE-2026-27084 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Buisson buisson allows Object Injection.This issue affects Buisson: from n/a through <= 1.1.11. |
| CVE-2026-27087 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Wolverine Framework wolverine-framework allows Reflected XSS.This issu |
| CVE-2026-27088 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Darna Framework darna-framework allows Reflected XSS.This issue affect |
| CVE-2026-27091 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in UiPress UiPress lite uipress-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UiPress lite: fr |
| CVE-2026-27093 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Tripgo tripgo allows PHP Local File Inclusion.This |
| CVE-2026-27095 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Object Injection.This iss |
| CVE-2026-27096 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio - Freelance Designer WordPress Theme allows Object Injection.This issue affects ColorFolio - Freelance De |
| CVE-2026-27097 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CasaMia | Property Rental Real Estate WordPres |
| CVE-2026-27098 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in axiomthemes Au Pair Agency - Babysitting & Nanny Theme au-pair-agency allows Object Injection.This issue affects Au Pair Agency - |
| CVE-2026-27123 | Rejected | 未確認 | Rejected reason: Reason: This candidate was issued in error. | |
| CVE-2026-2713 | Analyzed | 未確認 | CWE-427 | IBM Trusteer Rapport installer 3.5.2309.290 IBM Trusteer Rapport could allow a local attacker to execute arbitrary code on the system, caused by DLL uncontrolled search path elemen |
| CVE-2026-27131 | Deferred | 未確認 | CWE-200, CWE-489 | The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS. Starting in version 2.0.0 and prior to versions 2.15.2 and 3.15.2, admin users, and users with |
| CVE-2026-27135 | Modified | 未確認 | CWE-617 | nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public |
| CVE-2026-27137 | Modified | 未確認 | CWE-295 | When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these |
| CVE-2026-27138 | Analyzed | 未確認 | CWE-295 | Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs |
| CVE-2026-27139 | Analyzed | 未確認 | CWE-22 | On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File wa |
| CVE-2026-27142 | Analyzed | 未確認 | CWE-79 | Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh" |
| CVE-2026-27166 | Analyzed | 未確認 | CWE-80 | Discourse is an open source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1 and 2026.1.2, insufficient cleanup in the default Codepen allowed iframes value allo |
| CVE-2026-27183 | Modified | 未確認 | CWE-863 | OpenClaw versions prior to 2026.3.7 contain a shell approval gating bypass vulnerability in system.run dispatch-wrapper handling that allows attackers to skip shell wrapper approva |
| CVE-2026-2720 | Deferred | 未確認 | CWE-862 | The Hr Press Lite plugin for WordPress is vulnerable to unauthorized access of sensitive employee data due to a missing capability check on the `hrp-fetch-employees` AJAX action in |
| CVE-2026-2721 | Deferred | 未確認 | CWE-79 | The MailArchiver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.4.0 due to insufficient input sanitiza |
| CVE-2026-27214 | Analyzed | 未確認 | CWE-476 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could explo |
| CVE-2026-27215 | Analyzed | 未確認 | CWE-476 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could explo |
| CVE-2026-27216 | Analyzed | 未確認 | CWE-125 | Substance3D - Painter versions 11.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabil |
| CVE-2026-27217 | Analyzed | 未確認 | CWE-476 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could explo |
| CVE-2026-27218 | Analyzed | 未確認 | CWE-476 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could explo |
| CVE-2026-27219 | Analyzed | 未確認 | CWE-125 | Substance3D - Painter versions 11.1.2 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabil |
| CVE-2026-2722 | Deferred | 未確認 | CWE-79 | The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.26.1 due to insufficient input sanitiz |
| CVE-2026-27220 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the con |
| CVE-2026-27221 | Analyzed | 未確認 | CWE-295 | Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Security featur |
| CVE-2026-27223 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scrip |
| CVE-2026-27224 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scrip |
| CVE-2026-27225 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27226 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scrip |
| CVE-2026-27228 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27229 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scrip |
| CVE-2026-2723 | Deferred | 未確認 | CWE-352 | The Post Snippits plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the setting |
| CVE-2026-27230 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27231 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scrip |
| CVE-2026-27232 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27233 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27234 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scrip |
| CVE-2026-27235 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27236 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27237 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27239 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scrip |
| CVE-2026-2724 | Deferred | 未確認 | CWE-79 | The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form entry fields in all versions up to, and including, 2.0.5. This i |
| CVE-2026-27240 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27241 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27242 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27244 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27247 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27248 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27249 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27250 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27251 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27252 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27253 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27254 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27255 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27256 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27257 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27259 | Rejected | 未確認 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | |
| CVE-2026-2726 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticate |
| CVE-2026-27260 | Rejected | 未確認 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | |
| CVE-2026-27261 | Rejected | 未確認 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | |
| CVE-2026-27262 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scrip |
| CVE-2026-27263 | Rejected | 未確認 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | |
| CVE-2026-27264 | Rejected | 未確認 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | |
| CVE-2026-27265 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27266 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject m |
| CVE-2026-27267 | Analyzed | 未確認 | CWE-121 | Illustrator versions 29.8.4, 30.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curren |
| CVE-2026-27268 | Analyzed | 未確認 | CWE-125 | Illustrator versions 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability |
| CVE-2026-27269 | Analyzed | 未確認 | CWE-125 | Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated me |
| CVE-2026-27270 | Analyzed | 未確認 | CWE-125 | Illustrator versions 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability |
| CVE-2026-27271 | Analyzed | 未確認 | CWE-122 | Illustrator versions 29.8.4, 30.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-27272 | Analyzed | 未確認 | CWE-787 | Illustrator versions 29.8.4, 30.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
| CVE-2026-27273 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-27274 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-27275 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-27276 | Analyzed | 未確認 | CWE-416 | Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exp |
| CVE-2026-27277 | Analyzed | 未確認 | CWE-416 | Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exp |
| CVE-2026-27278 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the con |
| CVE-2026-27279 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-27280 | Analyzed | 未確認 | CWE-787 | DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Explo |
| CVE-2026-27281 | Analyzed | 未確認 | CWE-190 | DNG SDK versions 1.7.1 2471 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit |
| CVE-2026-27309 | Analyzed | 未確認 | CWE-416 | Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exp |
| CVE-2026-2732 | Deferred | 未確認 | CWE-862 | The Enable Media Replace plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'RemoveBackGroundViewController::load' f |
| CVE-2026-27326 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes AC Services | HVAC, Air Conditioning & Heating |
| CVE-2026-27332 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Agrofood agrofood allows Reflected XSS.This issue affects Agrofood: f |
| CVE-2026-27334 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dan_fisher Alchemists alchemists allows PHP Local File Incl |
| CVE-2026-27335 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology T |
| CVE-2026-27336 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Consultor | Consulting, Accounting & Legal Cou |
| CVE-2026-27337 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPres |
| CVE-2026-27338 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through <= 3.7. |
| CVE-2026-27339 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Buzz Stone | Magazine & Viral Blog WordPress T |
| CVE-2026-27340 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Apollo | Night Club, DJ Event WordPress Theme |
| CVE-2026-27341 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes TopScorer - Sports WordPress Theme topscorer |
| CVE-2026-27342 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes TopFit - Fitness and Gym WordPress Theme topf |
| CVE-2026-27344 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: f |
| CVE-2026-27348 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows DOM-Based XSS.This issue affects Pho |
| CVE-2026-27352 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Starto starto allows Reflected XSS.This issue affects Starto: from |
| CVE-2026-27353 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand News grandnews allows Reflected XSS.This issue affects Grand |
| CVE-2026-27354 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace WooCommerce Coming Soon Product with Countdown woo-coming-soon- |
| CVE-2026-27358 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Architecturer architecturer allows Reflected XSS.This issue affects |
| CVE-2026-27359 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fox-themes Awa Plugins awa-plugins allows Reflected XSS.This issue affects Awa |
| CVE-2026-27361 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security L |
| CVE-2026-27362 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in kamleshyadav WP Bakery Autoresponder Addon vc-autoresponder-addon allows Exploiting Incorrectly Configured Access Control Security Levels.Thi |
| CVE-2026-27363 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kamleshyadav WP Bakery Autoresponder Addon vc-autoresponder-addon allows Store |
| CVE-2026-27367 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Musico musico allows Reflected XSS.This issue affects Musico: from |
| CVE-2026-27369 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in BoldThemes Celeste celeste allows Object Injection.This issue affects Celeste: from n/a through <= 1.3.6. |
| CVE-2026-27370 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Premio Chaty chaty allows Retrieve Embedded Sensitive Data.This issue affects Chaty: from n/a through <= 3.5.1. |
| CVE-2026-27373 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome tablesome allows Blind SQL Injection.This issue affects Tabl |
| CVE-2026-27374 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vanquish WooCommerce Order Details woocommerce-order-details allows Exploiting Incorrectly Configured Access Control Security Levels.This iss |
| CVE-2026-27375 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JanStudio Gecko gecko allows Reflected XSS.This issue affects Gecko: from n/a |
| CVE-2026-27376 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JanStudio Claue - Clean, Minimal Elementor WooCommerce Theme claue allows Refl |
| CVE-2026-27379 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in NextScripts NextScripts social-networks-auto-poster-facebook-twitter-g allows Object Injection.This issue affects NextScripts: fr |
| CVE-2026-27381 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issu |
| CVE-2026-27382 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Metro metro allows DOM-Based XSS.This issue affects Metro: from n/ |
| CVE-2026-27383 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Metro metro allows PHP Local File Inclusion.Thi |
| CVE-2026-27384 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issu |
| CVE-2026-27385 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes DesignThemes Portfolio designthemes-portfolio allows Reflected XS |
| CVE-2026-27386 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exploiting Incorrectly Configured Access Control Security Level |
| CVE-2026-27388 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in designthemes DesignThemes Booking Manager designthemes-booking-manager allows Exploiting Incorrectly Configured Access Control Security Level |
| CVE-2026-27389 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication |
| CVE-2026-27390 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication |
| CVE-2026-27396 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pr |
| CVE-2026-27397 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Really Simple Plugins B.V. Really Simple Security Pro allows Exploiting Incorrectly Configured Access Control Secu |
| CVE-2026-27406 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Joe Dolson My Tickets my-tickets allows Retrieve Embedded Sensitive Data.This issue affects My Tickets: from n/a |
| CVE-2026-2741 | Analyzed | 未確認 | CWE-22 | Specially crafted ZIP archives can escape the intended extraction directory during Node.js download and extraction in Vaadin 14.2.0 through 14.14.0, 15.0.0 through 23.6.6, 24.0.0 t |
| CVE-2026-27411 | Deferred | 未確認 | CWE-804 | Guessable CAPTCHA vulnerability in jp-secure SiteGuard WP Plugin siteguard allows Functionality Bypass.This issue affects SiteGuard WP Plugin: from n/a through <= 1.7.9. |
| CVE-2026-27413 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Profile Builder Pro allows Blind SQL Injection.This issue affects P |
| CVE-2026-27417 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through < 4.0.1. |
| CVE-2026-2742 | Analyzed | 未確認 | CWE-284 | An authentication bypass vulnerability exists in Vaadin 14.0.0 through 14.14.0, 23.0.0 through 23.6.6, 24.0.0 through 24.9.7 and 25.0.0 through 25.0.1, applications using Spring Se |
| CVE-2026-27428 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eagle-Themes Eagle Booking eagle-booking allows SQL Injection.This issue affec |
| CVE-2026-2743 | Modified | 未確認 | CWE-22, CWE-434 | Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected feature is the large file transfer (LFT). This issue affects |
| CVE-2026-27437 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Tennis Club tennis-sportclub allows Object Injection.This issue affects Tennis Club: from n/a through <= 1.2.3. |
| CVE-2026-27438 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Kingler kingler allows Object Injection.This issue affects Kingler: from n/a through <= 1.7. |
| CVE-2026-27439 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Dentario dentario allows Object Injection.This issue affects Dentario: from n/a through <= 1.5. |
| CVE-2026-27441 | Analyzed | 未確認 | CWE-78 | SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution. |
| CVE-2026-27442 | Analyzed | 未確認 | CWE-22 | The GINA web interface in SEPPmail Secure Email Gateway before version 15.0.1 does not properly check attachment filenames in GINA-encrypted emails, allowing an attacker to access |
| CVE-2026-27443 | Analyzed | 未確認 | CWE-20 | SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker to control trusted headers. |
| CVE-2026-27444 | Analyzed | 未確認 | CWE-436 | SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure t |
| CVE-2026-27445 | Analyzed | 未確認 | CWE-347 | SEPPmail Secure Email Gateway before version 15.0.1 does not properly verify that a PGP signature was generated by the expected key, allowing signature spoofing. |
| CVE-2026-27446 | Modified | 未確認 | CWE-306 | Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to for |
| CVE-2026-27448 | Analyzed | 未確認 | CWE-636 | pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` ra |
| CVE-2026-2745 | Analyzed | 未確認 | CWE-288 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 7.11 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticat |
| CVE-2026-27454 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, requesting /posts/:id.json?version=X bypassed authorization checks on |
| CVE-2026-27459 | Modified | 未確認 | CWE-120 | pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` retu |
| CVE-2026-2746 | Analyzed | 未確認 | CWE-347 | SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect forged emails. |
| CVE-2026-2747 | Analyzed | 未確認 | CWE-200 | SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sensitive informa |
| CVE-2026-27478 | Analyzed | 未確認 | CWE-1390, CWE-290, CWE-346 | Unity Catalog is an open, multi-modal Catalog for data and AI. In 0.4.0 and earlier, a critical authentication bypass vulnerability exists in the Unity Catalog token exchange endpo |
| CVE-2026-2748 | Analyzed | 未確認 | CWE-295 | SEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses containing whitespaces, allowing signature spoofing. |
| CVE-2026-27491 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a type coercion issue in a post actions API endpoint allowed non-staff |
| CVE-2026-27496 | Analyzed | 未確認 | CWE-908 | n8n is an open source workflow automation platform. Prior to versions 1.123.22, 2.9.3, and 2.10.1, an authenticated user with permission to create or modify workflows could use the |
| CVE-2026-27508 | Analyzed | 未確認 | CWE-79 | Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of the url parame |
| CVE-2026-2752 | Analyzed | 未確認 | CWE-209 | Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing |
| CVE-2026-27522 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.24 contain a local media root bypass vulnerability in sendAttachment and setGroupIcon message actions when sandboxRoot is unset. Attackers can hyd |
| CVE-2026-27523 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.24 contain a sandbox bind validation vulnerability allowing attackers to bypass allowed-root and blocked-path checks via symlinked parent director |
| CVE-2026-27524 | Modified | 未確認 | CWE-1321 | OpenClaw versions prior to 2026.2.21 accept prototype-reserved keys in runtime /debug set override object values, allowing prototype pollution attacks. Authorized /debug set caller |
| CVE-2026-2753 | Analyzed | 未確認 | CWE-36 | An Absolute Path Traversal vulnerability exists in Navtor NavBox. The application exposes an HTTP service that fails to properly sanitize user-supplied path input. Unauthenticated |
| CVE-2026-2754 | Analyzed | 未確認 | CWE-306 | Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints. An unauthenticated remote attacker with network access to th |
| CVE-2026-27540 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Using Malicious |
| CVE-2026-27541 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a |
| CVE-2026-27542 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Privilege Escalation.This issue |
| CVE-2026-27545 | Analyzed | 未確認 | CWE-367 | OpenClaw versions prior to 2026.2.26 contain an approval bypass vulnerability in system.run execution that allows attackers to execute commands from unintended filesystem locations |
| CVE-2026-2756 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in OmniPEMF NeoRhythm up to 20260308. This affects an unknown function of the component BLE Interface. Such manipulation leads to missing |
| CVE-2026-27566 | Analyzed | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run exec analysis that fails to unwrap env and shell-dispatch wrapper chains. Attackers can |
| CVE-2026-27570 | Analyzed | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the onebox method in the SharedAiConversation model renders the conver |
| CVE-2026-27591 | Analyzed | 未確認 | CWE-284, CWE-639, CWE-915 | Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.0.477, 1.1.12, and 1.2.12, Winter CMS allowed authenticated backend use |
| CVE-2026-27596 | Analyzed | 未確認 | CWE-125, CWE-191 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found |
| CVE-2026-27599 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-27600 | Analyzed | 未確認 | CWE-918 | HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, the notifier functionality allows authenticated users to specify arbitrary URLs to which the application |
| CVE-2026-27601 | Analyzed | 未確認 | CWE-770 | Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the _.flatten and _.isEqual functions use recursion without a depth limit. Under very specific conditions, |
| CVE-2026-27602 | Analyzed | 未確認 | CWE-78 | Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess calls with `shell=True`. Since domain na |
| CVE-2026-27603 | Analyzed | 未確認 | CWE-306 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.4, the chart filter endpoint POS |
| CVE-2026-27605 | Analyzed | 未確認 | CWE-434, CWE-79 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.4, the application allows upload |
| CVE-2026-27622 | Modified | 未確認 | CWE-190, CWE-787 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixel |
| CVE-2026-27625 | Analyzed | 未確認 | CWE-22, CWE-23 | Stirling-PDF is a locally hosted web application that performs various operations on PDF files. In versions prior to 2.5.2, the /api/v1/convert/markdown/pdf endpoint extracts user- |
| CVE-2026-27631 | Analyzed | 未確認 | CWE-248 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found |
| CVE-2026-27646 | Modified | 未確認 | CWE-863 | OpenClaw versions prior to 2026.3.7 contain a sandbox escape vulnerability in the /acp spawn command that allows authorized sandboxed sessions to initialize host-side ACP runtime. |
| CVE-2026-27649 | Analyzed | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementati |
| CVE-2026-27650 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products. |
| CVE-2026-27651 | Modified | 未確認 | CWE-476 | When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This issue may occur when (1) |
| CVE-2026-27654 | Modified | 未確認 | CWE-120, CWE-122 | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker to trigger a buffer overflow to the NGINX worker process; this |
| CVE-2026-27656 | Analyzed | 未確認 | CWE-303 | Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to properly validate user identity in the OpenID {{IsSameUser()}} comparison logi |
| CVE-2026-27659 | Analyzed | 未確認 | CWE-352 | Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to properly validate CSRF tokens in the /api/v4/access_control_policies/{policy_i |
| CVE-2026-27661 | Analyzed | 未確認 | CWE-1230 | A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application leaks confidential information in metadata, and files such as inform |
| CVE-2026-27663 | Awaiting Analysis | 未確認 | CWE-770 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), RTUM85 RTU Base (All versions < V26.10). The affected application contains d |
| CVE-2026-27664 | Awaiting Analysis | 未確認 | CWE-787 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0). The affected application conta |
| CVE-2026-27670 | Analyzed | 未確認 | CWE-367 | OpenClaw versions prior to 2026.3.2 contain a race condition vulnerability in ZIP extraction that allows local attackers to write files outside the intended destination directory. |
| CVE-2026-27684 | Awaiting Analysis | 未確認 | CWE-89 | SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled input |
| CVE-2026-27685 | Awaiting Analysis | 未確認 | CWE-502 | SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a high impact o |
| CVE-2026-27686 | Awaiting Analysis | 未確認 | CWE-862 | Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module. Succ |
| CVE-2026-27687 | Awaiting Analysis | 未確認 | CWE-862 | Due to missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal, a user with high privileges could access sensitive data belonging to another company. This |
| CVE-2026-27688 | Analyzed | 未確認 | CWE-862 | Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a speci |
| CVE-2026-27689 | Awaiting Analysis | 未確認 | CWE-606 | Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a rem |
| CVE-2026-27697 | Analyzed | 未確認 | CWE-89 | baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3. |
| CVE-2026-27703 | Analyzed | 未確認 | CWE-787 | RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices. In 2026.01 and earlier, |
| CVE-2026-27723 | Analyzed | 未確認 | CWE-284 | OpenProject is an open-source, web-based project management software. Prior to versions 17.0.5 and 17.1.2, an attacker can create wiki pages belonging to unpermitted projects throu |
| CVE-2026-27740 | Analyzed | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a cross-site scripting vulnerability that arises because the syste |
| CVE-2026-27748 | Modified | 未確認 | CWE-59 | Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM dele |
| CVE-2026-27749 | Modified | 未確認 | CWE-502 | Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which run |
| CVE-2026-27750 | Modified | 未確認 | CWE-367 | Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cl |
| CVE-2026-27764 | Analyzed | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementati |
| CVE-2026-27770 | Awaiting Analysis | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-27777 | Awaiting Analysis | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-27778 | Analyzed | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-o |
| CVE-2026-27784 | Modified | 未確認 | CWE-190 | The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory r |
| CVE-2026-27796 | Analyzed | 未確認 | CWE-200, CWE-862 | Homarr is an open-source dashboard. Prior to version 1.54.0, the integration.all tRPC endpoint in Homarr is exposed as a publicProcedure, allowing unauthenticated users to retrieve |
| CVE-2026-27797 | Analyzed | 未確認 | CWE-918 | Homarr is an open-source dashboard. Prior to version 1.54.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows a remote attacker to force the Homarr server |
| CVE-2026-27801 | Analyzed | 未確認 | CWE-307 | Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Vaultwarden versions 1.34.3 and prior are susceptible to a 2FA bypass when |
| CVE-2026-27802 | Analyzed | 未確認 | CWE-269, CWE-863 | Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, there is a privilege escalation vulnerability via |
| CVE-2026-27803 | Analyzed | 未確認 | CWE-269, CWE-285, CWE-863 | Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, when a Manager has manage=false for a given colle |
| CVE-2026-27807 | Analyzed | 未確認 | CWE-776 | MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs allows course instructors to upload YAML files to create/update va |
| CVE-2026-27811 | Analyzed | 未確認 | CWE-77, CWE-78 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.3, a command injection vulnerability exists in the `/config/compare/<s |
| CVE-2026-27813 | Analyzed | 未確認 | CWE-416 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to use-after-free. This is triggered by EV plug-in/unplug and RFID/RemoteStart/OCPP a |
| CVE-2026-27814 | Analyzed | 未確認 | CWE-362 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race (C++ UB) triggered by an A 1-phase ↔ 3-phase switch request (`ac_switch_three_phases_while_ch |
| CVE-2026-27815 | Analyzed | 未確認 | CWE-787 | EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_session_setup copies a variable-length payment_options list into a fixed-size |
| CVE-2026-27816 | Analyzed | 未確認 | CWE-787 | EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_update_energy_transfer_modes copies a variable-length list into a fixed-size |
| CVE-2026-27825 | Analyzed | 未確認 | CWE-22, CWE-73 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, the `confluence_download_attachment` MCP tool accepts |
| CVE-2026-27826 | Analyzed | 未確認 | CWE-918 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, an unauthenticated attacker who can reach the mcp-atla |
| CVE-2026-27828 | Analyzed | 未確認 | CWE-416 | EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118_chargerImpl::handle_session_setup uses v2g_ctx after it has been freed when ISO15118 initialization f |
| CVE-2026-27842 | Deferred | 未確認 | CWE-288 | Authentication bypass issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to bypass authentication and change the device configuration. |
| CVE-2026-27853 | Analyzed | 未確認 | CWE-787 | An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in cust |
| CVE-2026-27854 | Analyzed | 未確認 | CWE-416 | An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code. In some cases DNSQ |
| CVE-2026-27855 | Analyzed | 未確認 | CWE-294 | Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and username is altered in passdb, then OTP credentials can be cached |
| CVE-2026-27856 | Modified | 未確認 | CWE-208, CWE-287 | Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring ou |
| CVE-2026-27857 | Modified | 未確認 | CWE-400, CWE-770 | Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage. Longer commands will result in client disconnection. This 1 MB can be left all |
| CVE-2026-27858 | Modified | 未確認 | CWE-400, CWE-770 | Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unav |
| CVE-2026-27859 | Analyzed | 未確認 | CWE-400 | A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU. A suitably formatted mail message causes mail delivery process to consume la |
| CVE-2026-27860 | Analyzed | 未確認 | CWE-90 | If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probin |
| CVE-2026-27876 | Modified | 未確認 | CWE-89, CWE-94 | A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE). This is enabled by a feature in Grafana (OSS), so a |
| CVE-2026-27877 | Modified | 未確認 | CWE-201, CWE-312 | When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are |
| CVE-2026-27879 | Analyzed | 未確認 | CWE-400, CWE-787 | A resample query can be used to trigger out-of-memory crashes in Grafana. |
| CVE-2026-27880 | Modified | 未確認 | CWE-125, CWE-770, CWE-787 | The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes. |
| CVE-2026-27889 | Modified | 未確認 | CWE-1286, CWE-190 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in version 2.2.0 and prior to versions 2.11.14 and 2.12.5, a missing sanity |
| CVE-2026-27893 | Modified | 未確認 | CWE-501, CWE-693 | vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.18.0, two model implementation files hardcode `trust_rem |
| CVE-2026-27894 | Analyzed | 未確認 | CWE-98 | LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, a local file inclusion was d |
| CVE-2026-27895 | Analyzed | 未確認 | CWE-185 | LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, the PDF export component doe |
| CVE-2026-27897 | Analyzed | 未確認 | CWE-22, CWE-306 | Vociferous provides cross-platform, offline speech-to-text with local AI refinement. Prior to 4.4.2, the vulnerability exists in src/api/system.py within the export_file route. The |
| CVE-2026-27898 | Analyzed | 未確認 | CWE-639 | Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, an authenticated regular user can specify another |
| CVE-2026-27905 | Analyzed | 未確認 | CWE-59 | BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safe_extract_tarfile() function validates that each |
| CVE-2026-27932 | Analyzed | 未確認 | CWE-770 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. In 1.6.2 and earlier, a resource exhaustion vulnerabilit |
| CVE-2026-27934 | Analyzed | 未確認 | CWE-201 | Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a lack of visibility checks with a user action API endpoint that r |
| CVE-2026-27935 | Analyzed | 未確認 | CWE-201 | Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a vulnerability in an API endpoint that discloses private topic me |
| CVE-2026-27936 | Analyzed | 未確認 | CWE-863 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a restriction bypass allows restricted post action counts to be disclo |
| CVE-2026-27940 | Analyzed | 未確認 | CWE-122, CWE-190 | llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the gguf_init_from_file_impl() in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized |
| CVE-2026-27944 | Analyzed | 未確認 | CWE-306, CWE-311 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.3, the /api/backup endpoint is accessible without authentication and discloses the encryption keys r |
| CVE-2026-27953 | Analyzed | 未確認 | CWE-20, CWE-915 | ormar is a async mini ORM for Python. Versions 0.23.0 and below are vulnerable to Pydantic validation bypass through the model constructor, allowing any unauthenticated user to ski |
| CVE-2026-27962 | Modified | 未確認 | CWE-347 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows an un |
| CVE-2026-27971 | Analyzed | 未確認 | CWE-502 | Qwik is a performance focused javascript framework. qwik <=1.19.0 is vulnerable to RCE due to an unsafe deserialization vulnerability in the server$ RPC mechanism that allows any u |
| CVE-2026-27977 | Analyzed | 未確認 | CWE-1385 | Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, in `next dev`, cross-site protection for internal web |
| CVE-2026-27978 | Analyzed | 未確認 | CWE-352 | Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, `origin: null` was treated as a "missing" origin duri |
| CVE-2026-27979 | Analyzed | 未確認 | CWE-770 | Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, a request containing the `next-resume: 1` header (cor |
| CVE-2026-27980 | Analyzed | 未確認 | CWE-400 | Next.js is a React framework for building full-stack web applications. Starting in version 10.0.0 and prior to version 16.1.7, the default Next.js image optimization disk cache (`/ |
| CVE-2026-27981 | Analyzed | 未確認 | CWE-307 | HomeBox is a home inventory and organization system. Prior to 0.24.0, the authentication rate limiter (authRateLimiter) tracks failed attempts per client IP. It determines the clie |
| CVE-2026-27982 | Analyzed | 未確認 | CWE-601 | An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to |
| CVE-2026-27983 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in designthemes LMS Elementor Pro lms-elementor-pro allows Privilege Escalation.This issue affects LMS Elementor Pro: from n/a through |
| CVE-2026-27984 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget Options: fro |
| CVE-2026-27985 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Humanum humanum allows PHP Local File Inclusion.Th |
| CVE-2026-27986 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX OsTende ostende allows PHP Local File Inclusion.Th |
| CVE-2026-27987 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX The Qlean the-qlean allows PHP Local File Inclusio |
| CVE-2026-27988 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Equadio equadio allows PHP Local File Inclusion.Th |
| CVE-2026-27989 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Quanzo quanzo allows PHP Local File Inclusion.This |
| CVE-2026-27990 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ConFix confix allows PHP Local File Inclusion.This |
| CVE-2026-27991 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Avventure avventure allows PHP Local File Inclusio |
| CVE-2026-27992 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Meals & Wheels meals-wheels allows PHP Local File |
| CVE-2026-27993 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Aldo aldo allows PHP Local File Inclusion.This iss |
| CVE-2026-27994 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tediss tediss allows PHP Local File Inclusion.This |
| CVE-2026-27995 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Justitia justitia allows PHP Local File Inclusion. |
| CVE-2026-27996 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Lingvico lingvico allows PHP Local File Inclusion. |
| CVE-2026-27997 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Maxify maxify allows PHP Local File Inclusion.This |
| CVE-2026-27998 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Vixus vixus allows PHP Local File Inclusion.This i |
| CVE-2026-28006 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Yungen yungen allows PHP Local File Inclusion.This |
| CVE-2026-28007 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Coinpress coinpress allows PHP Local File Inclusio |
| CVE-2026-28009 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX DroneX dronex allows PHP Local File Inclusion.This |
| CVE-2026-28010 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Scientia scientia allows PHP Local File Inclusion. |
| CVE-2026-28011 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Yottis yottis allows PHP Local File Inclusion.This |
| CVE-2026-28012 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Gridiron gridiron allows PHP Local File Inclusion. |
| CVE-2026-28013 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Kratz kratz allows PHP Local File Inclusion.This i |
| CVE-2026-28014 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Translogic translogic allows PHP Local File Inclus |
| CVE-2026-28015 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ShiftCV shift-cv allows PHP Local File Inclusion.T |
| CVE-2026-28016 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Luxury Wine luxury-wine allows PHP Local File Incl |
| CVE-2026-28017 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Green Thumb greenthumb allows PHP Local File Inclu |
| CVE-2026-28018 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Global Logistics globallogistics allows PHP Local |
| CVE-2026-28019 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Manoir manoir allows PHP Local File Inclusion.This |
| CVE-2026-28020 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This |
| CVE-2026-28021 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Craftis craftis allows PHP Local File Inclusion.Th |
| CVE-2026-28022 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Foodie foodie allows PHP Local File Inclusion.This |
| CVE-2026-28023 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nuts nuts allows PHP Local File Inclusion.This iss |
| CVE-2026-28024 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Helion helion allows PHP Local File Inclusion.T |
| CVE-2026-28025 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Stargaze stargaze allows PHP Local File Inclusion. |
| CVE-2026-28026 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Motorix motorix allows PHP Local File Inclusion.Th |
| CVE-2026-28027 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Kayon kayon allows PHP Local File Inclusion.This i |
| CVE-2026-28028 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX MoneyFlow moneyflow allows PHP Local File Inclusio |
| CVE-2026-28029 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX EmojiNation emojination allows PHP Local File Incl |
| CVE-2026-28030 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bonbon bonbon allows PHP Local File Inclusion.This |
| CVE-2026-28031 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Invetex invetex allows PHP Local File Inclusion.Th |
| CVE-2026-28032 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tuning tuning allows PHP Local File Inclusion.This |
| CVE-2026-28033 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Edifice edifice allows PHP Local File Inclusion.Th |
| CVE-2026-28034 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Progress progress allows PHP Local File Inclusion. |
| CVE-2026-28035 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Printy printy allows PHP Local File Inclusion.This |
| CVE-2026-28036 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in SkatDesign Ratatouille ratatouille allows Server Side Request Forgery.This issue affects Ratatouille: from n/a through <= 1.2.6. |
| CVE-2026-28037 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON eventon allows Reflected XSS.This issue affects EventON: from |
| CVE-2026-28038 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addons allows Exploiting Incorrectly Configured Access Control Securit |
| CVE-2026-28039 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpDataTables wpDataTables wpdatatables allows PHP Local Fil |
| CVE-2026-28041 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Grit grit allows PHP Local File Inclusion.This |
| CVE-2026-28042 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Astoundify Listify listify allows Reflected XSS.This issue affects Listify: fr |
| CVE-2026-28043 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Healer - Doctor, Clinic & Medical WordPress Theme |
| CVE-2026-28044 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media WP Rocket allows Stored XSS.This issue affects WP Rocket: from n/a th |
| CVE-2026-28045 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX N7 | Golf Club Sports & Events n7-golf-club allows |
| CVE-2026-28046 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Law Office law-office allows PHP Local File Inclus |
| CVE-2026-28047 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Victo victo allows PHP Local File Inclusion.This |
| CVE-2026-28048 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech FlashMart flashmart allows PHP Local File Inclusi |
| CVE-2026-28049 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Police Department police-department allows PHP Loc |
| CVE-2026-28050 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Beacon beacon allows PHP Local File Inclusion.This |
| CVE-2026-28051 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Yacht Rental yacht-rental allows PHP Local File In |
| CVE-2026-28052 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Peter Mason petermason allows PHP Local File Inclu |
| CVE-2026-28053 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Miller christine-miller allows PHP Local File Incl |
| CVE-2026-28054 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Legal Stone legal-stone allows PHP Local File Incl |
| CVE-2026-28055 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX M.Williamson williamson allows PHP Local File Incl |
| CVE-2026-28056 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX MCKinney's Politics mckinney-politics allows PHP L |
| CVE-2026-28057 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Mandala mandala allows PHP Local File Inclusion.Th |
| CVE-2026-28058 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dixon dixon allows PHP Local File Inclusion.This i |
| CVE-2026-28059 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dermatology Clinic dermatology-clinic allows PHP L |
| CVE-2026-28060 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX S.King stephanie-king allows PHP Local File Inclus |
| CVE-2026-28061 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tiger Claw tiger-claw allows PHP Local File Inclus |
| CVE-2026-28062 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Happy Baby happy-baby allows PHP Local File Inclus |
| CVE-2026-28063 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Asia Garden asia-garden allows PHP Local File Incl |
| CVE-2026-28064 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Edge Decor edge-decor allows PHP Local File Inclus |
| CVE-2026-28065 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Eject eject allows PHP Local File Inclusion.This i |
| CVE-2026-28066 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Legrand legrand allows PHP Local File Inclusion.Th |
| CVE-2026-28067 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bassein bassein allows PHP Local File Inclusion.Th |
| CVE-2026-28068 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Rhythmo rhythmo allows PHP Local File Inclusion.Th |
| CVE-2026-28069 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Le Truffe letruffe allows PHP Local File Inclusion |
| CVE-2026-28070 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a |
| CVE-2026-28071 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PixFort pixfort Core pixfort-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects pixfort Core: fr |
| CVE-2026-28072 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PixFort pixfort Core pixfort-core allows Reflected XSS.This issue affects pixf |
| CVE-2026-28073 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This issue affects WP eMemb |
| CVE-2026-28074 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Pizza House pizzahouse allows Object Injection.This issue affects Pizza House: from n/a through <= 1.4.0. |
| CVE-2026-28075 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in p-themes Porto porto allows Reflected XSS.This issue affects Porto: from n/a t |
| CVE-2026-28076 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Frenify Guff guff allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Guff: from n/a through <= 1.0.1. |
| CVE-2026-28077 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Vapester vapester allows PHP Local File Inclusion. |
| CVE-2026-28078 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing ulisting allows Path Traversal.This issue affects uListing: from n |
| CVE-2026-28079 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Conquerors conquerors allows PHP Local File Inc |
| CVE-2026-2808 | Awaiting Analysis | 未確認 | CWE-59 | HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CV |
| CVE-2026-28080 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Rank Math Rank Math SEO PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank Math SEO PRO: fro |
| CVE-2026-28081 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Windsor windsor allows PHP Local File Inclusion.Th |
| CVE-2026-28084 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bazinga bazinga allows PHP Local File Inclusion.Th |
| CVE-2026-28085 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Mahogany mahogany allows PHP Local File Inclusion. |
| CVE-2026-28086 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Run Gran run-gran allows PHP Local File Inclusion. |
| CVE-2026-28087 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Filmax filmax allows PHP Local File Inclusion.This |
| CVE-2026-28088 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Aqualots aqualots allows PHP Local File Inclusion. |
| CVE-2026-28089 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Daiquiri daiquiri allows PHP Local File Inclusion. |
| CVE-2026-2809 | Awaiting Analysis | 未確認 | CWE-190 | Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privil |
| CVE-2026-28090 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Gamezone gamezone allows PHP Local File Inclusion. |
| CVE-2026-28091 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Coleo coleo allows PHP Local File Inclusion.This i |
| CVE-2026-28092 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Sounder sounder allows PHP Local File Inclusion.Th |
| CVE-2026-28093 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Ozisti ozisti allows PHP Local File Inclusion.This |
| CVE-2026-28094 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX RexCoin rexcoin allows PHP Local File Inclusion.Th |
| CVE-2026-28095 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Marcell marcell allows PHP Local File Inclusion.Th |
| CVE-2026-28096 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX WealthCo wealthco allows PHP Local File Inclusion. |
| CVE-2026-28097 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Artrium artrium allows PHP Local File Inclusion.Th |
| CVE-2026-28098 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusio |
| CVE-2026-28099 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Ultra uberSlider_ultra allows Reflected XSS.This issue |
| CVE-2026-28100 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider PerpetuumMobile uberSlider_perpetuummobile allows Refl |
| CVE-2026-28101 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider MouseInteraction uberSlider_mouseinteraction allows Re |
| CVE-2026-28102 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Classic uberSlider_classic allows Reflected XSS.This i |
| CVE-2026-28103 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows Reflected XSS.This |
| CVE-2026-28104 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Sug |
| CVE-2026-28105 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through <= 1.7.7. |
| CVE-2026-28106 | Deferred | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Kings Plugins B2BKing Premium allows Phishing.This issue affects B2BKing Premium: from n/a before 5.4.20. |
| CVE-2026-28107 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Muzicon muzicon allows PHP Local File Inclusion.Th |
| CVE-2026-28108 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumb |
| CVE-2026-28109 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider |
| CVE-2026-28110 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerW |
| CVE-2026-28112 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows Reflect |
| CVE-2026-28113 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Reflected XSS.This i |
| CVE-2026-28114 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in firassaidi WooCommerce License Manager fs-license-manager allows Upload a Web Shell to a Web Server.This issue affe |
| CVE-2026-28115 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP_Attr |
| CVE-2026-28117 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclus |
| CVE-2026-28118 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Welldone welldone allows PHP Local File Inclusi |
| CVE-2026-28119 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Nirvana nir-vana allows PHP Local File Inclusio |
| CVE-2026-28120 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dr.Patterson dr-patterson allows PHP Local File In |
| CVE-2026-28121 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Anderson andersonclinic allows PHP Local File |
| CVE-2026-28122 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affe |
| CVE-2026-28123 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Veil veil allows PHP Local File Inclusion.This |
| CVE-2026-28124 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Notarius notarius allows PHP Local File Inclus |
| CVE-2026-28125 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This |
| CVE-2026-28126 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam RH Frontend Publishing Pro rh-frontend allows Reflected XSS.This issue a |
| CVE-2026-28127 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Lawyer Directory lawyer-directory allows Reflected XSS.This issue af |
| CVE-2026-28128 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This i |
| CVE-2026-28129 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Little Birdies little-birdies allows PHP Local |
| CVE-2026-28130 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign u-design allows Reflected XSS.This issue affects UDesign: |
| CVE-2026-28133 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in WP Chill Filr filr-protection allows Upload a Web Shell to a Web Server.This issue affects Filr: from n/a through < |
| CVE-2026-28134 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetEngine jet-engine allows Remote Code Inclusion.This issue affects JetEngine: from n/a throu |
| CVE-2026-28135 | Deferred | 未確認 | CWE-829 | Inclusion of Functionality from Untrusted Control Sphere vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Accessing Functionality Not Properly Constra |
| CVE-2026-28137 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XS |
| CVE-2026-28204 | Awaiting Analysis | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-28209 | Analyzed | 未確認 | CWE-78 | FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when usi |
| CVE-2026-28210 | Analyzed | 未確認 | CWE-89 | FreePBX is an open source IP PBX. Prior to versions 16.0.49 and 17.0.7, FreePBX module cdr (Call Data Record) is vulnerable to SQL query injection. This issue has been patched in v |
| CVE-2026-28222 | Analyzed | 未確認 | CWE-79 | Wagtail is an open source content management system built on Django. Prior to versions 6.3.8, 7.0.6, 7.2.3, and 7.3.1, a stored cross-site scripting (XSS) vulnerability exists on r |
| CVE-2026-28223 | Analyzed | 未確認 | CWE-79 | Wagtail is an open source content management system built on Django. Prior to versions 6.3.8, 7.0.6, 7.2.3, and 7.3.1, a stored cross-site scripting (XSS) vulnerability exists on c |
| CVE-2026-28228 | Analyzed | 未確認 | CWE-1336 | OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. Prior to versions 19.1.31, 20.1.18, and 20.2.5, an authenticated user |
| CVE-2026-28229 | Modified | 未確認 | CWE-306, CWE-863 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to 4.0.2 and 3.7.11, Workflow templates endpoints allow any c |
| CVE-2026-28252 | Analyzed | 未確認 | CWE-327 | A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root |
| CVE-2026-28253 | Analyzed | 未確認 | CWE-789 | A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-servic |
| CVE-2026-28254 | Analyzed | 未確認 | CWE-862 | A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotect |
| CVE-2026-28255 | Analyzed | 未確認 | CWE-798 | A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts. |
| CVE-2026-28256 | Analyzed | 未確認 | CWE-547 | A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and ta |
| CVE-2026-28267 | Deferred | 未確認 | CWE-276 | Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-adm |
| CVE-2026-28277 | Analyzed | 未確認 | CWE-502 | LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkp |
| CVE-2026-28281 | Analyzed | 未確認 | CWE-352 | InstantCMS is a free and open source content management system. Prior to 2.18.1, InstantCMS does not validate CSRF tokens, which allows attackers grant moderator privileges to user |
| CVE-2026-28282 | Analyzed | 未確認 | CWE-863 | Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a security flaw in the discourse-policy plugin which allowed a use |
| CVE-2026-28284 | Analyzed | 未確認 | CWE-89 | FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, the FreePBX logfiles module contains several authenticated SQL injection vulnerabilities. This issue has bee |
| CVE-2026-28286 | Analyzed | 未確認 | CWE-73 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, the application enforces restrictions in the frontend/UI to p |
| CVE-2026-28287 | Analyzed | 未確認 | CWE-78 | FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, multiple command injection vulnerabilities exist in the reco |
| CVE-2026-28289 | Analyzed | 未確認 | CWE-434 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A patch bypass vulnerability for CVE-2026-27636 in FreeScout 1.8.206 and earlier allows any authe |
| CVE-2026-28292 | Modified | 未確認 | CWE-178, CWE-76, CWE-78 | `simple-git`, an interface for running git commands in any node.js application, has an issue in versions 3.15.0 through 3.32.2 that allows an attacker to bypass two prior CVE fixes |
| CVE-2026-28297 | Analyzed | 未確認 | CWE-79 | SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution. |
| CVE-2026-28298 | Analyzed | 未確認 | CWE-79 | SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution. |
| CVE-2026-2830 | Deferred | 未確認 | CWE-94 | The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in all |
| CVE-2026-2833 | Analyzed | 未確認 | CWE-444 | An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades. The issue occurs when a Pingora proxy reads a request containing |
| CVE-2026-28342 | Analyzed | 未確認 | CWE-400, CWE-770 | OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.2, the PasswordHash API endpoint allows unauthenticated users to trigger excessive |
| CVE-2026-28343 | Modified | 未確認 | CWE-79 | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. Starting in version 29.0.0 and prior to version 47.6.0, a cross-site scripting (XSS) vulnerability has |
| CVE-2026-28348 | Analyzed | 未確認 | CWE-116 | lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the _has_sneaky_javascript() method strips backslashes before |
| CVE-2026-2835 | Analyzed | 未確認 | CWE-444 | An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests. The issue occurs due to improperly allowing HTTP/1 |
| CVE-2026-28350 | Analyzed | 未確認 | CWE-116 | lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the <base> tag passes through the default Cleaner configuratio |
| CVE-2026-28353 | Deferred | 未確認 | CWE-506 | Trivy Vulnerability Scanner is a VS Code extension that helps find vulnerabilities. In Trivy VSCode Extension version 1.8.12, which was distributed via OpenVSX marketplace was comp |
| CVE-2026-28356 | Deferred | 未確認 | CWE-1333 | multipart is a fast multipart/form-data parser for python. Prior to 1.2.2, 1.3.1 and 1.4.0-dev, the parse_options_header() function in multipart.py uses a regular expression with a |
| CVE-2026-28357 | Analyzed | 未確認 | CWE-79 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, a stored XSS vulnerability exists in the Formula virtual cell. Formula results containing URI:: |
| CVE-2026-28358 | Analyzed | 未確認 | CWE-204 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password forgot endpoint returned different responses for registered and unregistered email |
| CVE-2026-28359 | Analyzed | 未確認 | CWE-79 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Editor role can inject arbitrary HTML into Rich Text cells by bypass |
| CVE-2026-2836 | Analyzed | 未確認 | CWE-345 | A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction. The issue occurs because the default HTTP cache key implementat |
| CVE-2026-28360 | Analyzed | 未確認 | CWE-256 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, shared view passwords were stored in plaintext in the database and compared using direct string |
| CVE-2026-28361 | Analyzed | 未確認 | CWE-639 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the MCP token service did not validate token ownership, allowing a Creator within the same base |
| CVE-2026-28367 | Modified | 未確認 | CWE-444 | A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain |
| CVE-2026-28368 | Modified | 未確認 | CWE-444 | A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to |
| CVE-2026-28369 | Modified | 未確認 | CWE-444 | A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping t |
| CVE-2026-2837 | Deferred | 未確認 | CWE-79 | The Ricerca – advanced search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's settings in all versions up to, and including, 1.1.12 due to insufficie |
| CVE-2026-28375 | Analyzed | 未確認 | CWE-400 | A testdata data-source can be used to trigger out-of-memory crashes in Grafana. |
| CVE-2026-28377 | Analyzed | 未確認 | CWE-326 | A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key use |
| CVE-2026-28384 | Analyzed | 未確認 | CWE-78 | An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server |
| CVE-2026-28391 | Modified | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing attackers to byp |
| CVE-2026-28392 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.14 contain a privilege escalation vulnerability in the Slack slash-command handler that incorrectly authorizes any direct message sender when dmPo |
| CVE-2026-28393 | Modified | 未確認 | CWE-22 | OpenClaw versions 2.0.0-beta3 prior to 2026.2.14 contain a path traversal vulnerability in hook transform module loading that allows arbitrary JavaScript execution. The hooks.mappi |
| CVE-2026-28394 | Analyzed | 未確認 | CWE-770 | OpenClaw versions prior to 2026.2.15 contain a denial of service vulnerability in the web_fetch tool that allows attackers to crash the Gateway process through memory exhaustion by |
| CVE-2026-28395 | Modified | 未確認 | CWE-1327 | OpenClaw version 2026.1.14-1 prior to 2026.2.12 contains an improper network binding vulnerability in the Chrome extension (must be installed and enabled) relay server that treats |
| CVE-2026-28396 | Analyzed | 未確認 | CWE-613 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password reset flow did not revoke existing refresh tokens, allowing an attacker with a pre |
| CVE-2026-28397 | Analyzed | 未確認 | CWE-79 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html without sanitization enable stored XSS. This issue has been patche |
| CVE-2026-28398 | Analyzed | 未確認 | CWE-79 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells was rendered via v-html without sanitiz |
| CVE-2026-28399 | Analyzed | 未確認 | CWE-89 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Creator role can inject arbitrary SQL via the DATEADD formula's unit |
| CVE-2026-28401 | Analyzed | 未確認 | CWE-79 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, rich text cell content rendered via v-html without sanitization enables stored XSS. This issue |
| CVE-2026-28403 | Analyzed | 未確認 | CWE-346 | Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server (`ws://127.0.0.1:<httpPort+1>`) accepts connections from any origin without |
| CVE-2026-28405 | Analyzed | 未確認 | CWE-79 | MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.1, the courses/<:course_id>/assignments/<:assignment_id>/submissions/html_co |
| CVE-2026-28410 | Analyzed | 未確認 | CWE-284, CWE-682 | The Graph is an indexing protocol for querying networks like Ethereum, IPFS, Polygon, and other blockchains. Prior to version 3.0.0, a flaw in the token vesting contracts allows us |
| CVE-2026-28412 | Analyzed | 未確認 | CWE-400 | Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server imposes no limit on concurrent connections. Combined with a broadcast timer |
| CVE-2026-28413 | Analyzed | 未確認 | CWE-601 | Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?came_from=////evil.example may redirect to an ext |
| CVE-2026-28427 | Analyzed | 未確認 | CWE-22, CWE-24 | OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize |
| CVE-2026-28428 | Analyzed | 未確認 | CWE-287 | Talishar is a fan-made Flesh and Blood project. Prior to commit a9c218e, an authentication bypass vulnerability in Talishar's game endpoint validation logic allows any unauthentica |
| CVE-2026-28429 | Analyzed | 未確認 | CWE-22 | Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871, a Path Traversal vulnerability was identified in the gameName parameter. While the application's primary en |
| CVE-2026-28430 | Analyzed | 未確認 | CWE-89 | Chamilo LMS is a learning management system. Prior to version 1.11.34, there is an unauthenticated SQL injection vulnerability which allows remote attackers to execute arbitrary SQ |
| CVE-2026-28431 | Analyzed | 未確認 | CWE-285 | Misskey is an open source, federated social media platform. All Misskey servers running versions 8.45.0 and later, but prior to 2026.3.1, contain a vulnerability that allows bad ac |
| CVE-2026-28432 | Analyzed | 未確認 | CWE-347 | Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP signature verification. Althoug |
| CVE-2026-28433 | Analyzed | 未確認 | CWE-639, CWE-862 | Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows impor |
| CVE-2026-28434 | Analyzed | 未確認 | CWE-200 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registe |
| CVE-2026-28435 | Analyzed | 未確認 | CWE-400, CWE-409 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, cpp-httplib (httplib.h) does not enforce Server::set_payload_max_length() on the |
| CVE-2026-28436 | Analyzed | 未確認 | CWE-79 | Frappe is a full-stack web application framework. Prior to versions 16.11.0 and 15.102.0, an attacker can set a crafted image URL that results in XSS when the avatar is displayed, |
| CVE-2026-28438 | Analyzed | 未確認 | CWE-89 | CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements |
| CVE-2026-28442 | Analyzed | 未確認 | CWE-73 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, users are restricted from deleting internal system files or f |
| CVE-2026-28443 | Analyzed | 未確認 | CWE-89 | OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /{projectId}/cards/search endpoint has a SQL injection in the sort.field parameter. This issue h |
| CVE-2026-28446 | Modified | 未確認 | CWE-303 | OpenClaw versions prior to 2026.2.1 with the voice-call extension installed and enabled contain an authentication bypass vulnerability in inbound allowlist policy validation that a |
| CVE-2026-28447 | Analyzed | 未確認 | CWE-22 | OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.1 contain a path traversal vulnerability in plugin installation that allows malicious plugin package names to escape the extensio |
| CVE-2026-28448 | Analyzed | 未確認 | CWE-285 | OpenClaw versions 2026.1.29 prior to 2026.2.1 contain a vulnerability in the Twitch plugin (must be installed and enabled) in which it fails to enforce the allowFrom allowlist when |
| CVE-2026-28449 | Modified | 未確認 | CWE-294 | OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attacke |
| CVE-2026-28450 | Analyzed | 未確認 | CWE-306 | OpenClaw versions prior to 2026.2.12 with the optional Nostr plugin enabled expose unauthenticated HTTP endpoints at /api/channels/nostr/:accountId/profile and /api/channels/nostr/ |
| CVE-2026-28451 | Analyzed | 未確認 | CWE-918 | OpenClaw versions prior to 2026.2.14 contain server-side request forgery vulnerabilities in the Feishu extension that allow attackers to fetch attacker-controlled remote URLs witho |
| CVE-2026-28452 | Analyzed | 未確認 | CWE-770 | OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the extractArchive function within src/infra/archive.ts that allows attackers to consume excessive |
| CVE-2026-28453 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.14 fail to validate TAR archive entry paths during extraction, allowing path traversal sequences to write files outside the intended directory. At |
| CVE-2026-28454 | Analyzed | 未確認 | CWE-345 | OpenClaw versions prior to 2026.2.2 fail to validate webhook secrets in Telegram webhook mode (must be enabled), allowing unauthenticated HTTP POST requests to the webhook endpoint |
| CVE-2026-28455 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-28456 | Analyzed | 未確認 | CWE-427 | OpenClaw versions 2026.1.5 prior to 2026.2.14 contain a vulnerability in the Gateway in which it does not sufficiently constrain configured hook module paths before passing them to |
| CVE-2026-28457 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.14 contain a path traversal vulnerability in sandbox skill mirroring (must be enabled) that uses the skill frontmatter name parameter unsanitized |
| CVE-2026-28458 | Analyzed | 未確認 | CWE-306 | OpenClaw version 2026.1.20 prior to 2026.2.1 contains a vulnerability in the Browser Relay (extension must be installed and enabled) /cdp WebSocket endpoint in which it does not re |
| CVE-2026-28459 | Analyzed | 未確認 | CWE-73 | OpenClaw versions prior to 2026.2.12 fail to validate the sessionFile path parameter, allowing authenticated gateway clients to write transcript data to arbitrary locations on the |
| CVE-2026-28460 | Modified | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run that allows attackers to execute non-allowlisted commands by splitting command substitu |
| CVE-2026-28461 | Analyzed | 未確認 | CWE-770 | OpenClaw versions prior to 2026.3.1 contain an unbounded memory growth vulnerability in the Zalo webhook endpoint that allows unauthenticated attackers to trigger in-memory key acc |
| CVE-2026-28462 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.13 contain a vulnerability in the browser control API in which it accepts user-supplied output paths for trace and download files without consiste |
| CVE-2026-28463 | Modified | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.14 contain an arbitrary file read vulnerability in the exec-approvals allowlist validation that checks pre-expansion argv tokens but executes usin |
| CVE-2026-28464 | Analyzed | 未確認 | CWE-208 | OpenClaw versions prior to 2026.2.12 use non-constant-time string comparison for hook token validation, allowing attackers to infer tokens through timing measurements. Remote attac |
| CVE-2026-28465 | Modified | 未確認 | CWE-290 | OpenClaw's voice-call plugin versions before 2026.2.3 contain an improper authentication vulnerability in webhook verification that allows remote attackers to bypass verification b |
| CVE-2026-28466 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing authenticated |
| CVE-2026-28467 | Analyzed | 未確認 | CWE-918 | OpenClaw versions prior to 2026.2.2 contain a server-side request forgery vulnerability in attachment and media URL hydration that allows remote attackers to fetch arbitrary HTTP(S |
| CVE-2026-28468 | Analyzed | 未確認 | CWE-306 | OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentica |
| CVE-2026-28469 | Analyzed | 未確認 | CWE-639 | OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the Google Chat monitor component that allows cross-account policy context misrouting when multiple |
| CVE-2026-28470 | Modified | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.2 contain an exec approvals (must be enabled) allowlist bypass vulnerability that allows attackers to execute arbitrary commands by injecting comm |
| CVE-2026-28471 | Analyzed | 未確認 | CWE-287 | OpenClaw version 2026.1.14-1 prior to 2026.2.2, with the Matrix plugin installed and enabled, contain a vulnerability in which DM allowlist matching could be bypassed by exact-matc |
| CVE-2026-28472 | Analyzed | 未確認 | CWE-306 | OpenClaw versions prior to 2026.2.2 contain a vulnerability in the gateway WebSocket connect handshake in which it allows skipping device identity checks when auth.token is present |
| CVE-2026-28473 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.2 contain an authorization bypass vulnerability where clients with operator.write scope can approve or deny exec approval requests by sending the |
| CVE-2026-28474 | Analyzed | 未確認 | CWE-863 | OpenClaw's Nextcloud Talk plugin versions prior to 2026.2.6 accept equality matching on the mutable actor.name display name field for allowlist validation, allowing attackers to by |
| CVE-2026-28475 | Analyzed | 未確認 | CWE-208 | OpenClaw versions prior to 2026.2.13 use non-constant-time string comparison for hook token validation, allowing attackers to infer tokens through timing measurements. Remote attac |
| CVE-2026-28476 | Analyzed | 未確認 | CWE-918 | OpenClaw versions prior to 2026.2.14 contain a server-side request forgery vulnerability in the optional Tlon Urbit extension that accepts user-provided base URLs for authenticatio |
| CVE-2026-28477 | Analyzed | 未確認 | CWE-352 | OpenClaw versions prior to 2026.2.14 contain an oauth state validation bypass vulnerability in the manual Chutes login flow that allows attackers to bypass CSRF protection. An atta |
| CVE-2026-28478 | Analyzed | 未確認 | CWE-770 | OpenClaw versions prior to 2026.2.13 contain a denial of service vulnerability in webhook handlers that buffer request bodies without strict byte or time limits. Remote unauthentic |
| CVE-2026-28479 | Analyzed | 未確認 | CWE-327 | OpenClaw versions prior to 2026.2.15 use SHA-1 to hash sandbox identifier cache keys for Docker and browser sandbox configurations, which is deprecated and vulnerable to collision |
| CVE-2026-28480 | Analyzed | 未確認 | CWE-290 | OpenClaw versions prior to 2026.2.14 contain an authorization bypass vulnerability where Telegram allowlist matching accepts mutable usernames instead of immutable numeric sender I |
| CVE-2026-28481 | Analyzed | 未確認 | CWE-201 | OpenClaw versions 2026.1.30 and earlier, contain an information disclosure vulnerability, patched in 2026.2.1, in the MS Teams attachment downloader (optional extension must be ena |
| CVE-2026-28482 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.12 construct transcript file paths using unsanitized sessionId parameters and sessionFile paths without enforcing directory containment. Authentic |
| CVE-2026-28483 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-28484 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-28485 | Analyzed | 未確認 | CWE-306 | OpenClaw versions 2026.1.5 prior to 2026.2.12 fail to enforce mandatory authentication on the /agent/act browser-control HTTP route, allowing unauthorized local callers to invoke p |
| CVE-2026-28486 | Analyzed | 未確認 | CWE-22 | OpenClaw versions 2026.1.16-2 prior to 2026.2.14 contain a path traversal vulnerability in archive extraction during installation commands that allows arbitrary file writes outside |
| CVE-2026-28490 | Analyzed | 未確認 | CWE-203, CWE-327 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a cryptographic padding oracle vulnerability was identified in the Authlib Python |
| CVE-2026-28492 | Analyzed | 未確認 | CWE-200 | File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.61.0, when a u |
| CVE-2026-28493 | Analyzed | 未確認 | CWE-190 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, an integer overflow vulnerability exists in the SIXEL dec |
| CVE-2026-28494 | Analyzed | 未確認 | CWE-121 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagi |
| CVE-2026-28495 | Analyzed | 未確認 | CWE-352 | GetSimple CMS is a content management system. The massiveAdmin plugin (v6.0.3) bundled with GetSimpleCMS-CE v3.3.22 allows an authenticated administrator to overwrite the gsconfig. |
| CVE-2026-28497 | Analyzed | 未確認 | CWE-190, CWE-444 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.03, an integer overflow vulnerability in the string-to-integer conversion routine (_Val) allow |
| CVE-2026-28498 | Modified | 未確認 | CWE-325, CWE-354, CWE-573 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in the Authlib Python library concer |
| CVE-2026-28499 | Analyzed | 未確認 | CWE-116, CWE-79, CWE-80 | LeafKit is a templating language with Swift-inspired syntax. Prior to version 1.14.2, HTML escaping doesn't work correctly when a template prints a collection (Array / Dictionary) |
| CVE-2026-28500 | Modified | 未確認 | CWE-345, CWE-494, CWE-693, CWE-829 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub. |
| CVE-2026-28501 | Analyzed | 未確認 | CWE-89 | WWBN AVideo is an open source video platform. Prior to version 24.0, an unauthenticated SQL Injection vulnerability exists in AVideo within the objects/videos.json.php and objects/ |
| CVE-2026-28502 | Analyzed | 未確認 | CWE-434 | WWBN AVideo is an open source video platform. Prior to version 24.0, an authenticated Remote Code Execution (RCE) vulnerability was identified in AVideo related to the plugin uploa |
| CVE-2026-28503 | Analyzed | 未確認 | CWE-639 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the `SyncViewSet.query_synced_folder()` action in ` |
| CVE-2026-28505 | Analyzed | 未確認 | CWE-94, CWE-95 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the str_eval() function in notification_handler.py implements a sandboxed ev |
| CVE-2026-28506 | Analyzed | 未確認 | CWE-200 | Outline is a service that allows for collaborative documentation. Prior to 1.5.0, the events.list API endpoint, used for retrieving activity logs, contains a logic flaw in its filt |
| CVE-2026-28507 | Analyzed | 未確認 | CWE-78 | Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue h |
| CVE-2026-28508 | Analyzed | 未確認 | CWE-918 | Idno is a social publishing platform. Prior to version 1.6.4, a logic error in the API authentication flow causes the CSRF protection on the URL unfurl service endpoint to be trivi |
| CVE-2026-28509 | Analyzed | 未確認 | CWE-79 | LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, LangBot’s web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a cross-site scrip |
| CVE-2026-28512 | Analyzed | 未確認 | CWE-601 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. From 2.0.0 to before 2.4.0, a flaw in callback URL validation allowed crafted |
| CVE-2026-28513 | Analyzed | 未確認 | CWE-863 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only whe |
| CVE-2026-28514 | Analyzed | 未確認 | CWE-287 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to versions 7.8.6, 7.9.8, 7.10.7, 7.11.4, 7.12.4, 7.13.3, and 8.0.0, a critical authenticat |
| CVE-2026-28518 | Analyzed | 未確認 | CWE-22 | OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write files outside the |
| CVE-2026-28519 | Analyzed | 未確認 | CWE-122 | arduino-TuyaOpen before version 1.2.1 contains a heap-based buffer overflow vulnerability in the DnsServer component. An attacker on the same local area network who controls the LA |
| CVE-2026-28520 | Analyzed | 未確認 | CWE-193 | arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component. When the victim's smart hardware connects to an attacker-cont |
| CVE-2026-28521 | Analyzed | 未確認 | CWE-125 | arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component. An attacker who hijacks or controls the Tuya cloud service can i |
| CVE-2026-28522 | Modified | 未確認 | CWE-476 | arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component. An attacker on the same local area network can send a large volume |
| CVE-2026-28526 | Analyzed | 未確認 | CWE-125 | BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_ATTRIBUTES and LIST_PLAYER_APPLICATI |
| CVE-2026-28527 | Analyzed | 未確認 | CWE-125 | BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GET_PLAYER_APPLICATION_SETTING_ATTRIBUTE_TEXT and GET_PLAYER_APPLICA |
| CVE-2026-28528 | Analyzed | 未確認 | CWE-125, CWE-758 | BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GET_FOLDER_ITEMS handler that fails to validate packet boundari |
| CVE-2026-28529 | Analyzed | 未確認 | CWE-416 | cryptodev-linux version 1.14 and prior contain a page reference handling flaw in the get_userbuf function of the /dev/crypto device driver that allows local users to trigger use-af |
| CVE-2026-28536 | Analyzed | 未確認 | CWE-305 | Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. |
| CVE-2026-28537 | Analyzed | 未確認 | CWE-415 | Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28538 | Analyzed | 未確認 | CWE-22, CWE-24 | Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28539 | Analyzed | 未確認 | CWE-19 | Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-28540 | Analyzed | 未確認 | CWE-125, CWE-158 | Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-28541 | Analyzed | 未確認 | CWE-264 | Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28542 | Analyzed | 未確認 | CWE-755 | Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28543 | Analyzed | 未確認 | CWE-362 | Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28544 | Analyzed | 未確認 | CWE-362 | Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28545 | Analyzed | 未確認 | CWE-362 | Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28546 | Analyzed | 未確認 | CWE-122 | Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28547 | Analyzed | 未確認 | CWE-824 | Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28548 | Analyzed | 未確認 | CWE-269 | Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-28549 | Analyzed | 未確認 | CWE-362 | Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28550 | Analyzed | 未確認 | CWE-362, CWE-840 | Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28551 | Analyzed | 未確認 | CWE-362 | Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28552 | Analyzed | 未確認 | CWE-19, CWE-787 | Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-28563 | Analyzed | 未確認 | CWE-732 | Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated us |
| CVE-2026-2859 | Analyzed | 未確認 | CWE-204 | Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows unauthenticated users to enumerate existing hosts by observ |
| CVE-2026-28673 | Analyzed | 未確認 | CWE-434, CWE-78 | xiaoheiFS is a self-hosted financial and operational system for cloud service businesses. In versions up to and including 0.3.15, the standard plugin system allows admins to upload |
| CVE-2026-28674 | Analyzed | 未確認 | CWE-434, CWE-798 | xiaoheiFS is a self-hosted financial and operational system for cloud service businesses. In versions up to and including 0.3.15, the `AdminPaymentPluginUpload` endpoint lets admin |
| CVE-2026-28675 | Analyzed | 未確認 | CWE-200, CWE-209 | OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, some endpoints returned raw exception strings |
| CVE-2026-28676 | Analyzed | 未確認 | CWE-22 | OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, multiple storage helpers used path constructio |
| CVE-2026-28677 | Analyzed | 未確認 | CWE-918 | OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, the URL ingest pipeline accepted user-controll |
| CVE-2026-28678 | Rejected | 未確認 | Rejected reason: Further research determined the issue is not a vulnerability. | |
| CVE-2026-28679 | Analyzed | 未確認 | CWE-22 | Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. Prior to version 1.21.0, when a user requests a download, the application does not v |
| CVE-2026-28680 | Analyzed | 未確認 | CWE-918 | Ghostfolio is an open source wealth management software. Prior to version 2.245.0, an attacker can exploit the manual asset import feature to perform a full-read SSRF, allowing the |
| CVE-2026-28681 | Analyzed | 未確認 | CWE-601, CWE-640 | Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. From version 4.4.0 to before version 4.4.5 and from version 4.5.0 t |
| CVE-2026-28682 | Analyzed | 未確認 | CWE-200, CWE-284 | Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, the upload status SSE implementation on /uploadStatus publishe |
| CVE-2026-28683 | Analyzed | 未確認 | CWE-79 | Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, if a malicious authenticated user uploads SVG and creates a ho |
| CVE-2026-28685 | Analyzed | 未確認 | CWE-285 | Kimai is a web-based multi-user time-tracking application. Prior to version 2.51.0, "GET /api/invoices/{id}" only checks the role-based view_invoice permission but does not verify |
| CVE-2026-28686 | Analyzed | 未確認 | CWE-122, CWE-131 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, A heap-buffer-overflow vulnerability exists |
| CVE-2026-28687 | Analyzed | 未確認 | CWE-416 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in Imag |
| CVE-2026-28688 | Analyzed | 未確認 | CWE-416 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists |
| CVE-2026-28689 | Analyzed | 未確認 | CWE-367, CWE-59 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain="path" authorization is checked befo |
| CVE-2026-28690 | Analyzed | 未確認 | CWE-121 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exist |
| CVE-2026-28691 | Modified | 未確認 | CWE-252, CWE-824 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an uninitialized pointer dereference vulner |
| CVE-2026-28692 | Analyzed | 未確認 | CWE-125 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MAT decoder uses 32-bit arithmetic due to i |
| CVE-2026-28693 | Modified | 未確認 | CWE-125, CWE-190, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in DIB coder can result |
| CVE-2026-28695 | Analyzed | 未確認 | CWE-1336 | Craft is a content management system (CMS). There is an authenticated admin RCE in Craft CMS 5.8.21 via Server-Side Template Injection using the create() Twig function combined wit |
| CVE-2026-28696 | Analyzed | 未確認 | CWE-639 | Craft is a content management system (CMS). Prior to 4.17.0-beta.1 and 5.9.0-beta.1, the GraphQL directive @parseRefs, intended to parse internal reference tags (e.g., {user:1:emai |
| CVE-2026-28697 | Analyzed | 未確認 | CWE-1336 | Craft is a content management system (CMS). Prior to 4.17.0-beta.1 and 5.9.0-beta.1, an authenticated administrator can achieve Remote Code Execution (RCE) by injecting a Server-Si |
| CVE-2026-28709 | Analyzed | 未確認 | CWE-863 | Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28710 | Analyzed | 未確認 | CWE-1390 | Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28711 | Analyzed | 未確認 | CWE-427 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
| CVE-2026-28712 | Analyzed | 未確認 | CWE-427 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
| CVE-2026-28713 | Analyzed | 未確認 | CWE-1392 | Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis |
| CVE-2026-28714 | Analyzed | 未確認 | CWE-522 | Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28715 | Analyzed | 未確認 | CWE-863 | Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28716 | Analyzed | 未確認 | CWE-863 | Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28717 | Analyzed | 未確認 | CWE-276 | Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
| CVE-2026-28718 | Analyzed | 未確認 | CWE-779 | Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28719 | Analyzed | 未確認 | CWE-863 | Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28720 | Analyzed | 未確認 | CWE-863 | Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28721 | Analyzed | 未確認 | CWE-610 | Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
| CVE-2026-28722 | Analyzed | 未確認 | CWE-610 | Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
| CVE-2026-28723 | Analyzed | 未確認 | CWE-863 | Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28724 | Analyzed | 未確認 | CWE-863 | Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28725 | Analyzed | 未確認 | CWE-732 | Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41 |
| CVE-2026-28726 | Analyzed | 未確認 | CWE-863 | Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
| CVE-2026-28727 | Modified | 未確認 | CWE-276 | Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect |
| CVE-2026-28753 | Analyzed | 未確認 | CWE-93 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses. This allows an attacker-co |
| CVE-2026-28755 | Analyzed | 未確認 | CWE-863 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_c |
| CVE-2026-28760 | Deferred | 未確認 | CWE-427 | The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to place a crafted DLL with the installer, an |
| CVE-2026-28769 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability exists in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web manageme |
| CVE-2026-28770 | Analyzed | 未確認 | CWE-91 | Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web ma |
| CVE-2026-28771 | Analyzed | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Ma |
| CVE-2026-28772 | Analyzed | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability in the /IDC_Logging/index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver We |
| CVE-2026-28773 | Analyzed | 未確認 | CWE-78 | The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Management Interface version |
| CVE-2026-28774 | Analyzed | 未確認 | CWE-78 | An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver We |
| CVE-2026-28775 | Analyzed | 未確認 | CWE-1188 | An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver. The d |
| CVE-2026-28776 | Analyzed | 未確認 | CWE-798 | International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver contains hardcoded credentials for the `monitor` account. A remote unauthenticated attacker can u |
| CVE-2026-28777 | Analyzed | 未確認 | CWE-798 | International Datacasting Corporation (IDC) SFX2100 Satellite Receiver, trivial password for the `user` (usr) account. A remote unauthenticated attacker can exploit this to gain |
| CVE-2026-28778 | Analyzed | 未確認 | CWE-798 | International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, hardcoded/insecure credentials for the `xd` user account. A remote unauth |
| CVE-2026-28779 | Analyzed | 未確認 | CWE-668 | Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url. This allows any |
| CVE-2026-28781 | Analyzed | 未確認 | CWE-639, CWE-915 | Craft is a content management system (CMS). Prior to 4.17.0-beta.1 and 5.9.0-beta.1, the entry creation process allows for Mass Assignment of the authorId attribute. A user with "C |
| CVE-2026-28782 | Analyzed | 未確認 | CWE-639 | Craft is a content management system (CMS). Prior to 5.9.0-beta.1 and 4.17.0-beta.1, the "Duplicate" entry action does not properly verify if the user has permission to perform thi |
| CVE-2026-28783 | Analyzed | 未確認 | CWE-1336, CWE-184, CWE-94 | Craft is a content management system (CMS). Prior to 5.9.0-beta.1 and 4.17.0-beta.1, Craft CMS implements a blocklist to prevent potentially dangerous PHP functions from being call |
| CVE-2026-28784 | Analyzed | 未確認 | CWE-1336 | Craft is a content management system (CMS). Prior to 5.8.22 and 4.16.18, it is possible to craft a malicious payload using the Twig map filter in text fields that accept Twig input |
| CVE-2026-28785 | Analyzed | 未確認 | CWE-89 | Ghostfolio is an open source wealth management software. Prior to version 2.244.0, by bypassing symbol validation, an attacker can execute arbitrary SQL commands via the getHistori |
| CVE-2026-28786 | Analyzed | 未確認 | CWE-209, CWE-22 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.6, an unsanitized filename field in the speech-to-text trans |
| CVE-2026-28787 | Analyzed | 未確認 | CWE-287, CWE-294 | OneUptime is a solution for monitoring and managing online services. In version 10.0.11 and prior, the WebAuthn authentication implementation does not store the challenge on the se |
| CVE-2026-28788 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.6, any authenticated user can overwrite any file's content b |
| CVE-2026-28789 | Analyzed | 未確認 | CWE-362, CWE-400, CWE-662 | OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.3, an unauthenticated denial-of-service vulnerability exists in OliveTin’s OAuth2 |
| CVE-2026-2879 | Deferred | 未確認 | CWE-639 | The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2. This is due to missing validation on the `id` param |
| CVE-2026-28790 | Analyzed | 未確認 | CWE-284, CWE-862, CWE-863 | OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to terminate running actions through K |
| CVE-2026-28791 | Analyzed | 未確認 | CWE-22 | Tina is a headless content management system. Prior to 2.1.7, a path traversal vulnerability exists in the TinaCMS development server's media upload handler. The code at media.ts j |
| CVE-2026-28792 | Modified | 未確認 | CWE-22, CWE-942 | Tina is a headless content management system. Prior to 2.1.8 , the TinaCMS CLI dev server combines a permissive CORS configuration (Access-Control-Allow-Origin: *) with the path tr |
| CVE-2026-28793 | Analyzed | 未確認 | CWE-22 | Tina is a headless content management system. Prior to 2.1.8, the TinaCMS CLI development server exposes media endpoints that are vulnerable to path traversal, allowing attackers t |
| CVE-2026-28794 | Analyzed | 未確認 | CWE-1321 | oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.13.6, a prototype pollution vulnerability exists in the RPC |
| CVE-2026-28795 | Analyzed | 未確認 | CWE-22 | OpenChatBI is an intelligent chat-based BI tool powered by large language models, designed to help users query, analyze, and visualize data through natural language conversations. |
| CVE-2026-28799 | Analyzed | 未確認 | CWE-416 | PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription frame |
| CVE-2026-28800 | Analyzed | 未確認 | CWE-22, CWE-287, CWE-434 | Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, anyone with Discord Remote Control set up in a non-private channel gives acce |
| CVE-2026-28801 | Analyzed | 未確認 | CWE-94 | Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, any ahk code contained inside of a pattern or path file is executed by the ma |
| CVE-2026-28802 | Modified | 未確認 | CWE-347 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involving passing a malicious JWT containing a |
| CVE-2026-28803 | Analyzed | 未確認 | CWE-284 | Open Forms allows users create and publish smart forms. Prior to 3.3.13 and 3.4.5, to be able to cosign, the cosigner receives an e-mail with instructions or a deep-link to start t |
| CVE-2026-28804 | Analyzed | 未確認 | CWE-407 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires |
| CVE-2026-28806 | Analyzed | 未確認 | CWE-285, CWE-668 | Improper Authorization vulnerability in nerves-hub nerves_hub_web allows cross-organization device control via device bulk actions and device update API. Missing authorization che |
| CVE-2026-28807 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal. The |
| CVE-2026-28809 | Modified | 未確認 | CWE-611 | XML External Entity (XXE) vulnerability in esaml (and its forks) allows an attacker to cause the system to read local files and incorporate their contents into processed SAML docum |
| CVE-2026-28816 | Analyzed | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to delete files |
| CVE-2026-28817 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A sandboxed process may be able to |
| CVE-2026-28818 | Analyzed | 未確認 | CWE-284 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access sensiti |
| CVE-2026-28820 | Modified | 未確認 | CWE-200 | This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data. |
| CVE-2026-28821 | Modified | 未確認 | CWE-20 | A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Sequoia 15.7. |
| CVE-2026-28822 | Analyzed | 未確認 | CWE-843 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tv |
| CVE-2026-28823 | Analyzed | 未確認 | CWE-284 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.4. An app with root privileges may be able to delete protected system files. |
| CVE-2026-28824 | Analyzed | 未確認 | CWE-284 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to acces |
| CVE-2026-28825 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to |
| CVE-2026-28826 | Modified | 未確認 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A malicious app may be able to break out | |
| CVE-2026-28827 | Analyzed | 未確認 | CWE-22 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. |
| CVE-2026-28828 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access |
| CVE-2026-28829 | Analyzed | 未確認 | CWE-732 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify pro |
| CVE-2026-28831 | Modified | 未確認 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to acces | |
| CVE-2026-28832 | Modified | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to disclos |
| CVE-2026-28833 | Modified | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. An app may be able to enumerate a |
| CVE-2026-28834 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to cause unexpec |
| CVE-2026-28835 | Analyzed | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Mounting a maliciously cra |
| CVE-2026-28837 | Analyzed | 未確認 | CWE-284 | A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data. |
| CVE-2026-28838 | Modified | 未確認 | CWE-284 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to br |
| CVE-2026-28839 | Analyzed | 未確認 | CWE-285 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access sensitive user data. |
| CVE-2026-28841 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and unexpected app termina |
| CVE-2026-28842 | Analyzed | 未確認 | CWE-122 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and unexpected app termination. |
| CVE-2026-28844 | Analyzed | 未確認 | A file access issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.4. An attacker may gain access to protected parts of the file system. | |
| CVE-2026-28845 | Analyzed | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.4. An app may be able to access protected user data. |
| CVE-2026-28852 | Analyzed | 未確認 | CWE-20 | A stack overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4 |
| CVE-2026-28855 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3. An app may be able to access protected user data. |
| CVE-2026-28856 | Analyzed | 未確認 | CWE-284 | The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical access to a locked dev |
| CVE-2026-28857 | Modified | 未確認 | CWE-120, CWE-125, CWE-416, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted |
| CVE-2026-28858 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected system termination or |
| CVE-2026-28859 | Modified | 未確認 | CWE-120, CWE-125, CWE-416, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A mal |
| CVE-2026-28861 | Modified | 未確認 | CWE-346, CWE-79 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 2 |
| CVE-2026-28862 | Analyzed | 未確認 | CWE-284 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may b |
| CVE-2026-28863 | Modified | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to finge |
| CVE-2026-28864 | Analyzed | 未確認 | CWE-863 | This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8. |
| CVE-2026-28865 | Analyzed | 未確認 | CWE-285 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Son |
| CVE-2026-28866 | Analyzed | 未確認 | CWE-59 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14. |
| CVE-2026-28867 | Analyzed | 未確認 | This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 2 | |
| CVE-2026-28868 | Analyzed | 未確認 | CWE-532 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5 |
| CVE-2026-28870 | Modified | 未確認 | An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionO | |
| CVE-2026-28871 | Analyzed | 未確認 | CWE-79 | A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4. Visiting a malicious |
| CVE-2026-28874 | Analyzed | 未確認 | CWE-400 | The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination. |
| CVE-2026-28875 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial-of-service. |
| CVE-2026-28876 | Analyzed | 未確認 | CWE-284 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS |
| CVE-2026-28877 | Modified | 未確認 | CWE-200 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sono |
| CVE-2026-28878 | Modified | 未確認 | CWE-200 | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.7, macOS Sonoma 14.8.5, |
| CVE-2026-28879 | Analyzed | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Son |
| CVE-2026-2888 | Deferred | 未確認 | CWE-639 | The Formidable Forms plugin for WordPress is vulnerable to an authorization bypass through user-controlled key in all versions up to, and including, 6.28. This is due to the `frm_s |
| CVE-2026-28880 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14 |
| CVE-2026-28881 | Analyzed | 未確認 | CWE-285 | A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data. |
| CVE-2026-28882 | Modified | 未確認 | This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26 | |
| CVE-2026-28886 | Analyzed | 未確認 | CWE-476 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS |
| CVE-2026-28888 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to gain root pri |
| CVE-2026-28889 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root. |
| CVE-2026-28890 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able to cause unexpected system termination. |
| CVE-2026-28891 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of it |
| CVE-2026-28892 | Modified | 未確認 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify | |
| CVE-2026-28893 | Modified | 未確認 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.4. A document may be written to a temporary file when using print pre | |
| CVE-2026-28894 | Analyzed | 未確認 | CWE-20 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4 |
| CVE-2026-28895 | Analyzed | 未確認 | CWE-284 | The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen Device Protection enabl |
| CVE-2026-2890 | Deferred | 未確認 | CWE-862 | The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and including, 6.28. This is due to the Stripe Link return handler (`ha |
| CVE-2026-2893 | Deferred | 未確認 | CWE-89 | The Page and Post Clone plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' parameter in the content_clone() function in all versions up to, and including, 6.3. |
| CVE-2026-2899 | Deferred | 未確認 | CWE-862 | The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.1.17. This is due to the `deleteFile()` method |
| CVE-2026-29000 | Deferred | 未確認 | CWE-347 | pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers t |
| CVE-2026-29022 | Modified | 未確認 | CWE-122, CWE-787 | dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h th |
| CVE-2026-29023 | Deferred | 未確認 | CWE-798 | Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using th |
| CVE-2026-29038 | Analyzed | 未確認 | CWE-79 | changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, there is a reflected cross-site scripting (XSS) vulnerability identified in the /r |
| CVE-2026-29039 | Analyzed | 未確認 | CWE-94 | changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, the changedetection.io application allows users to specify XPath expressions as co |
| CVE-2026-29041 | Analyzed | 未確認 | CWE-434 | Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote code execution vulnerability caused by improper validation of |
| CVE-2026-29042 | Analyzed | 未確認 | CWE-75 | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.15.20, the Nuclio Shell Runtime component contains a command injection vulnerability |
| CVE-2026-29044 | Analyzed | 未確認 | CWE-863 | EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, AuthHandler determines `transacti |
| CVE-2026-29045 | Analyzed | 未確認 | CWE-177 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using serveStatic together with route-based middleware protectio |
| CVE-2026-29046 | Analyzed | 未確認 | CWE-114, CWE-20, CWE-74, CWE-93 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.04, TinyWeb accepts request header values and later maps them into CGI environment variables ( |
| CVE-2026-29048 | Analyzed | 未確認 | CWE-79 | HumHub is an Open Source Enterprise Social Network. In version 1.18.0, a cross-site scripting vulnerability was identified in the Button component of version 1.18.0. Due to inconsi |
| CVE-2026-29049 | Modified | 未確認 | CWE-400, CWE-918 | melange allows users to build apk packages using declarative pipelines. In version 0.40.5 and prior, melange update-cache downloads URIs from build configs via io.Copy without any |
| CVE-2026-29052 | Analyzed | 未確認 | CWE-79 | The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1 |
| CVE-2026-29053 | Analyzed | 未確認 | CWE-74 | Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue |
| CVE-2026-29054 | Modified | 未確認 | CWE-178 | Traefik is an HTTP reverse proxy and load balancer. From version 2.11.9 to 2.11.37 and from version 3.1.3 to 3.6.8, there is a potential vulnerability in Traefik managing the Conne |
| CVE-2026-29055 | Analyzed | 未確認 | CWE-1230 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the image processing pipeline in Tandoor Recipes ex |
| CVE-2026-29056 | Analyzed | 未確認 | CWE-915 | Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint (`UserInviteController::register()`) accepts al |
| CVE-2026-29057 | Analyzed | 未確認 | CWE-444 | Next.js is a React framework for building full-stack web applications. Starting in version 9.5.0 and prior to versions 15.5.13 and 16.1.7, when Next.js rewrites proxy traffic to an |
| CVE-2026-29058 | Analyzed | 未確認 | CWE-78 | AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated attacker can execute arbitrary OS commands on the server by injecting shell command substituti |
| CVE-2026-29059 | Analyzed | 未確認 | CWE-22 | Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to version 1.603.3, an unauthenticated path traversal vulnerability |
| CVE-2026-29060 | Analyzed | 未確認 | CWE-284 | Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, a registered user without privileges to create or modify file |
| CVE-2026-29061 | Analyzed | 未確認 | CWE-284 | Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, a privilege escalation vulnerability in the user rank demotion |
| CVE-2026-29062 | Modified | 未確認 | CWE-1284, CWE-770 | jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. From version 3.0.0 to before version 3.1.0, the UTF |
| CVE-2026-29063 | Modified | 未確認 | CWE-1321, CWE-915 | Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeD |
| CVE-2026-29064 | Analyzed | 未確認 | CWE-22 | Zarf is an Airgap Native Packager Manager for Kubernetes. From version 0.54.0 to before version 0.73.1, a path traversal vulnerability in archive extraction allows a specifically c |
| CVE-2026-29065 | Analyzed | 未確認 | CWE-22 | changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file |
| CVE-2026-29066 | Analyzed | 未確認 | CWE-200, CWE-552 | Tina is a headless content management system. Prior to 2.1.8, the TinaCMS CLI dev server configures Vite with server.fs.strict: false, which disables Vite's built-in filesystem acc |
| CVE-2026-29067 | Analyzed | 未確認 | CWE-601 | ZITADEL is an open source identity management platform. From version 4.0.0-rc.1 to 4.7.0, a potential vulnerability exists in ZITADEL's password reset mechanism in login V2. ZITADE |
| CVE-2026-29068 | Analyzed | 未確認 | CWE-121 | PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RT |
| CVE-2026-29069 | Analyzed | 未確認 | CWE-639 | Craft is a content management system (CMS). Prior to 5.9.0-beta.2 and 4.17.0-beta.2, the actionSendActivationEmail() endpoint is accessible to unauthenticated users and does not re |
| CVE-2026-29070 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.6, an access control check is missing when deleting a file f |
| CVE-2026-29071 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.6, any authenticated user can read other users' private memo |
| CVE-2026-29072 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can crea |
| CVE-2026-29073 | Analyzed | 未確認 | CWE-862, CWE-89 | SiYuan is a personal knowledge management system. Prior to version 3.6.0, the /api/query/sql lets a user run sql directly, but it only checks basic auth, not admin rights, any logg |
| CVE-2026-29074 | Modified | 未確認 | CWE-776 | SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1, from version 3.0.0 to before |
| CVE-2026-29075 | Analyzed | 未確認 | CWE-94 | Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted c |
| CVE-2026-29076 | Analyzed | 未確認 | CWE-1333, CWE-674 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.37.0, cpp-httplib uses std::regex (libstdc++) to parse RFC 5987 encoded filenam |
| CVE-2026-29077 | Analyzed | 未確認 | CWE-284, CWE-602 | Frappe is a full-stack web application framework. Prior to versions 15.98.0 and 14.100.0, due to a lack of validation when sharing documents, a user could share a document with a p |
| CVE-2026-29078 | Analyzed | 未確認 | CWE-191, CWE-787 | Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx->buffer_u |
| CVE-2026-29079 | Analyzed | 未確認 | CWE-843 | Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unk |
| CVE-2026-29081 | Analyzed | 未確認 | CWE-89 | Frappe is a full-stack web application framework. Prior to versions 14.100.1 and 15.100.0, an endpoint was vulnerable to SQL injection through specially crafted requests, which wou |
| CVE-2026-29082 | Analyzed | 未確認 | CWE-79 | Kestra is an event-driven orchestration platform. In versions from 1.1.10 and prior, Kestra’s execution-file preview renders user-supplied Markdown (.md) with markdown-it instantia |
| CVE-2026-29084 | Analyzed | 未確認 | CWE-352 | Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, the login flow accepts credential-bearing requests without CSR |
| CVE-2026-29085 | Analyzed | 未確認 | CWE-74 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using streamSSE() in Streaming Helper, the event, id, and retry |
| CVE-2026-29086 | Analyzed | 未確認 | CWE-1113 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, the setCookie() utility did not validate semicolons (;), carriage ret |
| CVE-2026-29087 | Analyzed | 未確認 | CWE-863 | @hono/node-server allows running the Hono application on Node.js. Prior to version 1.19.10, when using @hono/node-server's static file serving together with route-based middleware |
| CVE-2026-29089 | Analyzed | 未確認 | CWE-426 | TimescaleDB is a time-series database for high-performance real-time analytics packaged as a Postgres extension. From version 2.23.0 to 2.25.1, PostgreSQL uses the search_path sett |
| CVE-2026-29091 | Modified | 未確認 | CWE-94, CWE-95 | Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.0, a remote code execution (RCE) flaw was discovered in the locut |
| CVE-2026-29092 | Analyzed | 未確認 | CWE-613 | Kiteworks is a private data network (PDN). Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session management allows blocked users to maintain active |
| CVE-2026-29093 | Analyzed | 未確認 | CWE-287, CWE-668 | WWBN AVideo is an open source video platform. Prior to version 24.0, the official docker-compose.yml publishes the memcached service on host port 11211 (0.0.0.0:11211) with no auth |
| CVE-2026-29096 | Analyzed | 未確認 | CWE-89 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, when creating or editing a report (AOR |
| CVE-2026-29097 | Analyzed | 未確認 | CWE-918 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions prior to 7.15.1 and 8.9.3 contain a Server-Side Request Forgery ( |
| CVE-2026-29098 | Analyzed | 未確認 | CWE-23 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, the `action_exportCustom` function in |
| CVE-2026-29099 | Analyzed | 未確認 | CWE-89 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, the `retrieve()` function in `include/ |
| CVE-2026-29100 | Analyzed | 未確認 | CWE-79 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM 7.15.0 contains a reflected HTML injection vulnerability in the l |
| CVE-2026-29101 | Analyzed | 未確認 | CWE-23 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, a Denial-of-Service (DoS) vulnerabilit |
| CVE-2026-29102 | Analyzed | 未確認 | CWE-94 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, an Authenticated Remote Code Execution |
| CVE-2026-29103 | Analyzed | 未確認 | CWE-358, CWE-94 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. A Critical Remote Code Execution (RCE) vulnerability exists in SuiteCRM 7. |
| CVE-2026-29104 | Analyzed | 未確認 | CWE-434 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, SuiteCRM contains an authenticated arb |
| CVE-2026-29105 | Analyzed | 未確認 | CWE-601 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, SuiteCRM contains an unauthenticated o |
| CVE-2026-29106 | Analyzed | 未確認 | CWE-116, CWE-159, CWE-79, CWE-80 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, the value of the return_id request par |
| CVE-2026-29107 | Analyzed | 未確認 | CWE-918 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, it is possible to create PDF templates |
| CVE-2026-29108 | Analyzed | 未確認 | CWE-200 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 8.9.3, an authenticated API endpoint allows any user to |
| CVE-2026-29109 | Analyzed | 未確認 | CWE-502 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions up to and including 8.9.2 contain an unsafe deserialization vulne |
| CVE-2026-29110 | Analyzed | 未確認 | CWE-209 | Cryptomator encrypts data being stored on cloud infrastructure. Prior to version 1.19.0, in non-debug mode Cryptomator might leak cleartext paths into the log file. This can reveal |
| CVE-2026-29111 | Analyzed | 未確認 | CWE-269 | systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the e |
| CVE-2026-29112 | Analyzed | 未確認 | CWE-770 | DiceBear is an avatar library for designers and developers. Prior to version 9.4.0, the `ensureSize()` function in `@dicebear/converter` read the `width` and `height` attributes fr |
| CVE-2026-29113 | Modified | 未確認 | CWE-352 | Craft is a content management system (CMS). Prior to 4.17.3 and 5.9.7, Craft CMS has a CSRF issue in the preview token endpoint at /actions/preview/create-token. The endpoint accep |
| CVE-2026-29119 | Analyzed | 未確認 | CWE-798 | International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the `admin` account. A remote unauthenti |
| CVE-2026-29120 | Analyzed | 未確認 | CWE-798 | The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation (IDC) SFX Series(SFX2100) SuperFlex Satellite Receiver insecurely stores the hard |
| CVE-2026-29121 | Analyzed | 未確認 | CWE-269 | International Data Casting (IDC) SFX2100 satellite receiver comes with the `/sbin/ip` utility installed with the setuid bit set. This configuration grants elevated privileges to an |
| CVE-2026-29122 | Analyzed | 未確認 | CWE-269 | International Data Casting (IDC) SFX2100 satellite receiver comes with the `/bin/date` utility installed with the setuid bit set. This configuration grants elevated privileges to a |
| CVE-2026-29123 | Analyzed | 未確認 | CWE-269 | A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux allows a local actor to potentially preform local privilege escalation |
| CVE-2026-29124 | Analyzed | 未確認 | CWE-269 | Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpa |
| CVE-2026-29125 | Analyzed | 未確認 | CWE-732 | IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, fac |
| CVE-2026-29126 | Analyzed | 未確認 | CWE-732, CWE-863 | Incorrect permission assignment (world-writable file) in /etc/udhcpc/default.script in International Data Casting (IDC) SFX2100 Satellite Receiver allows a local unprivileged attac |
| CVE-2026-29127 | Analyzed | 未確認 | CWE-269, CWE-863 | The IDC SFX2100 Satellite Receiver sets overly permissive file system permissions on the monitor user's home directory. The directory is configured with permissions 0777, granting |
| CVE-2026-29128 | Analyzed | 未確認 | CWE-522, CWE-798 | IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd, ospfd, and ripd) that are owned by root but world- |
| CVE-2026-2915 | Analyzed | 未確認 | CWE-276, CWE-732 | HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP System Event Utility v |
| CVE-2026-2917 | Deferred | 未確認 | CWE-639 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.21.0 via the `ha_duplicate_thing` admi |
| CVE-2026-29172 | Analyzed | 未確認 | CWE-89 | Craft Commerce is an ecommerce platform for Craft CMS. Prior to 4.10.2 and 5.5.3, Craft Commerce is vulnerable to SQL Injection in the purchasables table endpoint. The sort paramet |
| CVE-2026-29173 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. Prior to 4.10.2 and 5.5.3, a stored XSS vulnerability exists when a user tries to update the Order Status from the Commerce O |
| CVE-2026-29174 | Analyzed | 未確認 | CWE-89 | Craft Commerce is an ecommerce platform for Craft CMS. Prior to 5.5.3, Craft Commerce is vulnerable to SQL Injection in the inventory levels table data endpoint. The sort[0][direct |
| CVE-2026-29175 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. Prior to 5.5.3, Stored XSS vulnerabilities exist in the Commerce Inventory page. The Product Title, Variant Title, and Varian |
| CVE-2026-29176 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. Prior to 5.5.3, A stored XSS vulnerability exists in the Commerce Settings - Inventory Locations page. The Name field is rend |
| CVE-2026-29177 | Analyzed | 未確認 | CWE-79 | Craft Commerce is an ecommerce platform for Craft CMS. Prior to 4.10.2 and 5.5.3, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Craft Commerce Order details. Mali |
| CVE-2026-29178 | Deferred | 未確認 | CWE-918 | Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypub_federation, a framework for ActivityPub federatio |
| CVE-2026-2918 | Deferred | 未確認 | CWE-639 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.21.0 via the `ha_condition_update` AJA |
| CVE-2026-29180 | Analyzed | 未確認 | CWE-862 | Fleet is open source device management software. Prior to 4.81.1, a broken access control vulnerability in Fleet's host transfer API allows a team maintainer to transfer hosts from |
| CVE-2026-29182 | Analyzed | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.4 and 9.4.1-alpha.3, Parse Server's readOnlyMasterKey |
| CVE-2026-29183 | Analyzed | 未確認 | CWE-79 | SiYuan is a personal knowledge management system. Prior to version 3.5.9, an unauthenticated reflected XSS vulnerability exists in the dynamic icon API endpoint "GET /api/icon/getD |
| CVE-2026-29184 | Analyzed | 未確認 | CWE-532 | Backstage is an open framework for building developer portals. Prior to version 3.1.4, a malicious scaffolder template can bypass the log redaction mechanism to exfiltrate secrets |
| CVE-2026-29185 | Analyzed | 未確認 | CWE-22 | Backstage is an open framework for building developer portals. Prior to version 1.20.1, a vulnerability in the SCM URL parsing used by Backstage integrations allowed path traversal |
| CVE-2026-29186 | Modified | 未確認 | CWE-434, CWE-74, CWE-791 | Backstage is an open framework for building developer portals. Prior to version 1.14.3, this is a configuration bypass vulnerability that enables arbitrary code execution. The @bac |
| CVE-2026-29187 | Analyzed | 未確認 | CWE-89 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a Blind SQL Injection vulnerability exists in the |
| CVE-2026-29188 | Analyzed | 未確認 | CWE-284, CWE-732 | File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.61.1, a broken |
| CVE-2026-29189 | Analyzed | 未確認 | CWE-639 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, the SuiteCRM REST API V8 has missing A |
| CVE-2026-2919 | Analyzed | 未確認 | CWE-451 | Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an invalid port and triggering an iframe re |
| CVE-2026-29190 | Analyzed | 未確認 | CWE-22 | Karapace is an open-source implementation of Kafka REST and Schema Registry. Prior to version 6.0.0, there is a Path Traversal vulnerability in the backup reader (backup/backends/v |
| CVE-2026-29191 | Analyzed | 未確認 | CWE-79 | ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account |
| CVE-2026-29192 | Analyzed | 未確認 | CWE-79 | ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account |
| CVE-2026-29193 | Analyzed | 未確認 | CWE-287 | ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security p |
| CVE-2026-29194 | Analyzed | 未確認 | CWE-863 | Netmaker makes networks with WireGuard. Prior to version 1.5.0, the Authorize middleware in Netmaker incorrectly validates host JWT tokens. When a route permits host authentication |
| CVE-2026-29195 | Analyzed | 未確認 | CWE-863 | Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler (PUT /api/users/{username}) lacks validation to prevent an admin-role user from assigning th |
| CVE-2026-29196 | Analyzed | 未確認 | CWE-863 | Netmaker makes networks with WireGuard. Prior to version 1.5.0, a user assigned the platform-user role can retrieve WireGuard private keys of all wireguard configs in a network by |
| CVE-2026-2920 | Modified | 未確認 | CWE-120, CWE-122 | GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-2921 | Modified | 未確認 | CWE-190 | GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStre |
| CVE-2026-2922 | Modified | 未確認 | CWE-787 | GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-2923 | Modified | 未確認 | CWE-787 | GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of G |
| CVE-2026-2931 | Deferred | 未確認 | CWE-269 | The Amelia Booking plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 9.1.2. This is due to the plugin providing user-control |
| CVE-2026-2941 | Deferred | 未確認 | CWE-862 | The Linksy Search and Replace plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'linksy_search_and_replace_item_detai |
| CVE-2026-2950 | Modified | 未確認 | CWE-1321 | The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. The fix for CVE-2025-13465 only guards against string key members, so an attacker can bypass the c |
| CVE-2026-29510 | Analyzed | 未確認 | CWE-79 | Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manip |
| CVE-2026-29513 | Analyzed | 未確認 | CWE-79 | Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manip |
| CVE-2026-29515 | Analyzed | 未確認 | CWE-303, CWE-862 | MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. A |
| CVE-2026-29516 | Analyzed | 未確認 | CWE-732 | Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow |
| CVE-2026-29520 | Analyzed | 未確認 | CWE-79 | Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a reflected cross-site scripting vulnerability in the Network Diagnosis ping function that allows attackers to execute |
| CVE-2026-29521 | Analyzed | 未確認 | CWE-352 | Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify device configuration by exploiting missing C |
| CVE-2026-29522 | Deferred | 未確認 | CWE-22 | ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulnerability in the /server/node_upgrade_srv.js endpoint. An unauthenticated attacker |
| CVE-2026-29597 | Awaiting Analysis | 未確認 | CWE-284 | DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive configuration files by force browsin |
| CVE-2026-29606 | Analyzed | 未確認 | CWE-306 | OpenClaw versions prior to 2026.2.14 contain a webhook signature-verification bypass in the voice-call extension that allows unauthenticated requests when the tunnel.allowNgrokFree |
| CVE-2026-29607 | Modified | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in allow-always wrapper persistence that allows attackers to bypass approval checks by persisting |
| CVE-2026-29608 | Analyzed | 未確認 | CWE-88 | OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting changes command semantics. Attackers can place malicious local |
| CVE-2026-29609 | Analyzed | 未確認 | CWE-770 | OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the fetchWithGuard function that allocates entire response payloads in memory before enforcing max |
| CVE-2026-29610 | Analyzed | 未確認 | CWE-427 | OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintended binaries by manipulating PATH environment variables throu |
| CVE-2026-29611 | Analyzed | 未確認 | CWE-73 | OpenClaw versions prior to 2026.2.14 contain a local file inclusion vulnerability in BlueBubbles extension (must be installed and enabled) media path handling that allows attackers |
| CVE-2026-29612 | Analyzed | 未確認 | CWE-770 | OpenClaw versions prior to 2026.2.14 decode base64-backed media inputs into buffers before enforcing decoded-size budget limits, allowing attackers to trigger large memory allocati |
| CVE-2026-29613 | Analyzed | 未確認 | CWE-306 | OpenClaw versions prior to 2026.2.12 contain a vulnerability in the BlueBubbles (optional plugin) webhook handler in which it authenticates requests based solely on loopback remote |
| CVE-2026-2973 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated |
| CVE-2026-29771 | Analyzed | 未確認 | CWE-404 | Netmaker makes networks with WireGuard. Prior to version 1.2.0, the /api/server/shutdown endpoint allows termination of the Netmaker server process via syscall.SIGINT. This allows |
| CVE-2026-29772 | Analyzed | 未確認 | CWE-770 | Astro is a web framework. Prior to version 10.0.0, Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because JSON |
| CVE-2026-29773 | Analyzed | 未確認 | CWE-863 | Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to deploy namespaced AdmissionPolicies and AdmissionPolicyGroups in their |
| CVE-2026-29774 | Analyzed | 未確認 | CWE-787 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occurs in the FreeRDP client's AVC420/AVC444 YUV-to-RGB convers |
| CVE-2026-29775 | Analyzed | 未確認 | CWE-787 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap out-of-bounds read/write occurs in FreeRDP's bitmap cache subsystem due to an o |
| CVE-2026-29776 | Analyzed | 未確認 | CWE-190, CWE-191, CWE-400, CWE-789 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library This vulner |
| CVE-2026-29777 | Analyzed | 未確認 | CWE-74 | Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.10, A tenant with write access to an HTTPRoute resource can inject backtick-delimited rule tokens into Traefik's ro |
| CVE-2026-29778 | Analyzed | 未確認 | CWE-23 | pyLoad is a free and open-source download manager written in Python. From version 0.5.0b3.dev13 to 0.5.0b3.dev96, the edit_package() function implements insufficient sanitization f |
| CVE-2026-29779 | Analyzed | 未確認 | CWE-200 | UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageC |
| CVE-2026-29780 | Analyzed | 未確認 | CWE-22 | eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the offici |
| CVE-2026-29781 | Analyzed | 未確認 | CWE-476 | Sliver is a command and control framework that uses a custom Wireguard netstack. In versions from 1.7.3 and prior, a vulnerability exists in the Sliver C2 server's Protobuf unmarsh |
| CVE-2026-29783 | Analyzed | 未確認 | CWE-78 | The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns. An attacker w |
| CVE-2026-29784 | Analyzed | 未確認 | CWE-352 | Ghost is a Node.js content management system. From version 5.101.6 to 6.19.2, incomplete CSRF protections around /session/verify made it possible to use OTCs in login sessions diff |
| CVE-2026-29785 | Modified | 未確認 | CWE-409, CWE-476 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.14 and 2.12.5, if the nats-server has the "leafnode" configur |
| CVE-2026-29786 | Modified | 未確認 | CWE-22, CWE-59 | node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-rela |
| CVE-2026-29787 | Analyzed | 未確認 | CWE-200 | mcp-memory-service is an open-source memory backend for multi-agent systems. Prior to version 10.21.0, the /api/health/detailed endpoint returns detailed system information includi |
| CVE-2026-29788 | Analyzed | 未確認 | CWE-1287, CWE-283 | TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 30, co |
| CVE-2026-29789 | Analyzed | 未確認 | CWE-862 | Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers. Prior to version 3.20.3, a missing authorization check in workf |
| CVE-2026-29790 | Analyzed | 未確認 | CWE-22 | dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path traversal vulnerability exists in dbt-common's s |
| CVE-2026-29791 | Analyzed | 未確認 | CWE-20 | Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call r |
| CVE-2026-29792 | Analyzed | 未確認 | CWE-287 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, an unauthenticated attacker can send a crafte |
| CVE-2026-29793 | Analyzed | 未確認 | CWE-943 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, Socket.IO clients can send arbitrary JavaScr |
| CVE-2026-29794 | Analyzed | 未確認 | CWE-807 | Vikunja is an open-source self-hosted task management platform. Starting in version 0.8 and prior to version 2.2.0, unauthenticated users are able to bypass the application's built |
| CVE-2026-29795 | Analyzed | 未確認 | CWE-770 | stellar-xdr is a library and CLI containing types and functionality for working with Stellar XDR. Prior to version 25.0.1, StringM::from_str does not validate that the input length |
| CVE-2026-29796 | Analyzed | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthentica |
| CVE-2026-29828 | Analyzed | 未確認 | CWE-79 | DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc. |
| CVE-2026-29839 | Analyzed | 未確認 | CWE-352 | DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php. |
| CVE-2026-29840 | Analyzed | 未確認 | CWE-79 | JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php. The application attempts to sani |
| CVE-2026-29856 | Analyzed | 未確認 | CWE-400 | An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service (ReDoS) via a crafted input. |
| CVE-2026-29858 | Analyzed | 未確認 | CWE-98 | A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensitive information exposure. |
| CVE-2026-29859 | Modified | 未確認 | CWE-434, CWE-79 | An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file. |
| CVE-2026-2987 | Deferred | 未確認 | CWE-79 | The Simple Ajax Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'c' parameter in versions up to, and including, 20260217 due to insufficient input sa |
| CVE-2026-29870 | Awaiting Analysis | 未確認 | CWE-22 | A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows arbitrary file writes via the checkpoint_dir parameter in OfflineACE.run. The |
| CVE-2026-29871 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19) in the Beifong AI News and Podcast Agent backe |
| CVE-2026-29872 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-522 | A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19). The affected Streamlit- |
| CVE-2026-29905 | Analyzed | 未確認 | CWE-20, CWE-252 | Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service (DoS) via a malformed image upload. The application fails to |
| CVE-2026-29909 | Analyzed | 未確認 | CWE-20, CWE-425 | MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and prope |
| CVE-2026-2991 | Deferred | 未確認 | CWE-287 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.1.2. This is due to the |
| CVE-2026-2992 | Deferred | 未確認 | CWE-862 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the `/wp-json/kivicare/v1/setup-w |
| CVE-2026-29924 | Analyzed | 未確認 | CWE-611 | Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager plugin. |
| CVE-2026-29925 | Analyzed | 未確認 | CWE-918 | Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php. |
| CVE-2026-29933 | Analyzed | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user's |
| CVE-2026-29934 | Modified | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of the user's br |
| CVE-2026-2994 | Analyzed | 未確認 | CWE-352 | Concrete CMS below version 9.4.8 is subject to CSRF by a Rogue Administrator using the Anti-Spam Allowlist Group Configuration via group_id parameter which can leads to a security |
| CVE-2026-2995 | Analyzed | 未確認 | CWE-79, CWE-80 | GitLab has remediated an issue in GitLab EE affecting all versions from 15.4 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated us |
| CVE-2026-29953 | Analyzed | 未確認 | CWE-89 | SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go. |
| CVE-2026-29954 | Analyzed | 未確認 | CWE-88, CWE-918 | In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of ResourceComposition resources. The field |
| CVE-2026-29969 | Analyzed | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in the wff_cols_pref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the u |
| CVE-2026-29976 | Analyzed | 未確認 | CWE-120 | Buffer Overflow vulnerability in ZerBea hcxpcapngtool v. 7.0.1-43-g2ee308e allows a local attacker to obtain sensitive information via the getradiotapfield() function |
| CVE-2026-2999 | Analyzed | 未確認 | CWE-494 | IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary ex |
| CVE-2026-3000 | Analyzed | 未確認 | CWE-494 | IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary DL |
| CVE-2026-30006 | Analyzed | 未確認 | CWE-120 | XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file. |
| CVE-2026-30007 | Analyzed | 未確認 | CWE-416 | XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file |
| CVE-2026-3003 | Deferred | 未確認 | CWE-79 | The Vagaro Booking Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘vagaro_code’ parameter in all versions up to, and including, 0.3 due to insuffi |
| CVE-2026-30048 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered |
| CVE-2026-30077 | Analyzed | 未確認 | CWE-20 | OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. Not all decode failures result in a crash. But the crash is consistent for particular inputs. An example in |
| CVE-2026-30082 | Deferred | 未確認 | CWE-79 | Multiple stored cross-site scripting (XSS) vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary w |
| CVE-2026-3009 | Modified | 未確認 | CWE-863 | A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an Identity Provider (IdP) even after it has been disabled by |
| CVE-2026-3013 | Deferred | 未確認 | CWE-22 | Coppermine Photo Gallery in versions 1.6.09 through 1.6.27 is vulnerable to path traversal. Unauthenticated remote attacker is able to exploit a vulnerable endpoint and construct p |
| CVE-2026-30140 | Analyzed | 未確認 | CWE-284 | An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg endpoint to download t |
| CVE-2026-30162 | Analyzed | 未確認 | CWE-79 | Cross Site Scripting (xss) vulnerability in Timo 2.0.3 via crafted links in the title field. |
| CVE-2026-3020 | Deferred | 未確認 | CWE-639 | Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email address, valid |
| CVE-2026-3021 | Analyzed | 未確認 | CWE-89, CWE-943 | Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'. This vulnerability could a |
| CVE-2026-3022 | Analyzed | 未確認 | CWE-89, CWE-943 | Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'. |
| CVE-2026-30223 | Analyzed | 未確認 | CWE-287, CWE-345 | OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, when JWT authentication is configured using either "authJwtPubKeyPath" (local R |
| CVE-2026-30224 | Analyzed | 未確認 | CWE-384, CWE-613 | OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, OliveTin does not revoke server-side sessions when a user logs out. Although th |
| CVE-2026-30225 | Analyzed | 未確認 | CWE-250, CWE-441 | OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low |
| CVE-2026-30226 | Analyzed | 未確認 | CWE-1321 | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In devalue v5.6.3 and earlier, devalue.parse and devalu |
| CVE-2026-30227 | Analyzed | 未確認 | CWE-93 | MimeKit is a C# library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension (MIME), as defined by numerous IETF specifications |
| CVE-2026-30228 | Analyzed | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.5 and 9.5.0-alpha.3, the readOnlyMasterKey can be used |
| CVE-2026-30229 | Analyzed | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.6 and 9.5.0-alpha.4, the readOnlyMasterKey can call PO |
| CVE-2026-3023 | Analyzed | 未確認 | CWE-89, CWE-943 | Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an |
| CVE-2026-30230 | Analyzed | 未確認 | CWE-639 | Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to version 1.7.2, the thumbnail endpoint does not validate the password f |
| CVE-2026-30231 | Analyzed | 未確認 | CWE-639 | Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to version 1.7.2, the raw and direct file routes only block unauthenticat |
| CVE-2026-30233 | Analyzed | 未確認 | CWE-200, CWE-862 | OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authorization flaw in OliveTin allows authenticated users with view: false p |
| CVE-2026-30234 | Analyzed | 未確認 | CWE-22 | OpenProject is an open-source, web-based project management software. Prior to 17.2.0, an authenticated project member with BCF import permissions can upload a crafted .bcf archive |
| CVE-2026-30235 | Analyzed | 未確認 | CWE-79 | OpenProject is an open-source, web-based project management software. Prior to 17.2.0, this vulnerability occurs due to improper validation of OpenProject’s Markdown rendering, spe |
| CVE-2026-30236 | Analyzed | 未確認 | CWE-863 | OpenProject is an open-source, web-based project management software. Prior to 17.2.0, when editing a project budget and planning the labor cost, it was not checked that the user t |
| CVE-2026-30237 | Analyzed | 未確認 | CWE-79 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.155, 25.0.88, and 26.0.10, there is a reflected XSS vulnerability in the Gr |
| CVE-2026-30238 | Analyzed | 未確認 | CWE-79 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.155, 25.0.88, and 26.0.10, there is a reflected XSS vulnerability in GroupO |
| CVE-2026-30239 | Analyzed | 未確認 | CWE-863 | OpenProject is an open-source, web-based project management software. Prior to 17.2.0, when budgets are deleted, the work packages that were assigned to this budget need to be move |
| CVE-2026-3024 | Analyzed | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/configuracion/agenda/modelo-formulario-evento'. A user |
| CVE-2026-30240 | Analyzed | 未確認 | CWE-22, CWE-73 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.31.5 and earlier, a path traversal vulnerability in the PWA (Progressive Web App) ZIP |
| CVE-2026-30241 | Analyzed | 未確認 | CWE-863 | Mercurius is a GraphQL adapter for Fastify. Prior to version 16.8.0, Mercurius fails to enforce the configured queryDepth limit on GraphQL subscription queries received over WebSoc |
| CVE-2026-30242 | Analyzed | 未確認 | CWE-918 | Plane is an an open-source project management tool. Prior to version 1.2.3, the webhook URL validation in plane/app/serializers/webhook.py only checks ip.is_loopback, allowing atta |
| CVE-2026-30244 | Analyzed | 未確認 | CWE-200, CWE-284 | Plane is an an open-source project management tool. Prior to version 1.2.2, unauthenticated attackers can enumerate workspace members and extract sensitive information including em |
| CVE-2026-30247 | Analyzed | 未確認 | CWE-918 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, the application's "Import document via URL" feature is |
| CVE-2026-30276 | Analyzed | 未確認 | CWE-73 | An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitra |
| CVE-2026-30277 | Modified | 未確認 | CWE-22 | An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical internal files via the file import process, |
| CVE-2026-30278 | Modified | 未確認 | CWE-22 | An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arb |
| CVE-2026-30279 | Modified | 未確認 | CWE-22 | An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows attackers to overwrite critical internal files via the file import process, le |
| CVE-2026-30280 | Analyzed | 未確認 | CWE-434 | An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to overwrite critical internal files via the |
| CVE-2026-30281 | Analyzed | 未確認 | CWE-73 | An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execu |
| CVE-2026-30282 | Modified | 未確認 | CWE-22, CWE-73 | An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical internal files via the file import process, lead |
| CVE-2026-30283 | Modified | 未確認 | CWE-22 | An arbitrary file overwrite vulnerability in PEAKSEL D.O.O. NIS Animal Sounds and Ringtones v1.3.0 allows attackers to overwrite critical internal files via the file import process |
| CVE-2026-30284 | Modified | 未確認 | CWE-73 | An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrar |
| CVE-2026-30285 | Analyzed | 未確認 | CWE-22 | An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to ar |
| CVE-2026-30286 | Analyzed | 未確認 | CWE-22 | An arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows attackers to overwrite critical internal files via the file import process, leading |
| CVE-2026-3029 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5. |
| CVE-2026-30290 | Analyzed | 未確認 | CWE-22 | An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process, leading to |
| CVE-2026-30302 | Analyzed | 未確認 | CWE-78 | The command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective. The vulnerability stems f |
| CVE-2026-30303 | Analyzed | 未確認 | CWE-78 | The command auto-approval module in Axon Code contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective. The vulnerability stems from t |
| CVE-2026-30304 | Analyzed | 未確認 | CWE-20 | In its design for automatic terminal command execution, AI Code offers two options: Execute safe commands and execute all commands. The description for the former states that comma |
| CVE-2026-30305 | Analyzed | 未確認 | CWE-94 | Syntx's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies |
| CVE-2026-30306 | Analyzed | 未確認 | CWE-94 | In its design for automatic terminal command execution, SakaDev offers two options: Execute safe commands and execute all commands. The description for the former states that comma |
| CVE-2026-30307 | Analyzed | 未確認 | CWE-94 | Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system reli |
| CVE-2026-30308 | Analyzed | 未確認 | CWE-94 | In its design for automatic terminal command execution, HAI Build Code Generator offers two options: Execute safe commands and Execute all commands. The description for the former |
| CVE-2026-30309 | Analyzed | 未確認 | CWE-78 | InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism completely ineffective. The predefined bl |
| CVE-2026-30310 | Awaiting Analysis | 未確認 | CWE-77 | In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands. The description for the former states that command |
| CVE-2026-30311 | Analyzed | 未確認 | CWE-78 | Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system r |
| CVE-2026-30312 | Awaiting Analysis | 未確認 | CWE-78 | DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system re |
| CVE-2026-30313 | Analyzed | 未確認 | CWE-94 | DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system re |
| CVE-2026-30314 | Analyzed | 未確認 | CWE-78 | Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system r |
| CVE-2026-3034 | Deferred | 未確認 | CWE-79 | The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _ob_spacerat_link, _ob_bbad_link, and _ob_teleporter_link URL parameter |
| CVE-2026-30345 | Deferred | 未確認 | CWE-23 | A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitrary files outside the intended directories via supplying a cr |
| CVE-2026-3038 | Analyzed | 未確認 | CWE-787 | The rtsock_msg_buffer() function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddr_storage structure on the stack. It |
| CVE-2026-30402 | Analyzed | 未確認 | CWE-94 | An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code via the test connection function |
| CVE-2026-30403 | Analyzed | 未確認 | CWE-22 | There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the |
| CVE-2026-30404 | Analyzed | 未確認 | CWE-918 | The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server sen |
| CVE-2026-30405 | Analyzed | 未確認 | CWE-400 | An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute |
| CVE-2026-30407 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-3045 | Deferred | 未確認 | CWE-862 | The Appointment Booking Calendar — Simply Schedule Appointments plugin for WordPress is vulnerable to unauthorized access of sensitive data in all versions up to and including 1.6. |
| CVE-2026-30457 | Modified | 未確認 | CWE-94 | An issue in the /parser/dwoo component of Daylight Studio FuelCMS v1.5.2 allows attackers to execute arbitrary code via crafted PHP code. |
| CVE-2026-30458 | Modified | 未確認 | CWE-620 | An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack. |
| CVE-2026-30463 | Modified | 未確認 | CWE-89 | Daylight Studio FuelCMS v1.5.2 was discovered to contain a SQL injection vulnerability via the /controllers/Login.php component. |
| CVE-2026-3047 | Modified | 未確認 | CWE-305 | A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language (SAML) client is configured as an Identity Provider (IdP)-initiated broker landing |
| CVE-2026-30520 | Modified | 未確認 | CWE-89 | A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file (specifically the save_loan action). The |
| CVE-2026-30521 | Modified | 未確認 | CWE-602 | A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Pl |
| CVE-2026-30527 | Modified | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The applicatio |
| CVE-2026-30529 | Analyzed | 未確認 | CWE-89 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action). The application fails to proper |
| CVE-2026-30530 | Analyzed | 未確認 | CWE-89 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action). The application fails to pr |
| CVE-2026-30531 | Analyzed | 未確認 | CWE-89 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action). The application fails to pr |
| CVE-2026-30532 | Analyzed | 未確認 | CWE-89 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter. |
| CVE-2026-30533 | Analyzed | 未確認 | CWE-89 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter. |
| CVE-2026-30534 | Analyzed | 未確認 | CWE-89 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter. |
| CVE-2026-3055 | Analyzed | 掲載 | CWE-125 | Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread |
| CVE-2026-30556 | Analyzed | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" param |
| CVE-2026-30557 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_category.php file via the "msg |
| CVE-2026-30558 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_customer.php file via the "msg |
| CVE-2026-30559 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_sales.php file via the "msg" p |
| CVE-2026-3056 | Deferred | 未確認 | CWE-862 | The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `seraph_accel_api` AJAX action with `fn |
| CVE-2026-30560 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_supplier.php file via the "msg |
| CVE-2026-30561 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_purchase.php file via the "msg |
| CVE-2026-30562 | Analyzed | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_stock.php file via the "msg" p |
| CVE-2026-30563 | Analyzed | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the update_details.php file. The applicat |
| CVE-2026-30564 | Analyzed | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_payments.php file via the "li |
| CVE-2026-30565 | Analyzed | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_supplier.php file via the "li |
| CVE-2026-30566 | Analyzed | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_customers.php file via the "l |
| CVE-2026-30567 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_product.php file via the "limit" parameter. The application |
| CVE-2026-30568 | Analyzed | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in in the view_purchase.php file via the "limit" parameter. The applica |
| CVE-2026-30569 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_stock_availability.php file v |
| CVE-2026-30570 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_sales.php file via the "limit" parameter. The application f |
| CVE-2026-30571 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_category.php file via the "limit" parameter. The applicatio |
| CVE-2026-30574 | Analyzed | 未確認 | CWE-841 | A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file. The application fails to verify if the requested sales qua |
| CVE-2026-30575 | Analyzed | 未確認 | CWE-1284, CWE-20 | A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtqty" parameter d |
| CVE-2026-30576 | Analyzed | 未確認 | CWE-20 | A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtprice" and "txtt |
| CVE-2026-30578 | Analyzed | 未確認 | CWE-79 | File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS). A malicious user can leverage the "dir" parameter of the GET request to invoke arbitrary javascript code. |
| CVE-2026-30579 | Analyzed | 未確認 | CWE-79 | File Thingie 2.5.7 is vulnerable to Cross Site Scripting (XSS). A malicious user can leverage the "upload file" functionality to upload a file with a crafted file name used to trig |
| CVE-2026-3058 | Analyzed | 未確認 | CWE-200 | The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the `seraph_accel_api` AJAX actio |
| CVE-2026-30580 | Analyzed | 未確認 | CWE-22 | File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary files on the |
| CVE-2026-30587 | Modified | 未確認 | CWE-79 | Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc (sdoc) |
| CVE-2026-3059 | Modified | 未確認 | CWE-502 | SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without |
| CVE-2026-3060 | Modified | 未確認 | CWE-502 | SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pic |
| CVE-2026-30637 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before. The vulnerability allows remote attackers to craft HT |
| CVE-2026-30653 | Modified | 未確認 | CWE-400 | An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMF |
| CVE-2026-30655 | Analyzed | 未確認 | CWE-89 | SQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows unauthenticated remote attackers to gain unauthorized access to sensitive information v |
| CVE-2026-30661 | Analyzed | 未確認 | CWE-79 | iCMS v8.0.0 contains a Cross-Site Scripting (XSS) vulnerability in the User Management component, specifically within the index.html file. This allows remote attackers to execute a |
| CVE-2026-30662 | Modified | 未確認 | CWE-400 | ConcreteCMS v9.4.7 contains a Denial of Service (DoS) vulnerability in the File Manager component. The 'download' method in 'concrete/controllers/backend/file.php' improperly manag |
| CVE-2026-30689 | Modified | 未確認 | CWE-284, CWE-863 | In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive adm |
| CVE-2026-30694 | Analyzed | 未確認 | CWE-94 | An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component |
| CVE-2026-30695 | Deferred | 未確認 | CWE-79 | A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-d |
| CVE-2026-30701 | Awaiting Analysis | 未確認 | CWE-798 | The web interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) contains hardcoded credential disclosure mechanisms (in the form of Server Side Include) within mult |
| CVE-2026-30702 | Awaiting Analysis | 未確認 | CWE-285 | The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface. The login page does not properly enforce se |
| CVE-2026-30703 | Awaiting Analysis | 未確認 | CWE-78 | A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02). The adm.cgi endpoint improperly sanitizes us |
| CVE-2026-30704 | Awaiting Analysis | 未確認 | CWE-912 | The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hardware pads on the PCB |
| CVE-2026-30707 | Deferred | 未確認 | CWE-284 | An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated |
| CVE-2026-30711 | Deferred | 未確認 | CWE-89 | Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent. |
| CVE-2026-3072 | Deferred | 未確認 | CWE-862 | The Media Library Assistant plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mla_update_compat_fields_action() funct |
| CVE-2026-30741 | Analyzed | 未確認 | CWE-94 | A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack. |
| CVE-2026-3076 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-2363. Reason: This candidate is a reservation duplicate of CVE-2026-2363. Notes: All CVE users | |
| CVE-2026-30777 | Analyzed | 未確認 | CWE-288 | EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be ab |
| CVE-2026-30783 | Modified | 未確認 | CWE-602, CWE-841 | A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config management modules) al |
| CVE-2026-30784 | Rejected | 未確認 | Rejected reason: This CVE ID has been withdrawn by its CVE Numbering Authority. | |
| CVE-2026-30785 | Analyzed | 未確認 | CWE-1321, CWE-257, CWE-323, CWE-916 | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-cli |
| CVE-2026-30789 | Modified | 未確認 | CWE-916 | Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts vulnerability in rustdesk-client RustDesk Client rustdesk-cli |
| CVE-2026-3079 | Deferred | 未確認 | CWE-89 | The LearnDash LMS plugin for WordPress is vulnerable to blind time-based SQL Injection via the 'filters[orderby_order]' parameter in the 'learndash_propanel_template' AJAX action i |
| CVE-2026-30790 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-30791 | Analyzed | 未確認 | CWE-327, CWE-684 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Config import, |
| CVE-2026-30792 | Modified | 未確認 | CWE-345 | A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) |
| CVE-2026-30793 | Analyzed | 未確認 | CWE-285, CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, FFI bridge mo |
| CVE-2026-30794 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-30795 | Analyzed | 未確認 | CWE-319 | Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop modules |
| CVE-2026-30796 | Modified | 未確認 | CWE-522 | Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS |
| CVE-2026-30797 | Analyzed | 未確認 | CWE-749, CWE-862 | Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, config import modules) al |
| CVE-2026-30798 | Modified | 未確認 | CWE-345, CWE-755 | Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linu |
| CVE-2026-3081 | Modified | 未確認 | CWE-120, CWE-121 | GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta |
| CVE-2026-3082 | Modified | 未確認 | CWE-120, CWE-122 | GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-30820 | Analyzed | 未確認 | CWE-863 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, Flowise trusts any HTTP client that sets the header x-request-from |
| CVE-2026-30821 | Analyzed | 未確認 | CWE-434 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the /api/v1/attachments/:chatflowId/:chatId endpoint is listed in |
| CVE-2026-30822 | Analyzed | 未確認 | CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, unauthenticated users can inject arbitrary values into internal da |
| CVE-2026-30823 | Analyzed | 未確認 | CWE-639, CWE-862 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and en |
| CVE-2026-30824 | Analyzed | 未確認 | CWE-306 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the |
| CVE-2026-30825 | Analyzed | 未確認 | CWE-639 | hoppscotch is an open source API development ecosystem. Prior to version 2026.2.1, the DELETE /v1/access-tokens/revoke endpoint allows any authenticated user to delete any other us |
| CVE-2026-30827 | Analyzed | 未確認 | CWE-770 | express-rate-limit is a basic rate-limiting middleware for Express. In versions starting from 8.0.0 and prior to versions 8.0.2, 8.1.1, 8.2.2, and 8.3.0, the default keyGenerator i |
| CVE-2026-30828 | Analyzed | 未確認 | CWE-22, CWE-29, CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, the url parameter can be used to retrieve local system files. This issue has been pat |
| CVE-2026-30829 | Analyzed | 未確認 | CWE-200 | Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior |
| CVE-2026-3083 | Modified | 未確認 | CWE-129, CWE-787 | GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GS |
| CVE-2026-30830 | Analyzed | 未確認 | CWE-79 | Defuddle cleans up HTML pages. Prior to version 0.9.0, the _findContentBySchemaText method in src/defuddle.ts interpolates image src and alt attributes directly into an HTML string |
| CVE-2026-30831 | Analyzed | 未確認 | CWE-287, CWE-304 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to versions 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1, and 8.2.0, authentication vulnera |
| CVE-2026-30832 | Analyzed | 未確認 | CWE-918 | Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.4, an authenticated SSH user can force the server to make HTTP requests to |
| CVE-2026-30833 | Analyzed | 未確認 | CWE-943 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to versions 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1, and 8.2.0, a NoSQL injection vuln |
| CVE-2026-30834 | Analyzed | 未確認 | CWE-918 | PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Prior to version 0.7.7, a Server-Side Request Forgery (SSRF) vulnerability in the /d |
| CVE-2026-30835 | Analyzed | 未確認 | CWE-209 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.7 and 9.5.0-alpha.6, malformed $regex query parameter |
| CVE-2026-30836 | Analyzed | 未確認 | CWE-287, CWE-295 | Step CA is an online certificate authority for secure, automated certificate management for DevOps. Versions 0.30.0-rc6 and below do not safeguard against unauthenticated certifica |
| CVE-2026-30837 | Analyzed | 未確認 | CWE-1333 | Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Prior to 1.4.26 , t.String({ format: 'url' }) is vul |
| CVE-2026-30838 | Analyzed | 未確認 | CWE-79 | league/commonmark is a PHP Markdown parser. Prior to version 2.8.1, the DisallowedRawHtml extension can be bypassed by inserting a newline, tab, or other ASCII whitespace character |
| CVE-2026-30839 | Analyzed | 未確認 | CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, testwebhooknotifications.php does not validate the target URL against private/reserve |
| CVE-2026-3084 | Modified | 未確認 | CWE-191 | GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations o |
| CVE-2026-30840 | Analyzed | 未確認 | CWE-295, CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, there is a server-side request forgery vulnerability in notification testers. This is |
| CVE-2026-30841 | Analyzed | 未確認 | CWE-79 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, passwordreset.php outputs $_GET["token"] and $_GET["email"] directly into HTML input |
| CVE-2026-30842 | Analyzed | 未確認 | CWE-862 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, Wallos allows an authenticated user to delete avatar files uploaded by other users. T |
| CVE-2026-30843 | Analyzed | 未確認 | CWE-639 | Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 have a critical Insecure Direct Object Reference (IDOR) issue which could allow unauthorized users to |
| CVE-2026-30844 | Analyzed | 未確認 | CWE-918 | Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 are vulnerable to Server-Side Request Forgery (SSRF) via attachment URL loading. During board import i |
| CVE-2026-30845 | Analyzed | 未確認 | CWE-200, CWE-862 | Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the board composite publication in Wekan publishes all integration data for a board without |
| CVE-2026-30846 | Analyzed | 未確認 | CWE-200, CWE-306 | Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the globalwebhooks publication exposes all global webhook integrations—including sensitive u |
| CVE-2026-30847 | Analyzed | 未確認 | CWE-200, CWE-285 | Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the notificationUsers publication in Wekan publishes user documents with no field filtering, |
| CVE-2026-30848 | Analyzed | 未確認 | CWE-22 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.8 and 9.5.0-alpha.8, the PagesRouter static file servi |
| CVE-2026-30849 | Analyzed | 未確認 | CWE-305 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on MySQL family databases are affected by an authentication bypass vulnerability in |
| CVE-2026-3085 | Modified | 未確認 | CWE-122, CWE-1284 | GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation |
| CVE-2026-30850 | Analyzed | 未確認 | CWE-862 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.9 and 9.5.0-alpha.9, the file metadata endpoint (GET / |
| CVE-2026-30851 | Analyzed | 未確認 | CWE-287, CWE-345 | Caddy is an extensible server platform that uses TLS by default. From version 2.10.0 to before version 2.11.2, forward_auth copy_headers does not strip client-supplied headers, all |
| CVE-2026-30852 | Analyzed | 未確認 | CWE-200, CWE-74 | Caddy is an extensible server platform that uses TLS by default. From version 2.7.5 to before version 2.11.2, the vars_regexp matcher in vars.go:337 double-expands user-controlled |
| CVE-2026-30853 | Analyzed | 未確認 | CWE-22 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to 9.5.0, a path traversal vulnerability in the RocketBook (.rb) input pl |
| CVE-2026-30854 | Analyzed | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.3.1-alpha.3 to before version 9.5.0-alpha.10, when graphQLPub |
| CVE-2026-30855 | Analyzed | 未確認 | CWE-284 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints |
| CVE-2026-30856 | Analyzed | 未確認 | CWE-706 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a vulnerability involving tool name collision and indi |
| CVE-2026-30857 | Analyzed | 未確認 | CWE-639 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a cross-tenant authorization bypass in the knowledge ba |
| CVE-2026-30858 | Analyzed | 未確認 | CWE-918 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a DNS rebinding vulnerability in the web_fetch tool all |
| CVE-2026-30859 | Analyzed | 未確認 | CWE-284 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database |
| CVE-2026-3086 | Modified | 未確認 | CWE-787 | GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-30860 | Analyzed | 未確認 | CWE-89 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution (RCE) vulnerability exists in |
| CVE-2026-30861 | Analyzed | 未確認 | CWE-78 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. From version 0.2.5 to before version 0.2.10, an unauthenticated remote code exe |
| CVE-2026-30862 | Analyzed | 未確認 | CWE-79 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.96, a Critical Stored XSS vulnerability exists in the Table Widget (TableWidgetV2). The roo |
| CVE-2026-30863 | Analyzed | 未確認 | CWE-287, CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.10 and 9.5.0-alpha.11, the Google, Apple, and Facebook |
| CVE-2026-30868 | Analyzed | 未確認 | CWE-352 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform state‑changing operations but are accessible via HTTP GET re |
| CVE-2026-30869 | Analyzed | 未確認 | CWE-22 | SiYuan is a personal knowledge management system. Prior to 3.5.10, a path traversal vulnerability in the /export endpoint allows an attacker to read arbitrary files from the server |
| CVE-2026-30870 | Deferred | 未確認 | CWE-285 | PowerSync Service is the server-side component of the PowerSync sync engine. In version 1.20.0, when using new sync streams with config.edition: 3, certain subquery filters were ig |
| CVE-2026-30871 | Analyzed | 未確認 | CWE-121 | OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to 24.10.6 and 25.12.1, the mdns daemon has a Stack-based Buffer Overflow vulnerability in |
| CVE-2026-30872 | Analyzed | 未確認 | CWE-121 | OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to 24.10.6 and 25.12.1, the mdns daemon has a Stack-based Buffer Overflow vulnerability in |
| CVE-2026-30873 | Analyzed | 未確認 | CWE-401 | OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to both 24.10.6 and 25.12.1, the jp_get_token function, which performs lexical analysis by |
| CVE-2026-30874 | Analyzed | 未確認 | CWE-187, CWE-269, CWE-74 | OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to 24.10.6, a vulnerability in the hotplug_call function allows an attacker to bypass envi |
| CVE-2026-30875 | Analyzed | 未確認 | CWE-94 | Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role |
| CVE-2026-30876 | Analyzed | 未確認 | CWE-204 | Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This issue has been patched in version |
| CVE-2026-30877 | Analyzed | 未確認 | CWE-78 | baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due to this issue, an authenticated |
| CVE-2026-30878 | Analyzed | 未確認 | CWE-285 | baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mail form entries even when the correspondi |
| CVE-2026-30879 | Analyzed | 未確認 | CWE-79 | baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has been patched in version 5.2.3. |
| CVE-2026-30880 | Analyzed | 未確認 | CWE-78 | baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue has been patched in version 5.2 |
| CVE-2026-30881 | Analyzed | 未確認 | CWE-89 | Chamilo LMS is a learning management system. Version 1.11.34 and prior contains a SQL Injection vulnerability in the statistics AJAX endpoint. The parameters date_start and date_en |
| CVE-2026-30882 | Analyzed | 未確認 | CWE-79 | Chamilo LMS is a learning management system. Chamilo LMS version 1.11.34 and prior contains a Reflected Cross-Site Scripting (XSS) vulnerability in the session category listing pag |
| CVE-2026-30883 | Analyzed | 未確認 | CWE-119 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could resu |
| CVE-2026-30884 | Deferred | 未確認 | CWE-639 | mdjnelson/moodle-mod_customcert is a Moodle plugin for creating dynamically generated certificates with complete customization via the web browser. Prior to versions 4.4.9 and 5.0. |
| CVE-2026-30885 | Analyzed | 未確認 | CWE-306, CWE-639, CWE-862 | WWBN AVideo is an open source video platform. Prior to 25.0, the /objects/playlistsFromUser.json.php endpoint returns all playlists for any user without requiring authentication or |
| CVE-2026-30886 | Analyzed | 未確認 | CWE-639 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.11.4-alpha.2, an Insecure Direct Object Reference (IDOR) |
| CVE-2026-30887 | Analyzed | 未確認 | CWE-94 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.18, OneUptime allows project members to run custom Playwright/JavaScript code via Synthetic Monit |
| CVE-2026-30888 | Analyzed | 未確認 | CWE-269 | Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 allow a moderator to edit site policy documents (ToS, guidelines, priva |
| CVE-2026-30889 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a moderator could exploit insufficient authorization checks to access |
| CVE-2026-3089 | Analyzed | 未確認 | CWE-22 | Actual Sync Server allows authenticated users to upload files through POST /sync/upload-user-file. In versions prior to 26.3.0, improper validation of the user-controlled x-actual- |
| CVE-2026-30891 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a user could access another user's private activity due to insufficien |
| CVE-2026-30892 | Analyzed | 未確認 | CWE-269 | crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is inte |
| CVE-2026-30896 | Analyzed | 未確認 | CWE-427 | The installer for Qsee Client versions 1.0.1 and prior insecurely load Dynamic Link Libraries (DLLs). When a user is directed to place some malicious DLL to the same directory and |
| CVE-2026-30897 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiW |
| CVE-2026-3090 | Deferred | 未確認 | CWE-79 | The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting |
| CVE-2026-30900 | Analyzed | 未確認 | CWE-754 | Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access |
| CVE-2026-30901 | Analyzed | 未確認 | CWE-20 | Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access. |
| CVE-2026-30902 | Analyzed | 未確認 | CWE-269 | Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access. |
| CVE-2026-30903 | Analyzed | 未確認 | CWE-610, CWE-73 | External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via net |
| CVE-2026-30909 | Analyzed | 未確認 | CWE-190 | Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcm_encrypt_afternm and seal functions do not check that output size w |
| CVE-2026-30910 | Modified | 未確認 | CWE-190 | Crypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflows. Combined aead encryption, combined signature creation, and bin2hex functions do not check tha |
| CVE-2026-30911 | Analyzed | 未確認 | CWE-862 | Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated task instanc |
| CVE-2026-30913 | Deferred | 未確認 | CWE-79 | Flarum is open-source forum software. When the flarum/nicknames extension is enabled, a registered user can set their nickname to a string that email clients interpret as a hyperli |
| CVE-2026-30914 | Analyzed | 未確認 | CWE-22 | SFTPGo is an open source, event-driven file transfer solution. In SFTPGo versions prior to 2.7.1, a path normalization discrepancy between the protocol handlers and the internal Vi |
| CVE-2026-30915 | Analyzed | 未確認 | CWE-22 | SFTPGo is an open source, event-driven file transfer solution. SFTPGo versions before v2.7.1 contain an input validation issue in the handling of dynamic group paths, for example, |
| CVE-2026-30916 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: Further investigation determined that the software behavior described did not falls within the project's thr | |
| CVE-2026-30917 | Deferred | 未確認 | CWE-79 | Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be inserted into any Bucket table field that has a PAGE type, wh |
| CVE-2026-30918 | Analyzed | 未確認 | CWE-79 | facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , a reflected XSS occurs when an application receives data from an untrusted source and |
| CVE-2026-30919 | Analyzed | 未確認 | CWE-79 | facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , stored XSS (also known as persistent or second-order XSS) occurs when an application |
| CVE-2026-30920 | Analyzed | 未確認 | CWE-345, CWE-639, CWE-862 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.19, OneUptime's GitHub App callback trusts attacker-controlled state and installation_id values a |
| CVE-2026-30921 | Analyzed | 未確認 | CWE-749 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.20, OneUptime Synthetic Monitors allow low-privileged project users to submit custom Playwright c |
| CVE-2026-30922 | Modified | 未確認 | CWE-674, CWE-835 | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding |
| CVE-2026-30924 | Analyzed | 未確認 | CWE-942 | qui is a web interface for managing qBittorrent instances. Versions 1.14.1 and below use a permissive CORS policy that reflects arbitrary origins while also returning Access-Contro |
| CVE-2026-30925 | Analyzed | 未確認 | CWE-1333 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.0-alpha.14 and 8.6.11, a malicious client can subscribe to a Li |
| CVE-2026-30926 | Analyzed | 未確認 | CWE-284, CWE-862 | SiYuan is a personal knowledge management system. Prior to 3.5.10, a privilege escalation vulnerability exists in the publish service of SiYuan Note that allows low-privilege publi |
| CVE-2026-30927 | Analyzed | 未確認 | CWE-639 | Admidio is an open-source user management solution. Prior to 5.0.6, in modules/events/events_function.php, the event participation logic allows any user who can participate in an e |
| CVE-2026-30928 | Analyzed | 未確認 | CWE-200 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, the /api/4/config REST API endpoint returns the entire parsed Glances configuration file (glances.c |
| CVE-2026-30929 | Analyzed | 未確認 | CWE-121, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MagnifyImage uses a fixed-size stack buffer |
| CVE-2026-30930 | Analyzed | 未確認 | CWE-89 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export module constructs SQL queries using string concatenation with unsanitized sy |
| CVE-2026-30931 | Analyzed | 未確認 | CWE-122 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, a heap-based buffer overflow in the UHDR encoder can happ |
| CVE-2026-30932 | Analyzed | 未確認 | CWE-74 | Froxlor is open source server administration software. Prior to version 2.3.5, the DomainZones.add API endpoint (accessible to customers with DNS enabled) does not validate the con |
| CVE-2026-30933 | Analyzed | 未確認 | CWE-200, CWE-306, CWE-602 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, the remediation for CVE-2026-27611 is incomplete. Password protected share |
| CVE-2026-30934 | Analyzed | 未確認 | CWE-79 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, Stored XSS is possible via share metadata fields (e.g., title, description |
| CVE-2026-30935 | Analyzed | 未確認 | CWE-125, CWE-190 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, BilateralBlurImage contains a heap buffer over-read cause |
| CVE-2026-30936 | Analyzed | 未確認 | CWE-122 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a crafted image could cause an out of bound |
| CVE-2026-30937 | Analyzed | 未確認 | CWE-122, CWE-190 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a 32-bit unsigned integer overflow in the X |
| CVE-2026-30938 | Analyzed | 未確認 | CWE-693 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.12 and 9.5.1-alpha.1, the requestKeywordDenylist security contr |
| CVE-2026-30939 | Analyzed | 未確認 | CWE-1321 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.13 and 9.5.1-alpha.2, an unauthenticated attacker can crash the |
| CVE-2026-3094 | Analyzed | 未確認 | CWE-787 | Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the |
| CVE-2026-30940 | Analyzed | 未確認 | CWE-22, CWE-73 | baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API (/baser/api/admin/bc-theme-file/theme_fi |
| CVE-2026-30941 | Analyzed | 未確認 | CWE-943 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.14 and 9.5.2-alpha.1, NoSQL injection vulnerability allows an u |
| CVE-2026-30942 | Analyzed | 未確認 | CWE-22 | Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to 1.7.3, an authenticated path traversal vulnerability in /api/avatars/[ |
| CVE-2026-30943 | Analyzed | 未確認 | CWE-863 | Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An insufficient authorization check in the file replace API allows a u |
| CVE-2026-30944 | Analyzed | 未確認 | CWE-639, CWE-863 | StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the /studiocms_api/dashboard/api-tokens endpoint allows any authenticated use |
| CVE-2026-30945 | Analyzed | 未確認 | CWE-639, CWE-863 | StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the DELETE /studiocms_api/dashboard/api-tokens endpoint allows any authentica |
| CVE-2026-30946 | Analyzed | 未確認 | CWE-770 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior 9.5.2-alpha.2 and 8.6.15, an unauthenticated attacker can exhaust Pars |
| CVE-2026-30947 | Analyzed | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.3 and 8.6.16, class-level permissions (CLP) are not enf |
| CVE-2026-30948 | Analyzed | 未確認 | CWE-79 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.4 and 8.6.17, a stored cross-site scripting (XSS) vulne |
| CVE-2026-30949 | Analyzed | 未確認 | CWE-287 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.5 and 8.6.18, the Keycloak authentication adapter does |
| CVE-2026-30951 | Modified | 未確認 | CWE-89 | Sequelize is a Node.js ORM tool. Prior to 6.37.8, there is SQL injection via unescaped cast type in JSON/JSONB where clause processing. The _traverseJSON() function splits JSON pat |
| CVE-2026-30952 | Analyzed | 未確認 | CWE-22 | liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.0, the layout, render, and include tags allow arbitrary file access via absolute |
| CVE-2026-30953 | Analyzed | 未確認 | CWE-918 | LinkAce is a self-hosted archive to collect website links. When a user creates a link via POST /links, the server fetches HTML metadata from the provided URL (LinkRepository::creat |
| CVE-2026-30954 | Analyzed | 未確認 | CWE-639 | LinkAce is a self-hosted archive to collect website links. In 2.1.0 and earlier, the processTaxonomy() method in LinkRepository.php allows authenticated users to attach other users |
| CVE-2026-30955 | Analyzed | 未確認 | CWE-400 | Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limi |
| CVE-2026-30956 | Analyzed | 未確認 | CWE-285, CWE-862 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, a low‑privileged user can bypass authorization and tenant isolation in OneUptime v10.0.20 and |
| CVE-2026-30957 | Analyzed | 未確認 | CWE-749 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, OneUptime Synthetic Monitors allow a low-privileged authenticated project user to execute arb |
| CVE-2026-30958 | Analyzed | 未確認 | CWE-22 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, an unauthenticated path traversal in the /workflow/docs/:componentName endpoint allows readin |
| CVE-2026-30959 | Analyzed | 未確認 | CWE-285, CWE-307, CWE-639, CWE-862 | OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a verification code resend for a |
| CVE-2026-30960 | Deferred | 未確認 | CWE-269, CWE-695, CWE-754, CWE-94 | rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical methods support and physics simulations functionalities. Th |
| CVE-2026-30961 | Analyzed | 未確認 | CWE-770 | Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, the chunked upload completion path for file requests does not validate |
| CVE-2026-30962 | Analyzed | 未確認 | CWE-284 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.6 and 8.6.19, the validation for protected fields only |
| CVE-2026-30964 | Analyzed | 未確認 | CWE-346 | web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that authentication mechanism into their web applications. Prior |
| CVE-2026-30965 | Analyzed | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.8 and 8.6.21, a vulnerability in Parse Server's query h |
| CVE-2026-30966 | Analyzed | 未確認 | CWE-284 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.7 and 8.6.20, Parse Server's internal tables, which sto |
| CVE-2026-30967 | Analyzed | 未確認 | CWE-287 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.9. and 8.6.22, the OAuth2 authentication adapter, when |
| CVE-2026-30968 | Analyzed | 未確認 | CWE-862 | Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint (/sse/v1 |
| CVE-2026-30969 | Analyzed | 未確認 | CWE-639 | Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server did not enfo |
| CVE-2026-30970 | Analyzed | 未確認 | CWE-862 | Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server allowed the |
| CVE-2026-30972 | Analyzed | 未確認 | CWE-799 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior o 9.5.2-alpha.10 and 8.6.23, Parse Server's rate limiting middleware i |
| CVE-2026-30973 | Analyzed | 未確認 | CWE-22 | Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Prior to 7.0.6, @appium/support contains a ZIP extraction imple |
| CVE-2026-30974 | Analyzed | 未確認 | CWE-79 | Copyparty is a portable file server. Prior to v1.20.11., the nohtml config option, intended to prevent execution of JavaScript in user-uploaded HTML files, did not apply to SVG ima |
| CVE-2026-30975 | Analyzed | 未確認 | CWE-290 | Sonarr is a PVR for Usenet and BitTorrent users. Versions prior to 4.0.16.2942 have an authentication bypass that affected users that had disabled authentication for local addresse |
| CVE-2026-30976 | Analyzed | 未確認 | CWE-22 | Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file readable by th |
| CVE-2026-30977 | Deferred | 未確認 | CWE-79 | RenderBlocking is a MediaWiki extension that allows interface administrators to specify render-blocking CSS and JavaScript. Prior to 0.1.1, there is Stored XSS in renderblocking-cs |
| CVE-2026-30978 | Analyzed | 未確認 | CWE-416, CWE-672, CWE-825 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-use-after-free in CIccCmm::AddXform() causing invalid |
| CVE-2026-30979 | Analyzed | 未確認 | CWE-120, CWE-122, CWE-787 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in CIccCalculatorFunc::InitSele |
| CVE-2026-3098 | Deferred | 未確認 | CWE-862 | The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function. This makes it possib |
| CVE-2026-30980 | Analyzed | 未確認 | CWE-121, CWE-400, CWE-674 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack overflow in CIccBasicStructFactory::CreateStruct() c |
| CVE-2026-30981 | Analyzed | 未確認 | CWE-120, CWE-125, CWE-787 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-buffer-overflow read in CIccXmlArrayType<>::DumpArray |
| CVE-2026-30982 | Analyzed | 未確認 | CWE-122, CWE-125, CWE-129 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccPcsXform::pushXYZConvert() |
| CVE-2026-30983 | Analyzed | 未確認 | CWE-120, CWE-121, CWE-787 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in icFixXml() (strcpy) causing stack |
| CVE-2026-30984 | Analyzed | 未確認 | CWE-125, CWE-129 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccCalculatorFunc::ApplySequen |
| CVE-2026-30985 | Analyzed | 未確認 | CWE-120, CWE-122, CWE-787 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRan |
| CVE-2026-30986 | Analyzed | 未確認 | CWE-125, CWE-476 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRan |
| CVE-2026-30987 | Analyzed | 未確認 | CWE-120, CWE-121, CWE-787 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum<>::GetValues() causing |
| CVE-2026-3099 | Analyzed | 未確認 | CWE-323 | A flaw was found in Libsoup. The server-side digest authentication implementation in the SoupAuthDomainDigest class does not properly track issued nonces or enforce the required in |
| CVE-2026-3103 | Analyzed | 未確認 | CWE-863 | A logic error in the remove_password() function in Checkmk GmbH's Checkmk versions <2.4.0p23, <2.3.0p43, and 2.2.0 (EOL) allows a low-privileged user to cause data loss. |
| CVE-2026-3104 | Modified | 未確認 | CWE-401, CWE-772 | A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 t |
| CVE-2026-3106 | Analyzed | 未確認 | CWE-79 | Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login form 'redacted/ |
| CVE-2026-3107 | Analyzed | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) in Teampass versions prior to 3.1.5.16, affecting the password manager's password import functionality at the endpoint 'redacted/index.php?page=it |
| CVE-2026-3108 | Analyzed | 未確認 | CWE-150 | Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output wh |
| CVE-2026-3109 | Analyzed | 未確認 | CWE-754 | Mattermost Plugins versions <=11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via replayed webhook |
| CVE-2026-3110 | Deferred | 未確認 | CWE-284 | Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the endpoint '/administracion/admin_usuarios.cgi?filtro_estado=T&wAccion=listado_xlsx&wBus |
| CVE-2026-3111 | Deferred | 未確認 | CWE-284 | Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the endpoint '/archivos/usuarios/[ID]/[username]/thumb_AAxAA.jpg' (translated as 80x90 and |
| CVE-2026-3112 | Analyzed | 未確認 | CWE-22 | Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system administrators |
| CVE-2026-3113 | Analyzed | 未確認 | CWE-732 | Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which allows other local users on th |
| CVE-2026-3114 | Analyzed | 未確認 | CWE-409 | Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction which allows |
| CVE-2026-3115 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which allows authent |
| CVE-2026-3116 | Analyzed | 未確認 | CWE-400 | Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the |
| CVE-2026-3119 | Analyzed | 未確認 | CWE-617 | Under certain conditions, `named` may crash when processing a correctly signed query containing a TKEY record. The affected code can only be reached if an incoming request has a va |
| CVE-2026-3121 | Modified | 未確認 | CWE-266 | A flaw was found in Keycloak. An administrator with `manage-clients` permission can exploit a misconfiguration where this permission is equivalent to `manage-permissions`. This all |
| CVE-2026-3124 | Deferred | 未確認 | CWE-639 | The Download Monitor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.7 via the executePayment() function due to mis |
| CVE-2026-3125 | Analyzed | 未確認 | CWE-706, CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/image/ handler.T |
| CVE-2026-3126 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-3130 | Analyzed | 未確認 | CWE-841 | Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is |
| CVE-2026-3132 | Deferred | 未確認 | CWE-94 | The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.3 via the 'JLTMA_Widget_Admin::render_ |
| CVE-2026-3136 | Analyzed | 未確認 | CWE-863 | An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build e |
| CVE-2026-3138 | Deferred | 未確認 | CWE-862 | The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check in all versions up to, and including, 3.1.2 |
| CVE-2026-31381 | Analyzed | 未確認 | CWE-598 | An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL. |
| CVE-2026-31382 | Analyzed | 未確認 | CWE-79 | The error_description parameter is vulnerable to Reflected XSS. An attacker can bypass the domain's WAF using a Safari-specific onpagereveal payload. |
| CVE-2026-31386 | Analyzed | 未確認 | CWE-78 | OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the |
| CVE-2026-3139 | Deferred | 未確認 | CWE-639 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up |
| CVE-2026-3178 | Deferred | 未確認 | CWE-79 | The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name_directory_name' parameter in all versions up to, and including, 1.32.1 due to ins |
| CVE-2026-31788 | Modified | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: restrict usage in unprivileged domU The Xen privcmd driver allows to issue arbitrary hypercalls f |
| CVE-2026-31792 | Analyzed | 未確認 | CWE-476 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a null pointer dereference in CIccTagXmlStruct::ParseTag() c |
| CVE-2026-31793 | Analyzed | 未確認 | CWE-125, CWE-703 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault due to invalid/wild pointer read in CIc |
| CVE-2026-31794 | Analyzed | 未確認 | CWE-125, CWE-703 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault from invalid/wild pointer read in CIccC |
| CVE-2026-31795 | Analyzed | 未確認 | CWE-120, CWE-121, CWE-787 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow write in CIccXform3DLut::Apply() cor |
| CVE-2026-31796 | Analyzed | 未確認 | CWE-122, CWE-787 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in icCurvesFromXml() causing he |
| CVE-2026-31797 | Analyzed | 未確認 | CWE-125, CWE-787 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CTiffImg::ReadLine() when iccAp |
| CVE-2026-31798 | Analyzed | 未確認 | CWE-295 | JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v4.10.16-lts, JumpServer improperly validates certificates in the Custom |
| CVE-2026-31799 | Analyzed | 未確認 | CWE-20, CWE-89 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. From version 2.14.2 to before version 2.17.0 for parameters "before" and "after" and from version 2.1 |
| CVE-2026-3180 | Deferred | 未確認 | CWE-89 | The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to blind SQL Injection via the ‘cgLostPasswordEmail’ and the ’cgl_ma |
| CVE-2026-31800 | Analyzed | 未確認 | CWE-862 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.12 and 8.6.25, the _GraphQLConfig and _Audience interna |
| CVE-2026-31801 | Analyzed | 未確認 | CWE-863 | zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. From 1.3.0 to 2.1.14, zot’s dist-spec authorization middleware infers |
| CVE-2026-31802 | Analyzed | 未確認 | CWE-22 | node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive |
| CVE-2026-31804 | Analyzed | 未確認 | CWE-918 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /pms_image_proxy endpoint accepts a user-supplied img parameter and forw |
| CVE-2026-31805 | Analyzed | 未確認 | CWE-20, CWE-863 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users |
| CVE-2026-31806 | Modified | 未確認 | CWE-122, CWE-131 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, the gdi_surface_bits() function processes SURFACE_BITS_COMMAND messages sent by the RDP server. W |
| CVE-2026-31807 | Analyzed | 未確認 | CWE-79 | SiYuan is a personal knowledge management system. Prior to 3.5.10, SiYuan's SVG sanitizer (SanitizeSVG) blocks dangerous elements (<script>, <iframe>, <foreignobject>) and removes |
| CVE-2026-31808 | Analyzed | 未確認 | CWE-835 | file-type detects the file type of a file, stream, or data. Prior to 21.3.1, a denial of service vulnerability exists in the ASF (WMV/WMA) file type detection parser. When parsing |
| CVE-2026-31809 | Analyzed | 未確認 | CWE-79 | SiYuan is a personal knowledge management system. Prior to 3.5.10, SiYuan's SVG sanitizer (SanitizeSVG) checks href attributes for the javascript: prefix using strings.HasPrefix(). |
| CVE-2026-3181 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-31812 | Deferred | 未確認 | CWE-248 | Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in a |
| CVE-2026-31813 | Analyzed | 未確認 | CWE-290 | Supabase Auth is a JWT based API for managing users and issuing JWT tokens. Prior to 2.185.0, a vulnerability has been identified that allows an attacker to issue sessions for arbi |
| CVE-2026-31814 | Analyzed | 未確認 | CWE-190 | Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can cause arithmetic overflow in sen |
| CVE-2026-31815 | Analyzed | 未確認 | CWE-284, CWE-915 | Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access con |
| CVE-2026-31816 | Analyzed | 未確認 | CWE-74 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.31.4 and earlier, the Budibase server's authorized() middleware that protects every s |
| CVE-2026-31817 | Analyzed | 未確認 | CWE-22 | OliveTin gives access to predefined shell commands from a web interface. Prior to 3000.11.2, when the saveLogs feature is enabled, OliveTin persists execution log entries to disk. |
| CVE-2026-31819 | Analyzed | 未確認 | CWE-601 | Sylius is an Open Source eCommerce Framework on Symfony. CurrencySwitchController::switchAction(), ImpersonateUserController::impersonateAction() and StorageBasedLocaleSwitcher::ha |
| CVE-2026-31820 | Analyzed | 未確認 | CWE-639 | Sylius is an Open Source eCommerce Framework on Symfony. An authenticated Insecure Direct Object Reference (IDOR) vulnerability exists in multiple shop LiveComponents due to unvali |
| CVE-2026-31821 | Analyzed | 未確認 | CWE-862 | Sylius is an Open Source eCommerce Framework on Symfony. The POST /api/v2/shop/orders/{tokenValue}/items endpoint does not verify cart ownership. An unauthenticated attacker can ad |
| CVE-2026-31822 | Analyzed | 未確認 | CWE-79 | Sylius is an Open Source eCommerce Framework on Symfony. A cross-site scripting (XSS) vulnerability exists in the shop checkout login form handled by the ApiLoginController Stimulu |
| CVE-2026-31823 | Analyzed | 未確認 | CWE-79 | Sylius is an Open Source eCommerce Framework on Symfony. An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple places across the shop frontend and adm |
| CVE-2026-31824 | Analyzed | 未確認 | CWE-362, CWE-367 | Sylius is an Open Source eCommerce Framework on Symfony. A Time-of-Check To Time-of-Use (TOCTOU) race condition was discovered in the promotion usage limit enforcement. The same cl |
| CVE-2026-31825 | Analyzed | 未確認 | CWE-89, CWE-943 | Sylius is an Open Source eCommerce Framework on Symfony. Sylius API filters ProductPriceOrderFilter and TranslationOrderNameAndLocaleFilter pass user-supplied order direction value |
| CVE-2026-31826 | Analyzed | 未確認 | CWE-770 | pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires pa |
| CVE-2026-31827 | Deferred | 未確認 | CWE-362 | Alienbin is an anonymous code and text sharing web service. In 1.0.0 and earlier, the /save endpoint in server.js drops and recreates the MongoDB TTL index on the entire post colle |
| CVE-2026-31828 | Analyzed | 未確認 | CWE-90 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.13 and 8.6.26, the LDAP authentication adapter is vulne |
| CVE-2026-31829 | Analyzed | 未確認 | CWE-918 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.0.13, Flowise exposes an HTTP Node in AgentFlow and Chatflow that performs serve |
| CVE-2026-31830 | Analyzed | 未確認 | CWE-252 | sigstore-ruby is a pure Ruby implementation of the sigstore verify command from the sigstore/cosign project. Prior to 0.2.3, Sigstore::Verifier#verify does not propagate the Verifi |
| CVE-2026-31831 | Analyzed | 未確認 | CWE-23 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images API endpoint is vulnerable to path traversal, a |
| CVE-2026-31832 | Analyzed | 未確認 | CWE-639 | Umbraco is an ASP.NET CMS. From 14.0.0 to before 16.5.1 and 17.2.2, A broken object-level authorization vulnerability exists in a backoffice API endpoint that allows authenticated |
| CVE-2026-31833 | Analyzed | 未確認 | CWE-79 | Umbraco is an ASP.NET CMS. From 16.2.0 to before 16.5.1 and 17.2.2, An authenticated backoffice user with access to Settings can inject malicious HTML into property type descriptio |
| CVE-2026-31834 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-862 | Umbraco is an ASP.NET CMS. From 15.3.1 to before 16.5.1 and 17.2.2, A privilege escalation vulnerability has been identified in Umbraco CMS. Under certain conditions, authenticated |
| CVE-2026-31836 | Analyzed | 未確認 | CWE-269, CWE-285 | Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In ve |
| CVE-2026-31837 | Modified | 未確認 | CWE-1392, CWE-200 | Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a user of Istio is impacted if the JWKS resolver becomes unavailable or |
| CVE-2026-31838 | Modified | 未確認 | CWE-863 | Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a vulnerability in Envoy RBAC header matching could allow authorization |
| CVE-2026-31839 | Analyzed | 未確認 | CWE-354 | Striae is a firearms examiner's comparison companion. A high-severity integrity bypass vulnerability existed in Striae's digital confirmation workflow prior to v3.0.0. Hash-only va |
| CVE-2026-31840 | Analyzed | 未確認 | CWE-89 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.2 and 8.6.28, an attacker can use a dot-notation field |
| CVE-2026-31841 | Analyzed | 未確認 | CWE-433 | Hyperterse is a tool-first MCP framework for building AI-ready backend surfaces from declarative config. Prior to v2.2.0, the search tool allows LLMs to search for tools using natu |
| CVE-2026-31844 | Modified | 未確認 | CWE-89 | An authenticated SQL Injection vulnerability (CWE-89) exists in the Koha staff interface in the /cgi-bin/koha/suggestion/suggestion.pl endpoint due to improper validation of the di |
| CVE-2026-31846 | Deferred | 未確認 | CWE-306 | Missing authentication in the /goform/ate endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows an adjacent unauthenticated attacker to retrieve sensi |
| CVE-2026-31847 | Modified | 未確認 | CWE-912 | Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sendin |
| CVE-2026-31848 | Modified | 未確認 | CWE-312 | Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 uses the ecos_pw cookie for authentication, which contains Base64-encoded credential data combined with a static su |
| CVE-2026-31849 | Analyzed | 未確認 | CWE-352 | Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing endpoints such as /goform/setSysTools and other administrativ |
| CVE-2026-31850 | Analyzed | 未確認 | CWE-256 | Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within ex |
| CVE-2026-31851 | Analyzed | 未確認 | CWE-307 | Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement rate limiting or account lockout mechanisms on authentication interfaces. An attacker can perfor |
| CVE-2026-31852 | Analyzed | 未確認 | CWE-269 | Jellyfin is an open-source media system. The code-quality.yml GitHub Actions workflow in jellyfin/jellyfin-ios is vulnerable to arbitrary code execution via pull requests from fork |
| CVE-2026-31853 | Analyzed | 未確認 | CWE-122 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in t |
| CVE-2026-31854 | Analyzed | 未確認 | CWE-78 | Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow them in order t |
| CVE-2026-31856 | Analyzed | 未確認 | CWE-89 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A SQL injection vulnerability exists in the PostgreSQL storage adapter when |
| CVE-2026-31857 | Analyzed | 未確認 | CWE-94 | Craft is a content management system (CMS). Prior to 5.9.9 and 4.17.4, a Remote Code Execution vulnerability exists in the Craft CMS 5 conditions system. The BaseElementSelectCondi |
| CVE-2026-31858 | Analyzed | 未確認 | CWE-89 | Craft is a content management system (CMS). The ElementSearchController::actionSearch() endpoint is missing the unset() protection that was added to ElementIndexesController in CVE |
| CVE-2026-31859 | Analyzed | 未確認 | CWE-116, CWE-79 | Craft is a content management system (CMS). The fix for CVE-2025-35939 in craftcms/cms introduced a strip_tags() call in src/web/User.php to sanitize return URLs before they are st |
| CVE-2026-31860 | Analyzed | 未確認 | CWE-79 | Unhead is a document head and template manager. Prior to 2.1.11, useHeadSafe() can be bypassed to inject arbitrary HTML attributes, including event handlers, into SSR-rendered <hea |
| CVE-2026-31861 | Analyzed | 未確認 | CWE-94 | Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.24.0, The /api/user/git-config endpoint constructs shell co |
| CVE-2026-31862 | Analyzed | 未確認 | CWE-78 | Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.24.0, multiple Git-related API endpoints use execAsync() wi |
| CVE-2026-31863 | Analyzed | 未確認 | CWE-307 | Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without t |
| CVE-2026-31864 | Analyzed | 未確認 | CWE-1336 | JumpServer is an open source bastion host and an operation and maintenance security audit system. a Server-Side Template Injection (SSTI) vulnerability exists in JumpServer's Apple |
| CVE-2026-31865 | Analyzed | 未確認 | CWE-1321 | Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation, and client-server communication. Prior to version 1.4.27, an Elysia cookie can be ov |
| CVE-2026-31866 | Analyzed | 未確認 | CWE-770 | flagd is a feature flag daemon with a Unix philosophy. Prior to 0.14.2, flagd exposes OFREP (/ofrep/v1/evaluate/...) and gRPC (evaluation.v1, evaluation.v2) endpoints for feature f |
| CVE-2026-31867 | Analyzed | 未確認 | CWE-639 | Craft Commerce is an ecommerce platform for Craft CMS. Prior to 4.11.0 and 5.6.0, An Insecure Direct Object Reference (IDOR) vulnerability exists in Craft Commerce’s cart functiona |
| CVE-2026-31868 | Analyzed | 未確認 | CWE-79 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.4 and 8.6.30, an attacker can upload a file with a file |
| CVE-2026-31869 | Analyzed | 未確認 | CWE-200, CWE-285, CWE-639 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the ComposerController#mentions endpoint reveals hidden group membersh |
| CVE-2026-31870 | Analyzed | 未確認 | CWE-248 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.37.1, when a cpp-httplib client uses the streaming API (httplib::stream::Get, httplib:: |
| CVE-2026-31871 | Analyzed | 未確認 | CWE-89 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.5 and 8.6.31, a SQL injection vulnerability exists in t |
| CVE-2026-31872 | Analyzed | 未確認 | CWE-284 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.6 and 8.6.32, the protectedFields class-level permissio |
| CVE-2026-31873 | Analyzed | 未確認 | CWE-79 | Unhead is a document head and template manager. Prior to 2.1.11, The link.href check in makeTagSafe (safe.ts) uses String.includes(), which is case-sensitive. Browsers treat URI sc |
| CVE-2026-31874 | Analyzed | 未確認 | CWE-284, CWE-639 | Taskosaur is an open source project management platform with conversational AI for task execution in-app. In 1.0.0, the application does not properly validate or restrict the role |
| CVE-2026-31875 | Analyzed | 未確認 | CWE-672 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.7 and 8.6.33, when multi-factor authentication (MFA) vi |
| CVE-2026-31876 | Analyzed | 未確認 | CWE-79 | Notesnook is a note-taking app focused on user privacy & ease of use. Prior to 3.3.9, a Stored Cross-Site Scripting (XSS) vulnerability existed in Notesnook's editor embed componen |
| CVE-2026-31877 | Analyzed | 未確認 | CWE-89 | Frappe is a full-stack web application framework. Prior to 15.84.0 and 14.99.0, a specially crafted request made to a certain endpoint could result in SQL injection, allowing an at |
| CVE-2026-31878 | Analyzed | 未確認 | CWE-918 | Frappe is a full-stack web application framework. Prior to 14.100.1, 15.100.0, and 16.6.0, a malicious user could send a crafted request to an endpoint which would lead to the serv |
| CVE-2026-31879 | Analyzed | 未確認 | CWE-79 | Frappe is a full-stack web application framework. Prior to 14.100.2, 15.101.0, and 16.10.0, due to a lack of validation and improper permission checks, users could modify other use |
| CVE-2026-31881 | Analyzed | 未確認 | CWE-306 | Runtipi is a personal homeserver orchestrator. Prior to 4.8.0, an unauthenticated attacker can reset the operator (admin) password when a password-reset request is active, resultin |
| CVE-2026-31882 | Analyzed | 未確認 | CWE-306 | Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, when Dagu is configured with HTTP Basic authentication (DAGU_AUTH_MODE=basic), all Server-Sent Events |
| CVE-2026-31883 | Analyzed | 未確認 | CWE-122, CWE-191 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a size_t underflow in the IMA-ADPCM and MS-ADPCM audio decoders leads to heap-buffer-overflow writ |
| CVE-2026-31884 | Analyzed | 未確認 | CWE-369 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-ADPCM decoders when nBlockAlign is 0, leading to a crash. In |
| CVE-2026-31885 | Analyzed | 未確認 | CWE-125 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and s |
| CVE-2026-31886 | Analyzed | 未確認 | CWE-22 | Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, the dagRunId request field accepted by the inline DAG execution endpoints is passed directly into file |
| CVE-2026-31887 | Analyzed | 未確認 | CWE-863 | Shopware is an open commerce platform. Prior to 6.7.8.1 and 6.6.10.15, an insufficient check on the filter types for unauthenticated customers allows access to orders of other cust |
| CVE-2026-31888 | Analyzed | 未確認 | CWE-204 | Shopware is an open commerce platform. Prior to 6.7.8.1 and 6.6.10.15, the Store API login endpoint (POST /store-api/account/login) returns different error codes depending on wheth |
| CVE-2026-31889 | Analyzed | 未確認 | CWE-290 | Shopware is an open commerce platform. Prior to 6.6.10.15 and 6.7.8.1, a vulnerability in the Shopware app registration flow that could, under specific conditions, allow attackers |
| CVE-2026-31890 | Analyzed | 未確認 | CWE-223, CWE-770 | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. Prior to 0.50.1, in a situation where |
| CVE-2026-31891 | Analyzed | 未確認 | CWE-89 | Cockpit is a headless content management system. Any Cockpit CMS instance running version 2.13.4 or earlier with API access enabled is potentially affected by a a SQL Injection vul |
| CVE-2026-31892 | Modified | 未確認 | CWE-807, CWE-863 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From 2.9.0 to before 4.0.2 and 3.7.11, A user who can submit Workfl |
| CVE-2026-31894 | Analyzed | 未確認 | CWE-59 | WeGIA is a web manager for charitable institutions. In 3.6.5, The patched loadBackupDB() extracts tar.gz archives to a temporary directory using PHP's PharData class, then uses glo |
| CVE-2026-31895 | Analyzed | 未確認 | CWE-89 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in html/m |
| CVE-2026-31896 | Analyzed | 未確認 | CWE-89 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, a critical SQL injection vulnerability exists in the WeGIA application. The remover_produto_ocultar.php |
| CVE-2026-31897 | Analyzed | 未確認 | CWE-125 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in freerdp_bitmap_decompress_planar when SrcSize is 0. The function |
| CVE-2026-31898 | Modified | 未確認 | CWE-116, CWE-94 | jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of arguments of the `createAnnotation` method allows users to inject arbitrary PDF objects, |
| CVE-2026-31899 | Analyzed | 未確認 | CWE-674 | CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive <use> element amplification in cairosvg/ |
| CVE-2026-3190 | Modified | 未確認 | CWE-280 | A flaw was found in Keycloak. The User-Managed Access (UMA) 2.0 Protection API endpoint for permission tickets fails to enforce the `uma_protection` role check. This allows any aut |
| CVE-2026-31900 | Analyzed | 未確認 | CWE-20 | Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version |
| CVE-2026-31901 | Analyzed | 未確認 | CWE-204 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.34 and 9.6.0-alpha.8, the email verification endpoint (/verific |
| CVE-2026-31903 | Analyzed | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-o |
| CVE-2026-31904 | Analyzed | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-o |
| CVE-2026-3191 | Deferred | 未確認 | CWE-352 | The Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.12. This is due to missing or incorrect nonce validation |
| CVE-2026-31913 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Whitebox-Studio Scape scape allows Path Traversal.This issue affects Scape: from n/a |
| CVE-2026-31914 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hookandhook WP Courses LMS wp-courses allows DOM-Based XSS.This issue affects |
| CVE-2026-31915 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a thr |
| CVE-2026-31916 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af |
| CVE-2026-31917 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP erp allows SQL Injection.This issue affects WP ERP: from n/a thr |
| CVE-2026-31918 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in immonex immonex Kickstart immonex-kickstart allows Stored XSS.This issue affec |
| CVE-2026-31919 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows Exploiting Incorrectly Configured Access |
| CVE-2026-31920 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Devteam HaywoodTech Product Rearrange for WooCommerce products-rearrange-wooco |
| CVE-2026-31921 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Devteam HaywoodTech Product Rearrange for WooCommerce products-rearrange-woocommerce allows Exploiting Incorrectly Configured Access Control |
| CVE-2026-31922 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Fox LMS fox-lms allows Blind SQL Injection.This issue affects Fox LMS: |
| CVE-2026-31926 | Awaiting Analysis | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-31938 | Modified | 未確認 | CWE-79 | jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of the `options` argument of the `output` function allows attackers to inject arbitrary HTML |
| CVE-2026-31943 | Modified | 未確認 | CWE-918 | LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateIP()` in `packages/api/src/auth/domain.ts` fails to detect IPv4-mapped IPv6 addresses in th |
| CVE-2026-31944 | Analyzed | 未確認 | CWE-306 | LibreChat is a ChatGPT clone with additional features. From 0.8.2 to 0.8.2-rc3, The MCP (Model Context Protocol) OAuth callback endpoint accepts the redirect from the identity prov |
| CVE-2026-31945 | Analyzed | 未確認 | CWE-918 | LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a server-side request forgery (SSRF) attack when using agent actions or MC |
| CVE-2026-31946 | Analyzed | 未確認 | CWE-287, CWE-347 | OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. From version 10.5.4 to before version 20.2.5, OpenOLAT's OpenID Conne |
| CVE-2026-31949 | Analyzed | 未確認 | CWE-248 | LibreChat is a ChatGPT clone with additional features. Prior to 0.8.3-rc1, a Denial of Service (DoS) vulnerability exists in the DELETE /api/convos endpoint that allows an authenti |
| CVE-2026-31950 | Analyzed | 未確認 | CWE-284, CWE-639 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2-rc3, the SSE streaming endpoint `/api/agents/chat/stream/:streamId` does not verify that |
| CVE-2026-31951 | Analyzed | 未確認 | CWE-200 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3-rc1, user-created MCP (Model Context Protocol) servers can include arbitrary HTTP headers |
| CVE-2026-31954 | Analyzed | 未確認 | CWE-352 | Emlog is an open source website building system. In 2.6.6 and earlier, the delete_async action (asynchronous delete) lacks a call to LoginAuth::checkToken(), enabling CSRF attacks. |
| CVE-2026-31957 | Analyzed | 未確認 | CWE-1188 | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 3.0.0 to before 3.1.0, if Himmelblau is deployed without a configured tenant domain in himmelb |
| CVE-2026-31958 | Modified | 未確認 | CWE-400 | Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the ma |
| CVE-2026-31959 | Analyzed | 未確認 | CWE-918 | Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains a Server-Side Request Forgery (SSRF) vulnerability when attempting |
| CVE-2026-31960 | Analyzed | 未確認 | CWE-770 | Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 has unbounded reads of HTTP response bodies during the Apple notarization p |
| CVE-2026-31961 | Analyzed | 未確認 | CWE-770 | Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O b |
| CVE-2026-31962 | Analyzed | 未確認 | CWE-122, CWE-125, CWE-129, CWE-787 | HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. While most alignment records store DN |
| CVE-2026-31963 | Analyzed | 未確認 | CWE-122, CWE-129, CWE-787 | HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one method of removing redundant d |
| CVE-2026-31964 | Analyzed | 未確認 | CWE-476 | HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compr |
| CVE-2026-31965 | Analyzed | 未確認 | CWE-125, CWE-129 | HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the `cram_decode_slice()` function |
| CVE-2026-31966 | Analyzed | 未確認 | CWE-125, CWE-129 | HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one method of removing redundant d |
| CVE-2026-31967 | Analyzed | 未確認 | CWE-125, CWE-129 | HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the `cram_decode_slice()` function |
| CVE-2026-31968 | Analyzed | 未確認 | CWE-121, CWE-122, CWE-787, CWE-843 | HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compr |
| CVE-2026-31969 | Analyzed | 未確認 | CWE-122, CWE-787 | HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compr |
| CVE-2026-31970 | Analyzed | 未確認 | CWE-122, CWE-1284, CWE-131, CWE-190, CWE-787 | HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZIP [BGZF] files. In the GZI loading function, `bgzf_index_l |
| CVE-2026-31971 | Analyzed | 未確認 | CWE-121, CWE-122, CWE-1284, CWE-787 | HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compr |
| CVE-2026-31972 | Analyzed | 未確認 | CWE-416 | SAMtools is a program for reading, manipulating and writing bioinformatics file formats. The `mpileup` command outputs DNA sequences that have been aligned against a known referenc |
| CVE-2026-31973 | Analyzed | 未確認 | CWE-476 | SAMtools is a program for reading, manipulating and writing bioinformatics file formats. Starting in version 1.17, in the cram-size command, used to write information about how wel |
| CVE-2026-31974 | Analyzed | 未確認 | CWE-918 | OpenProject is an open-source, web-based project management software. Prior to 17.2.0, OpenProject SMTP test endpoint (POST /admin/settings/mail_notifications) accepts arbitrary ho |
| CVE-2026-31975 | Analyzed | 未確認 | CWE-78 | Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.25.0, OS Command Injection via WebSocket Shell. Both projec |
| CVE-2026-31976 | Analyzed | 未確認 | CWE-506 | xygeni-action is the GitHub Action for Xygeni Scanner. On March 3, 2026, an attacker with access to compromised credentials created a series of pull requests (#46, #47, #48) inject |
| CVE-2026-31979 | Analyzed | 未確認 | CWE-59 | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, writes Kerberos cache file |
| CVE-2026-31988 | Deferred | 未確認 | CWE-193 | yauzl (aka Yet Another Unzip Library) version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate() function. |
| CVE-2026-31989 | Analyzed | 未確認 | CWE-918 | OpenClaw versions prior to 2026.3.1 contain a server-side request forgery vulnerability in web_search citation redirect resolution that uses a private-network-allowing SSRF policy. |
| CVE-2026-31990 | Analyzed | 未確認 | CWE-59 | OpenClaw versions prior to 2026.3.2 contain a vulnerability in the stageSandboxMedia function in which it fails to validate destination symlinks during media staging, allowing writ |
| CVE-2026-31991 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability where Signal group allowlist policy incorrectly accepts sender identities from DM pairing-store a |
| CVE-2026-31992 | Analyzed | 未確認 | CWE-184 | OpenClaw versions prior to 2026.2.23 contain an allowlist bypass vulnerability in system.run guardrails that allows authenticated operators to execute unintended commands. When /us |
| CVE-2026-31993 | Analyzed | 未確認 | CWE-184 | OpenClaw versions prior to 2026.2.22 contain an allowlist parsing mismatch vulnerability in the macOS companion app that allows authenticated operators to bypass exec approval chec |
| CVE-2026-31994 | Analyzed | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.19 contain a local command injection vulnerability in Windows scheduled task script generation due to unsafe handling of cmd metacharacters and ex |
| CVE-2026-31995 | Analyzed | 未確認 | CWE-78 | OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension's Windows shell fallback mechanism that allows attackers to inject |
| CVE-2026-31996 | Modified | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.19 tools.exec.safeBins contains an input validation bypass vulnerability that allows attackers to execute unintended filesystem operations through |
| CVE-2026-31997 | Analyzed | 未確認 | CWE-367 | OpenClaw versions prior to 2026.3.1 fail to pin executable identity for non-path-like argv[0] tokens in system.run approvals, allowing post-approval executable rebind attacks. Atta |
| CVE-2026-31998 | Modified | 未確認 | CWE-863 | OpenClaw versions 2026.2.22 and 2026.2.23 contain an authorization bypass vulnerability in the synology-chat channel plugin where dmPolicy set to allowlist with empty allowedUserId |
| CVE-2026-31999 | Analyzed | 未確認 | CWE-78 | OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that allows attackers |
| CVE-2026-32000 | Modified | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: true after spawn |
| CVE-2026-32001 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.22 contain an authentication bypass vulnerability that allows clients authenticated with a shared gateway token to connect as role=node without de |
| CVE-2026-32002 | Analyzed | 未確認 | CWE-200 | OpenClaw versions prior to 2026.2.23 contain a sandbox bypass vulnerability in the sandboxed image tool that fails to enforce tools.fs.workspaceOnly restrictions on mounted sandbox |
| CVE-2026-32003 | Analyzed | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.22 contain an environment variable injection vulnerability in the system.run function that allows attackers to bypass command allowlist restrictio |
| CVE-2026-32004 | Analyzed | 未確認 | CWE-288 | OpenClaw versions prior to 2026.3.2 contain an authentication bypass vulnerability in the /api/channels route classification due to canonicalization depth mismatch between auth-pat |
| CVE-2026-32005 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.25 fail to enforce sender authorization checks for interactive callbacks including block_action, view_submission, and view_closed in shared worksp |
| CVE-2026-32006 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability where DM pairing-store identities are incorrectly treated as group allowlist identities when dmPo |
| CVE-2026-32007 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.23 contain a path traversal vulnerability in the experimental apply_patch tool that allows attackers with sandbox access to modify files outside t |
| CVE-2026-32008 | Analyzed | 未確認 | CWE-610 | OpenClaw versions prior to 2026.2.21 contain an improper URL scheme validation vulnerability in the assertBrowserNavigationAllowed() function that allows authenticated users with b |
| CVE-2026-32009 | Analyzed | 未確認 | CWE-426 | OpenClaw versions prior to 2026.2.24 contain a policy bypass vulnerability in the safeBins allowlist evaluation that trusts static default directories including writable package-ma |
| CVE-2026-32010 | Analyzed | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invok |
| CVE-2026-32011 | Analyzed | 未確認 | CWE-770 | OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies before performing authen |
| CVE-2026-32012 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32013 | Analyzed | 未確認 | CWE-59 | OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and writing files outside th |
| CVE-2026-32014 | Analyzed | 未確認 | CWE-290 | OpenClaw versions prior to 2026.2.26 contain a metadata spoofing vulnerability where reconnect platform and deviceFamily fields are accepted from the client without being bound int |
| CVE-2026-32015 | Modified | 未確認 | CWE-426 | OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a path hijacking vulnerability in tools.exec.safeBins that allows attackers to bypass allowlist checks by controlling process |
| CVE-2026-32016 | Modified | 未確認 | CWE-426 | OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval allowlist mode that allows local attackers to execute unauthorized |
| CVE-2026-32017 | Modified | 未確認 | CWE-184 | OpenClaw versions prior to 2026.2.19 contain an allowlist bypass vulnerability in the exec safeBins policy that allows attackers to write arbitrary files using short-option payload |
| CVE-2026-32018 | Analyzed | 未確認 | CWE-362 | OpenClaw versions prior to 2026.2.19 contain a race condition vulnerability in concurrent updateRegistry and removeRegistryEntry operations for sandbox containers and browsers. Att |
| CVE-2026-32019 | Analyzed | 未確認 | CWE-918 | OpenClaw versions prior to 2026.2.22 contain incomplete IPv4 special-use range validation in the isPrivateIpv4() function, allowing requests to RFC-reserved ranges to bypass SSRF p |
| CVE-2026-32020 | Analyzed | 未確認 | CWE-22, CWE-59 | OpenClaw versions prior to 2026.2.22 contain a path traversal vulnerability in the static file handler that follows symbolic links, allowing out-of-root file reads. Attackers can p |
| CVE-2026-32021 | Modified | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in the Feishu allowFrom allowlist implementation that accepts mutable sender display names instea |
| CVE-2026-32022 | Modified | 未確認 | CWE-184 | OpenClaw versions prior to 2026.2.21 contain a stdin-only policy bypass vulnerability in the grep tool within tools.exec.safeBins that allows attackers to read arbitrary files by s |
| CVE-2026-32023 | Modified | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.24 contain an approval gating bypass vulnerability in system.run allowlist mode where nested transparent dispatch wrappers can suppress shell-wrap |
| CVE-2026-32024 | Analyzed | 未確認 | CWE-59 | OpenClaw versions prior to 2026.2.22 contain a symlink traversal vulnerability in avatar handling that allows attackers to read arbitrary files outside the configured workspace bou |
| CVE-2026-32025 | Analyzed | 未確認 | CWE-307 | OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling o |
| CVE-2026-32026 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.24 contain an improper path validation vulnerability in sandbox media handling that allows absolute paths under the host temporary directory outsi |
| CVE-2026-32027 | Modified | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability where DM pairing-store identities are incorrectly eligible for group allowlist authorization chec |
| CVE-2026-32028 | Modified | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.25 fail to enforce dmPolicy and allowFrom authorization checks on Discord direct-message reaction notifications, allowing non-allowlisted users to |
| CVE-2026-32029 | Modified | 未確認 | CWE-345 | OpenClaw versions prior to 2026.2.21 improperly parse the left-most X-Forwarded-For header value when requests originate from configured trusted proxies, allowing attackers to spoo |
| CVE-2026-32030 | Modified | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the stageSandboxMedia function that accepts arbitrary absolute paths when iMessage remote attachment |
| CVE-2026-32031 | Analyzed | 未確認 | CWE-288 | OpenClaw versions prior to 2026.2.26 server-http contains an authentication bypass vulnerability in gateway authentication for plugin channel endpoints due to path canonicalization |
| CVE-2026-32032 | Modified | 未確認 | CWE-426 | OpenClaw versions prior to 2026.2.22 contain an arbitrary shell execution vulnerability in shell environment fallback that trusts the unvalidated SHELL path from the host environme |
| CVE-2026-32033 | Modified | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.24 contain a path traversal vulnerability where @-prefixed absolute paths bypass workspace-only file-system boundary validation due to canonicaliz |
| CVE-2026-32034 | Modified | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.21 contain an authentication bypass vulnerability in the Control UI when allowInsecureAuth is explicitly enabled and the gateway is exposed over p |
| CVE-2026-32035 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true. Non-owner vo |
| CVE-2026-32036 | Analyzed | 未確認 | CWE-22, CWE-289 | OpenClaw gateway plugin versions prior to 2026.2.26 contain a path traversal vulnerability that allows remote attackers to bypass route authentication checks by manipulating /api/c |
| CVE-2026-32037 | Analyzed | 未確認 | CWE-918 | OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can suppl |
| CVE-2026-32038 | Analyzed | 未確認 | CWE-284 | OpenClaw before 2026.2.24 contains a sandbox network isolation bypass vulnerability that allows trusted operators to join another container's network namespace. Attackers can confi |
| CVE-2026-32039 | Analyzed | 未確認 | CWE-639 | OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in the toolsBySender group policy matching that allows attackers to inherit elevated tool permiss |
| CVE-2026-3204 | Analyzed | 未確認 | CWE-20 | Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error message via a specially crafte |
| CVE-2026-32040 | Analyzed | 未確認 | CWE-79 | OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicio |
| CVE-2026-32041 | Analyzed | 未確認 | CWE-306 | OpenClaw versions prior to 2026.3.1 fail to properly handle authentication bootstrap errors during startup, allowing browser-control routes to remain accessible without authenticat |
| CVE-2026-32042 | Analyzed | 未確認 | CWE-863 | OpenClaw versions 2026.2.22 prior to 2026.2.25 contain a privilege escalation vulnerability allowing unpaired device identities to bypass operator pairing requirements and self-ass |
| CVE-2026-32043 | Analyzed | 未確認 | CWE-367 | OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time |
| CVE-2026-32044 | Analyzed | 未確認 | CWE-409 | OpenClaw versions prior to 2026.3.2 contain an archive extraction vulnerability in the tar.bz2 installer path that bypasses safety checks enforced on other archive formats. Attacke |
| CVE-2026-32045 | Analyzed | 未確認 | CWE-290 | OpenClaw versions prior to 2026.2.21 incorrectly apply tokenless Tailscale header authentication to HTTP gateway routes, allowing bypass of token and password requirements. Attacke |
| CVE-2026-32046 | Analyzed | 未確認 | CWE-1188 | OpenClaw versions prior to 2026.2.21 contain an improper sandbox configuration vulnerability that allows attackers to execute arbitrary code by exploiting renderer-side vulnerabili |
| CVE-2026-32047 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32048 | Analyzed | 未確認 | CWE-732 | OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed sessions to create child processes under un |
| CVE-2026-32049 | Analyzed | 未確認 | CWE-770 | OpenClaw versions prior to 2026.2.22 fail to consistently enforce configured inbound media byte limits before buffering remote media across multiple channel ingestion paths. Remote |
| CVE-2026-32050 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.25 contain an access control vulnerability in signal reaction notification handling that allows unauthorized senders to enqueue status events befo |
| CVE-2026-32051 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.3.1 contain an authorization mismatch vulnerability that allows authenticated callers with operator.write scope to invoke owner-only tool surfaces i |
| CVE-2026-32052 | Analyzed | 未確認 | CWE-436, CWE-77 | OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper that allows attackers to execute hidden commands by injecting positio |
| CVE-2026-32053 | Analyzed | 未確認 | CWE-294 | OpenClaw versions prior to 2026.2.23 contain a vulnerability in Twilio webhook event deduplication where normalized event IDs are randomized per parse, allowing replay events to by |
| CVE-2026-32054 | Analyzed | 未確認 | CWE-59 | OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in browser trace and download output path handling that allows local attackers to escape the managed |
| CVE-2026-32055 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace through in-w |
| CVE-2026-32056 | Analyzed | 未確認 | CWE-78 | OpenClaw versions prior to 2026.2.22 fail to sanitize shell startup environment variables HOME and ZDOTDIR in the system.run function, allowing attackers to bypass command allowlis |
| CVE-2026-32057 | Modified | 未確認 | CWE-807 | OpenClaw versions prior to 2026.2.25 contain an authentication bypass vulnerability in the trusted-proxy Control UI pairing mechanism that accepts client.id=control-ui without prop |
| CVE-2026-32058 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.26 contain an approval context-binding weakness in system.run execution flows with host=node that allows reuse of previously approved requests wit |
| CVE-2026-32059 | Analyzed | 未確認 | CWE-863 | OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing attackers to bypa |
| CVE-2026-32060 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.14 contain a path traversal vulnerability in apply_patch that allows attackers to write or delete files outside the configured workspace directory |
| CVE-2026-32061 | Analyzed | 未確認 | CWE-22 | OpenClaw versions prior to 2026.2.17 contain a path traversal vulnerability in the $include directive resolution that allows reading arbitrary local files outside the config direct |
| CVE-2026-32062 | Modified | 未確認 | CWE-770 | OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, but not including, 2026.2.22 accept media-stream WebSocket upg |
| CVE-2026-32063 | Analyzed | 未確認 | CWE-77 | OpenClaw version 2026.2.19-2 prior to 2026.2.21 contains a command injection vulnerability in systemd unit file generation where attacker-controlled environment values are not vali |
| CVE-2026-32064 | Analyzed | 未確認 | CWE-306 | OpenClaw versions prior to 2026.2.21 sandbox browser entrypoint launches x11vnc without authentication for noVNC observer sessions, allowing unauthenticated access to the VNC inter |
| CVE-2026-32065 | Analyzed | 未確認 | CWE-436 | OpenClaw versions prior to 2026.2.25 contain an approval-integrity bypass vulnerability in system.run where rendered command text is used as approval identity while trimming argv t |
| CVE-2026-32066 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32067 | Modified | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability in the pairing-store access control for direct message pairing policy that allows attackers to re |
| CVE-2026-3207 | Analyzed | 未確認 | CWE-306 | Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access. |
| CVE-2026-32094 | Analyzed | 未確認 | CWE-200 | Shescape is a simple shell escape library for JavaScript. Prior to 2.1.10, Shescape#escape() does not escape square-bracket glob syntax for Bash, BusyBox sh, and Dash. Applications |
| CVE-2026-32095 | Analyzed | 未確認 | CWE-79 | Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.1, Plunk's image upload endpoint accepted SVG files, which browsers treat as active documents capable o |
| CVE-2026-32096 | Analyzed | 未確認 | CWE-918 | Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.0, a Server-Side Request Forgery (SSRF) vulnerability existed in the SNS webhook handler. An unauthenti |
| CVE-2026-32097 | Analyzed | 未確認 | CWE-639 | PingPong is a platform for using large language models (LLMs) for teaching and learning. Prior to 7.27.2, an authenticated user may be able to retrieve or delete files outside the |
| CVE-2026-32098 | Analyzed | 未確認 | CWE-200 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.9 and 8.6.35, an attacker can exploit LiveQuery subscri |
| CVE-2026-32099 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, when a user has `hide_profile` enabled, their bio, location, and websi |
| CVE-2026-3210 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Material Icons allows Forceful Browsing.This issue affects Material Icons: from 0.0.0 before 2.0.4. |
| CVE-2026-32100 | Deferred | 未確認 | CWE-200 | Shopware is an open commerce platform. /api/_info/config route exposes information about active security fixes. This vulnerability is fixed in 2.0.16, 3.0.12, and 4.0.7. |
| CVE-2026-32101 | Analyzed | 未確認 | CWE-863 | StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.3.1, the S3 storage manager's isAuthorized() function is declared async (returns P |
| CVE-2026-32102 | Analyzed | 未確認 | CWE-284, CWE-863 | OliveTin gives access to predefined shell commands from a web interface. In 3000.10.2 and earlier, OliveTin’s live EventStream broadcasts execution events and action output to auth |
| CVE-2026-32103 | Analyzed | 未確認 | CWE-639, CWE-640 | StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the POST /studiocms_api/dashboard/create-reset-link endpoint allows any authe |
| CVE-2026-32104 | Analyzed | 未確認 | CWE-639 | StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the updateUserNotifications endpoint accepts a user ID from the request paylo |
| CVE-2026-32106 | Analyzed | 未確認 | CWE-269 | StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the REST API createUser endpoint uses string-based rank checks that only bloc |
| CVE-2026-32108 | Analyzed | 未確認 | CWE-863 | Copyparty is a portable file server. Prior to 1.20.12, there was a missing permission-check in the shares feature (the shr global-option). This vulnerability only applies when the |
| CVE-2026-32109 | Analyzed | 未確認 | CWE-79 | Copyparty is a portable file server. Prior to 1.20.12, if an attacker has been given both read- and write-permissions to the server, they can upload a malicious file with the filen |
| CVE-2026-3211 | Analyzed | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Theme Negotiation by Rules allows Cross Site Request Forgery.This issue affects Theme Negotiation by Rules: from 0.0.0 bef |
| CVE-2026-32110 | Analyzed | 未確認 | CWE-918 | SiYuan is a personal knowledge management system. Prior to 3.6.0, the /api/network/forwardProxy endpoint allows authenticated users to make arbitrary HTTP requests from the server. |
| CVE-2026-32111 | Analyzed | 未確認 | CWE-918 | ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form (beta feature) accepts a user-supplied ha_url and makes a server-side HTTP request to {ha_url}/ |
| CVE-2026-32112 | Analyzed | 未確認 | CWE-79 | ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form renders user-controlled parameters via Python f-strings with no HTML escaping. An attacker who |
| CVE-2026-32113 | Analyzed | 未確認 | CWE-601 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, the e |
| CVE-2026-32114 | Analyzed | 未確認 | CWE-639 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, there is an Insecure Direct Object Reference (IDOR) vulnerability that |
| CVE-2026-32116 | Analyzed | 未確認 | CWE-22 | Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. From 0.21.0 to before 0.23.0, receiving a file (wormhole receive) from a |
| CVE-2026-32117 | Analyzed | 未確認 | CWE-79 | The grafanacubism-panel plugin allows use of cubism.js in Grafana. In 0.1.2 and earlier, the panel's zoom-link handler passes a dashboard-editor-supplied URL directly to window.loc |
| CVE-2026-32118 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, stored cross-site scripting (XSS) in the Graphical Pain M |
| CVE-2026-32119 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, DOM-based stored XSS in the jQuery SearchHighlight plugin |
| CVE-2026-3212 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Cross-Site Scripting (XSS).This issue affects Tagify: fro |
| CVE-2026-32120 | Analyzed | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an Insecure Direct Object Reference (IDOR) vulner |
| CVE-2026-32121 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, Stored XSS in prescription CSS/HTML print view via patie |
| CVE-2026-32122 | Analyzed | 未確認 | CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, the Claim File Tracker feature exposes an AJAX endpoint t |
| CVE-2026-32123 | Analyzed | 未確認 | CWE-863 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, sensitivity checks for group encounters are broken becaus |
| CVE-2026-32124 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, the dynamic code picker AJAX endpoint returns code descri |
| CVE-2026-32125 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, track/item names from the Track Anything feature are stor |
| CVE-2026-32126 | Analyzed | 未確認 | CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, an inverted boolean condition in ControllerRouter::route( |
| CVE-2026-32127 | Analyzed | 未確認 | CWE-89 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, OpenEMR contains a SQL injection vulnerability in the aja |
| CVE-2026-32128 | Analyzed | 未確認 | CWE-184 | FastGPT is an AI Agent building platform. In 4.14.7 and earlier, FastGPT's Python Sandbox (fastgpt-sandbox) includes guardrails intended to prevent file writes (static detection + |
| CVE-2026-32129 | Deferred | 未確認 | CWE-328 | soroban-poseidon provides Poseidon and Poseidon2 cryptographic hash functions for Soroban smart contracts. Poseidon V1 (PoseidonSponge) accepts variable-length inputs without injec |
| CVE-2026-3213 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting (XSS).This issue aff |
| CVE-2026-32130 | Analyzed | 未確認 | CWE-288 | ZITADEL is an open source identity management platform. From 2.68.0 to before 3.4.8 and 4.12.2, Zitadel provides a System for Cross-domain Identity Management (SCIM) API to provisi |
| CVE-2026-32131 | Analyzed | 未確認 | CWE-639, CWE-862 | ZITADEL is an open source identity management platform. Prior to 3.4.8 and 4.12.2, a vulnerability in Zitadel's Management API has been reported, which allowed authenticated users |
| CVE-2026-32132 | Analyzed | 未確認 | CWE-613 | ZITADEL is an open source identity management platform. Prior to 3.4.8 and 4.12.2, a potential vulnerability exists in Zitadel's passkey registration endpoints. This endpoint allow |
| CVE-2026-32133 | Analyzed | 未確認 | CWE-918 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prior to 6.1.0, a blind SSRF vulnerability exists in 2FAuth that allows au |
| CVE-2026-32136 | Analyzed | 未確認 | CWE-287 | AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in AdGuardHome by sending |
| CVE-2026-32137 | Analyzed | 未確認 | CWE-89 | Dataease is an open source data visualization analysis tool. Prior to 2.10.20, The table parameter for /de2api/datasource/previewData is directly concatenated into the SQL statemen |
| CVE-2026-32138 | Deferred | 未確認 | CWE-284, CWE-798 | NEXULEAN is a cybersecurity portfolio & service platform for an Ethical Hacker, AI Enthusiast, and Penetration Tester. Prior to 2.0.0, a security vulnerability was identified where |
| CVE-2026-32139 | Analyzed | 未確認 | CWE-79 | Dataease is an open source data visualization analysis tool. In DataEase 2.10.19 and earlier, the static resource upload interface allows SVG uploads. However, backend validation o |
| CVE-2026-3214 | Analyzed | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass.This issue affects CAPTCHA: from 0.0.0 before 1.17.0, from 2.0. |
| CVE-2026-32140 | Modified | 未確認 | CWE-22 | Dataease is an open source data visualization analysis tool. Prior to 2.10.20, By controlling the IniFile parameter, an attacker can force the JDBC driver to load an attacker-contr |
| CVE-2026-32141 | Modified | 未確認 | CWE-674, CWE-770 | flatted is a circular JSON parser. Prior to 3.4.0, flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a craf |
| CVE-2026-32142 | Deferred | 未確認 | CWE-200 | Shopware is an open commerce platform. /api/_info/config route exposes information about licenses. This vulnerability is fixed in 7.8.1 and 6.10.15. |
| CVE-2026-32143 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, moder |
| CVE-2026-3215 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Islandora allows Cross-Site Scripting (XSS).This issue affects Islandor |
| CVE-2026-3216 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1. |
| CVE-2026-32169 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-3217 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS).This issu |
| CVE-2026-3218 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Responsive Favicons allows Cross-Site Scripting (XSS).This issue affect |
| CVE-2026-32187 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-32191 | Analyzed | 未確認 | CWE-78 | Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network. |
| CVE-2026-32194 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network. |
| CVE-2026-3222 | Deferred | 未確認 | CWE-89 | The WP Maps plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'location_id' parameter in all versions up to, and including, 4.9.1. This is due to the plu |
| CVE-2026-32229 | Analyzed | 未確認 | CWE-290 | In JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabled |
| CVE-2026-32230 | Analyzed | 未確認 | CWE-862 | Uptime Kuma is an open source, self-hosted monitoring tool. From 2.0.0 to 2.1.3 , the GET /api/badge/:id/ping/:duration? endpoint in server/routers/api-router.js does not verify th |
| CVE-2026-32231 | Analyzed | 未確認 | CWE-306, CWE-345 | ZeptoClaw is a personal AI assistant. Prior to 0.7.6, the generic webhook channel trusts caller-supplied identity fields (sender, chat_id) from the request body and applies authori |
| CVE-2026-32232 | Analyzed | 未確認 | CWE-22, CWE-62 | ZeptoClaw is a personal AI assistant. Prior to 0.7.6, there is a Dangling Symlink Component Bypass, TOCTOU Between Validation and Use, and Hardlink Alias Bypass. This vulnerability |
| CVE-2026-32234 | Analyzed | 未確認 | CWE-89 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.10 and 8.6.36, an attacker with access to the master ke |
| CVE-2026-32235 | Undergoing Analysis | 未確認 | CWE-601 | Backstage is an open framework for building developer portals. Prior to 0.27.1, the experimental OIDC provider in @backstage/plugin-auth-backend is vulnerable to a redirect URI all |
| CVE-2026-32236 | Undergoing Analysis | 未確認 | CWE-918 | Backstage is an open framework for building developer portals. Prior to 0.27.1, a Server-Side Request Forgery (SSRF) vulnerability exists in @backstage/plugin-auth-backend when aut |
| CVE-2026-32237 | Analyzed | 未確認 | CWE-200 | Backstage is an open framework for building developer portals. Prior to 3.1.5, authenticated users with permission to execute scaffolder dry-runs can gain access to server-configur |
| CVE-2026-32238 | Modified | 未確認 | CWE-78 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 contain a Command injection vulnerability in the |
| CVE-2026-32239 | Analyzed | 未確認 | CWE-190, CWE-444 | Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly la |
| CVE-2026-3224 | Analyzed | 未確認 | CWE-287 | Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenticate as an ar |
| CVE-2026-32240 | Analyzed | 未確認 | CWE-197, CWE-444 | Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larg |
| CVE-2026-32241 | Analyzed | 未確認 | CWE-77 | Flannel is a network fabric for containers, designed for Kubernetes. The Flannel project includes an experimental Extension backend that allows users to easily prototype new backen |
| CVE-2026-32242 | Analyzed | 未確認 | CWE-362 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.11 and 8.6.37, Parse Server's built-in OAuth2 auth adap |
| CVE-2026-32243 | Analyzed | 未確認 | CWE-79 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, an at |
| CVE-2026-32245 | Analyzed | 未確認 | CWE-863 | Tinyauth is an authentication and authorization server. Prior to 5.0.3, the OIDC token endpoint does not verify that the client exchanging an authorization code is the same client |
| CVE-2026-32246 | Analyzed | 未確認 | CWE-287 | Tinyauth is an authentication and authorization server. Prior to 5.0.3, the OIDC authorization endpoint allows users with a TOTP-pending session (password verified, TOTP not yet co |
| CVE-2026-32247 | Analyzed | 未確認 | CWE-943 | Graphiti is a framework for building and querying temporal context graphs for AI agents. Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search |
| CVE-2026-32248 | Analyzed | 未確認 | CWE-943 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.12 and 8.6.38, an unauthenticated attacker can take ove |
| CVE-2026-32249 | Analyzed | 未確認 | CWE-476 | Vim is an open source, command line text editor. From 9.1.0011 to before 9.2.0137, Vim's NFA regex compiler, when encountering a collection containing a combining character as the |
| CVE-2026-3225 | Deferred | 未確認 | CWE-862 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized deletion of quiz question answers due to a missing capability check in the delete_question_ |
| CVE-2026-32251 | Analyzed | 未確認 | CWE-611 | Tolgee is an open-source localization platform. Prior to 3.166.3, the XML parsers used for importing Android XML resources (.xml) and .resx files don't disable external entity proc |
| CVE-2026-32254 | Analyzed | 未確認 | CWE-284 | Kube-router is a turnkey solution for Kubernetes networking. Prior to version 2.8.0, Kube-router's proxy module does not validate externalIPs or loadBalancer IPs before programming |
| CVE-2026-32255 | Analyzed | 未確認 | CWE-918 | Kan is an open-source project management tool. In versions 0.5.4 and below, the /api/download/attatchment endpoint has no authentication and no URL validation. The Attachment Downl |
| CVE-2026-32256 | Analyzed | 未確認 | CWE-835 | music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser (`parseExtensionObject()` in `lib/asf/AsfParser.ts:112-15 |
| CVE-2026-32259 | Analyzed | 未確認 | CWE-121 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails in the sixel encoder |
| CVE-2026-3226 | Deferred | 未確認 | CWE-862 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized email notification triggering due to missing capability checks on all 10 functions in the S |
| CVE-2026-32260 | Analyzed | 未確認 | CWE-78 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. From 2.7.0 to 2.7.1, A command injection vulnerability exists in Deno's node:child_process polyfill (shell: true mode) t |
| CVE-2026-32261 | Deferred | 未確認 | CWE-1336 | Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur. From version 3.0.0 to before versi |
| CVE-2026-32262 | Analyzed | 未確認 | CWE-22 | Craft CMS is a content management system (CMS). From version 4.0.0-RC1 to before version 4.17.5 and from version 5.0.0-RC1 to before version 5.9.11, the AssetsController->replaceFi |
| CVE-2026-32263 | Analyzed | 未確認 | CWE-470 | Craft CMS is a content management system (CMS). From version 5.6.0 to before version 5.9.11, in src/controllers/EntryTypesController.php, the $settings array from parse_str is pass |
| CVE-2026-32264 | Analyzed | 未確認 | CWE-470 | Craft CMS is a content management system (CMS). From version 4.0.0-RC1 to before version 4.17.5 and from version 5.0.0-RC1 to before version 5.9.11, there is a Behavior injection R |
| CVE-2026-32265 | Deferred | 未確認 | CWE-200 | The Amazon S3 for Craft CMS plugin provides an Amazon S3 integration for Craft CMS. In versions 2.0.2 through 2.2.4, unauthenticated users can view a list of buckets the plugin has |
| CVE-2026-32266 | Deferred | 未確認 | CWE-200 | The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS. In versions on the 2.x branch prior to 2.2.1, the `DefaultController->actio |
| CVE-2026-32267 | Analyzed | 未確認 | CWE-863 | Craft CMS is a content management system (CMS). From version 4.0.0-RC1 to before version 4.17.6 and from version 5.0.0-RC1 to before version 5.9.12, a low-privilege user (or an una |
| CVE-2026-32268 | Deferred | 未確認 | CWE-862 | The Azure Blob Storage for Craft CMS plugin provides an Azure Blob Storage integration for Craft CMS. In versions on the 2.x branch prior to 2.1.1, unauthenticated users can view a |
| CVE-2026-32269 | Analyzed | 未確認 | CWE-683 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.13 and 8.6.39, the OAuth2 authentication adapter does n |
| CVE-2026-3227 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. |
| CVE-2026-32273 | Analyzed | 未確認 | CWE-79 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, updat |
| CVE-2026-32274 | Modified | 未確認 | CWE-22 | Black is the uncompromising Python code formatter. Starting in version 24.3.0 and prior to version 26.3.1, Black writes a cache file, the name of which is computed from various for |
| CVE-2026-32275 | Analyzed | 未確認 | CWE-79 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. From version 1.3.10 to before version 2.17.0, an unsanitized JSONP callback parameter allows cross-or |
| CVE-2026-32276 | Analyzed | 未確認 | CWE-94 | Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an authenticated use |
| CVE-2026-32277 | Analyzed | 未確認 | CWE-79 | Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting (XSS) issue exists in the Cabinet Plugin l |
| CVE-2026-32278 | Analyzed | 未確認 | CWE-434, CWE-79 | Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, a Stored Cross-site |
| CVE-2026-32279 | Analyzed | 未確認 | CWE-918 | Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, a Server-Side Reques |
| CVE-2026-3228 | Deferred | 未確認 | CWE-79 | The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[nxs_fbembed]` shortcode in all versions up to, and includin |
| CVE-2026-32284 | Analyzed | 未確認 | CWE-125 | The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This can lead to an out-of-bounds read and a |
| CVE-2026-32285 | Modified | 未確認 | CWE-1285, CWE-129 | The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of servi |
| CVE-2026-32286 | Modified | 未確認 | CWE-1285, CWE-129 | The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing |
| CVE-2026-32287 | Analyzed | 未確認 | CWE-835 | Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as " |
| CVE-2026-3229 | Analyzed | 未確認 | CWE-122 | An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of an insufficien |
| CVE-2026-32290 | Analyzed | 未確認 | CWE-345 | The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files. An attacker-in-the-middle or a compromised update serv |
| CVE-2026-32291 | Analyzed | 未確認 | CWE-306 | The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console. This attack requires physically opening the device and connecting to the UAR |
| CVE-2026-32292 | Analyzed | 未確認 | CWE-307 | The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials. |
| CVE-2026-32293 | Analyzed | 未確認 | CWE-295 | The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates. The GL-RM1 does not verify certificates used for this connection, |
| CVE-2026-32294 | Analyzed | 未確認 | CWE-345, CWE-347 | JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corr |
| CVE-2026-32295 | Analyzed | 未確認 | CWE-307 | JetKVM before 0.5.4 does not rate limit login requests, enabling brute-force attempts to guess credentials. |
| CVE-2026-32296 | Awaiting Analysis | 未確認 | CWE-306 | Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved conf |
| CVE-2026-32297 | Analyzed | 未確認 | CWE-306 | The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries. Modified configuration files or system bina |
| CVE-2026-32298 | Analyzed | 未確認 | CWE-78 | The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands. |
| CVE-2026-32299 | Analyzed | 未確認 | CWE-284 | Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authoriz |
| CVE-2026-3230 | Analyzed | 未確認 | CWE-20 | Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protected communicat |
| CVE-2026-32300 | Analyzed | 未確認 | CWE-285, CWE-639 | Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authoriz |
| CVE-2026-32301 | Analyzed | 未確認 | CWE-918 | Centrifugo is an open-source scalable real-time messaging server. Prior to 6.7.0, Centrifugo is vulnerable to Server-Side Request Forgery (SSRF) when configured with a dynamic JWKS |
| CVE-2026-32302 | Analyzed | 未確認 | CWE-346 | OpenClaw is a personal AI assistant. Prior to 2026.3.11, browser-originated WebSocket connections could bypass origin validation when gateway.auth.mode was set to trusted-proxy and |
| CVE-2026-32303 | Analyzed | 未確認 | CWE-346, CWE-354, CWE-451, CWE-923 | Cryptomator encrypts data being stored on cloud infrastructure. Prior to version 1.19.1, an integrity check vulnerability allows an attacker to tamper with the vault configuration |
| CVE-2026-32304 | Modified | 未確認 | CWE-88, CWE-94 | Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to 3.0.14, the create_function(args, code) function passes both parameters direc |
| CVE-2026-32305 | Modified | 未確認 | CWE-1188, CWE-179, CWE-287 | Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS bypass through the TLS SNI pre-sni |
| CVE-2026-32306 | Analyzed | 未確認 | CWE-89 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the telemetry aggregation API accepts user-controlled aggregationType, aggregateColumnName, a |
| CVE-2026-32308 | Analyzed | 未確認 | CWE-79 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the Markdown viewer component renders Mermaid diagrams with securityLevel: "loose" and inject |
| CVE-2026-32309 | Modified | 未確認 | CWE-319 | Cryptomator encrypts data being stored on cloud infrastructure. Prior to version 1.19.1, the Hub-based unlock flow explicitly supports hub+http and consumes Hub endpoints from vaul |
| CVE-2026-3231 | Deferred | 未確認 | CWE-79 | The Checkout Field Editor (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field values submi |
| CVE-2026-32310 | Analyzed | 未確認 | CWE-22 | Cryptomator encrypts data being stored on cloud infrastructure. From version 1.6.0 to before version 1.19.1, vault configuration is parsed before its integrity is verified, and the |
| CVE-2026-32313 | Analyzed | 未確認 | CWE-354 | xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Prior to 3.1.5, XML nodes encrypted with either aes-128-gcm, aes-192-gcm, or aes-256-gcm lack |
| CVE-2026-32314 | Analyzed | 未確認 | CWE-248 | Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. Prior to 0.13.10, the Rust implementation of Yamux can panic when processing a crafted inbound Data |
| CVE-2026-32317 | Analyzed | 未確認 | CWE-346, CWE-354, CWE-451, CWE-923 | Cryptomator for Android offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 1.12.3, an integrity check vulnerability allows an attacke |
| CVE-2026-32318 | Undergoing Analysis | 未確認 | CWE-346, CWE-354, CWE-451, CWE-923 | Cryptomator for IOS offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 2.8.3, an integrity check vulnerability allows an attacker tam |
| CVE-2026-32319 | Analyzed | 未確認 | CWE-125 | Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. |
| CVE-2026-32320 | Analyzed | 未確認 | CWE-125 | Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a PathSwitchRequest containing UE Security Capabilities with zero-length NR e |
| CVE-2026-32321 | Analyzed | 未確認 | CWE-89 | ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the `actions/aj |
| CVE-2026-32322 | Analyzed | 未確認 | CWE-697 | soroban-sdk is a Rust SDK for Soroban contracts. Prior to 22.0.11, 23.5.3, and 25.3.0, The Fr (scalar field) types for BN254 and BLS12-381 in soroban-sdk compared values using thei |
| CVE-2026-32326 | Awaiting Analysis | 未確認 | CWE-306 | SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left |
| CVE-2026-32328 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in shufflehound Lemmony lemmony allows Cross Site Request Forgery.This issue affects Lemmony: from n/a through < 1.7.1. |
| CVE-2026-32329 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ays Pro Advanced Related Posts advanced-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe |
| CVE-2026-3233 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-32330 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Cross Site Request Forgery.This issue affects Photo Gallery by 10Web: from n/a |
| CVE-2026-32331 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Israpil Textmetrics webtexttool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Textmetrics: from |
| CVE-2026-32332 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a th |
| CVE-2026-32334 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme JobScout jobscout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobScout: from n/a thr |
| CVE-2026-32335 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Confer |
| CVE-2026-32336 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Rara Business rara-business allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rara Busines |
| CVE-2026-32337 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-32338 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Construction Landing Page construction-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This is |
| CVE-2026-32339 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Bakes And Cakes bakes-and-cakes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bakes An |
| CVE-2026-3234 | Awaiting Analysis | 未確認 | CWE-93 | A flaw was found in mod_proxy_cluster. This vulnerability, a Carriage Return Line Feed (CRLF) injection in the decodeenc() function, allows a remote attacker to bypass input valid |
| CVE-2026-32340 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Busi |
| CVE-2026-32341 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Benevolent benevolent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Benevolent: from n |
| CVE-2026-32342 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through <= 6.7.1.2. |
| CVE-2026-32343 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Magazine3 Easy Table of Contents easy-table-of-contents allows Cross Site Request Forgery.This issue affects Easy Table of Conten |
| CVE-2026-32344 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in desertthemes Corpiva corpiva allows Cross Site Request Forgery.This issue affects Corpiva: from n/a through <= 1.0.96. |
| CVE-2026-32345 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Perf |
| CVE-2026-32346 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agenc |
| CVE-2026-32347 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Restaurant and Cafe restaurant-and-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-32348 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in MadrasThemes MAS Videos masvideos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MAS Videos: from |
| CVE-2026-32349 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer allows Server Side Request Forgery.This issue affects Embed PDF Viewer: from n/a t |
| CVE-2026-32350 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wpradiant Chocolate House chocolate-house allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chocolat |
| CVE-2026-32351 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects |
| CVE-2026-32352 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows DOM-Based XSS.This issue |
| CVE-2026-32353 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in MailerPress Team MailerPress mailerpress allows Server Side Request Forgery.This issue affects MailerPress: from n/a through <= |
| CVE-2026-32354 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: fr |
| CVE-2026-32355 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through < 3.8.4.1. |
| CVE-2026-32356 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robosoft Robo Gallery robo-gallery allows DOM-Based XSS.This issue affects Rob |
| CVE-2026-32357 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Katsushi Kawamori Simple Blog Card simple-blog-card allows Server Side Request Forgery.This issue affects Simple Blog Card: from |
| CVE-2026-32358 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevelop Booking Calendar booking allows Blind SQL Injection.This issue affec |
| CVE-2026-32359 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Icon List Block icon-list-block allows Stored XSS.This issue affects |
| CVE-2026-3236 | Analyzed | 未確認 | CWE-863 | In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting in the new API key having a lifetime exceeding the original A |
| CVE-2026-32360 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in richplugins Rich Showcase for Google Reviews widget-google-reviews allows Stor |
| CVE-2026-32361 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marketing Fire Editorial Calendar editorial-calendar allows DOM-Based XSS.This |
| CVE-2026-32362 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Lev |
| CVE-2026-32363 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Funlus Oy WPLifeCycle free-php-version-info allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLife |
| CVE-2026-32364 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in redqteam Turbo Manager turbo-manager allows PHP Local File |
| CVE-2026-32365 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsing Archives collapsing-archives allows Blind SQL Injection.Th |
| CVE-2026-32366 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsing Categories collapsing-categories allows Blind SQL Injectio |
| CVE-2026-32367 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Yannick Lefebvre Modal Dialog modal-dialog allows Remote Code Inclusion.This issue affects Modal Dialog: |
| CVE-2026-32368 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in delphiknight Geo to Lat geo-to-lat allows Blind SQL Injection.This issue affec |
| CVE-2026-32369 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Medilink-Core medilink-core allows PHP Local Fi |
| CVE-2026-3237 | Analyzed | 未確認 | CWE-285 | In affected versions of Octopus Server it was possible for a low privileged user to manipulate an API request to change the signing key expiration and revocation time frames via an |
| CVE-2026-32370 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Influencer influencer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Influencer: from n |
| CVE-2026-32371 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Elegant Pink elegant-pink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elegant Pink: |
| CVE-2026-32372 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Retrie |
| CVE-2026-32373 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect |
| CVE-2026-32374 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme The Minimal the-minimal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Minimal: fro |
| CVE-2026-32375 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Dia |
| CVE-2026-32376 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Kalon kalon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kalon: from n/a through <= 1 |
| CVE-2026-32377 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pranayama |
| CVE-2026-32378 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Book Landing Page book-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Book |
| CVE-2026-32379 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Rara Academic rara-academic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rara Academi |
| CVE-2026-32380 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Numinous numinous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Numinous: from n/a thr |
| CVE-2026-32381 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme App Landing Page app-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App La |
| CVE-2026-32382 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Digital Download digital-download allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Digita |
| CVE-2026-32383 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Ridhi ridhi allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ridhi: from n/a through <= 1 |
| CVE-2026-32384 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpBookingly service-booking-manager allows P |
| CVE-2026-32385 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Configured Access Control |
| CVE-2026-32386 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in EnvoThemes Envo Extra envo-extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envo Extra: from |
| CVE-2026-32387 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-32388 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in linethemes GLB glb allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GLB: from n/a through <= 1.2.2. |
| CVE-2026-32390 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in linethemes Nanosoft nanosoft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nanosoft: from n/a th |
| CVE-2026-32391 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in linethemes SmartFix smartfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SmartFix: from n/a th |
| CVE-2026-32392 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Greenly greenly allows PHP Local File Incl |
| CVE-2026-32393 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Greenly Theme Addons greenly-addons allows |
| CVE-2026-32394 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-32395 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-beaver-builder-elementor allows Exploiting Incorrectly Configured Access Control Secur |
| CVE-2026-32396 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through < |
| CVE-2026-32397 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filter & Grids |
| CVE-2026-32398 | Deferred | 未確認 | CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Subrata Mal TeraWallet – For WooCommerce woo-wallet allows Leveraging R |
| CVE-2026-32399 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL |
| CVE-2026-3240 | Analyzed | 未確認 | CWE-79 | In Concrete CMS below version 9.4.8, a user with permission to edit a page with element Legacy form can perform a stored XSS attack towards high-privilege accounts via the Question |
| CVE-2026-32400 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemetechMount Boldman boldman allows PHP Local File Inclus |
| CVE-2026-32401 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoice |
| CVE-2026-32402 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Slide |
| CVE-2026-32403 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toocheke Toocheke Companion toocheke-companion allows DOM-Based XSS.This issue |
| CVE-2026-32404 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Studio99 Studio99 WP Monitor studio99-wp-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S |
| CVE-2026-32405 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.This issue affects Wood |
| CVE-2026-32406 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPClever WPC Product Bundles for WooCommerce woo-product-bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-32407 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPClever WPC Smart Wishlist for WooCommerce woo-smart-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-32408 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in themefusecom Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through < |
| CVE-2026-32409 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.T |
| CVE-2026-3241 | Analyzed | 未確認 | CWE-79 | In Concrete CMS below version 9.4.8, a stored cross-site scripting (XSS) vulnerability exists in the "Legacy Form" block. An authenticated user with permissions to create or edit f |
| CVE-2026-32410 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-32411 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simpma Embed Calendly embed-calendly-scheduling allows Stored XSS.This issue a |
| CVE-2026-32412 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Gift Up! Gift Up Gift Cards for WordPress and WooCommerce gift-up allows Server Side Request Forgery.This issue affects Gift Up |
| CVE-2026-32413 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect |
| CVE-2026-32414 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Remote Code Inclusion.This issue affects Advanced Wo |
| CVE-2026-32415 | Deferred | 未確認 | CWE-35 | Path Traversal: '.../...//' vulnerability in Bogdan Bendziukov Squeeze squeeze allows Path Traversal.This issue affects Squeeze: from n/a through <= 1.7.7. |
| CVE-2026-32416 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in bPlugins PDF Poster pdf-poster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF Poster: from n/ |
| CVE-2026-32417 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a throug |
| CVE-2026-32418 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordy Meow Meow Gallery meow-gallery allows Blind SQL Injection.This issue aff |
| CVE-2026-32419 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fernando Briano List category posts list-category-posts allows DOM-Based XSS.T |
| CVE-2026-3242 | Analyzed | 未確認 | CWE-79 | In Concrete CMS below version 9.4.8, a rogue administrator can add stored XSS via the Switch Language block. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 sc |
| CVE-2026-32420 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Ruben Garcia GamiPress gamipress allows Cross Site Request Forgery.This issue affects GamiPress: from n/a through <= 7.6.6. |
| CVE-2026-32421 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Agile Logix Post Timeline post-timeline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Timel |
| CVE-2026-32422 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in levelfourdevelopment WP EasyCart wp-easycart allows Blind SQL Injection.This i |
| CVE-2026-32423 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-32424 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Sprout Clients sprout-clients allows Stored XSS.This issue affects Sp |
| CVE-2026-32425 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in linknacional Payment Gateway Pix For GiveWP payment-gateway-pix-for-givewp allows Exploiting Incorrectly Configured Access Control Security L |
| CVE-2026-32426 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Medilazar Core medilazar-core allows PHP Local F |
| CVE-2026-32427 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vowelweb VW Education Lite vw-education-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Ed |
| CVE-2026-32428 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ays Pro Popup Like box ays-facebook-popup-likebox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-32429 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Sto |
| CVE-2026-32430 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor |
| CVE-2026-32431 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Astra Bulk Edit astra-bulk-edit allows DOM-Based XSS.This iss |
| CVE-2026-32432 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-32433 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople CP Contact Form with Paypal cp-contact-form-with-paypal allows Blin |
| CVE-2026-32434 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vowelweb VW Fitness vw-fitness allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Fitness: from n/ |
| CVE-2026-32435 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vowelweb VW Pet Shop vw-pet-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Pet Shop: from |
| CVE-2026-32436 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vowelweb VW Photography vw-photography allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Photogra |
| CVE-2026-32437 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vowelweb VW Portfolio vw-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Portfolio: f |
| CVE-2026-32438 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vowelweb VW School Education vw-school-education allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects V |
| CVE-2026-32439 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WebGeniusLab BigHearts bighearts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BigHearts: from n |
| CVE-2026-3244 | Analyzed | 未確認 | CWE-79 | In Concrete CMS below version 9.4.8, A stored cross-site scripting (XSS) vulnerability exists in the search block where page names and content are rendered without proper HTML enco |
| CVE-2026-32440 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ex-Themes WP Food wp-food allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Food: from n/a throug |
| CVE-2026-32441 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WebToffee Comments Import & Export comments-import-export-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels |
| CVE-2026-32442 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through <= 1.28. |
| CVE-2026-32443 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Josh Kohlbach Product Feed PRO for WooCommerce woo-product-feed-pro allows Cross Site Request Forgery.This issue affects Product |
| CVE-2026-32445 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elem |
| CVE-2026-32446 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects C |
| CVE-2026-32447 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Atar |
| CVE-2026-32448 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress |
| CVE-2026-32449 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Event Post themify-event-post allows Stored XSS.This issue a |
| CVE-2026-32450 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-w |
| CVE-2026-32451 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion B |
| CVE-2026-32452 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion B |
| CVE-2026-32453 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avada Core: fro |
| CVE-2026-32454 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Avada Core fusion-core allows DOM-Based XSS.This issue affects Ava |
| CVE-2026-32455 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows DOM-Based XSS.T |
| CVE-2026-32456 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/a |
| CVE-2026-32457 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploiting Incorrectly |
| CVE-2026-32458 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF |
| CVE-2026-32459 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Blind SQL Injection.Th |
| CVE-2026-32460 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 |
| CVE-2026-32461 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue |
| CVE-2026-32462 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows DOM-Based XSS.Th |
| CVE-2026-32482 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in deothemes Ona ona allows Upload a Web Shell to a Web Server.This issue affects Ona: from n/a through < 1.24. |
| CVE-2026-32483 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect |
| CVE-2026-32484 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in BoldGrid weForms weforms allows Object Injection.This issue affects weForms: from n/a through <= 1.6.26. |
| CVE-2026-32485 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User F |
| CVE-2026-32486 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wptravelengine Travel Booking travel-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trave |
| CVE-2026-32487 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-32488 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in wpeverest User Registration user-registration allows Privilege Escalation.This issue affects User Registration: from n/a through <= |
| CVE-2026-32489 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in bPlugins B Blocks b-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Blocks: from n/a thro |
| CVE-2026-32490 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP TripAdvisor Review Slider wp-tripadvisor-review-slider allows Sto |
| CVE-2026-32491 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP Review Slider wp-facebook-reviews allows Stored XSS.This issue af |
| CVE-2026-32492 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in Joe Dolson My Tickets my-tickets allows Identity Spoofing.This issue affects My Tickets: from n/a through <= 2.1.1. |
| CVE-2026-32493 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearc |
| CVE-2026-32494 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Configure |
| CVE-2026-32495 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP |
| CVE-2026-32496 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Trav |
| CVE-2026-32497 | Deferred | 未確認 | CWE-1390 | Weak Authentication vulnerability in PickPlugins User Verification user-verification allows Authentication Abuse.This issue affects User Verification: from n/a through <= 2.0.45. |
| CVE-2026-32498 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Configured Access Control |
| CVE-2026-32499 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL Injection.This issue affects Cha |
| CVE-2026-32500 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS MetaMax metamax allows PHP Local File Inclusion. |
| CVE-2026-32501 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wp-configurator WP Configurator Pro wp-configurator-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af |
| CVE-2026-32502 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Select-Themes Borgholm borgholm-marketing-agency-theme allows Object Injection.This issue affects Borgholm: from n/a through < 1. |
| CVE-2026-32503 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS Trendustry trendustry allows PHP Local File Incl |
| CVE-2026-32504 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS VintWood vintwood allows PHP Local File Inclusio |
| CVE-2026-32505 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS Kiddy kiddy allows PHP Local File Inclusion.This |
| CVE-2026-32506 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Edge-Themes Archicon archicon allows Object Injection.This issue affects Archicon: from n/a through < 1.7. |
| CVE-2026-32507 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Elated-Themes Leroux leroux allows Object Injection.This issue affects Leroux: from n/a through < 1.4. |
| CVE-2026-32508 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Mikado-Themes Halstein halstein allows Object Injection.This issue affects Halstein: from n/a through < 1.8. |
| CVE-2026-32509 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Edge-Themes Gracey gracey allows Object Injection.This issue affects Gracey: from n/a through < 1.4. |
| CVE-2026-32510 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Edge-Themes Kamperen kamperen allows Object Injection.This issue affects Kamperen: from n/a through < 1.3. |
| CVE-2026-32511 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Mikado-Themes Stål stal allows Object Injection.This issue affects Stål: from n/a through < 1.7. |
| CVE-2026-32512 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Edge-Themes Pelicula pelicula-video-production-and-movie-theme allows Object Injection.This issue affects Pelicula: from n/a thro |
| CVE-2026-32513 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows Object Injection.This issue affects JS Archive List: from n/a thr |
| CVE-2026-32514 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Anton Voytenko Petitioner petitioner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Petitioner: f |
| CVE-2026-32515 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: fro |
| CVE-2026-32516 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection. |
| CVE-2026-32517 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects |
| CVE-2026-32518 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes Gaea gaea allows Reflected XSS.This issue affects Gaea: from n/a thr |
| CVE-2026-32519 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Bit Apps Bit SMTP bit-smtp allows Privilege Escalation.This issue affects Bit SMTP: from n/a through <= 1.2.2. |
| CVE-2026-32520 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Andrew Munro / AffiliateWP RewardsWP rewardswp allows Privilege Escalation.This issue affects RewardsWP: from n/a through <= 1.0.4. |
| CVE-2026-32521 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface |
| CVE-2026-32522 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish WooCommerce Support Ticket System woocommerce-support-ticket-system allows |
| CVE-2026-32523 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in denishua WPJAM Basic wpjam-basic allows Using Malicious Files.This issue affects WPJAM Basic: from n/a through <= 6 |
| CVE-2026-32524 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow Photo Engine wplr-sync allows Upload a Web Shell to a Web Server.This issue affects Photo Engine: from n |
| CVE-2026-32525 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n |
| CVE-2026-32526 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery |
| CVE-2026-32527 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-insightly allows Exploiting Incorrectly Configu |
| CVE-2026-32528 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in don-themes Riode riode allows Reflected XSS.This issue affects Riode: from n/a |
| CVE-2026-32529 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in don-themes Molla molla allows Reflected XSS.This issue affects Molla: from n/a |
| CVE-2026-32530 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through <= 1.1.18. |
| CVE-2026-32531 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kunco kunco allows PHP Local File Inclusion.This iss |
| CVE-2026-32532 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Contact Form & Lead Form Elementor Builder lead-form-builder allows |
| CVE-2026-32533 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in LatePoint LatePoint latepoint allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a |
| CVE-2026-32534 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue a |
| CVE-2026-32535 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.Thi |
| CVE-2026-32536 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Down |
| CVE-2026-32537 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nK Visual Portfolio, Photo Gallery & Post Grid visual-portf |
| CVE-2026-32538 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Noor Alam SMTP Mailer smtp-mailer allows Retrieve Embedded Sensitive Data.This issue affects SMTP Mailer: from n/ |
| CVE-2026-32539 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Revisions revisionary allows Blind SQL Injection.Thi |
| CVE-2026-32540 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows Reflected XSS. |
| CVE-2026-32541 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Premmerce Premmerce Redirect Manager premmerce-redirect-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-32542 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Reflected XSS.This issue affe |
| CVE-2026-32543 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This iss |
| CVE-2026-32544 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spam allows Stored XSS.This issue |
| CVE-2026-32545 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Taboola Taboola Pixel taboola-pixel allows Reflected XSS.This issue affects Ta |
| CVE-2026-32546 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in StellarWP Restrict Content restrict-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restri |
| CVE-2026-3256 | Modified | 未確認 | CWE-338, CWE-340 | HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids. HTTP::Session defaults to using HTTP::Session::ID::SHA1 to generate session ids usi |
| CVE-2026-32562 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Folio Team PPWP password-protect-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPWP: fro |
| CVE-2026-32565 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff |
| CVE-2026-32567 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in icopydoc YML for Yandex Market yml-for-yandex-market allows Path Traversal.This issu |
| CVE-2026-3257 | Analyzed | 未確認 | UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library. UnQLite for Perl embeds the UnQLite library. Version 0.06 and earlier of the Pe | |
| CVE-2026-32573 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testin |
| CVE-2026-32583 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Webnus Inc. Modern Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modern Events C |
| CVE-2026-32586 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec |
| CVE-2026-32587 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP EasyPay: from |
| CVE-2026-32594 | Analyzed | 未確認 | CWE-306 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.40 and 9.6.0-alpha.14, the GraphQL WebSocket endpoint for subsc |
| CVE-2026-32595 | Analyzed | 未確認 | CWE-208 | Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 comtain BasicAuth middleware that allows username enumera |
| CVE-2026-32596 | Analyzed | 未確認 | CWE-200 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with `glances -w`, exposing |
| CVE-2026-32597 | Modified | 未確認 | CWE-345, CWE-347, CWE-863 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token cont |
| CVE-2026-32598 | Analyzed | 未確認 | CWE-532 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.24, the password reset flow logs the complete password reset URL — containing the plaintext reset |
| CVE-2026-3260 | Rejected | 未確認 | Rejected reason: The Undertow web server enforces a default maximum HTTP request entity size limit. Any request (including GET or HEAD) containing a body that exceeds this configur | |
| CVE-2026-32600 | Analyzed | 未確認 | CWE-354 | xml-security is a library that implements XML signatures and encryption. Prior to versions 2.3.1 and 1.13.9, XML nodes encrypted with either aes-128-gcm, aes-192-gcm, or aes-256-gc |
| CVE-2026-32606 | Deferred | 未確認 | CWE-522 | IncusOS is an immutable OS image dedicated to running Incus. Prior to 202603142010, the default configuration of systemd-cryptenroll as used by IncusOS through mkosi allows for an |
| CVE-2026-32607 | Analyzed | 未確認 | CWE-79 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, when |
| CVE-2026-32608 | Analyzed | 未確認 | CWE-78 | Glances is an open-source system cross-platform monitoring tool. The Glances action system allows administrators to configure shell commands that execute when monitoring thresholds |
| CVE-2026-32609 | Analyzed | 未確認 | CWE-200 | Glances is an open-source system cross-platform monitoring tool. The GHSA-gh4x fix (commit 5d3de60) addressed unauthenticated configuration secrets exposure on the `/api/v4/config` |
| CVE-2026-32610 | Analyzed | 未確認 | CWE-942 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, the Glances REST API web server ships with a default CORS configuration that sets `allow_or |
| CVE-2026-32611 | Analyzed | 未確認 | CWE-89 | Glances is an open-source system cross-platform monitoring tool. The GHSA-x46r fix (commit 39161f0) addressed SQL injection in the TimescaleDB export module by converting all SQL o |
| CVE-2026-32612 | Analyzed | 未確認 | CWE-79 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 6.6.2, stored XSS in the control panel color mode preference allows authenticated users with control |
| CVE-2026-32614 | Deferred | 未確認 | CWE-347 | Go ShangMi (Commercial Cryptography) Library (GMSM) is a cryptographic library that covers the Chinese commercial cryptographic public algorithms SM2/SM3/SM4/SM9/ZUC. Prior to 0.41 |
| CVE-2026-32615 | Analyzed | 未確認 | CWE-285 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, categ |
| CVE-2026-32616 | Deferred | 未確認 | CWE-74 | Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $_SERVER['HTTP_HOST'] without validation to construct email verification URLs in the re |
| CVE-2026-32617 | Analyzed | 未確認 | CWE-1188, CWE-942 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, On default installations where no |
| CVE-2026-32618 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, there |
| CVE-2026-32619 | Analyzed | 未確認 | CWE-285 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, users |
| CVE-2026-32620 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, non-s |
| CVE-2026-32621 | Deferred | 未確認 | CWE-1321 | Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Prior to 2.9.6, 2.10.5, 2.11.6, 2.12.3, and 2.13.2, a vulnerability exists in query plan |
| CVE-2026-32622 | Analyzed | 未確認 | CWE-20, CWE-74, CWE-77, CWE-862 | SQLBot is an intelligent data query system based on a large language model and RAG. Versions 1.5.0 and below contain a Stored Prompt Injection vulnerability that chains three flaws |
| CVE-2026-32626 | Analyzed | 未確認 | CWE-79 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, AnythingLLM Desktop contains a St |
| CVE-2026-32627 | Analyzed | 未確認 | CWE-295 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.37.2, when a cpp-httplib client is configured with a proxy and set_follow_location(true |
| CVE-2026-32628 | Analyzed | 未確認 | CWE-89 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in |
| CVE-2026-32630 | Analyzed | 未確認 | CWE-409 | file-type detects the file type of a file, stream, or data. From 20.0.0 to 21.3.1, a crafted ZIP file can trigger excessive memory growth during type detection in file-type when us |
| CVE-2026-32632 | Analyzed | 未確認 | CWE-346 | Glances is an open-source system cross-platform monitoring tool. Glances recently added DNS rebinding protection for the MCP endpoint, but prior to version 4.5.2, the main REST/Web |
| CVE-2026-32633 | Analyzed | 未確認 | CWE-200, CWE-522 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, the `/api/4/serverslist` endpoint returns raw server objects from |
| CVE-2026-32634 | Analyzed | 未確認 | CWE-346, CWE-522 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the di |
| CVE-2026-32635 | Analyzed | 未確認 | CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19. |
| CVE-2026-32636 | Analyzed | 未確認 | CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-17 and 6.9.13-42, the NewXMLTree method contains a bug that could resu |
| CVE-2026-32638 | Analyzed | 未確認 | CWE-639 | StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.4, the REST API `getUsers` endpoint in StudioCMS uses the attacker-controlled `r |
| CVE-2026-32640 | Modified | 未確認 | CWE-915, CWE-94 | SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access ins |
| CVE-2026-32642 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable J |
| CVE-2026-32647 | Modified | 未確認 | CWE-125 | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX work |
| CVE-2026-3266 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully |
| CVE-2026-32663 | Analyzed | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementati |
| CVE-2026-32666 | Awaiting Analysis | 未確認 | CWE-290 | WebCTRL systems that communicate over BACnet inherit the protocol's lack of network layer authentication. WebCTRL does not implement additional validation of BACnet traffic so an |
| CVE-2026-32669 | Analyzed | 未確認 | CWE-94 | Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products. |
| CVE-2026-32678 | Analyzed | 未確認 | CWE-288 | Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication. |
| CVE-2026-32680 | Deferred | 未確認 | CWE-276 | The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installation folder is customized to some non-default one, the folder |
| CVE-2026-32691 | Analyzed | 未確認 | CWE-708 | A race condition in the secrets management subsystem of Juju versions 3.0.0 through 3.6.18 allows an authenticated unit agent to claim ownership of a newly initialized secret. Betw |
| CVE-2026-32692 | Analyzed | 未確認 | CWE-285 | An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized |
| CVE-2026-32693 | Analyzed | 未確認 | CWE-284, CWE-778, CWE-863 | In Juju from version 3.0.0 through 3.6.18, the authorization of the "secret-set" tool is not performed correctly, which allows a grantee to update the secret content, and can lead |
| CVE-2026-32694 | Analyzed | 未確認 | CWE-343, CWE-639 | In Juju from version 3.0.0 through 3.6.18, when a secret owner grants permissions to a secret to a grantee, the secret owner relies exclusively on a predictable XID of the secret t |
| CVE-2026-32695 | Modified | 未確認 | CWE-74, CWE-917 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 3.6.11 and 3.7.0-ea.2, Traefik's Knative provider builds router rules by interpolating user-controlled values |
| CVE-2026-32696 | Analyzed | 未確認 | CWE-476 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In NanoMQ version 0.24.6, after enabling auth.http_auth (HTTP authentication), when a client connects to the b |
| CVE-2026-32697 | Analyzed | 未確認 | CWE-639 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 8.9.3, the `RecordHandler::getRecord()` method retrieves |
| CVE-2026-32698 | Analyzed | 未確認 | CWE-89 | OpenProject is an open-source, web-based project management software. Versions prior to 16.6.9, 17.0.6, 17.1.3, and 17.2.1 are vulnerable to an SQL injection attack via a custom fi |
| CVE-2026-32700 | Analyzed | 未確認 | CWE-362 | Devise is an authentication solution for Rails based on Warden. Prior to version 5.0.3, a race condition in Devise's Confirmable module allows an attacker to confirm an email addre |
| CVE-2026-32701 | Analyzed | 未確認 | CWE-1321, CWE-843 | Qwik is a performance-focused JavaScript framework. Versions prior to 1.19.2 improperly inferred arrays from dotted form field names during FormData parsing. By submitting mixed ar |
| CVE-2026-32702 | Analyzed | 未確認 | CWE-208 | Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent. From 2.7.0 to 2.8.0, the /api/auth/ |
| CVE-2026-32703 | Analyzed | 未確認 | CWE-79 | OpenProject is an open-source, web-based project management software. In versions prior to 16.6.9, 17.0.6, 17.1.3, and 17.2.1, the Repositories module did not properly escape filen |
| CVE-2026-32704 | Analyzed | 未確認 | CWE-285, CWE-732 | SiYuan is a personal knowledge management system. Prior to 3.6.1, POST /api/template/renderSprig lacks model.CheckAdminRole, allowing any authenticated user to execute arbitrary SQ |
| CVE-2026-32705 | Modified | 未確認 | CWE-121 | PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the BST telemetry probe writes a string terminator using a device-provided length without bounds. A mali |
| CVE-2026-32706 | Modified | 未確認 | CWE-120, CWE-787 | PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, The crsf_rc parser accepts an oversized variable-length known packet and copies it into a fixed 64-byte |
| CVE-2026-32707 | Modified | 未確認 | CWE-121 | PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, tattu_can contains an unbounded memcpy in its multi-frame assembly loop, allowing stack memory overwrite |
| CVE-2026-32708 | Modified | 未確認 | CWE-121 | PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the Zenoh uORB subscriber allocates a stack VLA directly from the incoming payload length without bounds |
| CVE-2026-32709 | Analyzed | 未確認 | CWE-22 | PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, An unauthenticated path traversal vulnerability in the PX4 Autopilot MAVLink FTP implementation allows a |
| CVE-2026-32710 | Analyzed | 未確認 | CWE-122 | MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_V |
| CVE-2026-32711 | Analyzed | 未確認 | CWE-22 | pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are vulnerable to Path Traversal through a maliciously crafted DICOMDIR ReferencedF |
| CVE-2026-32713 | Analyzed | 未確認 | CWE-670 | PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, A logic error in the PX4 Autopilot MAVLink FTP session validation uses incorrect boolean logic (&& inste |
| CVE-2026-32714 | Analyzed | 未確認 | CWE-89 | SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the KeyCache class in scitokens was vulnerable to SQL Injection because it used Python' |
| CVE-2026-32715 | Analyzed | 未確認 | CWE-863 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, The two generic system-preference |
| CVE-2026-32716 | Analyzed | 未確認 | CWE-285 | SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the Enforcer incorrectly validates scope paths by using a simple prefix match (startswi |
| CVE-2026-32717 | Analyzed | 未確認 | CWE-863 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, in multi-user mode, AnythingLLM b |
| CVE-2026-32719 | Analyzed | 未確認 | CWE-22, CWE-94 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, The ImportedPlugin.importCommunit |
| CVE-2026-32720 | Deferred | 未確認 | CWE-284 | The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e. logs, metrics and distributed traces). Prior to 0.2.1, due to a mis-w |
| CVE-2026-32721 | Analyzed | 未確認 | CWE-79 | LuCI is the OpenWrt Configuration Interface. Versions prior to both 24.10.5 and 25.12.0, contain a stored XSS vulnerability in the wireless scan modal, where SSID values from scan |
| CVE-2026-32722 | Analyzed | 未確認 | CWE-79 | Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Becau |
| CVE-2026-32723 | Analyzed | 未確認 | CWE-362 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.35, SandboxJS timers have an execution-quota bypass. A global tick state (`currentTicks.current`) is shared between sandb |
| CVE-2026-32724 | Analyzed | 未確認 | CWE-416 | PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc1, a heap-use-after-free is detected in the MavlinkShell::available() function. The issue is caused by a ra |
| CVE-2026-32725 | Analyzed | 未確認 | CWE-23 | SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing pa |
| CVE-2026-32726 | Analyzed | 未確認 | CWE-863 | SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scop |
| CVE-2026-32727 | Analyzed | 未確認 | CWE-22 | SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.7, the Enforcer is vulnerable to a path traversal attack where an attacker can use dot-dot |
| CVE-2026-32728 | Analyzed | 未確認 | CWE-79 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.15 and 8.6.41, an attacker who is allowed to upload fil |
| CVE-2026-32729 | Analyzed | 未確認 | CWE-307, CWE-799 | Runtipi is a personal homeserver orchestrator. Prior to 4.8.1, The Runtipi /api/auth/verify-totp endpoint does not enforce any rate limiting, attempt counting, or account lockout m |
| CVE-2026-32730 | Analyzed | 未確認 | CWE-287, CWE-305 | ApostropheCMS is an open-source content management framework. Prior to version 4.28.0, the bearer token authentication middleware in `@apostrophecms/express/index.js` (lines 386-38 |
| CVE-2026-32731 | Analyzed | 未確認 | CWE-22 | ApostropheCMS is an open-source content management framework. Prior to version 3.5.3 of `@apostrophecms/import-export`, The `extract()` function in `gzip.js` constructs file-write |
| CVE-2026-32732 | Deferred | 未確認 | CWE-80 | Lean 4 VS Code Extension is a Visual Studio Code extension for the Lean 4 proof assistant. Projects that use @leanprover/unicode-input-component are vulnerable to an XSS exploit in |
| CVE-2026-32733 | Analyzed | 未確認 | CWE-22 | Halloy is an IRC application written in Rust. Prior to commit 0f77b2cfc5f822517a256ea5a4b94bad8bfe38b6, the DCC receive flow did not sanitize filenames from incoming `DCC SEND` req |
| CVE-2026-32734 | Analyzed | 未確認 | CWE-79 | baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3. |
| CVE-2026-32735 | Deferred | 未確認 | CWE-20 | openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications. Starting in version 5.1.1 and prior to version 5.5.1, the parent POM f |
| CVE-2026-32736 | Analyzed | 未確認 | CWE-862 | The Hytale Modding Wiki is a free service for Hytale mods to host their documentation & wikis. An Insecure Direct Object Reference (IDOR) vulnerability in versions of the wiki prio |
| CVE-2026-32737 | Analyzed | 未確認 | CWE-284 | Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to ver |
| CVE-2026-32742 | Analyzed | 未確認 | CWE-915 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.17 and 8.6.42, an authenticated user can overwrite serv |
| CVE-2026-32743 | Analyzed | 未確認 | CWE-121 | PX4 is an open-source autopilot stack for drones and unmanned vehicles. Versions 1.17.0-rc2 and below are vulnerable to Stack-based Buffer Overflow through the MavlinkLogHandler, a |
| CVE-2026-32745 | Analyzed | 未確認 | CWE-319, CWE-614 | In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings |
| CVE-2026-32746 | Analyzed | 未確認 | CWE-120 | telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is |
| CVE-2026-32747 | Analyzed | 未確認 | CWE-184, CWE-22 | SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the globalCopyFiles API eads source files using filepath.Abs() with no workspace boundary check, rel |
| CVE-2026-32748 | Modified | 未確認 | CWE-413, CWE-416, CWE-826 | Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denia |
| CVE-2026-32749 | Analyzed | 未確認 | CWE-22, CWE-73 | SiYuan is a personal knowledge management system. In versions 3.6.0 and below, POST /api/import/importSY and POST /api/import/importZipMd write uploaded archives to a path derived |
| CVE-2026-32750 | Analyzed | 未確認 | CWE-22, CWE-552 | SiYuan is a personal knowledge management system. In versions 3.6.0 and below, POST /api/import/importStdMd passes the localPath parameter directly to model.ImportFromLocalPath wit |
| CVE-2026-32751 | Analyzed | 未確認 | CWE-79 | SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the mobile file tree (MobileFiles.ts) renders notebook names via innerHTML without HTML escaping when |
| CVE-2026-32752 | Analyzed | 未確認 | CWE-284 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. In versions 1.8.208 and below, the ThreadPolicy::edit() method contains a broken access control v |
| CVE-2026-32753 | Analyzed | 未確認 | CWE-80 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. In versions 1.8.208 and below, bypasses of the attachment view logic and SVG sanitizer make it po |
| CVE-2026-32754 | Analyzed | 未確認 | CWE-116, CWE-79 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.208 and below are vulnerable to Stored Cross-Site Scripting (XSS) through FreeScout' |
| CVE-2026-32755 | Analyzed | 未確認 | CWE-352 | Admidio is an open-source user management solution. In versions 5.0.6 and below, the save_membership action in modules/profile/profile_function.php saves changes to a member's role |
| CVE-2026-32756 | Analyzed | 未確認 | CWE-434 | Admidio is an open-source user management solution. Versions 5.0.6 and below contain a critical unrestricted file upload vulnerability in the Documents & Files module. Due to a des |
| CVE-2026-32757 | Analyzed | 未確認 | CWE-79 | Admidio is an open-source user management solution. In versions 5.0.6 and below, the eCard send handler uses a raw $_POST['ecard_message'] value instead of the HTMLPurifier-sanitiz |
| CVE-2026-32758 | Analyzed | 未確認 | CWE-22, CWE-863 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Versions 2.61.2 and below are vulnerable to |
| CVE-2026-32759 | Modified | 未確認 | CWE-190 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. In versions on the 2.x branch prior to 2.33 |
| CVE-2026-32760 | Analyzed | 未確認 | CWE-269, CWE-284 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. In versions 2.61.2 and below, any unauthent |
| CVE-2026-32761 | Analyzed | 未確認 | CWE-284, CWE-639, CWE-863 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Versions 2.61.0 and below contain a permiss |
| CVE-2026-32763 | Analyzed | 未確認 | CWE-89 | Kysely is a type-safe TypeScript SQL query builder. Versions up to and including 0.28.11 has a SQL injection vulnerability in JSON path compilation for MySQL and SQLite dialects. T |
| CVE-2026-32764 | Rejected | 未確認 | Rejected reason: This repository is no longer public. | |
| CVE-2026-32765 | Rejected | 未確認 | Rejected reason: This repository is no longer public. | |
| CVE-2026-32766 | Analyzed | 未確認 | CWE-436 | astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.6 and earlier, malformed PAX extensions were silently skipped when parsing tar archives. T |
| CVE-2026-32767 | Analyzed | 未確認 | CWE-863, CWE-89 | SiYuan is a personal knowledge management system. Versions 3.6.0 and below contain an authorization bypass vulnerability in the /api/search/fullTextSearchBlock endpoint. When the m |
| CVE-2026-32768 | Analyzed | 未確認 | CWE-284 | Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. In versions prior to 0.6.5, due to a miswritten NetworkPolicy, a malicious actor can piv |
| CVE-2026-32769 | Analyzed | 未確認 | CWE-284 | Fullchain is an umbrella project for deploying a ready-to-use CTF platform. In versions prior to 0.1.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from a subv |
| CVE-2026-32770 | Analyzed | 未確認 | CWE-248 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.19 and 8.6.43, a remote attacker can crash the Parse Se |
| CVE-2026-32771 | Analyzed | 未確認 | CWE-22 | The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e. logs, metrics and distributed traces). In versions prior to 0.2.2, th |
| CVE-2026-32772 | Analyzed | 未確認 | CWE-669 | telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR. |
| CVE-2026-32774 | Analyzed | 未確認 | CWE-79 | Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XS |
| CVE-2026-32775 | Analyzed | 未確認 | CWE-191 | libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an int |
| CVE-2026-32776 | Modified | 未確認 | CWE-476 | libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content. |
| CVE-2026-32777 | Modified | 未確認 | CWE-835 | libexpat before 2.7.5 allows an infinite loop while parsing DTD content. |
| CVE-2026-32778 | Modified | 未確認 | CWE-476 | libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition. |
| CVE-2026-3278 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS). The vulnera |
| CVE-2026-32794 | Analyzed | 未確認 | CWE-295 | Improper Certificate Validation vulnerability in Apache Airflow Provider for Databricks. Provider code did not validate certificates for connections to Databricks back-end which co |
| CVE-2026-32805 | Analyzed | 未確認 | CWE-22 | Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to ver |
| CVE-2026-32808 | Analyzed | 未確認 | CWE-22 | pyLoad is a free and open-source download manager written in Python. Versions before 0.5.0b3.dev97 are vulnerable to path traversal during password verification of certain encrypte |
| CVE-2026-32810 | Modified | 未確認 | CWE-732 | Halloy is an IRC application written in Rust. In versions on \*nix and macOS prior to commit f180e41061db393acf65bc99f5c5e7397586d9cb, halloy creates its config directory and files |
| CVE-2026-32811 | Analyzed | 未確認 | CWE-116, CWE-863 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. When using Heimdall in envoy gRPC decision API mode with versions 0.7.0-alpha through 0.17.10, |
| CVE-2026-32812 | Analyzed | 未確認 | CWE-918 | Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, unrestricted URL fetch in the SSO Metadata API can result in SSRF and local file reads. The SSO |
| CVE-2026-32813 | Analyzed | 未確認 | CWE-89 | Admidio is an open-source user management solution. Versions 5.0.6 and below are vulnerable to arbitrary SQL Injection through the MyList configuration feature. The MyList configur |
| CVE-2026-32815 | Analyzed | 未確認 | CWE-287 | SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the WebSocket endpoint (/ws) allows unauthenticated connections when specific URL parameters are prov |
| CVE-2026-32816 | Analyzed | 未確認 | CWE-352 | Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the delete, activate, and deactivate modes in modules/groups-roles/groups_roles.php perform des |
| CVE-2026-32817 | Analyzed | 未確認 | CWE-862 | Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the documents and files module does not verify whether the current user has permission to delet |
| CVE-2026-32818 | Analyzed | 未確認 | CWE-862 | Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the forum module in Admidio does not verify whether the current user has permission to delete f |
| CVE-2026-32828 | Analyzed | 未確認 | CWE-918 | Kargo manages and automates the promotion of software artifacts. In versions 1.4.0 through 1.6.3, 1.7.0-rc.1 through 1.7.8, 1.8.0-rc.1 through 1.8.11, and 1.9.0-rc.1 through 1.9.4, |
| CVE-2026-32829 | Modified | 未確認 | CWE-201, CWE-823 | lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0, decompressing invalid LZ4 data can leak sensitive information fr |
| CVE-2026-32836 | Modified | 未確認 | CWE-789 | dr_libs dr_flac.h version 0.13.3 and earlier (fixed in commits fefced4, 4f5a4cd, and 663239a) contain an uncontrolled memory allocation vulnerability in drflac__read_and_decode_met |
| CVE-2026-32837 | Modified | 未確認 | CWE-170 | miniaudio version 0.11.25 and earlier (fixed in commits 1df46ae and 1df46ae) contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allows attackers t |
| CVE-2026-32838 | Analyzed | 未確認 | CWE-319 | Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption. Attackers on the same network ca |
| CVE-2026-32839 | Analyzed | 未確認 | CWE-352 | Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrative actions b |
| CVE-2026-32840 | Analyzed | 未確認 | CWE-79 | Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inject arbitrary |
| CVE-2026-32841 | Modified | 未確認 | CWE-1108 | Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attack |
| CVE-2026-32842 | Analyzed | 未確認 | CWE-312 | Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by accessing conf |
| CVE-2026-32843 | Awaiting Analysis | 未確認 | CWE-79 | Location Aware Sensor System by Linkit ONE, up to commit f06bd20 (2023-04-26), contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attac |
| CVE-2026-32844 | Analyzed | 未確認 | CWE-79 | XinLiangCoder php_api_doc through commit 1ce5bbf contains a reflected cross-site scripting vulnerability in list_method.php that allows remote attackers to execute arbitrary JavaSc |
| CVE-2026-32845 | Deferred | 未確認 | CWE-190 | cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating sparse accessors that allows attackers to trigger out-of-bou |
| CVE-2026-32846 | Modified | 未確認 | CWE-22 | OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPa |
| CVE-2026-32850 | Analyzed | 未確認 | CWE-79 | MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a |
| CVE-2026-32851 | Modified | 未確認 | CWE-79 | MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a |
| CVE-2026-32852 | Analyzed | 未確認 | CWE-79 | MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a |
| CVE-2026-32853 | Analyzed | 未確認 | CWE-125 | LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server |
| CVE-2026-32854 | Analyzed | 未確認 | CWE-476 | LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c th |
| CVE-2026-32857 | Deferred | 未確認 | CWE-918 | Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vulnerability in the Playwright scraping service where network policy validation is |
| CVE-2026-32859 | Awaiting Analysis | 未確認 | CWE-79 | ByteDance DeerFlow versions prior to commit 5dbb362 contain a stored cross-site scripting vulnerability in the artifacts API that allows attackers to execute arbitrary scripts by u |
| CVE-2026-32865 | Analyzed | 未確認 | CWE-200, CWE-640 | OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'. An att |
| CVE-2026-32866 | Analyzed | 未確認 | CWE-79 | OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile. An authenticated attacker can inject parts of an |
| CVE-2026-32867 | Analyzed | 未確認 | CWE-425, CWE-639 | OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPu |
| CVE-2026-32868 | Analyzed | 未確認 | CWE-79 | OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in the 'My Information' screen. An authenticated attacker can injec |
| CVE-2026-32869 | Analyzed | 未確認 | CWE-79 | OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information. An authenticated attacker |
| CVE-2026-32873 | Analyzed | 未確認 | CWE-825, CWE-835 | ewe is a Gleam web server. Versions 0.8.0 through 3.0.4 contain a bug in the handle_trailers function where rejected trailer headers (forbidden or undeclared) cause an infinite loo |
| CVE-2026-32874 | Modified | 未確認 | CWE-401, CWE-772 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.4.0 through 5.11.0 contain an accumulating memory leak in JSON parsing larg |
| CVE-2026-32875 | Modified | 未確認 | CWE-190, CWE-787, CWE-835 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.10 through 5.11.0 are vulnerable to buffer overflow or infinite loop throug |
| CVE-2026-32877 | Analyzed | 未確認 | CWE-125 | Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check th |
| CVE-2026-32878 | Analyzed | 未確認 | CWE-1321 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.20 and 8.6.44, an attacker can bypass the default reque |
| CVE-2026-32879 | Analyzed | 未確認 | CWE-287 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Starting in version 0.10.0, a logic flaw in the universal secure verificati |
| CVE-2026-3288 | Analyzed | 未確認 | CWE-20 | A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can |
| CVE-2026-32880 | Analyzed | 未確認 | CWE-79 | ChurchCRM is an open-source church management system. Versions prior to 7.0.2 allow an admin user to edit JSON type system settings to store a JavaScript payload that can execute w |
| CVE-2026-32881 | Analyzed | 未確認 | CWE-183 | ewe is a Gleam web server. ewe is a Gleam web server. Versions 0.6.0 through 3.0.4 are vulnerable to authentication bypass or spoofed proxy-trust headers. Chunked transfer encoding |
| CVE-2026-32883 | Analyzed | 未確認 | CWE-347 | Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but criti |
| CVE-2026-32884 | Analyzed | 未確認 | CWE-295 | Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, i |
| CVE-2026-32886 | Analyzed | 未確認 | CWE-1321 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.24 and 8.6.47, remote clients can crash the Parse Serve |
| CVE-2026-32887 | Analyzed | 未確認 | CWE-362 | Effect is a TypeScript framework that consists of several packages that work together to help build TypeScript applications. Prior to version 3.20.0, when using `RpcServer.toWebHan |
| CVE-2026-32888 | Analyzed | 未確認 | CWE-89 | Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Versions contain an SQL Injection in the Items search functionality. |
| CVE-2026-32889 | Analyzed | 未確認 | CWE-835 | tinytag is a Python library for reading audio file metadata. Version 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the libra |
| CVE-2026-32890 | Analyzed | 未確認 | CWE-200, CWE-79 | Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server. In versions 1.4.1 and below, a stored Cross-site Scr |
| CVE-2026-32891 | Analyzed | 未確認 | CWE-212, CWE-311, CWE-80 | Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server. Versions 1.4.1 and below contain a stored XSS vulner |
| CVE-2026-32895 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.26 fail to enforce sender authorization in member and message subtype system event handlers, allowing unauthorized events to be enqueued. Attacker |
| CVE-2026-32896 | Modified | 未確認 | CWE-306 | The BlueBubbles webhook handler in OpenClaw versions prior to 2026.2.21 contains a passwordless fallback authentication path that allows unauthenticated webhook events in certain r |
| CVE-2026-32897 | Analyzed | 未確認 | CWE-320 | OpenClaw versions prior to 2026.2.22 reuse gateway.auth.token as a fallback hash secret for owner-ID prompt obfuscation when commands.ownerDisplay is set to hash and commands.owner |
| CVE-2026-32898 | Analyzed | 未確認 | CWE-807 | OpenClaw versions prior to 2026.2.23 contain an authorization bypass vulnerability in the ACP client that auto-approves tool calls based on untrusted toolCall.kind metadata and per |
| CVE-2026-32899 | Analyzed | 未確認 | CWE-863 | OpenClaw versions prior to 2026.2.25 fail to consistently apply sender-policy checks to reaction_* and pin_* non-message events before adding them to system-event context. Attacker |
| CVE-2026-32900 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32901 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32902 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32903 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32904 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32907 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32908 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32909 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32910 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32911 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32912 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2026-32913 | Analyzed | 未確認 | CWE-522 | OpenClaw before 2026.3.7 contains an improper header validation vulnerability in fetchWithSsrFGuard that forwards custom authorization headers across cross-origin redirects. Attack |
| CVE-2026-32914 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners to access owner |
| CVE-2026-32915 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf subagents to access the subagents control surface and resolve against parent requester scop |
| CVE-2026-32916 | Analyzed | 未確認 | CWE-266 | OpenClaw versions 2026.3.7 before 2026.3.11 contain an authorization bypass vulnerability where plugin subagent routes execute gateway methods through a synthetic operator client w |
| CVE-2026-32917 | Analyzed | 未確認 | CWE-78 | OpenClaw before 2026.3.13 contains a remote command injection vulnerability in the iMessage attachment staging flow that allows attackers to execute arbitrary commands on configure |
| CVE-2026-32918 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the session_status tool that allows sandboxed subagents to access parent or sibling session state. Atta |
| CVE-2026-32919 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing write-scoped callers to reach admin-only session reset logic. Attackers with operator.write scope |
| CVE-2026-32920 | Analyzed | 未確認 | CWE-829 | OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution. Attackers can |
| CVE-2026-32921 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.3.8 contains an approval bypass vulnerability in system.run where mutable script operands are not bound across approval and execution phases. Attackers can obt |
| CVE-2026-32922 | Analyzed | 未確認 | CWE-266 | OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens with broader scopes by |
| CVE-2026-32923 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in Discord guild reaction ingestion that fails to enforce member users and roles allowlist checks. Non-allo |
| CVE-2026-32924 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.12 contains an authorization bypass vulnerability where Feishu reaction events with omitted chat_type are misclassified as p2p conversations instead of group |
| CVE-2026-32933 | Analyzed | 未確認 | CWE-674 | AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service (DoS) attack. When mapping deeply nested ob |
| CVE-2026-32935 | Modified | 未確認 | CWE-208 | phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle |
| CVE-2026-32937 | Analyzed | 未確認 | CWE-129 | free5GC is an open source 5G core network. free5GC CHF prior to version 1.2.2 has an out-of-bounds slice access vulnerability in the CHF `nchf-convergedcharging` service. A valid a |
| CVE-2026-32938 | Analyzed | 未確認 | CWE-200, CWE-22, CWE-284 | SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the /api/lute/html2BlockDOM on the desktop copies local files pointed to by file:// links in pasted H |
| CVE-2026-32939 | Analyzed | 未確認 | CWE-178 | DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL validation logic and the H2 JDBC engi |
| CVE-2026-32940 | Analyzed | 未確認 | CWE-184, CWE-79 | SiYuan is a personal knowledge management system. In versions 3.6.0 and below, SanitizeSVG has an incomplete blocklist — it blocks data:text/html and data:image/svg+xml in href att |
| CVE-2026-32941 | Analyzed | 未確認 | CWE-770, CWE-789 | Sliver is a command and control framework that uses a custom Wireguard netstack. Versions 1.7.3 and below contain a Remote OOM (Out-of-Memory) vulnerability in the Sliver C2 server |
| CVE-2026-32942 | Analyzed | 未確認 | CWE-416 | PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs w |
| CVE-2026-32943 | Analyzed | 未確認 | CWE-367 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.28 and 8.6.48, the password reset mechanism does not en |
| CVE-2026-32944 | Analyzed | 未確認 | CWE-674 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.21 and 8.6.45, an unauthenticated attacker can crash th |
| CVE-2026-32945 | Analyzed | 未確認 | CWE-122 | PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name lengt |
| CVE-2026-32946 | Analyzed | 未確認 | CWE-693, CWE-863 | Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. In versions 2.15.1 and below, the Harden-Runner that allows bypass of the egress-policy: |
| CVE-2026-32947 | Analyzed | 未確認 | CWE-693, CWE-863 | Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. In versions 2.15.1 and below, a DNS over HTTPS (DoH) vulnerability allows attackers to by |
| CVE-2026-32948 | Analyzed | 未確認 | CWE-78 | sbt is a build tool for Scala, Java, and others. From version 0.9.5 to before version 1.12.7, on Windows, sbt uses Process("cmd", "/c", ...) to run VCS commands (git, hg, svn). The |
| CVE-2026-32949 | Analyzed | 未確認 | CWE-73, CWE-918 | SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a Server-Side Request Forgery (SSRF) vulnerability that allows a |
| CVE-2026-32950 | Analyzed | 未確認 | CWE-78, CWE-89 | SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource |
| CVE-2026-32951 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, an au |
| CVE-2026-32953 | Analyzed | 未確認 | CWE-303 | Tillitis TKey Client package is a Go package for a TKey client. Versions 1.2.0 and below contain a critical bug in the tkeyclient Go module which causes 1 out of every 256 User Sup |
| CVE-2026-32954 | Analyzed | 未確認 | CWE-89 | ERP is a free and open source Enterprise Resource Planning tool. In versions prior to 16.8.0 and 15.100.0, certain endpoints were vulnerable to time-based and boolean-based blind S |
| CVE-2026-32968 | Awaiting Analysis | 未確認 | CWE-78 | Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resu |
| CVE-2026-32969 | Awaiting Analysis | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s authentication method due to improper neutralization of speci |
| CVE-2026-32970 | Analyzed | 未確認 | CWE-636 | OpenClaw before 2026.3.11 contains a credential fallback vulnerability where unavailable local gateway.auth.token and gateway.auth.password SecretRefs are treated as unset, allowin |
| CVE-2026-32971 | Analyzed | 未確認 | CWE-451 | OpenClaw before 2026.3.11 contains an approval-integrity vulnerability in node-host system.run approvals that displays extracted shell payloads instead of the executed argv. Attack |
| CVE-2026-32972 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile m |
| CVE-2026-32973 | Analyzed | 未確認 | CWE-625 | OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that o |
| CVE-2026-32974 | Analyzed | 未確認 | CWE-347 | OpenClaw before 2026.3.12 contains an authentication bypass vulnerability in Feishu webhook mode when only verificationToken is configured without encryptKey, allowing acceptance o |
| CVE-2026-32975 | Analyzed | 未確認 | CWE-807 | OpenClaw before 2026.3.12 contains a weak authorization vulnerability in Zalouser allowlist mode that matches mutable group display names instead of stable group identifiers. Attac |
| CVE-2026-32976 | Analyzed | 未確認 | CWE-639 | OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing channel commands to mutate protected sibling-account configuration despite configWrites restrictio |
| CVE-2026-32977 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFile commit step that uses an unanchored container path during the final move opera |
| CVE-2026-32978 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.11 contains an approval integrity vulnerability where system.run approvals fail to bind mutable file operands for certain script runners like tsx and jiti. A |
| CVE-2026-32979 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.3.11 contains an approval integrity vulnerability allowing attackers to execute rewritten local code by modifying scripts between approval and execution when e |
| CVE-2026-32980 | Analyzed | 未確認 | CWE-770 | OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exha |
| CVE-2026-32981 | Modified | 未確認 | CWE-22 | A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied path |
| CVE-2026-32982 | Analyzed | 未確認 | CWE-532 | OpenClaw before 2026.3.13 contains an information disclosure vulnerability in the fetchRemoteMedia function that exposes Telegram bot tokens in error messages. When media downloads |
| CVE-2026-32983 | Modified | 未確認 | CWE-276 | Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows rem |
| CVE-2026-32984 | Modified | 未確認 | CWE-125 | Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can |
| CVE-2026-32985 | Analyzed | 未確認 | CWE-306, CWE-434 | Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality that allows remote attackers to |
| CVE-2026-32986 | Analyzed | 未確認 | CWE-116, CWE-79 | Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting improper sanitization of us |
| CVE-2026-32987 | Analyzed | 未確認 | CWE-294 | OpenClaw before 2026.3.13 allows bootstrap setup codes to be replayed during device pairing verification in src/infra/device-bootstrap.ts. Attackers can verify a valid bootstrap co |
| CVE-2026-32988 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in fs-bridge staged writes where temporary file creation and population are not pinned to a verified pare |
| CVE-2026-32989 | Analyzed | 未確認 | CWE-352, CWE-434 | Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile update |
| CVE-2026-3300 | Deferred | 未確認 | CWE-94 | The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculatio |
| CVE-2026-33001 | Modified | 未確認 | CWE-22, CWE-59 | Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted archives to write file |
| CVE-2026-33002 | Analyzed | 未確認 | CWE-350 | Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket endpoint by com |
| CVE-2026-33003 | Analyzed | 未確認 | CWE-312 | Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extende |
| CVE-2026-33004 | Analyzed | 未確認 | CWE-200 | Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture the |
| CVE-2026-33009 | Analyzed | 未確認 | CWE-362 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memory corruption). This is triggered by an MQTT `everest_extern |
| CVE-2026-33010 | Analyzed | 未確認 | CWE-942 | mcp-memory-service is an open-source memory backend for multi-agent systems. Prior to version 10.25.1, when the HTTP server is enabled (MCP_HTTP_ENABLED=true), the application conf |
| CVE-2026-33011 | Analyzed | 未確認 | CWE-670 | Nest is a framework for building scalable Node.js server-side applications. In versions 11.1.15 and below, a NestJS application using @nestjs/platform-fastify GET middleware can be |
| CVE-2026-33012 | Analyzed | 未確認 | CWE-770 | Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions 4.7.0 through 4.10.16 used an unbounded Conc |
| CVE-2026-33013 | Analyzed | 未確認 | CWE-835 | Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions prior to both 4.10.16 and 3.10.5 do not corre |
| CVE-2026-33014 | Analyzed | 未確認 | CWE-863 | EVerest is an EV charging software stack. Prior to version 2026.02.0, during RemoteStop processing, a delayed authorization response restores `authorized` back to true, defeating t |
| CVE-2026-33015 | Analyzed | 未確認 | CWE-863 | EVerest is an EV charging software stack. Prior to version 2026.02.0, even immediately after CSMS performs a RemoteStop (StopTransaction), the EVSE can return to `PrepareCharging` |
| CVE-2026-33017 | Analyzed | 掲載 | CWE-306, CWE-94, CWE-95 | Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building |
| CVE-2026-33022 | Analyzed | 未確認 | CWE-129 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Versions 0.60.0 through 1.0.0, 1.1.0 through 1.3.2, 1.4.0 through 1.6.0, 1.7.0 through 1. |
| CVE-2026-33024 | Analyzed | 未確認 | CWE-918 | AVideo is a video-sharing Platform. Versions prior to 8.0 contain a Server-Side Request Forgery vulnerability (CWE-918) in the public thumbnail endpoints getImage.php and getImageM |
| CVE-2026-33025 | Analyzed | 未確認 | CWE-89 | AVideo is a video-sharing Platform. Versions prior to 8.0 contain a SQL Injection vulnerability in the getSqlFromPost() method of Object.php. The $_POST['sort'] array keys are used |
| CVE-2026-33026 | Analyzed | 未確認 | CWE-312, CWE-347, CWE-354 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives a |
| CVE-2026-33027 | Analyzed | 未確認 | CWE-22, CWE-73 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui configuration improperly handles URL-encoded traversal sequences. When specially cra |
| CVE-2026-33028 | Analyzed | 未確認 | CWE-362 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui application is vulnerable to a Race Condition. Due to the complete absence of synchr |
| CVE-2026-33029 | Analyzed | 未確認 | CWE-20 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, an input validation vulnerability in the logrotate configuration allows an authenticated user to |
| CVE-2026-33030 | Analyzed | 未確認 | CWE-639, CWE-78 | Nginx UI is a web user interface for the Nginx web server. In versions 2.3.3 and prior, Nginx-UI contains an Insecure Direct Object Reference (IDOR) vulnerability that allows any a |
| CVE-2026-33032 | Modified | 未確認 | CWE-306 | Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, the nginx-ui MCP (Model Context Protocol) integration exposes two HTTP endpoints: /mcp and / |
| CVE-2026-33035 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions 25.0 and below, there is a reflected XSS vulnerability that allows unauthenticated attackers to execute arbitrary JavaScri |
| CVE-2026-33036 | Analyzed | 未確認 | CWE-776 | fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Versions 4.0.0-beta.3 through 5.5.5 contain a bypass vulnerability where nume |
| CVE-2026-33037 | Analyzed | 未確認 | CWE-1188 | WWBN AVideo is an open source video platform. In versions 25.0 and below, the official Docker deployment files (docker-compose.yml, env.example) ship with the admin password set to |
| CVE-2026-33038 | Analyzed | 未確認 | CWE-306 | WWBN AVideo is an open source video platform. Versions 25.0 and below are vulnerable to unauthenticated application takeover through the install/checkConfiguration.php endpoint. in |
| CVE-2026-33039 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions 25.0 and below, the plugin/LiveLinks/proxy.php endpoint validates user-supplied URLs against internal/private networks usi |
| CVE-2026-33040 | Analyzed | 未確認 | CWE-190 | libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.49.3, the Gossipsub implementation accepts attacker-controlled PRUNE |
| CVE-2026-33041 | Analyzed | 未確認 | CWE-200 | WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the application's password hashing algorithm to any unauthenticated |
| CVE-2026-33042 | Analyzed | 未確認 | CWE-287 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.29 and 8.6.49, a user can sign up without providing cre |
| CVE-2026-33043 | Analyzed | 未確認 | CWE-942 | WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/phpsessionid.json.php exposes the current PHP session ID to any unauthenticated request. The allo |
| CVE-2026-33044 | Analyzed | 未確認 | CWE-79 | Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2020.02 and prior to version 2026.01, an authenticated party c |
| CVE-2026-33045 | Modified | 未確認 | CWE-79 | Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2025.02 and prior to version 2026.01 the "remaining charge tim |
| CVE-2026-33046 | Analyzed | 未確認 | CWE-22, CWE-78 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.12, due to vulnerabilities in TeXLive and |
| CVE-2026-33051 | Analyzed | 未確認 | CWE-79 | Craft CMS is a content management system (CMS). In versions 5.9.0-beta.1 through 5.9.10, the revision/draft context menu in the element editor renders the creator’s fullName as raw |
| CVE-2026-33053 | Analyzed | 未確認 | CWE-639 | Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the delete_api_key_route() endpoint accepts an api_key_id path parameter |
| CVE-2026-33054 | Analyzed | 未確認 | CWE-22 | Mesop is a Python-based UI framework that allows users to build web applications. Versions 1.2.2 and below contain a Path Traversal vulnerability that allows any user supplying an |
| CVE-2026-33055 | Analyzed | 未確認 | CWE-843 | tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is non |
| CVE-2026-33056 | Analyzed | 未確認 | CWE-61 | tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir function uses fs::metadata() to che |
| CVE-2026-33057 | Analyzed | 未確認 | CWE-94 | Mesop is a Python-based UI framework that allows users to build web applications. In versions 1.2.2 and below, an explicit web endpoint inside the ai/ testing module infrastructure |
| CVE-2026-33058 | Analyzed | 未確認 | CWE-89 | Kanboard is project management software focused on Kanban methodology. Versions prior to 1.2.51 have an authenticated SQL injection vulnerability. Attackers with the permission to |
| CVE-2026-3306 | Analyzed | 未確認 | CWE-639 | An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project to modify issu |
| CVE-2026-33060 | Analyzed | 未確認 | CWE-918 | CKAN MCP Server is a tool for querying CKAN open data portals. Versions prior to 0.4.85 provide tools including ckan_package_search and sparql_query that accept a base_url paramete |
| CVE-2026-33061 | Analyzed | 未確認 | CWE-79 | Jexactyl is a customisable game management panel and billing system. Commits after 025e8dbb0daaa04054276bda814d922cf4af58da and before e28edb204e80efab628d1241198ea4f079779cfd inje |
| CVE-2026-33062 | Analyzed | 未確認 | CWE-284 | free5GC is an open source 5G core network. free5GC NRF prior to version 1.4.2 has an Improper Input Validation vulnerability leading to Denial of Service. All deployments of free5G |
| CVE-2026-33063 | Analyzed | 未確認 | CWE-476 | free5GC is an open source 5G core network. free5GC AUSF prior to version 1.4.2 has is an Improper Null Check vulnerability leading to Denial of Service. All deployments of free5GC |
| CVE-2026-33064 | Analyzed | 未確認 | CWE-476, CWE-478 | Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to 1.4.2 are vulnerable to procedure panic caused by Nil Pointer Der |
| CVE-2026-33065 | Analyzed | 未確認 | CWE-209 | Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream 400 Bad Reque |
| CVE-2026-33066 | Analyzed | 未確認 | CWE-79 | SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the backend renderREADME function uses lute.New() without calling SetSanitize(true), allowing raw HTM |
| CVE-2026-33067 | Analyzed | 未確認 | CWE-79 | SiYuan is a personal knowledge management system. Versions 3.6.0 and below render package metadata fields (displayName, description) using template literals without HTML escaping. |
| CVE-2026-33068 | Analyzed | 未確認 | CWE-807 | Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled .claude/settings.json, before determ |
| CVE-2026-33069 | Analyzed | 未確認 | CWE-125 | PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsip_multipart_parse(). After bo |
| CVE-2026-33070 | Analyzed | 未確認 | CWE-306 | FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.8.0, a missing-authentication vulnerability in the deleteShareLink endpoint allows any unauthenti |
| CVE-2026-33071 | Analyzed | 未確認 | CWE-434, CWE-552 | FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.8.0, the WebDAV upload endpoint accepts any file extension including .phtml, .php5, .htaccess, an |
| CVE-2026-33072 | Analyzed | 未確認 | CWE-1188, CWE-798 | FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.9.0, a hardcoded default encryption key (default_please_change_this_key) is used for all cryptogr |
| CVE-2026-33073 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, the d |
| CVE-2026-33074 | Analyzed | 未確認 | CWE-269, CWE-285 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, a use |
| CVE-2026-33075 | Analyzed | 未確認 | CWE-494, CWE-829 | FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code execution and secret exfiltration b |
| CVE-2026-3308 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow vulnerability in 'pdf-image.c' in Artifex's MuPDF version 1.27.0 allows an attacker to maliciously craft a PDF that can trigger an integer overflow within the ' |
| CVE-2026-33080 | Analyzed | 未確認 | CWE-79, CWE-80 | Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.8.4 and 5.0.0 through 5.3.4 have two Filament Table summarizers (Ran |
| CVE-2026-33081 | Analyzed | 未確認 | CWE-918 | PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Versions 0.8.2 and below have a Blind SSRF vulnerability in the /download endpoint. |
| CVE-2026-33123 | Analyzed | 未確認 | CWE-400, CWE-407 | pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. |
| CVE-2026-33124 | Analyzed | 未確認 | CWE-287 | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Versions prior to 0.17.0-beta1 allow any authenticated user to change their own passw |
| CVE-2026-33125 | Analyzed | 未確認 | CWE-285 | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In versions 0.16.2 and below, users with the viewer role can delete admin and low-pri |
| CVE-2026-33126 | Analyzed | 未確認 | CWE-918 | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to version 0.16.3, the /ffprobe endpoint accepts arbitrary user-controlled URLs |
| CVE-2026-33128 | Analyzed | 未確認 | CWE-93 | H3 is a minimal H(TTP) framework. In versions prior to 1.15.6 and between 2.0.0 through 2.0.1-rc.14, createEventStream is vulnerable to Server-Sent Events (SSE) injection due to mi |
| CVE-2026-33129 | Analyzed | 未確認 | CWE-208 | H3 is a minimal H(TTP) framework. Versions 2.0.1-beta.0 through 2.0.0-rc.8 contain a Timing Side-Channel vulnerability in the requireBasicAuth function due to the use of unsafe str |
| CVE-2026-33130 | Analyzed | 未確認 | CWE-1336, CWE-98 | Uptime Kuma is an open source, self-hosted monitoring tool. In versions 1.23.0 through 2.2.0, the fix from GHSA-vffh-c9pq-4crh doesn't fully work to preventServer-side Template Inj |
| CVE-2026-33131 | Analyzed | 未確認 | CWE-290 | H3 is a minimal H(TTP) framework. Versions 2.0.0-0 through 2.0.1-rc.14 contain a Host header spoofing vulnerability in the NodeRequestUrl (which extends FastURL) which allows middl |
| CVE-2026-33132 | Analyzed | 未確認 | CWE-863 | ZITADEL is an open source identity management platform. Versions prior to 3.4.9 and 4.0.0 through 4.12.2 allowed users to bypass organization enforcement during authentication. Zit |
| CVE-2026-33133 | Analyzed | 未確認 | CWE-89 | WeGIA is a web manager for charitable institutions. In versions 3.6.5 and 3.6.6, the loadBackupDB() function imports SQL files from uploaded backup archives without any content val |
| CVE-2026-33134 | Analyzed | 未確認 | CWE-89 | WeGIA is a web manager for charitable institutions. Versions 3.6.5 and below contain an authenticated SQL Injection vulnerability in the html/matPat/restaurar_produto.php endpoint. |
| CVE-2026-33135 | Analyzed | 未確認 | CWE-79 | WeGIA is a web manager for charitable institutions. Versions 3.6.6 and below have a Reflected Cross-Site Scripting (XSS) vulnerability in the novo_memorandoo.php endpoint. An attac |
| CVE-2026-33136 | Analyzed | 未確認 | CWE-79 | WeGIA is a web manager for charitable institutions. Versions 3.6.6 and below have a Reflected Cross-Site Scripting (XSS) vulnerability in the listar_memorandos_ativos.php endpoint. |
| CVE-2026-33139 | Analyzed | 未確認 | CWE-184 | PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a security v |
| CVE-2026-33140 | Analyzed | 未確認 | CWE-79 | PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a stored Cro |
| CVE-2026-33142 | Analyzed | 未確認 | CWE-89 | OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.34, the fix for CVE-2026-32306 (ClickHouse SQL injection via aggregate query parameters) |
| CVE-2026-33143 | Analyzed | 未確認 | CWE-345 | OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.34, the WhatsApp POST webhook handler (/notification/whatsapp/webhook) processes incoming |
| CVE-2026-33144 | Analyzed | 未確認 | CWE-787 | GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow (write) vulnerability was discovered in GPAC MP4Box. The vulnerability exists in |
| CVE-2026-33147 | Analyzed | 未確認 | CWE-121 | GMT is an open source collection of command-line tools for manipulating geographic and Cartesian data sets. In versions from 6.6.0 and prior, a stack-based buffer overflow vulnerab |
| CVE-2026-33148 | Analyzed | 未確認 | CWE-74 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the FDC (USDA FoodData Central) search endpoint con |
| CVE-2026-33149 | Analyzed | 未確認 | CWE-644 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Versions up to and including 2.5.3 set ALLOWED_HOSTS = '*' by default, which ca |
| CVE-2026-3315 | Analyzed | 未確認 | CWE-250, CWE-276, CWE-732 | Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Visionline on Windows al |
| CVE-2026-33150 | Modified | 未確認 | CWE-416, CWE-825 | libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the io_uring subsystem of libfuse allows |
| CVE-2026-33151 | Analyzed | 未確認 | CWE-20, CWE-754 | Socket.IO is an open source, real-time, bidirectional, event-based, communication framework. Prior to versions 3.3.5, 3.4.4, and 4.2.6, a specially crafted Socket.IO packet can mak |
| CVE-2026-33152 | Analyzed | 未確認 | CWE-307 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, Tandoor Recipes configures Django REST Framework wi |
| CVE-2026-33153 | Analyzed | 未確認 | CWE-89 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the Recipe API endpoint exposes a hidden `?debug=tr |
| CVE-2026-33154 | Analyzed | 未確認 | CWE-1336, CWE-78, CWE-94 | dynaconf is a configuration management tool for Python. Prior to version 3.2.13, Dynaconf is vulnerable to Server-Side Template Injection (SSTI) due to unsafe template evaluation i |
| CVE-2026-33155 | Analyzed | 未確認 | CWE-400, CWE-770 | DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler _RestrictedUnpickler validates whic |
| CVE-2026-33156 | Analyzed | 未確認 | CWE-426, CWE-427 | ScreenToGif is a screen recording tool. In versions from 2.42.1 and prior, ScreenToGif is vulnerable to DLL sideloading via version.dll . When the portable executable is run from a |
| CVE-2026-33157 | Analyzed | 未確認 | CWE-470 | Craft CMS is a content management system (CMS). From version 5.6.0 to before version 5.9.13, a Remote Code Execution (RCE) vulnerability exists in Craft CMS, it can be exploited by |
| CVE-2026-33158 | Analyzed | 未確認 | CWE-639 | Craft CMS is a content management system (CMS). From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, a low-privileged authenticated |
| CVE-2026-33159 | Analyzed | 未確認 | CWE-306, CWE-862 | Craft CMS is a content management system (CMS). From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, guest users can access Config S |
| CVE-2026-33160 | Analyzed | 未確認 | CWE-639, CWE-862 | Craft CMS is a content management system (CMS). From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, an unauthenticated user can cal |
| CVE-2026-33161 | Analyzed | 未確認 | CWE-200, CWE-862 | Craft CMS is a content management system (CMS). From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, a low-privileged authenticated |
| CVE-2026-33162 | Analyzed | 未確認 | CWE-285, CWE-862 | Craft CMS is a content management system (CMS). From version 5.3.0 to before version 5.9.14, an authenticated control panel user with only accessCp can move entries across sections |
| CVE-2026-33163 | Analyzed | 未確認 | CWE-200 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.35 and 8.6.50, when a `Parse.Cloud.afterLiveQueryEvent` |
| CVE-2026-33164 | Analyzed | 未確認 | CWE-122, CWE-476 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic_parameter_set::set_de |
| CVE-2026-33165 | Analyzed | 未確認 | CWE-787 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a crafted HEVC bitstream causes an out-of-bounds heap write confirmed by AddressSanitiz |
| CVE-2026-33166 | Analyzed | 未確認 | CWE-22 | Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. The Allure report generator prior to version 2.38.0 is vulnerable to an arbitrary file re |
| CVE-2026-33167 | Analyzed | 未確認 | CWE-79 | Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does not properly escape ex |
| CVE-2026-33168 | Deferred | 未確認 | CWE-79 | Action View provides conventions and helpers for building web pages with the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when a blank string is used as an HTM |
| CVE-2026-33169 | Analyzed | 未確認 | CWE-1333, CWE-400 | Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. `NumberToDelimitedConverter` uses a lookahead-based regular expression |
| CVE-2026-33170 | Analyzed | 未確認 | CWE-79 | Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `SafeBuffer#%` does n |
| CVE-2026-33171 | Analyzed | 未確認 | CWE-22 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.14 and 6.7.0, authenticated Control Panel users could read arbitrary `.json`, `.yaml`, |
| CVE-2026-33172 | Analyzed | 未確認 | CWE-79 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.14 and 6.7.0, a stored XSS vulnerability in SVG asset reuploads allows authenticated u |
| CVE-2026-33173 | Analyzed | 未確認 | CWE-925 | Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` accepts arbitrary meta |
| CVE-2026-33174 | Analyzed | 未確認 | CWE-789 | Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when serving files through Active Storage's prox |
| CVE-2026-33176 | Analyzed | 未確認 | CWE-400, CWE-770 | Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Support number |
| CVE-2026-33177 | Analyzed | 未確認 | CWE-862 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.14 and 6.7.0, low-privileged Control Panel users could create taxonomy terms by submit |
| CVE-2026-33179 | Analyzed | 未確認 | CWE-476 | libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in fuse_uring_init_queue allows |
| CVE-2026-33180 | Deferred | 未確認 | CWE-200, CWE-201 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.0, when setting headers in HTTP requests, the internal |
| CVE-2026-33182 | Analyzed | 未確認 | CWE-522, CWE-918 | Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, when building the request URL, Saloon combined the connector's base URL w |
| CVE-2026-33183 | Analyzed | 未確認 | CWE-22 | Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, fixture names were used to build file paths under the configured fixture |
| CVE-2026-33185 | Analyzed | 未確認 | CWE-918 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, the g |
| CVE-2026-33186 | Modified | 未確認 | CWE-285, CWE-551 | gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-heade |
| CVE-2026-33187 | Rejected | 未確認 | Rejected reason: Further research determined the issue originates from a different product. | |
| CVE-2026-33188 | Rejected | 未確認 | Rejected reason: Further research determined the issue originates from a different product. | |
| CVE-2026-33189 | Rejected | 未確認 | Rejected reason: Further research determined the issue originates from a different product. | |
| CVE-2026-33191 | Analyzed | 未確認 | CWE-158, CWE-248 | Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to 1.4.2 are vulnerable to null byte injection in URL path parameter |
| CVE-2026-33192 | Analyzed | 未確認 | CWE-209 | Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream 400 Bad Reque |
| CVE-2026-33194 | Analyzed | 未確認 | CWE-22 | SiYuan is a personal knowledge management system. Prior to version 3.6.2, the `IsSensitivePath()` function in `kernel/util/path.go` uses a denylist approach that was recently expan |
| CVE-2026-33195 | Modified | 未確認 | CWE-22 | Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage's `DiskService#path_for` does not |
| CVE-2026-33201 | Awaiting Analysis | 未確認 | CWE-489 | Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code vulnerability. If this vulnerability is exploited, files or configurations on the affe |
| CVE-2026-33202 | Analyzed | 未確認 | CWE-74 | Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage's `DiskService#delete_prefixed` p |
| CVE-2026-33203 | Analyzed | 未確認 | CWE-248, CWE-306 | SiYuan is a personal knowledge management system. Prior to version 3.6.2, the SiYuan kernel WebSocket server accepts unauthenticated connections when a specific "auth keepalive" qu |
| CVE-2026-33204 | Analyzed | 未確認 | CWE-400 | SimpleJWT is a simple JSON web token library written in PHP. Prior to version 1.1.1, an unauthenticated attacker can perform a Denial of Service via JWE header tampering when PBES2 |
| CVE-2026-33205 | Analyzed | 未確認 | CWE-918 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a Server-Side Request Forgery vulnerability in the back |
| CVE-2026-33206 | Analyzed | 未確認 | CWE-23 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre' handl |
| CVE-2026-33209 | Analyzed | 未確認 | CWE-79 | Avo is a framework to create admin panels for Ruby on Rails apps. Prior to version 3.30.3, a reflected cross-site scripting (XSS) vulnerability exists in the return_to query parame |
| CVE-2026-3321 | Deferred | 未確認 | CWE-639 | A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/{EVENTID}/{TIMESTAMP}/' endpoint. Exploiting this vulnerability would allow |
| CVE-2026-33210 | Modified | 未確認 | CWE-134 | Ruby JSON is a JSON implementation for Ruby. From version 2.14.0 to before versions 2.15.2.1, 2.17.1.2, and 2.19.2, a format string injection vulnerability can lead to denial of se |
| CVE-2026-33211 | Modified | 未確認 | CWE-22 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, t |
| CVE-2026-33215 | Analyzed | 未確認 | CWE-287, CWE-488 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The nats-server provides an MQTT client interface. Prior to versions 2.11.15 and 2.1 |
| CVE-2026-33216 | Modified | 未確認 | CWE-213, CWE-256 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, for MQTT deployments using usercodes/passwords |
| CVE-2026-33217 | Modified | 未確認 | CWE-425, CWE-863 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using ACLs on message subjects, these ACL |
| CVE-2026-33218 | Modified | 未確認 | CWE-1286, CWE-20 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, a client which can connect to the leafnode por |
| CVE-2026-33219 | Modified | 未確認 | CWE-770 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, a malicious client which can connect to the We |
| CVE-2026-33221 | Analyzed | 未確認 | CWE-343, CWE-345 | Nhost is an open source Firebase alternative with GraphQL. Prior to version 0.12.0, the storage service's file upload handler trusts the client-provided Content-Type header without |
| CVE-2026-33222 | Analyzed | 未確認 | CWE-285 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, users with JetStream admin API access to resto |
| CVE-2026-33223 | Analyzed | 未確認 | CWE-290 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, the NATS message header `Nats-Request-Info:` i |
| CVE-2026-33226 | Analyzed | 未確認 | CWE-918 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. In versions from 3.30.6 and prior, the REST datasource query preview endpoint (POST /api/q |
| CVE-2026-33228 | Modified | 未確認 | CWE-1321, CWE-915 | flatted is a circular JSON parser. Prior to version 3.4.2, the parse() function in flatted can use attacker-controlled string values from the parsed JSON as direct array index keys |
| CVE-2026-33230 | Analyzed | 未確認 | CWE-79 | NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3 |
| CVE-2026-33231 | Modified | 未確認 | CWE-306 | NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3 |
| CVE-2026-33236 | Modified | 未確認 | CWE-22 | NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3 |
| CVE-2026-33237 | Modified | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. Prior to version 26.0, the Scheduler plugin's `run()` function in `plugin/Scheduler/Scheduler.php` calls `url_get_contents()` with an |
| CVE-2026-33238 | Modified | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. Prior to version 26.0, the `listFiles.json.php` endpoint accepts a `path` POST parameter and passes it directly to `glob()` without re |
| CVE-2026-33241 | Analyzed | 未確認 | CWE-770 | Salvo is a Rust web framework. Prior to version 0.89.3, Salvo's form data parsing implementations (`form_data()` method and `Extractible` macro) do not enforce payload size limits |
| CVE-2026-33242 | Analyzed | 未確認 | CWE-22 | Salvo is a Rust web framework. Versions 0.39.0 through 0.89.2 have a Path Traversal and Access Control Bypass vulnerability in the salvo-proxy component. The vulnerability allows a |
| CVE-2026-33243 | Analyzed | 未確認 | CWE-345 | barebox is a bootloader. In barebox from version 2016.03.0 to before version 2026.03.1 (and the corresponding backport to 2025.09.3), an attacker could exploit a FIT signature veri |
| CVE-2026-33246 | Analyzed | 未確認 | CWE-287, CWE-290 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The nats-server offers a `Nats-Request-Info:` message header, providing information |
| CVE-2026-33247 | Modified | 未確認 | CWE-214, CWE-215 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credential |
| CVE-2026-33248 | Analyzed | 未確認 | CWE-287, CWE-295 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using mTLS for client identity, with `ver |
| CVE-2026-33249 | Analyzed | 未確認 | CWE-863 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in version 2.11.0 and prior to versions 2.11.15 and 2.12.6, a valid client |
| CVE-2026-33250 | Deferred | 未確認 | CWE-121, CWE-20 | Freeciv21 is a free open source, turn-based, empire-building strategy game. Versions prior to 3.1.1 crash with a stack overflow when receiving specially-crafted packets. A remote a |
| CVE-2026-33251 | Analyzed | 未確認 | CWE-863 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass vulnerability in hidden Solved topics may allo |
| CVE-2026-33252 | Analyzed | 未確認 | CWE-352 | The Go MCP SDK used Go's standard encoding/json. Prior to version 1.4.1, the Go SDK's Streamable HTTP transport accepted browser-generated cross-site `POST` requests without valida |
| CVE-2026-33253 | Awaiting Analysis | 未確認 | CWE-428 | SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive ma |
| CVE-2026-33265 | Analyzed | 未確認 | CWE-669 | In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API. |
| CVE-2026-33268 | Awaiting Analysis | 未確認 | CWE-400 | Nanoleaf Lines 12.3.2 does not authenticate firmware file uploads. A remote, unauthenticated attacker can upload firmware files on the device and consume storage resources. Fixed i |
| CVE-2026-33276 | Analyzed | 未確認 | CWE-79 | Stored cross-site scripting (XSS) in Checkmk 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create hosts or services to execute arbitrary JavaScript in t |
| CVE-2026-3328 | Deferred | 未確認 | CWE-502 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to PHP Object Injection via deserialization of the 'post_content' of admin_form posts in all versions up to, and |
| CVE-2026-33280 | Analyzed | 未確認 | CWE-912 | Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution |
| CVE-2026-33281 | Analyzed | 未確認 | CWE-129 | Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing NGAP messages with invalid PDU Session IDs outside of 1-15. An attacker able to |
| CVE-2026-33282 | Analyzed | 未確認 | CWE-476 | Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing a malformed NGAP LocationReport message with `ue-presence-in-area-of-interest` |
| CVE-2026-33283 | Analyzed | 未確認 | CWE-476 | Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able |
| CVE-2026-33284 | Analyzed | 未確認 | CWE-20 | GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support r |
| CVE-2026-33285 | Analyzed | 未確認 | CWE-20, CWE-400 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.1, LiquidJS's `memoryLimit` security mechanism can be completely bypassed |
| CVE-2026-33286 | Analyzed | 未確認 | CWE-913 | Graphiti is a framework that sits on top of models and exposes them via a JSON:API-compliant interface. Versions prior to 1.10.2 have an arbitrary method execution vulnerability th |
| CVE-2026-33287 | Analyzed | 未確認 | CWE-20, CWE-400 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.1, the `replace_first` filter in LiquidJS uses JavaScript's `String.proto |
| CVE-2026-33288 | Analyzed | 未確認 | CWE-89 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, a SQL Injection vulnerability exists i |
| CVE-2026-33289 | Analyzed | 未確認 | CWE-90 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, an LDAP Injection vulnerability exists |
| CVE-2026-33290 | Deferred | 未確認 | CWE-862 | WPGraphQL provides a GraphQL API for WordPress sites. Prior to version 2.10.0, an authorization flaw in updateComment allows an authenticated low-privileged user (including a custo |
| CVE-2026-33291 | Analyzed | 未確認 | CWE-863 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators can create Zendesk tickets for topics they do not have acce |
| CVE-2026-33292 | Analyzed | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. Prior to version 26.0, the HLS streaming endpoint (`view/hls.php`) is vulnerable to a path traversal attack that allows an unauthentic |
| CVE-2026-33293 | Analyzed | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. Prior to version 26.0, the `deleteDump` parameter in `plugin/CloneSite/cloneServer.json.php` is passed directly to `unlink()` without |
| CVE-2026-33294 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. Prior to version 26.0, the BulkEmbed plugin's save endpoint (`plugin/BulkEmbed/save.json.php`) fetches user-supplied thumbnail URLs vi |
| CVE-2026-33295 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. Prior to version 26.0, WWBN/AVideo contains a stored cross-site scripting vulnerability in the CDN plugin's download buttons component |
| CVE-2026-33296 | Analyzed | 未確認 | CWE-601 | WWBN AVideo is an open source video platform. Prior to version 26.0, WWBN/AVideo contains an open redirect vulnerability in the login flow where a user-supplied redirectUri paramet |
| CVE-2026-33297 | Analyzed | 未確認 | CWE-639 | WWBN AVideo is an open source video platform. Prior to version 26.0, the `setPassword.json.php` endpoint in the CustomizeUser plugin allows administrators to set a channel password |
| CVE-2026-33298 | Analyzed | 未確認 | CWE-122, CWE-190 | llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the `ggml_nbytes` function allows an attacker to bypass memory valida |
| CVE-2026-33299 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, users with the `Notes - my encounters` role can fill **Ey |
| CVE-2026-33300 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, an au |
| CVE-2026-33301 | Analyzed | 未確認 | CWE-116 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, users with the `Notes - my encounters` role can fill Eye |
| CVE-2026-33302 | Analyzed | 未確認 | CWE-863 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, the module ACL function `AclMain::zhAclCheck()` only chec |
| CVE-2026-33303 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 are vulnerable to stored cross-site scripting (XS |
| CVE-2026-33304 | Analyzed | 未確認 | CWE-639, CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, an authorization bypass in the dated reminders log allows |
| CVE-2026-33305 | Analyzed | 未確認 | CWE-696, CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, an authorization bypass in the optional FaxSMS module (`o |
| CVE-2026-33306 | Analyzed | 未確認 | CWE-190 | bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt() password hashing algorithm. Prior to version 3.1.22, an integer overflow in the Java BCrypt implementation for JRuby can caus |
| CVE-2026-33307 | Analyzed | 未確認 | CWE-121 | Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. In versions prior to 0.12.3 and 0.13.0, code for client certificate verification imported the certificate chain sent by |
| CVE-2026-33308 | Analyzed | 未確認 | CWE-295 | Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Prior to version 0.13.0, code for client certificate verification did not check the key purpose as set in the Extended |
| CVE-2026-33309 | Analyzed | 未確認 | CWE-22, CWE-284, CWE-73, CWE-94 | Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 through 1.8.1 have a bypass of the patch for CVE-2025-68478 (External Control of File |
| CVE-2026-3331 | Deferred | 未確認 | CWE-352 | The Lobot Slider Administrator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.0. This is due to missing or incorrect nonce v |
| CVE-2026-33310 | Analyzed | 未確認 | CWE-78, CWE-94 | Intake is a package for finding, investigating, loading and disseminating data. Prior to version 2.0.9, the shell() syntax within parameter default values appears to be automatical |
| CVE-2026-33311 | Analyzed | 未確認 | CWE-79 | DiceBear is an avatar library for designers and developers. Starting in version 5.0.0 and prior to versions 5.4.4, 6.1.4, 7.1.4, 8.0.3, and 9.4.1, SVG attribute values derived from |
| CVE-2026-33312 | Analyzed | 未確認 | CWE-863 | Vikunja is an open-source self-hosted task management platform. Starting in version 0.20.2 and prior to version 2.2.0, the `DELETE /api/v1/projects/:project/background` endpoint ch |
| CVE-2026-33313 | Analyzed | 未確認 | CWE-639 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, an authenticated user can read any task comment by ID, regardless of whether they have acces |
| CVE-2026-33314 | Analyzed | 未確認 | CWE-287, CWE-346 | pyLoad is a free and open-source download manager written in Python. Prior to version 0.5.0b3.dev97, a Host Header Spoofing vulnerability in the @local_check decorator allows unaut |
| CVE-2026-33315 | Analyzed | 未確認 | CWE-288 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, the Caldav endpoint allows login using Basic Authentication, which in turn allows users to b |
| CVE-2026-33316 | Analyzed | 未確認 | CWE-284, CWE-862, CWE-863 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, a flaw in Vikunja’s password reset logic allows disabled users to regain access to their acc |
| CVE-2026-33319 | Analyzed | 未確認 | CWE-78 | WWBN AVideo is an open source video platform. Prior to version 26.0, the `uploadVideoToLinkedIn()` method in the SocialMediaPublisher plugin constructs a shell command by directly |
| CVE-2026-3332 | Deferred | 未確認 | CWE-352 | The Xhanch - My Advanced Settings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. This is due to missing nonce validat |
| CVE-2026-33320 | Analyzed | 未確認 | CWE-674 | Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML reader allows |
| CVE-2026-33321 | Analyzed | 未確認 | CWE-918 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, users with the `Notes - my encounters` role can fill Eye |
| CVE-2026-33322 | Analyzed | 未確認 | CWE-287 | MinIO is a high-performance object storage system. From RELEASE.2022-11-08T05-27-07Z to before RELEASE.2026-03-17T21-25-16Z, a JWT algorithm confusion vulnerability in MinIO's Open |
| CVE-2026-33323 | Analyzed | 未確認 | CWE-204 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.51 and 9.6.0-alpha.40, the Pages route and legacy Publ |
| CVE-2026-33326 | Analyzed | 未確認 | CWE-863 | Keystone is a content management system for Node.js. Prior to version 6.5.2, {field}.isFilterable access control can be bypassed in findMany queries by passing a cursor. This can b |
| CVE-2026-33329 | Analyzed | 未確認 | CWE-22, CWE-73 | FileRise is a self-hosted web file manager / WebDAV server. From version 1.0.1 to before version 3.10.0, the resumableIdentifier parameter in the Resumable.js chunked upload handle |
| CVE-2026-3333 | Deferred | 未確認 | CWE-79 | The MinhNhut Link Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'linkgate' shortcode in all versions up to, and including, 3.6.1 due to |
| CVE-2026-33330 | Analyzed | 未確認 | CWE-863 | FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user |
| CVE-2026-33331 | Analyzed | 未確認 | CWE-79 | oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.13.9, a stored cross-site scripting (XSS) vulnerability exis |
| CVE-2026-33332 | Analyzed | 未確認 | CWE-20, CWE-770 | NiceGUI is a Python-based UI framework. Prior to version 3.9.0, NiceGUI's app.add_media_file() and app.add_media_files() media routes accept a user-controlled query parameter that |
| CVE-2026-33334 | Analyzed | 未確認 | CWE-269, CWE-79, CWE-94 | Vikunja is an open-source self-hosted task management platform. Starting in version 0.21.0 and prior to version 2.2.0, the Vikunja Desktop Electron wrapper enables `nodeIntegration |
| CVE-2026-33335 | Analyzed | 未確認 | CWE-939 | Vikunja is an open-source self-hosted task management platform. Starting in version 0.21.0 and prior to version 2.2.0, the Vikunja Desktop Electron wrapper passes URLs from `window |
| CVE-2026-33336 | Analyzed | 未確認 | CWE-94 | Vikunja is an open-source self-hosted task management platform. Starting in version 0.21.0 and prior to version 2.2.0, the Vikunja Desktop Electron wrapper enables `nodeIntegration |
| CVE-2026-3334 | Deferred | 未確認 | CWE-89 | The CMS Commander plugin for WordPress is vulnerable to SQL Injection via the 'or_blogname', 'or_blogdescription', and 'or_admin_email' parameters in all versions up to, and includ |
| CVE-2026-33340 | Analyzed | 未確認 | CWE-306, CWE-918 | LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems. A critical Server-Side Request Forgery (SSRF) vulnerability has been identified in |
| CVE-2026-33343 | Analyzed | 未確認 | CWE-863 | etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, an authenticated user with RBAC restricted permissions on k |
| CVE-2026-33344 | Analyzed | 未確認 | CWE-22 | Dagu is a workflow engine with a built-in Web user interface. From version 2.0.0 to before version 2.3.1, the fix for CVE-2026-27598 added ValidateDAGName to CreateNewDAG and rewro |
| CVE-2026-33345 | Analyzed | 未確認 | CWE-639 | solidtime is an open-source time-tracking app. Prior to version 0.11.6, the project detail endpoint GET /api/v1/organizations/{org}/projects/{project} allows any authenticated Empl |
| CVE-2026-33346 | Modified | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, a stored cross-site scripting (XSS) vulnerability in the |
| CVE-2026-33347 | Analyzed | 未確認 | CWE-185, CWE-79, CWE-918 | league/commonmark is a PHP Markdown parser. From version 2.3.0 to before version 2.8.2, the DomainFilteringAdapter in the Embed extension is vulnerable to an allowlist bypass due t |
| CVE-2026-33348 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Users with the `Notes - my encounters` role can fill Eye Exam forms in pati |
| CVE-2026-33349 | Analyzed | 未確認 | CWE-1284 | fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From version 4.0.0-beta.3 to before version 5.5.7, the DocTypeReader in fast- |
| CVE-2026-3335 | Deferred | 未確認 | CWE-862 | The Canto plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1 via the `/wp-content/plugins/canto/includes/lib/copy-media.php` fi |
| CVE-2026-33351 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. Prior to version 26.0, a Server-Side Request Forgery (SSRF) vulnerability exists in `plugin/Live/standAloneFiles/saveDVR.json.php`. Wh |
| CVE-2026-33352 | Analyzed | 未確認 | CWE-89 | WWBN AVideo is an open source video platform. Prior to version 26.0, an unauthenticated SQL injection vulnerability exists in `objects/category.php` in the `getAllCategories()` met |
| CVE-2026-33353 | Analyzed | 未確認 | CWE-200, CWE-862 | Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.6, an authorization flaw in repo import allows any authenticated SSH user t |
| CVE-2026-33354 | Analyzed | 未確認 | CWE-73 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, `POST /objects/aVideoEncoder.json.php` accepts a requester-controlled `chunkFile` parameter inte |
| CVE-2026-33355 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the `/private-posts` endpoint did not apply post-type visibility filte |
| CVE-2026-3336 | Modified | 未確認 | CWE-295 | Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple sign |
| CVE-2026-33366 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication. |
| CVE-2026-33368 | Analyzed | 未確認 | CWE-79 | Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS) vulnerability in the Classic Webmail REST interface (/h/rest). The application fails |
| CVE-2026-33369 | Analyzed | 未確認 | CWE-20 | Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operation. The application fails to properly san |
| CVE-2026-3337 | Analyzed | 未確認 | CWE-208 | Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impac |
| CVE-2026-33370 | Analyzed | 未確認 | CWE-79 | An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability exists in the Zimbra Briefcase feature due to insufficient sa |
| CVE-2026-33371 | Analyzed | 未確認 | CWE-611 | An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. An XML External Entity (XXE) vulnerability exists in the Zimbra Exchange Web Services (EWS) SOAP interface due |
| CVE-2026-33372 | Analyzed | 未確認 | CWE-352 | An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery (CSRF) vulnerability exists in Zimbra Webmail due to improper validation of CSRF t |
| CVE-2026-33373 | Analyzed | 未確認 | CWE-352 | An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A Cross-Site Request Forgery (CSRF) vulnerability exists in Zimbra Web Client due to the issuance of authentica |
| CVE-2026-33375 | Analyzed | 未確認 | CWE-400 | The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memo |
| CVE-2026-3338 | Modified | 未確認 | CWE-347 | Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attribute |
| CVE-2026-3339 | Deferred | 未確認 | CWE-22 | The Keep Backup Daily plugin for WordPress is vulnerable to Limited Path Traversal in all versions up to, and including, 2.1.1 via the `kbd_open_upload_dir` AJAX action. This is du |
| CVE-2026-33393 | Analyzed | 未確認 | CWE-284 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the `allowed_spam_host_domains` check used `String#end_with?` without |
| CVE-2026-33394 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the Post Edits admin report (/admin/reports/post_edits) leaked the fir |
| CVE-2026-33395 | Analyzed | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the discourse-graphviz plugin contains a stored cross-site scripting ( |
| CVE-2026-33396 | Analyzed | 未確認 | CWE-184, CWE-693, CWE-78 | OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.35, a low-privileged authenticated user (ProjectMember) can achieve remote command executio |
| CVE-2026-33397 | Analyzed | 未確認 | CWE-601 | The Angular SSR is a server-rise rendering tool for Angular applications. Versions on the 22.x branch prior to 22.0.0-next.2, the 21.x branch prior to 21.2.3, and the 20.x branch p |
| CVE-2026-33399 | Analyzed | 未確認 | CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, the SSRF fix applied in version 4.6.2 for CVE-2026-30839 and CVE-2026-30840 is incomp |
| CVE-2026-33400 | Analyzed | 未確認 | CWE-79 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, a stored cross-site scripting (XSS) vulnerability in the payment method rename endpoi |
| CVE-2026-33401 | Analyzed | 未確認 | CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, the patch introduced in commit e8a513591 (CVE-2026-30840) added SSRF protection to no |
| CVE-2026-33402 | Analyzed | 未確認 | CWE-79 | Sakai is a Collaboration and Learning Environment (CLE). In versions 23.0 through 23.4 and 25.0 through 25.1, group titles and description can contain cross-site scripting scripts. |
| CVE-2026-33407 | Analyzed | 未確認 | CWE-918, CWE-922 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, Wallos endpoints/logos/search.php accepts HTTP_PROXY and HTTPS_PROXY environment vari |
| CVE-2026-33408 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators were able to see the first 40 characters of post edits in P |
| CVE-2026-33409 | Analyzed | 未確認 | CWE-287 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.52 and 9.6.0-alpha.41, an authentication bypass vulner |
| CVE-2026-33410 | Analyzed | 未確認 | CWE-863 | Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have two authorization issues in the chat direct message API. First, wh |
| CVE-2026-33411 | Analyzed | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a potential stored XSS in topic titles for the solved posts stream |
| CVE-2026-33412 | Modified | 未確認 | CWE-78 | Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a n |
| CVE-2026-33413 | Analyzed | 未確認 | CWE-862 | etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorizati |
| CVE-2026-33415 | Analyzed | 未確認 | CWE-284 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, an au |
| CVE-2026-33416 | Analyzed | 未確認 | CWE-416 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_s |
| CVE-2026-33417 | Analyzed | 未確認 | CWE-613 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.2, password reset tokens in Wallos never expire. The password_resets table includes a cr |
| CVE-2026-33418 | Analyzed | 未確認 | CWE-185 | DiceBear is an avatar library for designers and developers. Prior to version 9.4.2, the `ensureSize()` function in `@dicebear/converter` used a regex-based approach to rewrite SVG |
| CVE-2026-33419 | Analyzed | 未確認 | CWE-204, CWE-307 | MinIO is a high-performance object storage system. Prior to RELEASE.2026-03-17T21-25-16Z, MinIO AIStor's STS (Security Token Service) AssumeRoleWithLDAPIdentity endpoint is vulnera |
| CVE-2026-3342 | Analyzed | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed ma |
| CVE-2026-33421 | Analyzed | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.53 and 9.6.0-alpha.42, Parse Server's LiveQuery WebSoc |
| CVE-2026-33422 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the `ip_address` of a flagged user is exposed to any user who can acc |
| CVE-2026-33423 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, staff can modify any user's group notification level. Versions 2026.3. |
| CVE-2026-33424 | Analyzed | 未確認 | CWE-863 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an attacker can grant access to a private message topic through invite |
| CVE-2026-33425 | Analyzed | 未確認 | CWE-203, CWE-639, CWE-862 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a membe |
| CVE-2026-33426 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users with tag-editing permissions could edit and create synonyms for |
| CVE-2026-33427 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an unauthenticated attacker can cause a legitimate Discourse authoriza |
| CVE-2026-33428 | Analyzed | 未確認 | CWE-863 | Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a non-staff user with elevated group membership could access deleted p |
| CVE-2026-33429 | Analyzed | 未確認 | CWE-203 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.54 and 9.6.0-alpha.43, an attacker can subscribe to Li |
| CVE-2026-3343 | Modified | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management user's browse |
| CVE-2026-33430 | Analyzed | 未確認 | CWE-732 | Briefcase is a tool for converting a Python project into a standalone native application. Starting in version 0.3.0 and prior to version 0.3.26, if a developer uses Briefcase to pr |
| CVE-2026-33433 | Modified | 未確認 | CWE-290 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.42, 3.6.11, and 3.7.0-ea.3, when `headerField` is configured with a non-canonical HTTP header name (e.g., |
| CVE-2026-33438 | Analyzed | 未確認 | CWE-770 | Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Versions starting in 2.1.5 and prior to 2.5.2 have Denial of Service (D |
| CVE-2026-3344 | Modified | 未確認 | CWE-440 | A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firm |
| CVE-2026-33442 | Analyzed | 未確認 | CWE-89 | Kysely is a type-safe TypeScript SQL query builder. In versions 0.28.12 and 0.28.13, the `sanitizeStringLiteral` method in Kysely's query compiler escapes single quotes (`'` → `''` |
| CVE-2026-33468 | Analyzed | 未確認 | CWE-89 | Kysely is a type-safe TypeScript SQL query builder. Prior to version 0.28.14, Kysely's `DefaultQueryCompiler.sanitizeStringLiteral()` only escapes single quotes by doubling them (` |
| CVE-2026-33469 | Analyzed | 未確認 | CWE-863 | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In version 0.17.0, an authenticated non-admin user can retrieve the full raw Frigate |
| CVE-2026-3347 | Deferred | 未確認 | CWE-79 | The Multi Functional Flexi Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `arv_lb[message]` parameter in all versions up to, and including, 1.2 |
| CVE-2026-33470 | Analyzed | 未確認 | CWE-862, CWE-863 | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In version 0.17.0, a low-privilege authenticated user restricted to one camera can ac |
| CVE-2026-33473 | Analyzed | 未確認 | CWE-287 | Vikunja is an open-source self-hosted task management platform. Starting in version 0.13 and prior to version 2.2.1, any user that has enabled 2FA can have their TOTP reused during |
| CVE-2026-33474 | Analyzed | 未確認 | CWE-400 | Vikunja is an open-source self-hosted task management platform. Starting in version 1.0.0-rc0 and prior to version 2.2.0, unbounded image decoding and resizing during preview gener |
| CVE-2026-33475 | Analyzed | 未確認 | CWE-74, CWE-78 | Langflow is a tool for building and deploying AI-powered agents and workflows. An unauthenticated remote shell injection vulnerability exists in multiple GitHub Actions workflows i |
| CVE-2026-33476 | Modified | 未確認 | CWE-22, CWE-73 | SiYuan is a personal knowledge management system. Prior to version 3.6.2, the Siyuan kernel exposes an unauthenticated file-serving endpoint under `/appearance/*filepath.` Due to i |
| CVE-2026-33477 | Analyzed | 未確認 | CWE-863 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In versiosn 2.3.7 through 3.10.0, the file snippet endpoint `/api/file/snipp |
| CVE-2026-33478 | Analyzed | 未確認 | CWE-284, CWE-78 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, multiple vulnerabilities in AVideo's CloneSite plugin chain together to allow a completely unaut |
| CVE-2026-33479 | Analyzed | 未確認 | CWE-94 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the Gallery plugin's `saveSort.json.php` endpoint passes unsanitized user input from `$_REQUEST[ |
| CVE-2026-33480 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `isSSRFSafeURL()` function in AVideo can be bypassed using IPv4-mapped IPv6 addresses (`::ff |
| CVE-2026-33481 | Analyzed | 未確認 | CWE-460 | Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. Syft versions before v1.42.3 would not properly cleanu |
| CVE-2026-33482 | Analyzed | 未確認 | CWE-78 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `sanitizeFFmpegCommand()` function in `plugin/API/standAlone/functions.php` is designed to p |
| CVE-2026-33483 | Analyzed | 未確認 | CWE-770 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `aVideoEncoderChunk.json.php` endpoint is a completely standalone PHP script with no authent |
| CVE-2026-33484 | Analyzed | 未確認 | CWE-284, CWE-639, CWE-862 | Langflow is a tool for building and deploying AI-powered agents and workflows. In versions 1.0.0 through 1.8.1, the `/api/v1/files/images/{flow_id}/{file_name}` endpoint serves ima |
| CVE-2026-33485 | Analyzed | 未確認 | CWE-89 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the RTMP `on_publish` callback at `plugin/Live/on_publish.php` is accessible without authenticat |
| CVE-2026-33486 | Analyzed | 未確認 | CWE-918 | Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions 2.7.9, 2.6.28 |
| CVE-2026-33487 | Modified | 未確認 | CWE-347, CWE-682 | goxmlsig provides XML Digital Signatures implemented in Go. Prior to version 1.6.0, the `validateSignature` function in `validate.go` goes through the references in the `SignedInfo |
| CVE-2026-33488 | Analyzed | 未確認 | CWE-326 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `createKeys()` function in the LoginControl plugin's PGP 2FA system generates 512-bit RSA ke |
| CVE-2026-33490 | Analyzed | 未確認 | CWE-706 | H3 is a minimal H(TTP) framework. In versions 2.0.0-0 through 2.0.1-rc.16, the `mount()` method in h3 uses a simple `startsWith()` check to determine whether incoming requests fall |
| CVE-2026-33491 | Analyzed | 未確認 | CWE-121, CWE-787 | Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version 0.4.4, a stack-based buffer overflow vulnerability in the Zen C compiler allows |
| CVE-2026-33492 | Analyzed | 未確認 | CWE-384 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo's `_session_start()` function accepts arbitrary session IDs via the `PHPSESSID` GET param |
| CVE-2026-33493 | Analyzed | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `objects/import.json.php` endpoint accepts a user-controlled `fileURI` POST parameter with o |
| CVE-2026-33494 | Analyzed | 未確認 | CWE-23 | ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnera |
| CVE-2026-33495 | Analyzed | 未確認 | CWE-862 | ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Ory Oathkeeper is often deployed beh |
| CVE-2026-33496 | Analyzed | 未確認 | CWE-1289, CWE-305 | ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulner |
| CVE-2026-33497 | Analyzed | 未確認 | CWE-22 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the download_profile_picture function of the /profile_pictures/{folder_nam |
| CVE-2026-33498 | Analyzed | 未確認 | CWE-674 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.55 and 9.6.0-alpha.44, an attacker can send an unauthe |
| CVE-2026-33499 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `view/forbiddenPage.php` and `view/warningPage.php` templates reflect the `$_REQUEST['unlock |
| CVE-2026-3350 | Deferred | 未確認 | CWE-79 | The Image Alt Text Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and including, 1.8.2. This is due to insuffic |
| CVE-2026-33500 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the fix for CVE-2026-27568 (GHSA-rcqw-6466-3mv7) introduced a custom `ParsedownSafeWithLinks` cl |
| CVE-2026-33501 | Analyzed | 未確認 | CWE-862 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the endpoint `plugin/Permissions/View/Users_groups_permissions/list.json.php` lacks any authenti |
| CVE-2026-33502 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, an unauthenticated server-side request forgery vulnerability in `plugin/Live/test.php` allows an |
| CVE-2026-33503 | Analyzed | 未確認 | CWE-89 | Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 26.2.0, the ListCourierMessages Admin API in Ory Kratos is vulnerable to S |
| CVE-2026-33504 | Analyzed | 未確認 | CWE-89 | Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider. Prior to version 26.2.0, the listOAuth2Clients, listOAuth2ConsentSessions, and listTrustedOAuth2JwtGrantIssuers Admin |
| CVE-2026-33505 | Analyzed | 未確認 | CWE-89 | Ory Keto is am open source authorization server for managing permissions at scale. Prior to version 26.2.0, the GetRelationships API in Ory Keto is vulnerable to SQL injection due |
| CVE-2026-33506 | Analyzed | 未確認 | CWE-601, CWE-87 | Ory Polis, formerly known as BoxyHQ Jackson, bridges or proxies a SAML login flow to OAuth 2.0 or OpenID Connect. Versions prior to 26.2.0 contain a DOM-based Cross-Site Scripting |
| CVE-2026-33507 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `objects/pluginImport.json.php` endpoint allows admin users to upload and install plugin ZIP |
| CVE-2026-33508 | Analyzed | 未確認 | CWE-674 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.56 and 9.6.0-alpha.45, Parse Server's LiveQuery compon |
| CVE-2026-33509 | Analyzed | 未確認 | CWE-269 | pyLoad is a free and open-source download manager written in Python. From version 0.4.0 to before version 0.5.0b3.dev97, the set_config_value() API endpoint allows users with the n |
| CVE-2026-3351 | Analyzed | 未確認 | CWE-862 | Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints tr |
| CVE-2026-33511 | Analyzed | 未確認 | CWE-639 | pyLoad is a free and open-source download manager written in Python. From version 0.4.20 to before version 0.5.0b3.dev97, the local_check decorator in pyLoad's ClickNLoad feature c |
| CVE-2026-33512 | Analyzed | 未確認 | CWE-287, CWE-312, CWE-326, CWE-327 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the API plugin exposes a `decryptString` action without any authentication. Anyone can submit ci |
| CVE-2026-33513 | Analyzed | 未確認 | CWE-22, CWE-98 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, an unauthenticated API endpoint (`APIName=locale`) concatenates user input into an `include` pat |
| CVE-2026-33515 | Analyzed | 未確認 | CWE-125, CWE-1289 | Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allo |
| CVE-2026-33517 | Analyzed | 未確認 | CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. In version 2.28.0, when deleting a Tag (tag_delete.php), improper escaping of its name when displaying the confirmati |
| CVE-2026-3352 | Deferred | 未確認 | CWE-94 | The Easy PHP Settings plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0.4 via the `update_wp_memory_constants()` method. This is du |
| CVE-2026-33525 | Analyzed | 未確認 | CWE-79 | Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal. In version 4.39.1 |
| CVE-2026-33526 | Modified | 未確認 | CWE-416, CWE-825, CWE-826 | Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a re |
| CVE-2026-33527 | Analyzed | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.57 and 9.6.0-alpha.48, an authenticated user can overw |
| CVE-2026-33528 | Analyzed | 未確認 | CWE-22 | GoDoxy is a reverse proxy and container orchestrator for self-hosters. Prior to version 0.27.5, the file content API endpoint at `/api/v1/file/content` is vulnerable to path traver |
| CVE-2026-33529 | Analyzed | 未確認 | CWE-22 | Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. Prior to version 3.3.2, an authenticated path traversal vulnerability in the configuration import endpoint allow |
| CVE-2026-3353 | Deferred | 未確認 | CWE-79 | The Comment SPAM Wiper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'API Key' setting in all versions up to, and including, 1.2.1. This is due to insuf |
| CVE-2026-33530 | Analyzed | 未確認 | CWE-202 | InvenTree is an Open Source Inventory Management System. Prior to version 1.2.6, certain API endpoints associated with bulk data operations can be hijacked to exfiltrate sensitive |
| CVE-2026-33531 | Analyzed | 未確認 | CWE-89 | InvenTree is an Open Source Inventory Management System. Prior to version 1.2.6, a path traversal vulnerability in the report template engine allows a staff-level user to read arbi |
| CVE-2026-33532 | Analyzed | 未確認 | CWE-674 | `yaml` is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of `yaml` on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may th |
| CVE-2026-33535 | Analyzed | 未確認 | CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the |
| CVE-2026-33536 | Analyzed | 未確認 | CWE-121, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, due to an incorrect return value on certain platform |
| CVE-2026-33537 | Analyzed | 未確認 | CWE-918 | Lychee is a free, open-source photo-management tool. The patch introduced for GHSA-cpgw-wgf3-xc6v (SSRF via `Photo::fromUrl`) contains an incomplete IP validation check that fails |
| CVE-2026-33538 | Analyzed | 未確認 | CWE-400 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.58 and 9.6.0-alpha.52, an unauthenticated attacker can |
| CVE-2026-33539 | Analyzed | 未確認 | CWE-89 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.59 and 9.6.0-alpha.53, an attacker with master key acc |
| CVE-2026-3354 | Deferred | 未確認 | CWE-79 | The Wikilookup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Popup Width' setting in all versions up to, and including, 1.1.5. This is due to insuffici |
| CVE-2026-33541 | Analyzed | 未確認 | CWE-400, CWE-770 | TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a |
| CVE-2026-33542 | Analyzed | 未確認 | CWE-295 | Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers op |
| CVE-2026-33545 | Analyzed | 未確認 | CWE-89 | MobSF is a mobile application security testing tool used. Prior to version 4.4.6, MobSF's `read_sqlite()` function in `mobsf/MobSF/utils.py` (lines 542-566) uses Python string form |
| CVE-2026-33548 | Analyzed | 未確認 | CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline (my_view_page.php) allows an att |
| CVE-2026-33549 | Analyzed | 未確認 | CWE-688 | SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of STATUT misha |
| CVE-2026-33550 | Analyzed | 未確認 | CWE-308 | SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended). |
| CVE-2026-33554 | Deferred | 未確認 | CWE-121 | ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interf |
| CVE-2026-33559 | Deferred | 未確認 | CWE-79 | WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with |
| CVE-2026-3356 | Awaiting Analysis | 未確認 | CWE-306 | The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device |
| CVE-2026-33572 | Analyzed | 未確認 | CWE-378 | OpenClaw before 2026.2.17 creates session transcript JSONL files with overly broad default permissions, allowing local users to read transcript contents. Attackers with local acces |
| CVE-2026-33573 | Analyzed | 未確認 | CWE-668 | OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in the gateway agent RPC that allows authenticated operators with operator.write permission to override wor |
| CVE-2026-33574 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.3.8 contains a path traversal vulnerability in the skills download installer that validates the tools root lexically but reuses the mutable path during archive |
| CVE-2026-33575 | Analyzed | 未確認 | CWE-522 | OpenClaw before 2026.3.12 embeds long-lived shared gateway credentials directly in pairing setup codes generated by /pair endpoint and OpenClaw qr command. Attackers with access to |
| CVE-2026-33576 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.28 downloads and stores inbound media from Zalo channels before validating sender authorization. Unauthorized senders can force network fetches and disk writ |
| CVE-2026-33577 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broade |
| CVE-2026-33578 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to |
| CVE-2026-33579 | Modified | 未確認 | CWE-863 | OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check. A caller |
| CVE-2026-33580 | Analyzed | 未確認 | CWE-307 | OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets. Atta |
| CVE-2026-33581 | Analyzed | 未確認 | CWE-22 | OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl alias parame |
| CVE-2026-33619 | Analyzed | 未確認 | CWE-918 | PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.3 contains a server-side request forgery issue in the optional schedul |
| CVE-2026-33620 | Analyzed | 未確認 | CWE-598 | PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.7.8` through `v0.8.3` accepted the API token from a `token` URL query p |
| CVE-2026-33621 | Analyzed | 未確認 | CWE-290, CWE-770 | PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.7.7` through `v0.8.4` contain incomplete request-throttling protections |
| CVE-2026-33622 | Analyzed | 未確認 | CWE-284, CWE-693, CWE-94 | PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.3` through `v0.8.5` allow arbitrary JavaScript execution through `POS |
| CVE-2026-33623 | Analyzed | 未確認 | CWE-400, CWE-78 | PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.4` contains a Windows-only command injection issue in the orphaned Ch |
| CVE-2026-33624 | Analyzed | 未確認 | CWE-367 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.60 and 9.6.0-alpha.54, an attacker who obtains a user' |
| CVE-2026-33627 | Analyzed | 未確認 | CWE-200 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.61 and 9.6.0-alpha.55, an authenticated user calling G |
| CVE-2026-33628 | Analyzed | 未確認 | CWE-116, CWE-184, CWE-79 | Invoice Ninja is a source-available invoice, quote, project and time-tracking app built with Laravel. Invoice line item descriptions in Invoice Ninja v5.13.0 bypass the XSS denylis |
| CVE-2026-33631 | Analyzed | 未確認 | CWE-862 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security syste |
| CVE-2026-33632 | Analyzed | 未確認 | CWE-862 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.4, two file operation event types — ES_EVENT_TYPE_AUTH_EXC |
| CVE-2026-33634 | Analyzed | 掲載 | CWE-506 | Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquas |
| CVE-2026-33635 | Analyzed | 未確認 | CWE-93 | iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545. Starting in version 2.0.0 and prior to version 2.12.2, .ics serialization |
| CVE-2026-33636 | Analyzed | 未確認 | CWE-125, CWE-787 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.6.36 through 1.6.55, an ou |
| CVE-2026-33638 | Analyzed | 未確認 | CWE-862 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to version 4.2.0, `GET /api/allusers` is mounted as a public endpoint and returns user reco |
| CVE-2026-33640 | Analyzed | 未確認 | CWE-307 | Outline is a service that allows for collaborative documentation. Outline implements an Email OTP login flow for users not associated with an Identity Provider. Starting in version |
| CVE-2026-33643 | Analyzed | 未確認 | CWE-89 | SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go. |
| CVE-2026-33644 | Analyzed | 未確認 | CWE-918 | Lychee is a free, open-source photo-management tool. Prior to version 7.5.2, the SSRF protection in `PhotoUrlRule.php` can be bypassed using DNS rebinding. The IP validation check |
| CVE-2026-33645 | Analyzed | 未確認 | CWE-22, CWE-73 | Fireshare facilitates self-hosted media and link sharing. In version 1.5.1, an authenticated path traversal vulnerability in Fireshare’s chunked upload endpoint allows an attacker |
| CVE-2026-33647 | Analyzed | 未確認 | CWE-434 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `ImageGallery::saveFile()` method validates uploaded file content using `finfo` MIME type de |
| CVE-2026-33648 | Analyzed | 未確認 | CWE-78 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the restreamer endpoint constructs a log file path by embedding user-controlled `users_id` and ` |
| CVE-2026-33649 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `plugin/Permissions/setPermission.json.php` endpoint accepts GET parameters for a state-chan |
| CVE-2026-33650 | Analyzed | 未確認 | CWE-863 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, a user with the "Videos Moderator" permission can escalate privileges to perform full video mana |
| CVE-2026-33651 | Analyzed | 未確認 | CWE-89 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `remindMe.json.php` endpoint passes `$_REQUEST['live_schedule_id']` through multiple functio |
| CVE-2026-33653 | Analyzed | 未確認 | CWE-79 | Ulloady is a file uploader script with multi-file upload support. A Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 3.1.2 due to improper sanitization o |
| CVE-2026-33654 | Analyzed | 未確認 | CWE-1336, CWE-290, CWE-94 | nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection vulnerability exists in the email channel processing module (`nanobot/channels/email.py`), |
| CVE-2026-33658 | Analyzed | 未確認 | CWE-770 | Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 Active Storage's proxy controller does not limit |
| CVE-2026-33660 | Analyzed | 未確認 | CWE-89, CWE-94 | n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.26, an authenticated user with permission to create or modify workflows could use th |
| CVE-2026-33661 | Analyzed | 未確認 | CWE-290 | Pay is an open-source payment SDK extension package for various Chinese payment services. Prior to version 3.7.20, the `verify_wechat_sign()` function in `src/Functions.php` uncond |
| CVE-2026-33663 | Analyzed | 未確認 | CWE-639 | n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.27, an authenticated user with the `global:member` role could exploit chained author |
| CVE-2026-33664 | Analyzed | 未確認 | CWE-79 | Kestra is an open-source, event-driven orchestration platform Versions up to and including 1.3.3 render user-supplied flow YAML metadata fields — description, inputs[].displayName, |
| CVE-2026-33665 | Analyzed | 未確認 | CWE-287 | n8n is an open source workflow automation platform. Prior to versions 2.4.0 and 1.121.0, when LDAP authentication is enabled, n8n automatically linked an LDAP identity to an existi |
| CVE-2026-33668 | Analyzed | 未確認 | CWE-285, CWE-863 | Vikunja is an open-source self-hosted task management platform. Starting in version 0.18.0 and prior to version 2.2.1, when a user account is disabled or locked, the status check i |
| CVE-2026-33669 | Analyzed | 未確認 | CWE-125 | SiYuan is a personal knowledge management system. Prior to version 3.6.2, document IDs were retrieved via the /api/file/readDir interface, and then the /api/block/getChildBlocks in |
| CVE-2026-33670 | Analyzed | 未確認 | CWE-22 | SiYuan is a personal knowledge management system. Prior to version 3.6.2, the /api/file/readDir interface was used to traverse and retrieve the file names of all documents under a |
| CVE-2026-33671 | Analyzed | 未確認 | CWE-1333 | Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted ext |
| CVE-2026-33672 | Analyzed | 未確認 | CWE-1321 | Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POSIX_REGEX_SOURCE` obje |
| CVE-2026-33673 | Analyzed | 未確認 | CWE-79 | PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 are vulnerable to stored Cross-Site Scripting (stored XSS) vulnerabilities in the BO. An |
| CVE-2026-33674 | Analyzed | 未確認 | CWE-1173 | PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation framework. Versions 8.2.5 and 9.1.0 contain a fix. No known |
| CVE-2026-33675 | Analyzed | 未確認 | CWE-918 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the migration helper functions `DownloadFile` and `DownloadFileWithHeaders` in `pkg/modules/ |
| CVE-2026-33676 | Analyzed | 未確認 | CWE-863 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, when the Vikunja API returns tasks, it populates the `related_tasks` field with full task ob |
| CVE-2026-33677 | Analyzed | 未確認 | CWE-200 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the `GET /api/v1/projects/:project/webhooks` endpoint returns webhook BasicAuth credentials |
| CVE-2026-33678 | Analyzed | 未確認 | CWE-639 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, `TaskAttachment.ReadOne()` queries attachments by ID only (`WHERE id = ?`), ignoring the tas |
| CVE-2026-33679 | Analyzed | 未確認 | CWE-918 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the `DownloadImage` function in `pkg/utils/avatar.go` uses a bare `http.Client{}` with no SS |
| CVE-2026-3368 | Deferred | 未確認 | CWE-79 | The Injection Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via malicious query parameter names in all versions up to and including 1.2.9. This is due to |
| CVE-2026-33680 | Analyzed | 未確認 | CWE-285 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.2, the `LinkSharing.ReadAll()` method allows link share authenticated users to list all link sh |
| CVE-2026-33681 | Analyzed | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `objects/pluginRunDatabaseScript.json.php` endpoint accepts a `name` parameter via POST and |
| CVE-2026-33682 | Analyzed | 未確認 | CWE-918 | Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Si |
| CVE-2026-33683 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, a sanitization order-of-operations flaw in the user profile "about" field allows any registered |
| CVE-2026-33685 | Analyzed | 未確認 | CWE-862 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `plugin/AD_Server/reports.json.php` endpoint performs no authentication or authorization che |
| CVE-2026-33686 | Analyzed | 未確認 | CWE-22 | Sharp is a content management framework built for Laravel as a package. Versions prior to 9.20.0 have a path traversal vulnerability in the FileUtil class. The application fails t |
| CVE-2026-33687 | Analyzed | 未確認 | CWE-434 | Sharp is a content management framework built for Laravel as a package. Versions prior to 9.20.0 contain a vulnerability in the file upload endpoint that allows authenticated users |
| CVE-2026-33688 | Analyzed | 未確認 | CWE-204 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the password recovery endpoint at `objects/userRecoverPass.php` performs user existence and acco |
| CVE-2026-33690 | Analyzed | 未確認 | CWE-348 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `getRealIpAddr()` function in `objects/functions.php` trusts user-controlled HTTP headers to |
| CVE-2026-33693 | Deferred | 未確認 | CWE-918 | Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.7.0-beta.9, the `v4_is_invalid()` function in `activitypub-federation-rust` (`src/utils.rs`) does not che |
| CVE-2026-33696 | Analyzed | 未確認 | CWE-1321 | n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.27, an authenticated user with permission to create or modify workflows could exploi |
| CVE-2026-33697 | Analyzed | 未確認 | CWE-322, CWE-346 | Cocos AI is a confidential computing system for AI. The current implementation of attested TLS (aTLS) in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 th |
| CVE-2026-33699 | Analyzed | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This req |
| CVE-2026-3370 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-33700 | Analyzed | 未確認 | CWE-639 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the `DELETE /api/v1/projects/:project/shares/:share` endpoint does not verify that the link |
| CVE-2026-33701 | Modified | 未確認 | CWE-502 | OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.26.1, the RMI instrumentation register |
| CVE-2026-33711 | Analyzed | 未確認 | CWE-61 | Incus is a system container and virtual machine manager. Incus provides an API to retrieve VM screenshots. That API relies on the use of a temporary file for QEMU to write the scre |
| CVE-2026-33713 | Analyzed | 未確認 | CWE-89 | n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.26, an authenticated user with permission to create or modify workflows could exploi |
| CVE-2026-33716 | Analyzed | 未確認 | CWE-287 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the standalone live stream control endpoint at `plugin/Live/standAloneFiles/control.json.php` ac |
| CVE-2026-33717 | Analyzed | 未確認 | CWE-434 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `downloadVideoFromDownloadURL()` function in `objects/aVideoEncoder.json.php` saves remote c |
| CVE-2026-33718 | Analyzed | 未確認 | CWE-78 | OpenHands is software for AI-driven development. Starting in version 1.5.0, a Command Injection vulnerability exists in the `get_git_diff()` method at `openhands/runtime/utils/git_ |
| CVE-2026-33719 | Analyzed | 未確認 | CWE-306 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the CDN plugin endpoints `plugin/CDN/status.json.php` and `plugin/CDN/disable.json.php` use key- |
| CVE-2026-33720 | Analyzed | 未確認 | CWE-863 | n8n is an open source workflow automation platform. Prior to version 2.8.0, when the `N8N_SKIP_AUTH_ON_OAUTH_CALLBACK` environment variable is set to `true`, the OAuth callback han |
| CVE-2026-33721 | Modified | 未確認 | CWE-787 | MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer D |
| CVE-2026-33722 | Analyzed | 未確認 | CWE-863 | n8n is an open source workflow automation platform. Prior to versions 2.6.4 and 1.123.23, an authenticated user without permission to list external secrets could reference a secret |
| CVE-2026-33723 | Analyzed | 未確認 | CWE-89 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `Subscribe::save()` method in `objects/subscribe.php` concatenates the `$this->users_id` pro |
| CVE-2026-33724 | Analyzed | 未確認 | CWE-639 | n8n is an open source workflow automation platform. Prior to version 2.5.0, when the Source Control feature is configured to use SSH, the SSH command used for git operations explic |
| CVE-2026-33725 | Analyzed | 未確認 | CWE-502 | Metabase is an open source business intelligence and embedded analytics tool. In Metabase Enterprise prior to versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4, auth |
| CVE-2026-33726 | Analyzed | 未確認 | CWE-284, CWE-863 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8, and 1.19.2, Ingress Network Policies are not enforced |
| CVE-2026-33728 | Analyzed | 未確認 | CWE-502 | dd-trace-java is a Datadog APM client for Java. In versions of dd-trace-java 0.40.0 through prior to 1.60.2, the RMI instrumentation registered a custom endpoint that deserialized |
| CVE-2026-33729 | Analyzed | 未確認 | CWE-1289, CWE-20, CWE-345 | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. In versions prior to 1.13.1, under specific conditi |
| CVE-2026-33730 | Analyzed | 未確認 | CWE-639 | Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Prior to version 3.4.2, an Insecure Direct Object Ref |
| CVE-2026-33732 | Analyzed | 未確認 | CWE-706 | srvx is a universal server based on web standards. Prior to version 0.11.13, a pathname parsing discrepancy in srvx's `FastURL` allows middleware bypass on the Node.js adapter when |
| CVE-2026-33735 | Analyzed | 未確認 | CWE-285, CWE-639 | MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.69, an authorization bypass in the `/api/settings/import-database` endpoint allows att |
| CVE-2026-33738 | Analyzed | 未確認 | CWE-79 | Lychee is a free, open-source photo-management tool. Prior to version 7.5.3, the photo `description` field is stored without HTML sanitization and rendered using `{!! $item->summar |
| CVE-2026-33739 | Analyzed | 未確認 | CWE-79 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1812, the listing tables on multiple management pages (Host, Storage, Group, Ima |
| CVE-2026-33742 | Analyzed | 未確認 | CWE-79 | Invoice Ninja is a source-available invoice, quote, project and time-tracking app built with Laravel. Product notes fields in Invoice Ninja v5.13.0 allow raw HTML via Markdown rend |
| CVE-2026-33743 | Analyzed | 未確認 | CWE-770 | Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage buc |
| CVE-2026-33744 | Analyzed | 未確認 | CWE-94 | BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.37, the `docker.system_packages` field in `bentofile.yaml` a |
| CVE-2026-33745 | Analyzed | 未確認 | CWE-200 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.39.0, the cpp-httplib HTTP client forwards stored Basic Auth, Bearer Token, and Digest |
| CVE-2026-33747 | Analyzed | 未確認 | CWE-22 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, when using a custom BuildKit fronten |
| CVE-2026-33748 | Analyzed | 未確認 | CWE-22, CWE-59 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL f |
| CVE-2026-33749 | Analyzed | 未確認 | CWE-79 | n8n is an open source workflow automation platform. Prior to versions 1.123.27, 2.13.3, and 2.14.1, an authenticated user with permission to create or modify workflows could craft |
| CVE-2026-33750 | Analyzed | 未確認 | CWE-400 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step v |
| CVE-2026-33751 | Analyzed | 未確認 | CWE-90 | n8n is an open source workflow automation platform. Prior to versions 1.123.27, 2.13.3, and 2.14.1, a flaw in the LDAP node's filter escape logic allowed LDAP metacharacters to pas |
| CVE-2026-33755 | Analyzed | 未確認 | CWE-89 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.158, 25.0.92, and 26.0.17, an authenticated SQL Injection vulnerability in |
| CVE-2026-33757 | Modified | 未確認 | CWE-384 | OpenBao is an open source identity-based secrets management system. Prior to version 2.5.2, OpenBao does not prompt for user confirmation when logging in via JWT/OIDC and a role wi |
| CVE-2026-33758 | Modified | 未確認 | CWE-116, CWE-20, CWE-79 | OpenBao is an open source identity-based secrets management system. Prior to version 2.5.2, OpenBao installations that have an OIDC/JWT authentication method enabled and a role wit |
| CVE-2026-33759 | Analyzed | 未確認 | CWE-639, CWE-862 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `objects/playlistsVideos.json.php` endpoint returns the full video contents of any playlist |
| CVE-2026-33761 | Analyzed | 未確認 | CWE-200, CWE-862 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, three `list.json.php` endpoints in the Scheduler plugin lack any authentication check, while eve |
| CVE-2026-33762 | Analyzed | 未確認 | CWE-129 | go-git is an extensible git implementation library written in pure Go. Prior to version 5.17.1, go-git’s index decoder for format version 4 fails to validate the path name prefix l |
| CVE-2026-33763 | Analyzed | 未確認 | CWE-307 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `get_api_video_password_is_correct` API endpoint allows any unauthenticated user to verify w |
| CVE-2026-33764 | Analyzed | 未確認 | CWE-639 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the AI plugin's `save.json.php` endpoint loads AI response objects using an attacker-controlled |
| CVE-2026-33765 | Analyzed | 未確認 | CWE-78 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. Versions prior to 6.0 have a critical OS Command Inje |
| CVE-2026-33766 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, `isSSRFSafeURL()` validates URLs against private/reserved IP ranges before fetching, but `url_ge |
| CVE-2026-33767 | Analyzed | 未確認 | CWE-89 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, in `objects/like.php`, the `getLike()` method constructs a SQL query using a prepared statement |
| CVE-2026-33768 | Analyzed | 未確認 | CWE-441, CWE-862 | Astro is a web framework. Prior to version 10.0.2, the @astrojs/vercel serverless entrypoint reads the x-astro-path header and x_astro_path query parameter to rewrite the internal |
| CVE-2026-33769 | Analyzed | 未確認 | CWE-20 | Astro is a web framework. From version 2.10.10 to before version 5.18.1, this issue concerns Astro's remotePatterns path enforcement for remote URLs used by server-side fetchers su |
| CVE-2026-3377 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Performing a manipulation of the arg |
| CVE-2026-33770 | Analyzed | 未確認 | CWE-89 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `fixCleanTitle()` static method in `objects/category.php` constructs a SQL SELECT query by d |
| CVE-2026-3378 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffe |
| CVE-2026-3379 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page lea |
| CVE-2026-3380 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page results in buffer overf |
| CVE-2026-33809 | Analyzed | 未確認 | CWE-434 | A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error. |
| CVE-2026-3381 | Analyzed | 未確認 | CWE-1284 | Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version |
| CVE-2026-3382 | Analyzed | 未確認 | CWE-119, CWE-787 | A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::Boxed_Number::get_as of the file include/chaiscript/dispatchkit/boxe |
| CVE-2026-3383 | Analyzed | 未確認 | CWE-369, CWE-404 | A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the file include/chaiscript/dispatchkit/boxed_number.hpp. Execut |
| CVE-2026-3384 | Analyzed | 未確認 | CWE-404, CWE-674 | A security vulnerability has been detected in ChaiScript up to 6.1.0. This impacts the function chaiscript::eval::AST_Node_Impl::eval/chaiscript::eval::Function_Push_Pop of the fil |
| CVE-2026-33847 | Analyzed | 未確認 | CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in linkingvision rapidvms.This issue affects rapidvms: before PR#96. |
| CVE-2026-33848 | Analyzed | 未確認 | CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in linkingvision rapidvms.This issue affects rapidvms: before PR#96. |
| CVE-2026-33849 | Analyzed | 未確認 | CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in linkingvision rapidvms.This issue affects rapidvms: before PR#96. |
| CVE-2026-3385 | Analyzed | 未確認 | CWE-404, CWE-674 | A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recur |
| CVE-2026-33850 | Deferred | 未確認 | CWE-787 | Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54. |
| CVE-2026-33851 | Deferred | 未確認 | CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in joncampbell123 doslib.This issue affects doslib: before doslib-20250729. |
| CVE-2026-33852 | Analyzed | 未確認 | CWE-401 | Missing Release of Memory after Effective Lifetime vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. |
| CVE-2026-33853 | Analyzed | 未確認 | CWE-476 | NULL Pointer Dereference vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-10. |
| CVE-2026-33854 | Analyzed | 未確認 | CWE-787 | Out-of-bounds Write vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-10. |
| CVE-2026-33855 | Analyzed | 未確認 | CWE-190 | Integer Overflow or Wraparound vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. |
| CVE-2026-33856 | Analyzed | 未確認 | CWE-401 | Missing Release of Memory after Effective Lifetime vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. |
| CVE-2026-3386 | Analyzed | 未確認 | CWE-119, CWE-125 | A flaw has been found in wren-lang wren up to 0.4.0. Affected by this vulnerability is the function emitOp of the file src/vm/wren_compiler.c. This manipulation causes out-of-bound |
| CVE-2026-33867 | Analyzed | 未確認 | CWE-312 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo allows content owners to password-protect individual videos. The video password is stored |
| CVE-2026-33868 | Analyzed | 未確認 | CWE-601 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.5.8, 4.4.15, and 4.3.21, an unauthenticated Open Redirect vulnerability (CWE-601) ex |
| CVE-2026-33869 | Analyzed | 未確認 | CWE-863 | Mastodon is a free, open-source social network server based on ActivityPub. In versions on the 4.5.x branch prior to 4.5.8 and on the 4.4.x branch prior to 4.4.15, an attacker that |
| CVE-2026-3387 | Analyzed | 未確認 | CWE-404, CWE-476 | A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wren_compiler.c. Such manipulation |
| CVE-2026-33870 | Modified | 未確認 | CWE-444 | Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunk |
| CVE-2026-33871 | Modified | 未確認 | CWE-770 | Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) again |
| CVE-2026-33872 | Awaiting Analysis | 未確認 | CWE-362 | elixir-nodejs provides an Elixir API for calling Node.js functions. A vulnerability in versions prior to 3.1.4 results in Cross-User Data Leakage or Information Disclosure due to a |
| CVE-2026-33873 | Analyzed | 未確認 | CWE-94 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assistant feature in Langflow executes LLM-generated Python code |
| CVE-2026-33874 | Modified | 未確認 | CWE-78 | Gematik Authenticator securely authenticates users for login to digital health applications. Starting in version 4.12.0 and prior to version 4.16.0, the Mac OS version of the Authe |
| CVE-2026-33875 | Modified | 未確認 | CWE-940 | Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially a |
| CVE-2026-33879 | Analyzed | 未確認 | CWE-307 | Federated Learning and Interoperability Platform (FLIP) is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare institutions |
| CVE-2026-3388 | Analyzed | 未確認 | CWE-404, CWE-674 | A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the file squirrel/sqcompiler.cpp. Performing a manipulation res |
| CVE-2026-33881 | Analyzed | 未確認 | CWE-94 | Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Workspace environment variable values are interpolated into JavaScript st |
| CVE-2026-33882 | Analyzed | 未確認 | CWE-20, CWE-200 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, the markdown preview endpoint could be manipulated to return augmented d |
| CVE-2026-33883 | Analyzed | 未確認 | CWE-79 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, the `user:reset_password_form` tag could render user-input directly into |
| CVE-2026-33884 | Analyzed | 未確認 | CWE-863 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, an authenticated Control Panel user with access to live preview could us |
| CVE-2026-33885 | Analyzed | 未確認 | CWE-601 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, the external URL detection used for redirect validation on unauthenticat |
| CVE-2026-33886 | Analyzed | 未確認 | CWE-200 | Statamic is a Laravel and Git powered content management system (CMS). Starting in version 5.7.12 and prior to versions 5.73.16 and 6.7.2, a control panel user with access to Antle |
| CVE-2026-33887 | Analyzed | 未確認 | CWE-862 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, authenticated Control Panel users could view entry revisions for any col |
| CVE-2026-3389 | Analyzed | 未確認 | CWE-404, CWE-476 | A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can l |
| CVE-2026-33890 | Analyzed | 未確認 | CWE-284 | MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.71, an unauthenticated attacker can register an arbitrary passkey and subsequently aut |
| CVE-2026-33891 | Modified | 未確認 | CWE-606, CWE-835 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, a Denial of Service (DoS) vulnerability exists in the |
| CVE-2026-33894 | Modified | 未確認 | CWE-20, CWE-347 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, RSASSA PKCS#1 v1.5 signature verification accepts for |
| CVE-2026-33895 | Modified | 未確認 | CWE-347 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, Ed25519 signature verification accepts forged non-can |
| CVE-2026-33896 | Modified | 未確認 | CWE-295 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, `pki.verifyCertificateChain()` does not enforce RFC 5 |
| CVE-2026-33897 | Analyzed | 未確認 | CWE-1336 | Incus is a system container and virtual machine manager. Prior to version 6.23.0, instance template files can be used to cause arbitrary read or writes as root on the host server. |
| CVE-2026-33898 | Analyzed | 未確認 | CWE-287 | Incus is a system container and virtual machine manager. Prior to version 6.23.0, the web server spawned by `incus webui` incorrectly validates the authentication token such that a |
| CVE-2026-3390 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was identified in FascinatedBox lily up to 2.3. This issue affects the function patch_line_end of the file src/lily_build_error.c of the component Error Reporting. |
| CVE-2026-33903 | Analyzed | 未確認 | CWE-476 | Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing a specially crafted NGAP LocationReport message. An attacker able to send crafte |
| CVE-2026-33904 | Analyzed | 未確認 | CWE-833 | Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock in the AMF's SCTP notification handler causes the entire AMF control plane to hang until th |
| CVE-2026-33906 | Analyzed | 未確認 | CWE-269 | Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, the NetworkManager role was granted backup and restore permission. The restore endpoint accepted any v |
| CVE-2026-33907 | Analyzed | 未確認 | CWE-476 | Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An a |
| CVE-2026-33909 | Analyzed | 未確認 | CWE-89 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, several variables in the MedEx recall/reminder pr |
| CVE-2026-3391 | Analyzed | 未確認 | CWE-119, CWE-125 | A security flaw has been discovered in FascinatedBox lily up to 2.3. Impacted is the function clear_storages of the file src/lily_emitter.c. The manipulation results in out-of-boun |
| CVE-2026-33910 | Analyzed | 未確認 | CWE-89 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions up to and including 8.0.0.2 contain a SQL injection vulnerability |
| CVE-2026-33911 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the POST parameter `title` is reflected back in a |
| CVE-2026-33912 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an authenticated attacker could craft a malicious |
| CVE-2026-33913 | Analyzed | 未確認 | CWE-611 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an authenticated user with access to the Carecoor |
| CVE-2026-33914 | Analyzed | 未確認 | CWE-89 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the PostCalendar module contains a blind SQL inje |
| CVE-2026-33915 | Analyzed | 未確認 | CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, five insurance company REST API routes are missin |
| CVE-2026-33916 | Analyzed | 未確認 | CWE-1321, CWE-79 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `resolvePartial()` in the Handlebars runtime resolves partial names |
| CVE-2026-33917 | Analyzed | 未確認 | CWE-89 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 contais a SQL injection vulnerability in the ajax |
| CVE-2026-33918 | Analyzed | 未確認 | CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the billing file-download endpoint `interface/bil |
| CVE-2026-3392 | Analyzed | 未確認 | CWE-404, CWE-476 | A weakness has been identified in FascinatedBox lily up to 2.3. The affected element is the function eval_tree of the file src/lily_emitter.c. This manipulation causes null pointer |
| CVE-2026-3393 | Analyzed | 未確認 | CWE-119, CWE-122 | A security vulnerability has been detected in jarikomppa soloud up to 20200207. The impacted element is the function SoLoud::Wav::loadflac of the file src/audiosource/wav/soloud_wa |
| CVE-2026-33931 | Analyzed | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an Insecure Direct Object Reference (IDOR) vulner |
| CVE-2026-33932 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a stored cross-site scripting vulnerability in th |
| CVE-2026-33933 | Analyzed | 未確認 | CWE-79 | OpenEMR is a free and open source electronic health records and medical practice management application. Starting in version 7.0.2.1 and prior to version 8.0.0.3, a reflected cross |
| CVE-2026-33934 | Analyzed | 未確認 | CWE-639, CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have a missing authorization check in `portal/sig |
| CVE-2026-33935 | Analyzed | 未確認 | CWE-307 | MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.72, an unauthenticated attacker can lock out administrator and visitor accounts from p |
| CVE-2026-33936 | Analyzed | 未確認 | CWE-130, CWE-20 | The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-cu |
| CVE-2026-33937 | Modified | 未確認 | CWE-843, CWE-94 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `Handlebars.compile()` accepts a pre-parsed AST object in addition t |
| CVE-2026-33938 | Modified | 未確認 | CWE-843, CWE-917, CWE-94 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the `@partial-block` special variable is stored in the template data |
| CVE-2026-33939 | Modified | 未確認 | CWE-248, CWE-754 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, when a Handlebars template contains decorator syntax referencing an |
| CVE-2026-3394 | Analyzed | 未確認 | CWE-119 | A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloud_wav.cpp of the component WAV |
| CVE-2026-33940 | Modified | 未確認 | CWE-843, CWE-94 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, a crafted object placed in the template context can bypass all condi |
| CVE-2026-33941 | Modified | 未確認 | CWE-116, CWE-79, CWE-94 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the Handlebars CLI precompiler (`bin/handlebars` / `lib/precompiler. |
| CVE-2026-33942 | Analyzed | 未確認 | CWE-502 | Saloon is a PHP library that gives users tools to build API integrations and SDKs. Versions prior to 4.0.0 used PHP's unserialize() in AccessTokenAuthenticator::unserialize() to re |
| CVE-2026-33943 | Modified | 未確認 | CWE-917, CWE-94 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. In versions 15.10.0 through 20.8.7, a code injection vulnerability in `ECMAScriptMod |
| CVE-2026-33945 | Analyzed | 未確認 | CWE-22 | Incus is a system container and virtual machine manager. Incus instances have an option to provide credentials to systemd in the guest. For containers, this is handled through a sh |
| CVE-2026-33946 | Analyzed | 未確認 | CWE-384, CWE-639 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to version 0.9.2, the Ruby SDK's streamable_http_transport.rb implementation contains a |
| CVE-2026-3395 | Analyzed | 未確認 | CWE-74, CWE-94 | A flaw has been found in MaxSite CMS up to 109.1. This impacts the function eval of the file application/maxsite/admin/plugins/editor_markitup/preview-ajax.php of the component Mar |
| CVE-2026-33952 | Modified | 未確認 | CWE-617 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure i |
| CVE-2026-33953 | Analyzed | 未確認 | CWE-918 | LinkAce is a self-hosted archive to collect website links. Versions prior to 2.5.3 block direct requests to private IP literals, but still performs server-side requests to internal |
| CVE-2026-33954 | Analyzed | 未確認 | CWE-285 | LinkAce is a self-hosted archive to collect website links. In versions prior to 2.5.3, a private note attached to a non-private link can be disclosed to a different authenticated u |
| CVE-2026-33955 | Modified | 未確認 | CWE-79, CWE-94 | Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop, a cross-site scripting vulnerability stored in the note history comparison viewer can escalate to remote cod |
| CVE-2026-33976 | Analyzed | 未確認 | CWE-79, CWE-94 | Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop and 3.3.17 on Android/iOS, a stored XSS in the Web Clipper rendering flow can be escalated to remote code exe |
| CVE-2026-33977 | Analyzed | 未確認 | CWE-617 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by sending audio data in IMA ADPCM for |
| CVE-2026-33979 | Analyzed | 未確認 | CWE-183, CWE-79 | Express XSS Sanitizer is Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) a |
| CVE-2026-3398 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. Executing a manipulation of the a |
| CVE-2026-33980 | Analyzed | 未確認 | CWE-943 | Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and explore Azure Data Explorer (ADX/Kusto) databases thro |
| CVE-2026-33981 | Analyzed | 未確認 | CWE-200 | changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, the `jq:` and `jqraw:` include filter expressions allow use of the jq `env` builtin, which |
| CVE-2026-33982 | Analyzed | 未確認 | CWE-125 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in w |
| CVE-2026-33983 | Modified | 未確認 | CWE-190, CWE-252 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_upgrade() detects a mismatch via progressive_rfx_quant_cmp_equ |
| CVE-2026-33984 | Modified | 未確認 | CWE-122, CWE-131 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resize_vbar_entry() in libfreerdp/codec/clear.c, vBarEntry->size is updated to vBarEntr |
| CVE-2026-33985 | Analyzed | 未確認 | CWE-125, CWE-131 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen, potentially leaking sensitive |
| CVE-2026-33986 | Modified | 未確認 | CWE-122, CWE-131 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libfreerdp/codec/h264.c, h264->width and h264->height are update |
| CVE-2026-33987 | Analyzed | 未確認 | CWE-122, CWE-131 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry_v3() in libfreerdp/cache/persistent.c, persistent->bmpSize |
| CVE-2026-33989 | Analyzed | 未確認 | CWE-22, CWE-73 | Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the `mob |
| CVE-2026-3399 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. The |
| CVE-2026-33991 | Analyzed | 未確認 | CWE-89 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html/socio/sistema/deletar_tag.php` uses `extract($_REQUEST)` on line 14 and directly concaten |
| CVE-2026-33992 | Analyzed | 未確認 | CWE-918 | pyLoad is a free and open-source download manager written in Python. Prior to version 0.5.0b3.dev97, PyLoad's download engine accepts arbitrary URLs without validation, enabling Se |
| CVE-2026-33993 | Analyzed | 未確認 | CWE-1321 | Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.25, the `unserialize()` function in `locutus/php/var/unserialize` |
| CVE-2026-33994 | Modified | 未確認 | CWE-1321 | Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Starting in version 2.0.39 and prior to version 3.0.25, a prototype pollution vulnerab |
| CVE-2026-33995 | Analyzed | 未確認 | CWE-415 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerberos_AcceptSecurityContext() and kerberos_InitializeSec |
| CVE-2026-33996 | Analyzed | 未確認 | CWE-476 | LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse |
| CVE-2026-33997 | Modified | 未確認 | CWE-193, CWE-266 | Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docke |
| CVE-2026-3400 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulatio |
| CVE-2026-34005 | Deferred | 未確認 | CWE-78 | In Sofia on Xiongmai DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P) 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticat |
| CVE-2026-3401 | Analyzed | 未確認 | CWE-613 | A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote |
| CVE-2026-3402 | Analyzed | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability affects unknown code of the file /edit-course.php. Such mani |
| CVE-2026-3403 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown processing of the file /edit-subject.php. Performing a manipulation |
| CVE-2026-34036 | Analyzed | 未確認 | CWE-98 | Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions 22.0.4 and prior, there is a Local File Inclusion (LFI) v |
| CVE-2026-3404 | Analyzed | 未確認 | CWE-610, CWE-611 | A flaw has been found in thinkgem JeeSite up to 5.15.1. Impacted is an unknown function of the file /com/jeesite/common/shiro/cas/CasOutHandler.java of the component Endpoint. Exec |
| CVE-2026-34040 | Analyzed | 未確認 | CWE-288 | Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This |
| CVE-2026-34041 | Analyzed | 未確認 | CWE-74 | act is a project which allows for local running of github actions. Prior to version 0.2.86, act unconditionally processes the deprecated ::set-env:: and ::add-path:: workflow comma |
| CVE-2026-34042 | Deferred | 未確認 | CWE-862 | act is a project which allows for local running of github actions. Prior to version 0.2.86, act's built in actions/cache server listens to connections on all interfaces and allows |
| CVE-2026-34043 | Analyzed | 未確認 | CWE-400, CWE-834 | Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU e |
| CVE-2026-34046 | Analyzed | 未確認 | CWE-639, CWE-862 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.5.1, the `_read_flow` helper in `src/backend/base/langflow/api/v1/flows.py` branch |
| CVE-2026-3405 | Analyzed | 未確認 | CWE-22 | A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the component Connection Handler. The manipulation leads to path tra |
| CVE-2026-34051 | Analyzed | 未確認 | CWE-285, CWE-425 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have an improper access control on the Import/Exp |
| CVE-2026-34053 | Analyzed | 未確認 | CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, missing authorization in the AJAX deletion endpoi |
| CVE-2026-34054 | Awaiting Analysis | 未確認 | CWE-427 | vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.1#3, vcpkg's Windows builds of OpenSSL set openssldir to a path on the build machine, making that path b |
| CVE-2026-34055 | Analyzed | 未確認 | CWE-639 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the legacy patient notes functions in `library/pn |
| CVE-2026-34056 | Analyzed | 未確認 | CWE-285, CWE-425 | OpenEMR is a free and open source electronic health records and medical practice management application. A Broken Access Control vulnerability in OpenEMR up to and including versio |
| CVE-2026-3406 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registratio |
| CVE-2026-34060 | Analyzed | 未確認 | CWE-94 | Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and ruby-lsp version 0.26.9, the rubyLsp.branch VS Code workspace s |
| CVE-2026-3407 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the file kernel/rtlil.h of the component BLIF File Parser. This ma |
| CVE-2026-34070 | Modified | 未確認 | CWE-22 | LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embed |
| CVE-2026-34071 | Analyzed | 未確認 | CWE-79 | Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. In version 2.7.3, the /api/v1/convert/eml/pdf endpoint with parameter d |
| CVE-2026-34073 | Modified | 未確認 | CWE-295 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SA |
| CVE-2026-3408 | Analyzed | 未確認 | CWE-404, CWE-476, CWE-787 | A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such m |
| CVE-2026-34085 | Analyzed | 未確認 | CWE-193 | fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution |
| CVE-2026-3409 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5. Affected is the function importlib.machinery.SourceFileLoader.exec_module of the file /api/v1/serve/awel/flow/impo |
| CVE-2026-3410 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/check_studid.php. Execut |
| CVE-2026-3411 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_ |
| CVE-2026-3412 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /att_single_view.php. The manipulation of the argument dt re |
| CVE-2026-3413 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /admin_single_student.php. This manipulation of the argu |
| CVE-2026-34155 | Analyzed | 未確認 | CWE-196, CWE-347 | RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overfl |
| CVE-2026-34156 | Analyzed | 未確認 | CWE-913 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.28, NocoBase's Workflow Script Node executes u |
| CVE-2026-34162 | Analyzed | 未確認 | CWE-306, CWE-918 | FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication |
| CVE-2026-34163 | Analyzed | 未確認 | CWE-918 | FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, FastGPT's MCP (Model Context Protocol) tools endpoints (/api/core/app/mcpTools/getTools and /api/core/app/mcpTo |
| CVE-2026-34165 | Analyzed | 未確認 | CWE-191, CWE-770 | go-git is an extensible git implementation library written in pure Go. From version 5.0.0 to before version 5.17.1, a vulnerability has been identified in which a maliciously craft |
| CVE-2026-34172 | Undergoing Analysis | 未確認 | CWE-1336 | Giskard is an open-source Python library for testing and evaluating agentic systems. Prior to versions 0.3.4 and 1.0.2b1, ChatWorkflow.chat(message) passes its string argument dire |
| CVE-2026-3419 | Analyzed | 未確認 | CWE-185 | Fastify incorrectly accepts malformed `Content-Type` headers containing trailing characters after the subtype token, in violation of RFC 9110 §8.3.1(https://httpwg.org/specs/rfc911 |
| CVE-2026-34200 | Analyzed | 未確認 | CWE-306, CWE-942 | Nhost is an open source Firebase alternative with GraphQL. Prior to version 1.41.0, The Nhost CLI MCP server, when explicitly configured to listen on a network port, applies no inb |
| CVE-2026-34202 | Analyzed | 未確認 | CWE-1336, CWE-502, CWE-94 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-chain version 6.0.1, a vulnerability in Zebra's transaction processing logic allows a remote |
| CVE-2026-34203 | Analyzed | 未確認 | CWE-521 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to versions 2.4.30 and 3.0.10, user creation and editing via the REST API fails to apply the password v |
| CVE-2026-34204 | Analyzed | 未確認 | CWE-287 | MinIO is a high-performance object storage system. Prior to version RELEASE.2026-03-26T21-24-40Z, a flaw in extractMetadataFromMime() allows any authenticated user with s3:PutObjec |
| CVE-2026-34205 | Awaiting Analysis | 未確認 | CWE-923 | Home Assistant is open source home automation software that puts local control and privacy first. Home Assistant apps (formerly add-ons) configured with host network mode expose un |
| CVE-2026-34206 | Analyzed | 未確認 | CWE-79 | Captcha Protect is a Traefik middleware to add an anti-bot challenge to individual IPs in a subnet when traffic spikes are detected from that subnet. Prior to version 1.12.2, a ref |
| CVE-2026-34209 | Analyzed | 未確認 | CWE-294 | mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the tempo/session cooperative close handler validated the close voucher amount using "<" inst |
| CVE-2026-34210 | Analyzed | 未確認 | CWE-697 | mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the stripe/charge payment method did not check Stripe's Idempotent-Replayed response header w |
| CVE-2026-34214 | Analyzed | 未確認 | CWE-212, CWE-312 | Trino is a distributed SQL query engine for big data analytics. From version 439 to before version 480, Iceberg connector REST catalog static credentials (access key) or vended cre |
| CVE-2026-34215 | Modified | 未確認 | CWE-200 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.63 and 9.7.0-alpha.7, the verify password endpoint ret |
| CVE-2026-34218 | Analyzed | 未確認 | CWE-269 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.14, two related startup defects created a window during wh |
| CVE-2026-34219 | Analyzed | 未確認 | CWE-190, CWE-617 | libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to version 0.49.4, the Rust libp2p Gossipsub implementation contains a remotely reach |
| CVE-2026-3422 | Analyzed | 未確認 | CWE-502 | U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending |
| CVE-2026-34220 | Analyzed | 未確認 | CWE-89 | MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to versions 6.6.10 and 7.0.6, there is a SQL injection vulnerability wh |
| CVE-2026-34221 | Analyzed | 未確認 | CWE-1321 | MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to versions 6.6.10 and 7.0.6, a prototype pollution vulnerability exist |
| CVE-2026-34224 | Modified | 未確認 | CWE-367 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.64 and 9.7.0-alpha.8, an attacker who possesses a vali |
| CVE-2026-34226 | Modified | 未確認 | CWE-201, CWE-359 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Versions prior to 20.8.9 may attach cookies from the current page origin (`window.lo |
| CVE-2026-34227 | Analyzed | 未確認 | CWE-306, CWE-942 | Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to version 1.7.4, a single click on a malicious link gives an unauthenticated attacker immedi |
| CVE-2026-34231 | Analyzed | 未確認 | CWE-79 | Slippers is a UI component framework for Django. Prior to version 0.6.3, a Cross-Site Scripting (XSS) vulnerability exists in the {% attrs %} template tag of the slippers Django pa |
| CVE-2026-34235 | Analyzed | 未確認 | CWE-125 | PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap out-of-bounds read vulnerability exists in PJSIP's VP9 RTP unpacketizer |
| CVE-2026-34237 | Modified | 未確認 | CWE-942 | MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1, and 1.1.1, there is a hardcoded wildcard CORS vulnerability. |
| CVE-2026-34240 | Analyzed | 未確認 | CWE-347 | JOSE is a Javascript Object Signing and Encryption (JOSE) library. Prior to version 0.3.5+1, a vulnerability in jose could allow an unauthenticated, remote attacker to forge valid |
| CVE-2026-34243 | Analyzed | 未確認 | CWE-77, CWE-78 | wenxian is a tool to generate BIBTEX files from given identifiers (DOI, PMID, arXiv ID, or paper title). In versions 0.3.1 and prior, a GitHub Actions workflow uses untrusted user |
| CVE-2026-34245 | Analyzed | 未確認 | CWE-862 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `plugin/PlayLists/View/Playlists_schedules/add.json.php` endpoint allows any authenticated u |
| CVE-2026-34247 | Analyzed | 未確認 | CWE-862 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `plugin/Live/uploadPoster.php` endpoint allows any authenticated user to overwrite the poste |
| CVE-2026-3427 | Deferred | 未確認 | CWE-79 | The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the `jsonText` block attribute in all |
| CVE-2026-3429 | Analyzed | 未確認 | CWE-284 | A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level to perform sensitive actions intended only for higher-assurance |
| CVE-2026-3431 | Analyzed | 未確認 | CWE-862 | On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions. An attacker can |
| CVE-2026-3432 | Analyzed | 未確認 | CWE-862 | On SimStudio version below to 0.5.74, the `/api/auth/oauth/token` endpoint contains a code path that bypasses all authorization checks when provided with `credentialAccountUserId` |
| CVE-2026-34352 | Modified | 未確認 | CWE-732 | In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions |
| CVE-2026-34353 | Analyzed | 未確認 | CWE-190 | In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed. |
| CVE-2026-34359 | Analyzed | 未確認 | CWE-346 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, ManagedWebAccessUtils.getServer() uses String.start |
| CVE-2026-34360 | Analyzed | 未確認 | CWE-918 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the /loadIG HTTP endpoint in the FHIR Validator HTT |
| CVE-2026-34361 | Analyzed | 未確認 | CWE-552 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the FHIR Validator HTTP service exposes an unauthen |
| CVE-2026-34362 | Analyzed | 未確認 | CWE-613 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `verifyTokenSocket()` function in `plugin/YPTSocket/functions.php` has its token timeout val |
| CVE-2026-34363 | Analyzed | 未確認 | CWE-362 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.65 and 9.7.0-alpha.9, when multiple clients subscribe |
| CVE-2026-34364 | Analyzed | 未確認 | CWE-863 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `categories.json.php` endpoint, which serves the category listing API, fails to enforce user |
| CVE-2026-34365 | Analyzed | 未確認 | CWE-918 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Fo |
| CVE-2026-34366 | Analyzed | 未確認 | CWE-918 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Fo |
| CVE-2026-34367 | Analyzed | 未確認 | CWE-918 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Fo |
| CVE-2026-34368 | Analyzed | 未確認 | CWE-362 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `transferBalance()` method in `plugin/YPTWallet/YPTWallet.php` contains a Time-of-Check-Time |
| CVE-2026-34369 | Analyzed | 未確認 | CWE-862 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `get_api_video_file` and `get_api_video` API endpoints in AVideo return full video playback |
| CVE-2026-3437 | Modified | 未確認 | CWE-119 | An improper restriction of operations within the bounds of a memory buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker t |
| CVE-2026-34372 | Analyzed | 未確認 | CWE-288 | Sulu is an open-source PHP content management system based on the Symfony framework. From versions 1.0.0 to before 2.6.22, and 3.0.0 to before 3.0.5, a user which has permission fo |
| CVE-2026-34373 | Analyzed | 未確認 | CWE-346 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.66 and 9.7.0-alpha.10, the GraphQL API endpoint does n |
| CVE-2026-34374 | Analyzed | 未確認 | CWE-89 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `Live_schedule::keyExists()` method constructs a SQL query by interpolating a stream key dir |
| CVE-2026-34375 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the YPTWallet Stripe payment confirmation page directly echoes the `$_REQUEST['plugin']` paramet |
| CVE-2026-34377 | Analyzed | 未確認 | CWE-347 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-consensus version 5.0.1, a logic error in Zebra's transaction verification cache could allow |
| CVE-2026-34381 | Analyzed | 未確認 | CWE-284 | Admidio is an open-source user management solution. From version 5.0.0 to before version 5.0.8, Admidio relies on adm_my_files/.htaccess to deny direct HTTP access to uploaded docu |
| CVE-2026-34382 | Analyzed | 未確認 | CWE-352 | Admidio is an open-source user management solution. From version 5.0.0 to before version 5.0.8, the delete mode handler in mylist_function.php permanently deletes list configuratio |
| CVE-2026-34383 | Analyzed | 未確認 | CWE-20, CWE-352 | Admidio is an open-source user management solution. Prior to version 5.0.8, the inventory module's item_save endpoint accepts a user-controllable POST parameter imported that, when |
| CVE-2026-34384 | Analyzed | 未確認 | CWE-352 | Admidio is an open-source user management solution. Prior to version 5.0.8, the create_user, assign_member, and assign_user action modes in modules/registration.php approve pending |
| CVE-2026-34385 | Analyzed | 未確認 | CWE-89 | Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker |
| CVE-2026-34386 | Analyzed | 未確認 | CWE-89 | Fleet is open source device management software. Prior to 4.81.0, a SQL injection vulnerability in Fleet's MDM bootstrap package configuration allows an authenticated user with Tea |
| CVE-2026-34387 | Analyzed | 未確認 | CWE-78 | Fleet is open source device management software. Prior to 4.81.1, a command injection vulnerability in Fleet's software installer pipeline allows an attacker to achieve arbitrary c |
| CVE-2026-34388 | Analyzed | 未確認 | CWE-703 | Fleet is open source device management software. Prior to 4.81.0, a denial-of-service vulnerability in Fleet's gRPC Launcher endpoint allows an authenticated host to crash the enti |
| CVE-2026-34389 | Analyzed | 未確認 | CWE-287 | Fleet is open source device management software. Prior to 4.81.0, Fleet contained an issue in the user invitation flow where the email address provided during invite acceptance was |
| CVE-2026-3439 | Analyzed | 未確認 | CWE-121 | A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall. |
| CVE-2026-34391 | Analyzed | 未確認 | CWE-488 | Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM command |
| CVE-2026-34394 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's admin plugin configuration endpoint (admin/save.json.php) lacks any CSRF token validation. There |
| CVE-2026-34395 | Analyzed | 未確認 | CWE-862 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/YPTWallet/view/users.json.php endpoint returns all platform users with their personal informati |
| CVE-2026-34396 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo admin panel renders plugin configuration values in HTML forms without applying htmlspecialchars |
| CVE-2026-34400 | Analyzed | 未確認 | CWE-89 | Alerta is a monitoring tool. Prior to version 9.1.0, the Query string search API (q=) was vulnerable to SQL injection via the Postgres query parser, which built WHERE clauses by in |
| CVE-2026-34401 | Analyzed | 未確認 | CWE-611 | XML Notepad is a Windows program that provides a simple intuitive User Interface for browsing and editing XML documents. Prior to version 2.9.0.21, XML Notepad does not disable DTD |
| CVE-2026-34404 | Analyzed | 未確認 | CWE-400 | Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contai |
| CVE-2026-34405 | Analyzed | 未確認 | CWE-79 | Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contai |
| CVE-2026-34406 | Analyzed | 未確認 | CWE-915 | APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. Prior to v |
| CVE-2026-3441 | Modified | 未確認 | CWE-125 | A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitiv |
| CVE-2026-34411 | Analyzed | 未確認 | CWE-306 | Appsmith versions prior to 1.98 expose sensitive instance management API endpoints without authentication. Unauthenticated attackers can query endpoints like /api/v1/consolidated-a |
| CVE-2026-3442 | Modified | 未確認 | CWE-125 | A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploi |
| CVE-2026-34441 | Analyzed | 未確認 | CWE-444 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.40.0, cpp-httplib is vulnerable to HTTP Request Smuggling. The server's static |
| CVE-2026-34442 | Analyzed | 未確認 | CWE-20, CWE-601, CWE-829 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, host header manipulation in FreeScout version (http://localhost:8080/sy |
| CVE-2026-34443 | Analyzed | 未確認 | CWE-918 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, checkIpByMask() in app/Misc/Helper.php checks whether the input IP cont |
| CVE-2026-34448 | Analyzed | 未確認 | CWE-79, CWE-94 | SiYuan is a personal knowledge management system. Prior to version 3.6.2, an attacker who can place a malicious URL in an Attribute View mAsse field can trigger stored XSS when a v |
| CVE-2026-34449 | Analyzed | 未確認 | CWE-942 | SiYuan is a personal knowledge management system. Prior to version 3.6.2, a malicious website can achieve Remote Code Execution (RCE) on any desktop running SiYuan by exploiting th |
| CVE-2026-34450 | Analyzed | 未確認 | CWE-276, CWE-732 | The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory tool in the Anthropi |
| CVE-2026-34451 | Analyzed | 未確認 | CWE-22, CWE-41 | Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesyst |
| CVE-2026-34452 | Analyzed | 未確認 | CWE-367, CWE-59 | The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem memory tool in the An |
| CVE-2026-34453 | Analyzed | 未確認 | CWE-863 | SiYuan is a personal knowledge management system. Prior to version 3.6.2, the publish service exposes bookmarked blocks from password-protected documents to unauthenticated visitor |
| CVE-2026-34472 | Modified | 未確認 | CWE-200, CWE-306 | Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve se |
| CVE-2026-34475 | Analyzed | 未確認 | CWE-180 | Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cac |
| CVE-2026-3449 | Deferred | 未確認 | CWE-705 | Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains in |
| CVE-2026-34503 | Analyzed | 未確認 | CWE-613 | OpenClaw before 2026.3.28 fails to disconnect active WebSocket sessions when devices are removed or tokens are revoked. Attackers with revoked credentials can maintain unauthorized |
| CVE-2026-34504 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-provider.ts component that allows attackers to fetch internal UR |
| CVE-2026-34505 | Analyzed | 未確認 | CWE-307 | OpenClaw before 2026.3.12 applies rate limiting only after successful webhook authentication, allowing attackers to bypass rate limits and brute-force webhook secrets. Attackers ca |
| CVE-2026-34506 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.8 contains a sender allowlist bypass vulnerability in its Microsoft Teams plugin that allows unauthorized senders to bypass intended authorization checks. Wh |
| CVE-2026-34508 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-34509 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-3452 | Analyzed | 未確認 | CWE-502 | Concrete CMS below version 9.4.8 is vulnerable to Remote Code Execution by stored PHP object injection into the Express Entry List block via the columns parameter. An authenticated |
| CVE-2026-3453 | Deferred | 未確認 | CWE-639 | The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.16.11. This is due to missing ownership validation o |
| CVE-2026-34532 | Analyzed | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.67 and 9.7.0-alpha.11, an attacker can bypass Cloud Fu |
| CVE-2026-34533 | Analyzed | 未確認 | CWE-758 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior (UB) in |
| CVE-2026-34534 | Analyzed | 未確認 | CWE-122 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap-buffer-overflow (HBO |
| CVE-2026-34535 | Analyzed | 未確認 | CWE-122 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a segmentation fault (SEGV) |
| CVE-2026-34536 | Analyzed | 未確認 | CWE-674 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack overflow (SO) in SI |
| CVE-2026-34537 | Analyzed | 未確認 | CWE-758 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior (UB) in |
| CVE-2026-34539 | Analyzed | 未確認 | CWE-122 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile and TIFF input can trigger a heap-buffe |
| CVE-2026-34540 | Analyzed | 未確認 | CWE-122 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap-buffer-overflow (HBO |
| CVE-2026-34541 | Analyzed | 未確認 | CWE-476 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior (UB) via |
| CVE-2026-34542 | Analyzed | 未確認 | CWE-121 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack-buffer-overflow (SB |
| CVE-2026-34546 | Analyzed | 未確認 | CWE-369 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefined Behavior (UB) due |
| CVE-2026-34547 | Analyzed | 未確認 | CWE-758 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, an Undefined Behavior (UB) condition in IccUtil.cpp can be tr |
| CVE-2026-34548 | Analyzed | 未確認 | CWE-681 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) condition in the XML conv |
| CVE-2026-34549 | Analyzed | 未確認 | CWE-758 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) condition in IccUtil.cpp |
| CVE-2026-3455 | Analyzed | 未確認 | CWE-79 | Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitisation of URLs in the email con |
| CVE-2026-34550 | Analyzed | 未確認 | CWE-681 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) condition in IccProfLib/I |
| CVE-2026-34551 | Analyzed | 未確認 | CWE-476 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference (NPD) in CIccTagLut16::Write() can |
| CVE-2026-34552 | Analyzed | 未確認 | CWE-476 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) issue in IccTagLut.cpp wh |
| CVE-2026-34553 | Analyzed | 未確認 | CWE-562, CWE-665 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a defect in LUT dump/iteration logic affecting CIccC |
| CVE-2026-34554 | Analyzed | 未確認 | CWE-125 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a heap-buffer-overflow (HBO) in CIccApplyCmmSearch::costFunc( |
| CVE-2026-34555 | Analyzed | 未確認 | CWE-121 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow (SBO) in CIccTagFixedNum<>:: |
| CVE-2026-34556 | Analyzed | 未確認 | CWE-125 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a heap-buffer-overflow (HBO) in icAnsiToUtf8() in th |
| CVE-2026-34557 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34558 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-3457 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS. This issue a |
| CVE-2026-34573 | Analyzed | 未確認 | CWE-407 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.68 and 9.7.0-alpha.12, the GraphQL query complexity va |
| CVE-2026-34574 | Analyzed | 未確認 | CWE-697 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.69 and 9.7.0-alpha.14, an authenticated user can bypas |
| CVE-2026-34585 | Analyzed | 未確認 | CWE-79, CWE-94 | SiYuan is a personal knowledge management system. Prior to version 3.6.2, a vulnerability allows crafted block attribute values to bypass server-side attribute escaping when an HTM |
| CVE-2026-34586 | Analyzed | 未確認 | CWE-863 | PdfDing is a selfhosted PDF manager, viewer and editor offering a seamless user experience on multiple devices. Prior to version 1.7.1, check_shared_access_allowed() validates only |
| CVE-2026-3459 | Deferred | 未確認 | CWE-434 | The Drag and Drop Multiple File Upload - Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'dnd_upload_cf7 |
| CVE-2026-34595 | Analyzed | 未確認 | CWE-843 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.70 and 9.7.0-alpha.18, an authenticated user with find |
| CVE-2026-3460 | Deferred | 未確認 | CWE-20 | The REST API TO MiniProgram plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.2. This is due to the permission callba |
| CVE-2026-34605 | Analyzed | 未確認 | CWE-79 | SiYuan is a personal knowledge management system. From version 3.6.0 to before version 3.6.2, the SanitizeSVG function introduced in version 3.6.0 to fix XSS in the unauthenticated |
| CVE-2026-34611 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo endpoint objects/emailAllUsers.json.php allows administrators to send HTML emails to every regi |
| CVE-2026-34613 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo endpoint objects/pluginSwitch.json.php allows administrators to enable or disable any installed |
| CVE-2026-3463 | Analyzed | 未確認 | CWE-119, CWE-122 | A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binary_writer::append of the file source/detail/binary.hpp of the componen |
| CVE-2026-3465 | Deferred | 未確認 | CWE-404 | A vulnerability was determined in Tuya App and SDK 24.07.11 on Android. Affected by this vulnerability is an unknown functionality of the component JSON Data Point Handler. This ma |
| CVE-2026-3468 | Analyzed | 未確認 | CWE-79 | A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web pag |
| CVE-2026-3469 | Analyzed | 未確認 | CWE-20 | A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to |
| CVE-2026-3470 | Analyzed | 未確認 | CWE-20 | A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as ad |
| CVE-2026-34714 | Modified | 未確認 | CWE-78, CWE-917 | Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking |
| CVE-2026-34716 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo YPTSocket plugin's caller feature renders incoming call notifications using the jQuery Toast Pl |
| CVE-2026-34731 | Analyzed | 未確認 | CWE-306 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo on_publish_done.php endpoint in the Live plugin allows unauthenticated users to terminate any a |
| CVE-2026-34732 | Analyzed | 未確認 | CWE-306 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo CreatePlugin template for list.json.php does not include any authentication or authorization ch |
| CVE-2026-34733 | Analyzed | 未確認 | CWE-284 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in |
| CVE-2026-34737 | Analyzed | 未確認 | CWE-862 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the StripeYPT plugin includes a test.php debug endpoint that is accessible to any logged-in user, not just |
| CVE-2026-34738 | Analyzed | 未確認 | CWE-285 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to |
| CVE-2026-34739 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the User_Location plugin's testIP.php page reflects the ip request parameter directly into an HTML input e |
| CVE-2026-3474 | Deferred | 未確認 | CWE-22 | The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 1.6.3. This |
| CVE-2026-34740 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the EPG (Electronic Program Guide) link feature in AVideo allows authenticated users with upload permissio |
| CVE-2026-3475 | Deferred | 未確認 | CWE-862 | The Instant Popup Builder plugin for WordPress is vulnerable to Unauthenticated Arbitrary Shortcode Execution in all versions up to and including 1.1.7. This is due to the handle_e |
| CVE-2026-3476 | Analyzed | 未確認 | CWE-94 | A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while ope |
| CVE-2026-3478 | Deferred | 未確認 | CWE-918 | The Content Syndication Toolkit plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3 via the redux_p AJAX action in the bundl |
| CVE-2026-34784 | Analyzed | 未確認 | CWE-285 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.71 and 9.7.1-alpha.1, file downloads via HTTP Range re |
| CVE-2026-3479 | Awaiting Analysis | 未確認 | CWE-22 | DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to c |
| CVE-2026-3483 | Analyzed | 未確認 | CWE-749 | An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges. |
| CVE-2026-3484 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function child_process.exec of the file |
| CVE-2026-3485 | Analyzed | 未確認 | CWE-77, CWE-78 | A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection |
| CVE-2026-3486 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the a |
| CVE-2026-3487 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/class-result.php. Performing a manipulation o |
| CVE-2026-34881 | Modified | 未確認 | CWE-918 | OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL val |
| CVE-2026-34887 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.This issue affects Kubio |
| CVE-2026-3492 | Deferred | 未確認 | CWE-79 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.9.28.1. This is due to a compound failure involving miss |
| CVE-2026-3494 | Analyzed | 未確認 | CWE-778 | In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an |
| CVE-2026-3496 | Deferred | 未確認 | CWE-89 | The JetBooking plugin for WordPress is vulnerable to SQL Injection via the 'check_in_date' parameter in all versions up to, and including, 4.0.3. This is due to insufficient escapi |
| CVE-2026-3497 | Modified | 未確認 | CWE-824, CWE-908 | Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not a |
| CVE-2026-3502 | Analyzed | 掲載 | CWE-494 | TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tam |
| CVE-2026-3503 | Analyzed | 未確認 | CWE-335 | Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key |
| CVE-2026-3506 | Deferred | 未確認 | CWE-862 | The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9. This is due to the plugin not properly verifying |
| CVE-2026-3509 | Awaiting Analysis | 未確認 | CWE-134 | An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a |
| CVE-2026-3511 | Awaiting Analysis | 未確認 | CWE-611 | Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SSRF (Server Si |
| CVE-2026-3512 | Deferred | 未確認 | CWE-79 | The Writeprint Stylometry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'p' GET parameter in all versions up to and including 0.1. This is due to ins |
| CVE-2026-3516 | Deferred | 未確認 | CWE-79 | The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all versions up to, and including, 3.0.18. This is due to i |
| CVE-2026-3520 | Modified | 未確認 | CWE-674, CWE-770 | Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.1 allows an attacker to trigger a Denial of Service (DoS) by sendi |
| CVE-2026-3523 | Deferred | 未確認 | CWE-89 | The Apocalypse Meow plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 22.1.0. This is due to a flawed logical opera |
| CVE-2026-3525 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0. |
| CVE-2026-3526 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0. |
| CVE-2026-3527 | Analyzed | 未確認 | CWE-306 | Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX |
| CVE-2026-3528 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Calculation Fields allows Cross-Site Scripting (XSS).This issue affects |
| CVE-2026-3529 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Google Analytics GA4 allows Cross-Site Scripting (XSS).This issue affec |
| CVE-2026-3530 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenID Connect / OAuth client allows Server Side Request Forgery.This issue affects OpenID Connect / OAuth client: from 0 |
| CVE-2026-3531 | Analyzed | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect / OAuth client allows Authentication Bypass.This issue affects OpenID Connect / OAut |
| CVE-2026-3532 | Analyzed | 未確認 | CWE-178 | Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 |
| CVE-2026-3533 | Deferred | 未確認 | CWE-434 | The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on import_popup_templates() function as well as insufficient file type va |
| CVE-2026-3534 | Deferred | 未確認 | CWE-79 | The Astra theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `ast-page-background-meta` and `ast-content-background-meta` post meta fields in all versions up |
| CVE-2026-3536 | Modified | 未確認 | CWE-190, CWE-472 | Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium s |
| CVE-2026-3537 | Modified | 未確認 | CWE-1091, CWE-787 | Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr |
| CVE-2026-3538 | Modified | 未確認 | CWE-191, CWE-472 | Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium se |
| CVE-2026-3539 | Rejected | 未確認 | Rejected reason: Determined a bug and not a vulnerability | |
| CVE-2026-3540 | Analyzed | 未確認 | CWE-125 | Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromiu |
| CVE-2026-3541 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium se |
| CVE-2026-3542 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chro |
| CVE-2026-3543 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (C |
| CVE-2026-3544 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium sec |
| CVE-2026-3545 | Analyzed | 未確認 | CWE-20 | Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chro |
| CVE-2026-3546 | Deferred | 未確認 | CWE-202 | The e-shot form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.2. The eshot_form_builder_get_account_data() |
| CVE-2026-3547 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in ALPN parsing due to incomplete validation. wolfSSL 5.8.4 and earlier contained an out-of-bounds read in ALPN handling when built with ALPN enabled (HAVE_ALPN |
| CVE-2026-3548 | Analyzed | 未確認 | CWE-122, CWE-787 | Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when improperly storing the CRL number as a |
| CVE-2026-3549 | Analyzed | 未確認 | CWE-122 | Heap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in writing beyond the bounds of a |
| CVE-2026-3550 | Deferred | 未確認 | CWE-862 | The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17. This is due to missing capability checks on multiple AJAX ac |
| CVE-2026-3554 | Deferred | 未確認 | CWE-79 | The Sherk Custom Post Type Displays plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute in all versions up to, and including, 1.2. |
| CVE-2026-3555 | Analyzed | 未確認 | CWE-122 | Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execu |
| CVE-2026-3556 | Analyzed | 未確認 | CWE-122 | Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code |
| CVE-2026-3557 | Analyzed | 未確認 | CWE-122 | Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to e |
| CVE-2026-3558 | Analyzed | 未確認 | CWE-306 | Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authenticat |
| CVE-2026-3559 | Analyzed | 未確認 | CWE-323 | Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on aff |
| CVE-2026-3560 | Analyzed | 未確認 | CWE-122 | Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute a |
| CVE-2026-3561 | Analyzed | 未確認 | CWE-122 | Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary |
| CVE-2026-3562 | Analyzed | 未確認 | CWE-347 | Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affe |
| CVE-2026-3563 | Analyzed | 未確認 | CWE-1289 | Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or |
| CVE-2026-3564 | Awaiting Analysis | 未確認 | CWE-347 | A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, inclu |
| CVE-2026-3567 | Deferred | 未確認 | CWE-862 | The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.1132. The plugin exposes two AJAX hand |
| CVE-2026-3570 | Deferred | 未確認 | CWE-862 | The Smarter Analytics plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.0. This is due to missing authentication and capability chec |
| CVE-2026-3572 | Deferred | 未確認 | CWE-79 | The iTracker360 plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in all versions up to and including 2.2.0. This is due to mi |
| CVE-2026-3573 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, fr |
| CVE-2026-3577 | Deferred | 未確認 | CWE-79 | The Keep Backup Daily plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the backup title alias (`val` parameter) in the `update_kbd_bkup_alias` AJAX action in a |
| CVE-2026-3579 | Analyzed | 未確認 | CWE-203 | wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted __muldi3 subroutine executes in variable |
| CVE-2026-3580 | Analyzed | 未確認 | CWE-203 | In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bnez) by GCC when targeting RISC-V RV32I with -O3. This transformati |
| CVE-2026-3582 | Analyzed | 未確認 | CWE-862 | An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with a classic personal access token (PAT) lacking the repo s |
| CVE-2026-3584 | Deferred | 未確認 | CWE-94 | The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'form_process' function. This is due to the 'prepare_ |
| CVE-2026-3585 | Deferred | 未確認 | CWE-22 | The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.17 via the 'ajax_create_import' function. This makes it poss |
| CVE-2026-3587 | Awaiting Analysis | 未確認 | CWE-912 | An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device. |
| CVE-2026-3588 | Analyzed | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request. |
| CVE-2026-3589 | Deferred | 未確認 | CWE-352 | The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in admin call non s |
| CVE-2026-3591 | Analyzed | 未確認 | CWE-305, CWE-562 | A use-after-return vulnerability exists in the `named` server when handling DNS queries signed with SIG(0). Using a specially-crafted DNS request, an attacker may be able to cause |
| CVE-2026-3598 | Analyzed | 未確認 | CWE-327, CWE-684 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Config string generation, we |
| CVE-2026-3606 | Analyzed | 未確認 | CWE-119, CWE-125, CWE-787 | A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function add_data_segment of the file src/ettercap/utils/etterfilter/ef_output.c of |
| CVE-2026-3608 | Awaiting Analysis | 未確認 | CWE-617 | Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving da |
| CVE-2026-3610 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3. Affected by this issue is some unknown functionality of the file /mailinspector/mliUserValidation.php of |
| CVE-2026-3611 | Analyzed | 未確認 | CWE-306 | The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, secur |
| CVE-2026-3612 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub_405AF4 of the file /cgi-bin/adm.cgi of the component OTA Online Upgrade. This manipulati |
| CVE-2026-3613 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the file /cgi-bin/login.cgi. Such manipulation of the argument i |
| CVE-2026-3616 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0. Impacted is an unknown function of the file /modules/customers/edit.php. Perform |
| CVE-2026-3617 | Deferred | 未確認 | CWE-79 | The Paypal Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'amount' and 'name' shortcode attributes in all versions up to, and including, 0.3. T |
| CVE-2026-3619 | Deferred | 未確認 | CWE-79 | The Sheets2Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titles' shortcode attribute in the [sheets2table-render-table] shortcode in all versions |
| CVE-2026-3622 | Analyzed | 未確認 | CWE-125 | The vulnerability exists in the UPnP component of TL-WR841N v14, where improper input validation leads to an out-of-bounds read, potentially causing a crash of the UPnP service. |
| CVE-2026-3629 | Deferred | 未確認 | CWE-269 | The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the 'save_extra_us |
| CVE-2026-3630 | Analyzed | 未確認 | CWE-787 | Delta Electronics COMMGR2 has Stack-based Buffer Overflow vulnerability. |
| CVE-2026-3631 | Analyzed | 未確認 | CWE-125 | Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability. |
| CVE-2026-3632 | Analyzed | 未確認 | CWE-1286 | A flaw was found in libsoup, a library used by applications to send network requests. This vulnerability occurs because libsoup does not properly validate hostnames, allowing speci |
| CVE-2026-3633 | Analyzed | 未確認 | CWE-93 | A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the `soup_message_new()` function, could inject arbitrary headers and additional request data |
| CVE-2026-3634 | Analyzed | 未確認 | CWE-93 | A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage Return Line Feed (CRLF) sequence due to improper input sani |
| CVE-2026-3635 | Analyzed | 未確認 | CWE-348 | Summary When trustProxy is configured with a restrictive trust function (e.g., a specific IP like trustProxy: '10.0.0.1', a subnet, a hop count, or a custom function), the request. |
| CVE-2026-3638 | Analyzed | 未確認 | CWE-862 | Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore deleted users and |
| CVE-2026-3641 | Deferred | 未確認 | CWE-20 | The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3. This is due to the plugin registering a public REST API webh |
| CVE-2026-3644 | Modified | 未確認 | CWE-116, CWE-20 | The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowi |
| CVE-2026-3645 | Deferred | 未確認 | CWE-862 | The Punnel – Landing Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.1. The save_config() function, which handles |
| CVE-2026-3650 | Awaiting Analysis | 未確認 | CWE-401 | A memory leak exists in the Grassroots DICOM library (GDCM). The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta information. The vulnerabilit |
| CVE-2026-3651 | Deferred | 未確認 | CWE-862 | The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.23. This is due to the plugin registering the 'build-app-on |
| CVE-2026-3653 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-3657 | Deferred | 未確認 | CWE-89 | The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the `stickymenu_contact_lead_form` AJAX action in all versions up to, and including, 2.8.6. This is due to |
| CVE-2026-3658 | Deferred | 未確認 | CWE-89 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all versions up to, |
| CVE-2026-3661 | Analyzed | 未確認 | CWE-74, CWE-77 | A flaw has been found in Wavlink WL-NU516U1 240425. This affects the function ota_new_upgrade of the file /cgi-bin/adm.cgi. This manipulation of the argument model causes command i |
| CVE-2026-3662 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Wavlink WL-NU516U1 240425. This vulnerability affects the function usb_p910 of the file /cgi-bin/adm.cgi. Such manipulation of the argument Pr_mod |
| CVE-2026-3663 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was found in xlnt-community xlnt up to 1.6.1. This issue affects the function xlnt::detail::compound_document_istreambuf::xsgetn of the file source/detail/cryptogra |
| CVE-2026-3664 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::compound_document::read_directory of the file source/detail/cryptography/c |
| CVE-2026-3665 | Analyzed | 未確認 | CWE-404, CWE-476 | A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsx_consumer::read_office_document of the file source/detail/ |
| CVE-2026-3667 | Deferred | 未確認 | CWE-266, CWE-285 | A security flaw has been discovered in Freedom Factory dGEN1 up to 20260221. The impacted element is the function FakeAppService of the component org.ethosmobile.ethoslauncher. The |
| CVE-2026-3668 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in Freedom Factory dGEN1 up to 20260221. This affects the function AndroidEthereum of the component org.ethosmobile.webpwaemul. This manipulation cau |
| CVE-2026-3669 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in Freedom Factory dGEN1 up to 20260221. This impacts the function AlarmService of the component com.dgen.alarm. Such manipulation leads |
| CVE-2026-3670 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in Freedom Factory dGEN1 up to 20260221. Affected is an unknown function of the component com.dgen.alarm. Performing a manipulation results in improper |
| CVE-2026-3671 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in Freedom Factory dGEN1 up to 20260221. Affected by this vulnerability is the function TokenBalanceContentProvider of the component org.ethereumphone.walletm |
| CVE-2026-3672 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in JeecgBoot up to 3.9.1. Affected is the function isExistSqlInjectKeyword of the file /jeecg-boot/sys/api/getDictItems. Such manipulation leads to s |
| CVE-2026-3674 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in Freedom Factory dGEN1 up to 20260221. Affected by this vulnerability is the function FakeAppProvider of the component org.ethosmobile.ethoslauncher. Pe |
| CVE-2026-3675 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in Freedom Factory dGEN1 up to 20260221. Affected by this issue is the function FakeAppReceiver of the component org.ethosmobile.ethoslauncher. Execu |
| CVE-2026-3677 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in st |
| CVE-2026-3678 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda FH451 1.0.0.9. Affected is the function sub_3C434 of the file /goform/AdvSetWan. This manipulation of the argument wanmode/PPPOEPassword cau |
| CVE-2026-3679 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex. Such manipulation of the argume |
| CVE-2026-3680 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in RyuzakiShinji biome-mcp-server up to 1.0.0. Affected by this issue is some unknown functionality of the file biome-mcp-server.ts. Performing |
| CVE-2026-3681 | Deferred | 未確認 | CWE-918 | A weakness has been identified in welovemedia FFmate up to 2.0.15. This affects the function fireWebhook of the file /internal/service/webhook/webhook.go. Executing a manipulation |
| CVE-2026-3682 | Deferred | 未確認 | CWE-74, CWE-88 | A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. This vulnerability affects the function Execute of the file /internal/service/ffmpeg/ffmpeg.go. The m |
| CVE-2026-3683 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in bufanyun HotGo up to 2.0. This issue affects the function ImageTransferStorage of the file /server/internal/logic/common/upload.go of the component |
| CVE-2026-3693 | Deferred | 未確認 | CWE-99 | A flaw has been found in Shy2593666979 AgentChat up to 2.3.0. This issue affects the function get_user_info/update_user_info of the file /src/backend/agentchat/api/v1/user.py of th |
| CVE-2026-3695 | Analyzed | 未確認 | CWE-22 | A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename l |
| CVE-2026-3696 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handl |
| CVE-2026-3697 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Planet ICG-2510 1.0_20250811. The impacted element is the function sub_40C8E4 of the file /usr/sbin/httpd of the component Language Package Config |
| CVE-2026-3698 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. This affects the function strcpy of the file /goform/NTP. The manipulation leads to buffer overflow. The attack |
| CVE-2026-3699 | Analyzed | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-171114. This impacts the function strcpy of the file /goform/formRemoteControl. The manipulation results in buffer |
| CVE-2026-3700 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigDnsFilterGlobal. This manipulation causes buffer |
| CVE-2026-3701 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function Edit_BasicSSID_5G of the file /goform/aspForm. Such manipul |
| CVE-2026-3702 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /index.php. Performing a manipulation of |
| CVE-2026-3703 | Analyzed | 未確認 | CWE-119, CWE-787 | A flaw has been found in Wavlink NU516U1 251208. This affects the function sub_401A10 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to ou |
| CVE-2026-3704 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Wavlink NU516U1 251208. This vulnerability affects the function sub_405B2C of the file /cgi-bin/firewall.cgi of the component Incomplete Fix CVE-2 |
| CVE-2026-3705 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown processing of the file /Adminsearch.php. The manipulation of the |
| CVE-2026-3706 | Deferred | 未確認 | CWE-345, CWE-347 | A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation caus |
| CVE-2026-3707 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was identified in MrNanko webp4j up to 1.3.x. The affected element is the function DecodeGifFromMemory of the file src/main/c/gif_decoder.c. Such manipulation of th |
| CVE-2026-3708 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. The impacted element is an unknown function of the file /login.php. Performing a manip |
| CVE-2026-3709 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown function of the file /register.php. Executing a manipulation of the |
| CVE-2026-3710 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of |
| CVE-2026-3711 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Simple Flight Ticket Booking System 1.0. Affected is an unknown function of the file /Adminupdate.php. The manipulation of the argumen |
| CVE-2026-3713 | Deferred | 未確認 | CWE-119, CWE-122 | A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function do_pnm2png of the file contrib/pngminus/pnm2png.c of the component pnm2png. Th |
| CVE-2026-3714 | Analyzed | 未確認 | CWE-1336, CWE-791 | A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template.php of the component Incomplete Fix CVE |
| CVE-2026-3715 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument del_flag |
| CVE-2026-3716 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This vulnerability affects the function sub_401AD4 of the file /cgi-bin/adm.cgi. Executing a manipulation of the argu |
| CVE-2026-3719 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). This issue affects some unknown processing of the file /System/Cms/downLoad. The m |
| CVE-2026-3720 | Analyzed | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in 1024-lab/lab1024 SmartAdmin up to 3.29. Impacted is an unknown function of the file smart-admin-web-javascript/src/views/business/oa/notice/c |
| CVE-2026-3721 | Analyzed | 未確認 | CWE-79, CWE-94 | A weakness has been identified in 1024-lab/lab1024 SmartAdmin up to 3.29. The affected element is an unknown function of the file sa-base/src/main/java/net/lab1024/sa/base/module/s |
| CVE-2026-3723 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown function of the file /Admindelete.php. The manipulation of the |
| CVE-2026-3724 | Analyzed | 未確認 | CWE-266, CWE-285 | A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. This impacts an unknown function of the file /checkin.php. This manipulation of |
| CVE-2026-3725 | Analyzed | 未確認 | CWE-1336, CWE-791 | A flaw has been found in 1024-lab/lab1024 SmartAdmin up to 3.29. Affected by this issue is the function freemarkerResolverContent of the file sa-base/src/main/java/net/lab1024/sa/b |
| CVE-2026-3726 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda F453 1.0.0.3. This affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument |
| CVE-2026-3727 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/QuickIndex. The manipulation of the argument mit_linktype/PPP |
| CVE-2026-3728 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda F453 1.0.0.3/1.If. This issue affects the function fromSetCfm of the file /goform/setcfm. This manipulation of the argument funcname/funcpar |
| CVE-2026-3729 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/optt |
| CVE-2026-3730 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod_amenities/index.php? |
| CVE-2026-3731 | Analyzed | 未確認 | CWE-119, CWE-125 | A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file src/sftp.c of the componen |
| CVE-2026-3732 | Analyzed | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda F453 1.0.0.3. This affects the function strcpy of the file /goform/exeCommand. The manipulation of the argument cmdinput leads t |
| CVE-2026-3733 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in xuxueli xxl-job up to 3.3.2. This impacts an unknown function of the file source-code/src/main/java/com/xxl/job/admin/controller/JobInfoController.j |
| CVE-2026-3734 | Analyzed | 未確認 | CWE-266, CWE-285 | A flaw has been found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /fetch_manager_details.php of the component Endpoint. Thi |
| CVE-2026-3735 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file SearchResultOneway.p |
| CVE-2026-3736 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this issue is some unknown functionality of the file SearchResultRoundtrip.php. Perf |
| CVE-2026-3737 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file add_user.php of the component User Creation Handler. |
| CVE-2026-3738 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulat |
| CVE-2026-3739 | Deferred | 未確認 | CWE-287 | A security flaw has been discovered in suitenumerique messages 0.2.0. This issue affects the function ThreadAccessSerializer of the file src/backend/core/api/serializers.py of the |
| CVE-2026-3740 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_search_student.php. This manipulation of the arg |
| CVE-2026-3741 | Analyzed | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/admin/D_friendLink.php. Such manipulation of the argu |
| CVE-2026-3742 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in YiFang CMS 2.0.5. The impacted element is the function update of the file app/db/admin/D_singlePage.php. Performing a manipulation of the argument T |
| CVE-2026-3743 | Analyzed | 未確認 | CWE-79, CWE-94 | A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/D_singlePageGroup.php. Executing a manipulation of the argument Name can lead t |
| CVE-2026-3744 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of the file signup.php. The manipulation of the argument reg_pa |
| CVE-2026-3745 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql inj |
| CVE-2026-3746 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Logi |
| CVE-2026-3747 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /add_result.php. Such manipulation |
| CVE-2026-3748 | Analyzed | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestControlle |
| CVE-2026-3749 | Analyzed | 未確認 | CWE-284, CWE-434 | A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/Uplo |
| CVE-2026-3750 | Analyzed | 未確認 | CWE-918 | A security vulnerability has been detected in ContiNew Admin up to 4.2.0. This issue affects the function URI.create of the file continew-system/src/main/java/top/continew/admin/sy |
| CVE-2026-3751 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of the file /daily-attendance-report.php of the component GET Pa |
| CVE-2026-3752 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Employee Task Management System up to 1.0. The affected element is an unknown function of the file /daily-task-report.php of the component G |
| CVE-2026-3753 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /add_sales_print.php. Such manipulati |
| CVE-2026-3754 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /add_stock.php. Performing a manipulation of the argument c |
| CVE-2026-3755 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /check_customer_details.php of the component POST Hand |
| CVE-2026-3756 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Sales and Inventory System up to 1.0. Affected is an unknown function of the file /check_item_details.php. The manipulation of the |
| CVE-2026-3757 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation |
| CVE-2026-3758 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulatio |
| CVE-2026-3759 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the arg |
| CVE-2026-3760 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /view_result.php. Performing a manipulation of th |
| CVE-2026-3761 | Analyzed | 未確認 | CWE-266, CWE-285 | A flaw has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /superadmin_user_delete.php of the component E |
| CVE-2026-3762 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in SourceCodester Client Database Management System 1.0/3.1. Impacted is an unknown function of the file /superadmin_delete_manager.php of the compon |
| CVE-2026-3763 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. The affected element is an unknown function of the file showhistory.php. The manipulation result |
| CVE-2026-3764 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in SourceCodester Client Database Management System 1.0. The impacted element is an unknown function of the file /superadmin_user_update.php. This ma |
| CVE-2026-3765 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /att_single_view.php. Such manipulation of the argumen |
| CVE-2026-3766 | Analyzed | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a |
| CVE-2026-3767 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulat |
| CVE-2026-3768 | Analyzed | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. The manipulation o |
| CVE-2026-3769 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function WrlclientSet of the file /goform/WrlclientSet. The manipulation of the argument GO result |
| CVE-2026-3770 | Analyzed | 未確認 | CWE-352, CWE-862 | A flaw has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack is |
| CVE-2026-3771 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of t |
| CVE-2026-3783 | Modified | 未確認 | CWE-522 | When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some cir |
| CVE-2026-3784 | Modified | 未確認 | CWE-305 | curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is |
| CVE-2026-3785 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in EasyCMS up to 1.6. The affected element is an unknown function of the file /RbacnodeAction.class.php of the component Request Parameter Handler. T |
| CVE-2026-3786 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /RbacuserAction.class.php of the component Request Parameter Handl |
| CVE-2026-3787 | Analyzed | 未確認 | CWE-426, CWE-427 | A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase.dll of the component Windows Service. This manipulation cau |
| CVE-2026-3788 | Analyzed | 未確認 | CWE-918 | A security vulnerability has been detected in Bytedesk up to 1.3.9. This impacts the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/ope |
| CVE-2026-3789 | Analyzed | 未確認 | CWE-918 | A vulnerability was detected in Bytedesk up to 1.3.9. Affected is the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/gitee/SpringAIGite |
| CVE-2026-3790 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file check_supplier_details.php of the com |
| CVE-2026-3791 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file dashboard.php of the component Sea |
| CVE-2026-3792 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchase_invoice.php of the component GET Parameter Handler. Th |
| CVE-2026-3793 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file sales_invoice1.php of the component GET Paramet |
| CVE-2026-3794 | Analyzed | 未確認 | CWE-287 | A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1/mail/send of the component Email API. Such manipulation lea |
| CVE-2026-3795 | Analyzed | 未確認 | CWE-22 | A security flaw has been discovered in doramart DoraCMS 3.0.x. Impacted is the function createFileBypath of the file /DoraCMS/server/app/router/api/v1.js. Performing a manipulation |
| CVE-2026-3796 | Analyzed | 未確認 | CWE-266, CWE-284 | A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIO_Imp.sys of the comp |
| CVE-2026-3797 | Analyzed | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiandy/easy7/core |
| CVE-2026-3798 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox-config?method=SET§ion=ping_config of the component Requ |
| CVE-2026-3799 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This manipulation of the argument funcpara1 causes stack-based buf |
| CVE-2026-3800 | Analyzed | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. Affected is the function doInsert of the file /controller.php?action=add. Such manipulation o |
| CVE-2026-3801 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of the file /goform/setAutoPing. Performing a manipulation of th |
| CVE-2026-3802 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda i3 1.0.0.6(2204). Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a manipulation of the argu |
| CVE-2026-3803 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda i3 1.0.0.6(2204). This affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. The manipulation of the argument inde |
| CVE-2026-3804 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Tenda i3 1.0.0.6(2204). This vulnerability affects the function formWifiMacFilterSet of the file /goform/WifiMacFilterSet. The manipulation o |
| CVE-2026-3805 | Modified | 未確認 | CWE-416 | When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory. |
| CVE-2026-3806 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown processing of the file /room_rates.php. This manipulation of |
| CVE-2026-3807 | Analyzed | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda FH1202 1.2.0.14(408). Impacted is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Such manipulation of the arg |
| CVE-2026-3808 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda FH1202 1.2.0.14(408). The affected element is the function formWebTypeLibrary of the file /goform/webtypelibrary. Performing a manipulation of |
| CVE-2026-3809 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda FH1202 1.2.0.14(408). The impacted element is the function fromNatStaticSetting of the file /goform/NatSaticSetting. Executing a manipulation of the |
| CVE-2026-3810 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda FH1202 1.2.0.14(408). This affects the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page |
| CVE-2026-3811 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page result |
| CVE-2026-3812 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the file /manage_employee_allowances.php. This manipulation of the |
| CVE-2026-3813 | Analyzed | 未確認 | CWE-707, CWE-74, CWE-77 | A vulnerability was identified in opencc JFlow up to 5badc00db382d7cb82dad231e6a866b18e0addfe. Affected by this vulnerability is the function Calculate of the file src/main/java/bp |
| CVE-2026-3814 | Analyzed | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-1711. Affected by this issue is the function strcpy of the file /goform/getOneApConfTempEntry. Performing a manipu |
| CVE-2026-3815 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in UTT HiPER 810G up to 1.7.7-1711. This affects the function strcpy of the file /goform/formApMail. Executing a manipulation can lead to buffer over |
| CVE-2026-3816 | Analyzed | 未確認 | CWE-1284, CWE-404 | A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function input_zip.read of the file parser.py of the component SonarQube |
| CVE-2026-3817 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. This issue affects some unknown processing of the file /patient-search.php. The ma |
| CVE-2026-3818 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in Tiandy Easy7 CMS Windows 7.17.0. Impacted is an unknown function of the file /Easy7/apps/WebService/GetDBData.jsp. This manipulation of the argument strTBN |
| CVE-2026-3819 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown function of the file /?page=manage_reservation of the component R |
| CVE-2026-3822 | Modified | 未確認 | CWE-295 | Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability. When establishing an HTTPS connection with the server, the application fails to |
| CVE-2026-3823 | Modified | 未確認 | CWE-121, CWE-787 | EHG2408 series switch developed by Atop Technologies has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution f |
| CVE-2026-3824 | Analyzed | 未確認 | CWE-601 | IFTOP developed by WellChoose has an Open redirect vulnerability, allowing authenticated remote attackers to craft a URL that tricks users into visiting malicious website. |
| CVE-2026-3825 | Analyzed | 未確認 | CWE-79 | IFTOP developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser th |
| CVE-2026-3826 | Analyzed | 未確認 | CWE-98 | IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server. |
| CVE-2026-3838 | Analyzed | 未確認 | CWE-22 | Unraid Update Request Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. |
| CVE-2026-3839 | Analyzed | 未確認 | CWE-22 | Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of U |
| CVE-2026-3841 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of da |
| CVE-2026-3843 | Analyzed | 未確認 | CWE-89 | Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module. A remote attacker can |
| CVE-2026-3845 | Modified | 未確認 | CWE-122 | Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2. |
| CVE-2026-3846 | Modified | 未確認 | CWE-346 | Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 148.0.2. |
| CVE-2026-3847 | Modified | 未確認 | CWE-119, CWE-416 | Memory safety bugs present in Firefox 148.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploite |
| CVE-2026-3848 | Analyzed | 未確認 | CWE-93 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated u |
| CVE-2026-3849 | Analyzed | 未確認 | CWE-787 | Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH (Encrypted Client Hello) support, where a maliciously crafted |
| CVE-2026-3854 | Modified | 未確認 | CWE-77 | An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote |
| CVE-2026-3856 | Analyzed | 未確認 | CWE-353 | IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the |
| CVE-2026-3857 | Analyzed | 未確認 | CWE-352 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthentica |
| CVE-2026-3862 | Analyzed | 未確認 | CWE-79 | Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page. |
| CVE-2026-3864 | Awaiting Analysis | 未確認 | CWE-22 | A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to cre |
| CVE-2026-3873 | Deferred | 未確認 | CWE-798 | Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0. |
| CVE-2026-3881 | Deferred | 未確認 | CWE-918 | The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks |
| CVE-2026-3884 | Analyzed | 未確認 | CWE-79 | Versions of the package spin.js before 3.0.0 are vulnerable to Cross-site Scripting (XSS) via the spin() function that allows a creation of more than 1 alert for each 'target' elem |
| CVE-2026-3888 | Analyzed | 未確認 | CWE-268 | Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automa |
| CVE-2026-3889 | Modified | 未確認 | CWE-451 | Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9. |
| CVE-2026-3891 | Deferred | 未確認 | CWE-434 | The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lkn_pix_for_woocommerc |
| CVE-2026-3903 | Deferred | 未確認 | CWE-352 | The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1. This is |
| CVE-2026-3904 | Modified | 未確認 | CWE-366 | Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client |
| CVE-2026-3906 | Deferred | 未確認 | CWE-862 | WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1. The Notes feature (block-level collaboration annotations) was introduced in WordPress 6.9 to allo |
| CVE-2026-3909 | Analyzed | 掲載 | CWE-787 | Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security sev |
| CVE-2026-3910 | Analyzed | 掲載 | CWE-119, CWE-94 | Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-3911 | Analyzed | 未確認 | CWE-359 | A flaw was found in Keycloak. An authenticated user with the view-users role could exploit a vulnerability in the UserResource component. By accessing a specific administrative end |
| CVE-2026-3912 | Awaiting Analysis | 未確認 | CWE-20 | Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including |
| CVE-2026-3913 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security s |
| CVE-2026-3914 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sever |
| CVE-2026-3915 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security |
| CVE-2026-3916 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi |
| CVE-2026-3917 | Analyzed | 未確認 | CWE-416 | Use after free in Agents in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi |
| CVE-2026-3918 | Analyzed | 未確認 | CWE-416 | Use after free in WebMCP in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi |
| CVE-2026-3919 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruptio |
| CVE-2026-3920 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds memory access in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium sec |
| CVE-2026-3921 | Analyzed | 未確認 | CWE-416 | Use after free in TextEncoding in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-3922 | Analyzed | 未確認 | CWE-416 | Use after free in MediaStream in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security s |
| CVE-2026-3923 | Analyzed | 未確認 | CWE-416 | Use after free in WebMIDI in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sever |
| CVE-2026-3924 | Analyzed | 未確認 | CWE-416 | use after free in WindowDialog in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi |
| CVE-2026-3925 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in LookalikeChecks in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium secu |
| CVE-2026-3926 | Analyzed | 未確認 | CWE-125 | Out of bounds read in V8 in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severi |
| CVE-2026-3927 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sever |
| CVE-2026-3928 | Analyzed | 未確認 | CWE-451 | Insufficient policy enforcement in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofi |
| CVE-2026-3929 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in ResourceTiming in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se |
| CVE-2026-3930 | Modified | 未確認 | CWE-288 | Unsafe navigation in Navigation in Google Chrome on iOS prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium securi |
| CVE-2026-3931 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security se |
| CVE-2026-3932 | Modified | 未確認 | CWE-284 | Insufficient policy enforcement in PDF in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chro |
| CVE-2026-3934 | Modified | 未確認 | CWE-284 | Insufficient policy enforcement in ChromeDriver in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium se |
| CVE-2026-3935 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in WebAppInstalls in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severit |
| CVE-2026-3936 | Analyzed | 未確認 | CWE-416 | Use after free in WebView in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium sec |
| CVE-2026-3937 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Downloads in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security s |
| CVE-2026-3938 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi |
| CVE-2026-3939 | Modified | 未確認 | CWE-284 | Insufficient policy enforcement in PDF in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file. (Chromium securit |
| CVE-2026-3940 | Modified | 未確認 | CWE-284 | Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium s |
| CVE-2026-3941 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium s |
| CVE-2026-3942 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sever |
| CVE-2026-3943 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in H3C ACG1000-AK230 up to 20260227. This affects an unknown part of the file /webui/?aaa_portal_auth_local_submit. The manipulation of the argument suffi |
| CVE-2026-3944 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /att_add.php. This manipulation of the argument |
| CVE-2026-3945 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a |
| CVE-2026-3946 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in PHPEMS 11.0. The affected element is an unknown function of the file /index.php?ask=app-ask. Performing a manipulation of the argument askcontent re |
| CVE-2026-3948 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-3949 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF Fil |
| CVE-2026-3950 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was identified in strukturag libheif up to 1.21.2. This impacts the function Track::load of the file libheif/sequences/track.cc of the component stsz/stts. The mani |
| CVE-2026-3951 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in LockerProject Locker 0.0.0/0.0.1/0.1.0. Affected is the function authIsAwesome of the file source-code/Locker-master/Ops/registry.js of the c |
| CVE-2026-3954 | Deferred | 未確認 | CWE-22 | A weakness has been identified in OpenBMB XAgent 1.0.0. Affected by this vulnerability is the function workspace of the file XAgentServer/application/routers/workspace.py. This man |
| CVE-2026-3955 | Deferred | 未確認 | CWE-74, CWE-94 | A security vulnerability has been detected in elecV2P up to 3.8.3. Affected by this issue is the function runJSFile of the file source-code/elecV2P-master/webser/wbjs.js of the com |
| CVE-2026-3956 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in xierongwkhd weimai-wetapp up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2. This affects the function getAdmins of the file source-code/src/main/java/ |
| CVE-2026-3957 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in xierongwkhd weimai-wetapp up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2. This vulnerability affects the function getLikeMovieList of the file source-code/ |
| CVE-2026-3958 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in Woahai321 ListSync up to 0.6.6. This issue affects the function requests.post of the file list-sync-main/api_server.py of the component JSON Handl |
| CVE-2026-3959 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in 0xKoda WireMCP up to 7f45f8b2b4adeb76be8c6227eefb38533fdd6b1e. Impacted is the function server.tool of the file index.js of the component Tshark CLI Co |
| CVE-2026-3961 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in zyddnys manga-image-translator up to beta-0.3. The affected element is the function to_pil_image of the file manga-image-translator-main/server/re |
| CVE-2026-3962 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Jcharis Machine-Learning-Web-Apps up to a6996b634d98ccec4701ac8934016e8175b60eb5. The impacted element is the function render_template of the file |
| CVE-2026-3963 | Deferred | 未確認 | CWE-320, CWE-321 | A security flaw has been discovered in perfree go-fastdfs-web up to 1.3.7. This affects the function rememberMeManager of the file src/main/java/com/perfree/config/ShiroConfig.java |
| CVE-2026-3964 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in OpenAkita up to 1.24.3. This impacts the function run of the file src/openakita/tools/shell.py of the component Chat API Endpoint. Executing a man |
| CVE-2026-3965 | Deferred | 未確認 | CWE-693 | A security vulnerability has been detected in whyour qinglong up to 2.20.1. Affected is an unknown function of the file back/loaders/express.ts of the component API Interface. The |
| CVE-2026-3966 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in 648540858 wvp-GB28181-pro up to 2.7.4-20260107. Affected by this vulnerability is the function getDownloadFilePath of the file /src/main/java/com/ge |
| CVE-2026-3967 | Deferred | 未確認 | CWE-20, CWE-502 | A flaw has been found in Alfresco Activiti up to 7.19/8.8.0. Affected by this issue is the function deserialize/createObjectInputStream of the file activiti-core/activiti-engine/sr |
| CVE-2026-3968 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability has been found in AutohomeCorp frostmourne up to 1.0. This affects the function scriptEngine.eval of the file ExpressionRule.java of the component Oracle Nashorn Ja |
| CVE-2026-3969 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in FeMiner wms up to 1.0. This impacts an unknown function of the file /wms-master/src/basic/depart/depart_add_bg.php of the component Basic Organizati |
| CVE-2026-3970 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A flaw has been found in Tenda i3 1.0.0.6(2204). Affected is the function formwrlSSIDget of the file /goform/wifiSSIDget. Executing a manipulation of the argument index can lead to |
| CVE-2026-3971 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability has been found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the arg |
| CVE-2026-3972 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was found in Tenda W3 1.0.0.3(2204). Affected by this issue is the function formSetCfm of the file /goform/setcfm of the component HTTP Handler. The manipulation of |
| CVE-2026-3973 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was determined in Tenda W3 1.0.0.3(2204). This affects the function formSetAutoPing of the file /goform/setAutoPing of the component POST Parameter Handler. This ma |
| CVE-2026-3974 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was identified in Tenda W3 1.0.0.3(2204). This vulnerability affects the function formexeCommand of the file /goform/exeCommand of the component HTTP Handler. Such |
| CVE-2026-3975 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security flaw has been discovered in Tenda W3 1.0.0.3(2204). This issue affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet of the component POST Param |
| CVE-2026-3976 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A weakness has been identified in Tenda W3 1.0.0.3(2204). Impacted is the function formWifiMacFilterSet of the file /goform/WifiMacFilterSet of the component POST Parameter Handler |
| CVE-2026-3977 | Deferred | 未確認 | CWE-862, CWE-863 | A security vulnerability has been detected in projectsend up to r1945. The affected element is an unknown function of the component AJAX Endpoints. The manipulation leads to missin |
| CVE-2026-3978 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formEasySetupWizard3. The manipulation of the argument wan_conn |
| CVE-2026-3979 | Deferred | 未確認 | CWE-119, CWE-416 | A flaw has been found in quickjs-ng quickjs up to 0.12.1. This affects the function js_iterator_concat_return of the file quickjs.c. This manipulation causes use after free. The at |
| CVE-2026-3980 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patient_action.php. Such manipulation of th |
| CVE-2026-3981 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0. Affected is an unknown function of the file /admin/doctor_action.php. Performing a manipulation of t |
| CVE-2026-3982 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_result.php. Executing |
| CVE-2026-3983 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Campcodes Division Regional Athletic Meet Game Result Matrix System 2.1. This affects an unknown part of the file save-games.php. The manipul |
| CVE-2026-3984 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Campcodes Division Regional Athletic Meet Game Result Matrix System 2.1. This vulnerability affects unknown code of the file save_up_athlete.php. |
| CVE-2026-3986 | Deferred | 未確認 | CWE-79 | The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form settings in all versions up to, and including, 5.4.5.0. This is due to ins |
| CVE-2026-3988 | Analyzed | 未確認 | CWE-407 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticat |
| CVE-2026-3989 | Analyzed | 未確認 | CWE-502 | SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious . |
| CVE-2026-3990 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in CesiumGS CesiumJS up to 1.137.0. Affected by this issue is some unknown functionality of the file Apps/Sandcastle/standalone.html. The manipu |
| CVE-2026-3991 | Awaiting Analysis | 未確認 | CWE-829 | Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vuln |
| CVE-2026-3992 | Deferred | 未確認 | CWE-707, CWE-74 | A weakness has been identified in CodeGenieApp serverless-express up to 4.17.1. This affects an unknown part of the file utils/dynamodb.ts of the component Users Endpoint. This man |
| CVE-2026-3993 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in itsourcecode Payroll Management System 1.0. This vulnerability affects unknown code of the file /manage_employee_deductions.php. Such |
| CVE-2026-3994 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was detected in rui314 mold up to 2.40.4. This issue affects the function mold::ObjectFilemold::X86_64::initialize_sections of the file src/input-files.cc of the co |
| CVE-2026-3996 | Deferred | 未確認 | CWE-79 | The WP Games Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [game] shortcode in all versions up to and including 0.1beta. This is due to insufficie |
| CVE-2026-3997 | Deferred | 未確認 | CWE-79 | The Text Toggle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute of the [tt_part] and [tt] shortcodes in all versions up to and |
| CVE-2026-3999 | Analyzed | 未確認 | CWE-639 | A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations. |
| CVE-2026-4001 | Deferred | 未確認 | CWE-95 | The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eva |
| CVE-2026-4004 | Deferred | 未確認 | CWE-94 | The Task Manager plugin for WordPress is vulnerable to arbitrary shortcode execution via the 'search' AJAX action in all versions up to, and including, 3.0.2. This is due to missin |
| CVE-2026-4006 | Deferred | 未確認 | CWE-79 | The Simple Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' post meta (Custom Field) in all versions up to and including 2.6.2. T |
| CVE-2026-4007 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was detected in Tenda W3 1.0.0.3(2204). This vulnerability affects unknown code of the file /goform/wifiSSIDget of the component POST Parameter Handler. Performing |
| CVE-2026-4008 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A flaw has been found in Tenda W3 1.0.0.3(2204). This issue affects some unknown processing of the file /goform/wifiSSIDset of the component POST Parameter Handler. Executing a man |
| CVE-2026-4009 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability has been found in jarikomppa soloud up to 20200207. Impacted is the function drwav_read_pcm_frames_s16__msadpcm in the library src/audiosource/wav/dr_wav.h of the c |
| CVE-2026-4010 | Deferred | 未確認 | CWE-119 | A vulnerability was found in ThakeeNathees pocketlang up to cc73ca61b113d48ee130d837a7a8b145e41de5ce. The affected element is the function pkByteBufferAddString. The manipulation o |
| CVE-2026-4012 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in rxi fe up to ed4cda96bd582cbb08520964ba627efb40f3dd91. The impacted element is the function read_ of the file src/fe.c. This manipulation with the |
| CVE-2026-4013 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown function of the file add_admin.php. Such manipulation lea |
| CVE-2026-4014 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the file /curvus2/signup.php of the component Registration. Per |
| CVE-2026-4015 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in GPAC 26.03-DEV. Affected is the function txtin_process_texml of the file src/filters/load_text.c of the component TeXML File Parser. Executing a m |
| CVE-2026-4016 | Deferred | 未確認 | CWE-119, CWE-787 | A security vulnerability has been detected in GPAC 26.03-DEV. Affected by this vulnerability is the function svgin_process of the file src/filters/load_svg.c of the component SVG P |
| CVE-2026-4020 | Deferred | 未確認 | CWE-200 | The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4. This is due to a REST API endpoint registered at |
| CVE-2026-4021 | Deferred | 未確認 | CWE-287 | The Contest Gallery plugin for WordPress is vulnerable to an authentication bypass leading to admin account takeover in all versions up to, and including, 28.1.5. This is due to th |
| CVE-2026-4022 | Deferred | 未確認 | CWE-79 | The Show Posts list – Easy designs, filters and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_type' shortcode attribute in the 'swiftpost-lis |
| CVE-2026-4038 | Deferred | 未確認 | CWE-862 | The Aimogen Pro plugin for WordPress is vulnerable to Arbitrary Function Call that can lead to privilege escalation due to a missing capability check on the 'aiomatic_call_ai_funct |
| CVE-2026-4039 | Analyzed | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in OpenClaw 2026.2.19-2. This vulnerability affects the function applySkillConfigenvOverrides of the component Skill Env Handler. Executing a manipul |
| CVE-2026-4040 | Analyzed | 未確認 | CWE-200, CWE-203 | A vulnerability was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the component File Existence Handler. The manipulation leads to i |
| CVE-2026-4041 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security flaw has been discovered in Tenda i12 1.0.0.6(2204). Impacted is the function vos_strcpy of the file /goform/exeCommand. The manipulation of the argument cmdinput result |
| CVE-2026-4042 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A weakness has been identified in Tenda i12 1.0.0.6(2204). The affected element is the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. This manipulation of the |
| CVE-2026-4043 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security vulnerability has been detected in Tenda i12 1.0.0.6(2204). The impacted element is the function formwrlSSIDget of the file /goform/wifiSSIDget. Such manipulation of the |
| CVE-2026-4044 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in projectsend up to r1945. This affects the function realpath of the file /import-orphans.php of the component Delete Handler. Performing a manipulati |
| CVE-2026-4045 | Deferred | 未確認 | CWE-203, CWE-204 | A flaw has been found in projectsend up to r1945. This impacts an unknown function of the file includes/Classes/Auth.php. Executing a manipulation of the argument ldap_email can le |
| CVE-2026-4046 | Modified | 未確認 | CWE-617 | The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which m |
| CVE-2026-4056 | Deferred | 未確認 | CWE-862 | The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Content Access Rules REST API en |
| CVE-2026-4063 | Deferred | 未確認 | CWE-862 | The Social Icons Widget & Block by WPZOOM plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the add_menu_item() method hooke |
| CVE-2026-4064 | Analyzed | 未確認 | CWE-862 | Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass role-based acces |
| CVE-2026-4066 | Deferred | 未確認 | CWE-862 | The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() function in all version |
| CVE-2026-4067 | Deferred | 未確認 | CWE-79 | The Ad Short plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ad' shortcode's 'client' attribute in all versions up to and including 2.0.1. This is due to |
| CVE-2026-4068 | Deferred | 未確認 | CWE-352 | The Add Custom Fields to Media plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.3. This is due to missing nonce validation |
| CVE-2026-4069 | Deferred | 未確認 | CWE-79 | The Alfie – Feed Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'naam' parameter in all versions up to, and including, 1.2.1. This is due to missi |
| CVE-2026-4072 | Deferred | 未確認 | CWE-79 | The WordPress PayPal Donation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'donate' shortcode in all versions up to, and including, 1.01. This is due t |
| CVE-2026-4075 | Deferred | 未確認 | CWE-79 | The BWL Advanced FAQ Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'baf_sbox' shortcode in all versions up to and including 1.1.1. This is |
| CVE-2026-4077 | Deferred | 未確認 | CWE-79 | The Ecover Builder For Dummies plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'ecover' shortcode in all versions up to and includin |
| CVE-2026-4083 | Deferred | 未確認 | CWE-79 | The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2. The |
| CVE-2026-4084 | Deferred | 未確認 | CWE-79 | The fyyd podcast shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fyyd-podcast', 'fyyd-episode', and 'fyyd' shortcodes in all versions up to, a |
| CVE-2026-4086 | Deferred | 未確認 | CWE-79 | The WP Random Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cat', 'nocat', and 'text' shortcode attributes of the 'wp_random_button' shortcode i |
| CVE-2026-4087 | Deferred | 未確認 | CWE-89 | The Pre* Party Resource Hints plugin for WordPress is vulnerable to SQL Injection via the 'hint_ids' parameter of the pprh_update_hints AJAX action in all versions up to, and inclu |
| CVE-2026-4092 | Analyzed | 未確認 | CWE-22 | Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted |
| CVE-2026-4105 | Awaiting Analysis | 未確認 | CWE-284 | A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMac |
| CVE-2026-4111 | Awaiting Analysis | 未確認 | CWE-835 | A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 |
| CVE-2026-4115 | Modified | 未確認 | CWE-345, CWE-347 | A vulnerability was detected in PuTTY 0.83. Affected is the function eddsa_verify of the file crypto/ecc-ssh.c of the component Ed25519 Signature Handler. The manipulation results |
| CVE-2026-4120 | Deferred | 未確認 | CWE-79 | The Info Cards – Add Text and Media in Card Layouts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnUrl' parameter within the Info Cards block in all |
| CVE-2026-4127 | Deferred | 未確認 | CWE-862 | The Speedup Optimization plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.5.9. The `speedup01_ajax_enabled()` function, which handl |
| CVE-2026-4136 | Deferred | 未確認 | CWE-640 | The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and including, 3.2.24. This is due to insufficient valida |
| CVE-2026-4143 | Deferred | 未確認 | CWE-352 | The Neos Connector for Fakturama plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.0.14. This is due to missing nonce validatio |
| CVE-2026-4146 | Deferred | 未確認 | CWE-79 | The Loco Translate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘update_href’ parameter in all versions up to, and including, 2.8.2 due to insuffici |
| CVE-2026-4147 | Analyzed | 未確認 | CWE-457, CWE-908 | An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command. |
| CVE-2026-4148 | Analyzed | 未確認 | CWE-416 | A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation p |
| CVE-2026-4159 | Analyzed | 未確認 | CWE-125 | 1-byte OOB heap read in wc_PKCS7_DecodeEnvelopedData via zero-length encrypted content. A vulnerability existed in wolfSSL 5.8.4 and earlier, where a 1-byte out-of-bounds heap read |
| CVE-2026-4161 | Deferred | 未確認 | CWE-79 | The Review Map by RevuKangaroo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.7 due to insufficie |
| CVE-2026-4163 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Wavlink WL-WN579A3 220323. This issue affects the function SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler |
| CVE-2026-4164 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is the function Delete_Mac_list/SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handl |
| CVE-2026-4165 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipul |
| CVE-2026-4166 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in Wavlink WL-NU516U1 240425. The impacted element is the function sub_404F68 of the file /cgi-bin/login.cgi. The manipulation of the argument homepage/ho |
| CVE-2026-4167 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Belkin F9K1122 1.00.33. This affects the function formReboot of the file /goform/formReboot. This manipulation of the argument webpage causes stac |
| CVE-2026-4168 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Tecnick TCExam 16.5.0. This impacts an unknown function of the file /admin/code/tce_edit_group.php of the component Group Handler. Such manipulati |
| CVE-2026-4169 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Tecnick TCExam up to 16.6.0. Affected is the function F_xml_export_users of the file admin/code/tce_xml_users.php of the component XML Export |
| CVE-2026-4170 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/management/nmc_sync.php of the compon |
| CVE-2026-4171 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in CodeGenieApp serverless-express up to 4.17.1. Affected by this issue is some unknown functionality of the file examples/lambda-functio |
| CVE-2026-4172 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32. This affects an unknown part of the file /ping_response.cgi of the component HTTP POST Request Handler. The manipulati |
| CVE-2026-4173 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7. This vulnerability affects the function exportTable/exportTableColumnComment/exportView/exportProcedure/exportTriggers/exp |
| CVE-2026-4174 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk_exports_trie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Su |
| CVE-2026-4175 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/co |
| CVE-2026-4176 | Analyzed | 未確認 | Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib. Compress::Raw::Zlib is in | |
| CVE-2026-4177 | Modified | 未確認 | CWE-120, CWE-122 | YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occu |
| CVE-2026-4179 | Analyzed | 未確認 | CWE-835 | Issues in stm32 USB device driver (drivers/usb/device/usb_dc_stm32.c) can lead to an infinite while loop. |
| CVE-2026-4180 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in D-Link DIR-816 1.10CNB05. The impacted element is an unknown function of the file redirect.asp of the component goahead. The manipulation of the a |
| CVE-2026-4181 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. The manipulat |
| CVE-2026-4182 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A weakness has been identified in D-Link DIR-816 1.10CNB05. This impacts an unknown function of the file /goform/form2Wl5RepeaterStep2.cgi of the component goahead. This manipulati |
| CVE-2026-4183 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security vulnerability has been detected in D-Link DIR-816 1.10CNB05. Affected is an unknown function of the file /goform/form2WlanBasicSetup.cgi of the component goahead. Such m |
| CVE-2026-4184 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was detected in D-Link DIR-816 1.10CNB05. Affected by this vulnerability is an unknown functionality of the file /goform/form2Wl5BasicSetup.cgi of the component goa |
| CVE-2026-4185 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in GPAC up to 2.5-DEV-rev2167-gcc9d617c0-master. This vulnerability affects the function swf_def_bits_jpeg of the file src/scene_manager/swf_parse.c of th |
| CVE-2026-4186 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in UEditor up to 1.4.3.2. This issue affects some unknown processing of the file php/controller.php?action=uploadimage of the component JSONP Callbac |
| CVE-2026-4187 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Impacted is an unknown function of the file /WebService/UpdateLocalDevInfo.jsp of the componen |
| CVE-2026-4188 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in D-Link DIR-619L 2.06B01. The affected element is the function formSchedule of the file /goform/formSchedule of the component boa. Performing |
| CVE-2026-4189 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in phpipam up to 1.7.4. The impacted element is an unknown function of the file app/admin/sections/edit-result.php of the component Section Handler. |
| CVE-2026-4190 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in JawherKl node-api-postgres up to 2.5. This impacts the function User.getAll of the file models/user.js. The manipulation of the argument sort result |
| CVE-2026-4191 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in JawherKl node-api-postgres up to 2.5. Affected is the function path.extname of the file index.js of the component Profile Picture Handler. This manipulatio |
| CVE-2026-4192 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in AvinashBole quip-mcp-server 1.0.0. Affected by this vulnerability is the function setupToolHandlers of the file src/index.ts. Such manipulation le |
| CVE-2026-4193 | Analyzed | 未確認 | CWE-266, CWE-284 | A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05. The affected element is the function GetDDNSSettings/GetDeviceDomainName/GetDeviceSettings/GetDMZSettings/Ge |
| CVE-2026-4194 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343 |
| CVE-2026-4195 | Analyzed | 未確認 | CWE-74, CWE-77 | A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-3 |
| CVE-2026-4196 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3 |
| CVE-2026-4197 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, D |
| CVE-2026-4198 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in hypermodel-labs mcp-server-auto-commit 1.0.0. Affected by this vulnerability is the function getGitChanges of the file index.ts. This manipulation |
| CVE-2026-4199 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in bazinga012 mcp_code_executor up to 0.3.0. Affected by this issue is the function installDependencies of the file src/index.ts. Such manipulation l |
| CVE-2026-4200 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This affects the function uploadTestcaseZipUrl of the file business/business |
| CVE-2026-4201 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This vulnerability affects the function Upload of the file business/business-syst |
| CVE-2026-4202 | Analyzed | 未確認 | CWE-200, CWE-862 | The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page. |
| CVE-2026-4203 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343 |
| CVE-2026-4204 | Analyzed | 未確認 | CWE-74, CWE-77 | A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-3 |
| CVE-2026-4205 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3 |
| CVE-2026-4206 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, D |
| CVE-2026-4207 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3 |
| CVE-2026-4208 | Analyzed | 未確認 | CWE-639 | The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty st |
| CVE-2026-4209 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3 |
| CVE-2026-4210 | Analyzed | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, |
| CVE-2026-4211 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3 |
| CVE-2026-4212 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS |
| CVE-2026-4213 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343 |
| CVE-2026-4214 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-3 |
| CVE-2026-4215 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01. The impacted element is the function Save of the file core/src/main/java/com/flowci/core/config/service/Con |
| CVE-2026-4216 | Deferred | 未確認 | CWE-259, CWE-798 | A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an unknown function of the component air.SmartLog.android. This manipulation causes hard- |
| CVE-2026-4217 | Deferred | 未確認 | CWE-255, CWE-256 | A security vulnerability has been detected in XREAL Nebula App up to 3.2.1 on Android. This impacts an unknown function of the file in ai/nreal/nebula/flutterPlugin/CloudStoragePlu |
| CVE-2026-4218 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was detected in myAEDES App up to 1.18.4 on Android. Affected is an unknown function of the file aedes/me/beta/utils/EngageBayUtils.java of the component aedes.me.b |
| CVE-2026-4219 | Deferred | 未確認 | CWE-259, CWE-798 | A flaw has been found in INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App up to 1.0.2 on Android. Affected by this vulnerability is an unknown functionality of the f |
| CVE-2026-4220 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in Technologies Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /SetWebpagePic.jsp. The manip |
| CVE-2026-4221 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This affects an unknown part of the file /rest/file/uploadLedImage of the component Endpoint. The m |
| CVE-2026-4222 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in SSCMS up to 7.4.0. This vulnerability affects the function PathUtils.RemoveParentPath of the file /api/admin/plugins/install/actions/download. Thi |
| CVE-2026-4223 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /manage_employee.php. Such manipulation of the |
| CVE-2026-4224 | Modified | 未確認 | CWE-674 | When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs. |
| CVE-2026-4225 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in CMS Made Simple up to 2.2.21. Impacted is an unknown function of the file admin/listusers.php of the component User Management Module. Perfor |
| CVE-2026-4226 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A weakness has been identified in LB-LINK BL-WR9000 2.4.9. The affected element is the function sub_44E8D0 of the file /goform/get_virtual_cfg. Executing a manipulation can lead to |
| CVE-2026-4227 | Analyzed | 未確認 | CWE-119, CWE-120, CWE-125 | A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9. The impacted element is the function sub_44D844 of the file /goform/get_hidessid_cfg. The manipulation leads |
| CVE-2026-4228 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in LB-LINK BL-WR9000 2.4.9. This affects the function sub_458754 of the file /goform/set_wifi. The manipulation results in command injection. It is pos |
| CVE-2026-4229 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in vanna-ai vanna up to 2.0.2. This impacts the function remove_training_data of the file src/vanna/legacy/google/bigquery_vector.py. This manipulation of the |
| CVE-2026-4230 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in vanna-ai vanna up to 2.0.2. Affected is the function update_sql of the file src/vanna/legacy/flask/__init__.py of the component Endpoint. Such man |
| CVE-2026-4231 | Deferred | 未確認 | CWE-918 | A vulnerability was found in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is the function update_sql/run_sql of the file src/vanna/legacy/flask/__init__.py of the com |
| CVE-2026-4232 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /rest/user/getAuthorityByUserId. Ex |
| CVE-2026-4233 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in ThingsGateway 12. This affects an unknown part of the file /api/file/download. The manipulation of the argument fileName leads to path traversal. |
| CVE-2026-4234 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SSCMS 7.4.0. This vulnerability affects unknown code of the file SitesAddController.Submit.cs of the component DDL Handler. The manipulation |
| CVE-2026-4235 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Online Enrollment System 1.0. This issue affects some unknown processing of the file /sms/login.php. This manipulation of the argumen |
| CVE-2026-4236 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=add. Such manipulati |
| CVE-2026-4237 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/mod_reports/index.php. Executing a manipul |
| CVE-2026-4238 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/courses.php. The manipulation of the arg |
| CVE-2026-4239 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability was found in Lagom WHMCS Template up to 2.3.7. Impacted is an unknown function of the component Datatables. The manipulation results in improperly controlled modifi |
| CVE-2026-4240 | Analyzed | 未確認 | CWE-404 | A vulnerability was determined in Open5GS up to 2.7.6. The affected element is the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b_aaa_cb/smf_s6b_sta_cb of the component CCA Handler. |
| CVE-2026-4241 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/time-table.php. Such manipulation of th |
| CVE-2026-4242 | Deferred | 未確認 | CWE-255, CWE-256 | A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android. This affects an unknown function of the file file app/babychakra/babychakra/Co |
| CVE-2026-4243 | Deferred | 未確認 | CWE-255, CWE-256 | A weakness has been identified in La Nacion App 10.2.25 on Android. This impacts an unknown function of the file source/app/lanacion/clublanacion/BuildConfig.java of the component |
| CVE-2026-4247 | Analyzed | 未確認 | CWE-401 | When a challenge ACK is to be sent tcp_respond() constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function |
| CVE-2026-4248 | Deferred | 未確認 | CWE-285 | The Ultimate Member plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.2. This is due to the '{usermeta:password_reset_ |
| CVE-2026-4250 | Deferred | 未確認 | CWE-255, CWE-256 | A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to 1.7.3 on Android. Affected is an unknown function of the file resources/assets/service-account. |
| CVE-2026-4251 | Deferred | 未確認 | CWE-255, CWE-256 | A vulnerability was determined in CityData CityChat up to 0.12.6 on Android. Affected by this vulnerability is an unknown functionality of the file resources/assets/flutter_assets/ |
| CVE-2026-4252 | Analyzed | 未確認 | CWE-287, CWE-291 | A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check_is_ipv6 of the component IPv6 Handler. The manipulation leads to reliance on i |
| CVE-2026-4253 | Analyzed | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Tenda AC8 16.03.50.11. This affects the function route_set_user_policy_rule of the file /cgi-bin/UploadCfg of the component Web Interface. Th |
| CVE-2026-4254 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the component HTTP Endpoi |
| CVE-2026-4255 | Analyzed | 未確認 | CWE-829 | A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loading. The application l |
| CVE-2026-4257 | Deferred | 未確認 | CWE-94 | The Contact Form by Supsystic plugin for WordPress is vulnerable to Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in all versions up to, and includin |
| CVE-2026-4258 | Modified | 未確認 | CWE-325, CWE-347 | Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basicKey.publicKey |
| CVE-2026-4261 | Deferred | 未確認 | CWE-862 | The Expire Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.2. This is due to the plugin allowing a user to update the 'on |
| CVE-2026-4262 | Deferred | 未確認 | CWE-863 | Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/<ID>/'. |
| CVE-2026-4263 | Deferred | 未確認 | CWE-863 | Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/webchat/messag |
| CVE-2026-4265 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to validate team-specific upload_file permissions which allows a guest user to post files in channe |
| CVE-2026-4266 | Analyzed | 未確認 | CWE-502 | An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execu |
| CVE-2026-4267 | Deferred | 未確認 | CWE-79 | The Query Monitor – The developer tools panel for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘$_SERVER['REQUEST_URI']’ parameter in all |
| CVE-2026-4268 | Deferred | 未確認 | CWE-79 | The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmza_custom_js’ parameter in all versions up to, and including |
| CVE-2026-4269 | Analyzed | 未確認 | CWE-283, CWE-340 | A missing S3 ownership verification in the Bedrock AgentCore Starter Toolkit before version v0.1.13 may allow a remote actor to inject code during the build process, leading to cod |
| CVE-2026-4270 | Analyzed | 未確認 | CWE-424 | Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow the bypass of |
| CVE-2026-4271 | Modified | 未確認 | CWE-416 | A flaw was found in libsoup, a library for handling HTTP requests. This vulnerability, known as a Use-After-Free, occurs in the HTTP/2 server implementation. A remote attacker can |
| CVE-2026-4274 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to restrict team-level access when processing membership sync from a remote clust |
| CVE-2026-4276 | Analyzed | 未確認 | CWE-94 | LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries. |
| CVE-2026-4278 | Deferred | 未確認 | CWE-79 | The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sdc_menu' shortcode in all versions up to, and including, 2.3. This is due to |
| CVE-2026-4281 | Deferred | 未確認 | CWE-862 | The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 7.5.21. This is due to missing capability |
| CVE-2026-4283 | Deferred | 未確認 | CWE-862 | The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38. This is due to the `super-unsubscribe |
| CVE-2026-4284 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433. This issue affects the function downloadFile of the file - yudao-module-dig |
| CVE-2026-4285 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433. Impacted is the function recognizeMarkdown of the file yudao-module-digital |
| CVE-2026-4287 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of |
| CVE-2026-4288 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted element is an unknown function of the file /rest/devStatus/getDevDetailedInfo of |
| CVE-2026-4289 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This affects an unknown function of the file /rest/preSetTemplate/getRecByTe |
| CVE-2026-4295 | Awaiting Analysis | 未確認 | CWE-829 | Improper trust boundary enforcement in Kiro IDE before version 0.8.0 on all supported platforms might allow a remote unauthenticated threat actor to execute arbitrary code via mali |
| CVE-2026-4302 | Deferred | 未確認 | CWE-918 | The WowOptin: Next-Gen Popup Maker plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.29. This is due to the plugin exposin |
| CVE-2026-4306 | Deferred | 未確認 | CWE-89 | The WP Job Portal plugin for WordPress is vulnerable to SQL Injection via the 'radius' parameter in all versions up to, and including, 2.4.8 due to insufficient escaping on the use |
| CVE-2026-4307 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10. The impacted element is the function get_abs_path of the file python/helpers/files.py. The manipulation r |
| CVE-2026-4308 | Deferred | 未確認 | CWE-918 | A weakness has been identified in frdel/agent0ai agent-zero 0.9.7. This affects the function handle_pdf_document of the file python/helpers/document_query.py. This manipulation cau |
| CVE-2026-4309 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network. |
| CVE-2026-4312 | Analyzed | 未確認 | CWE-306 | GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new |
| CVE-2026-4314 | Deferred | 未確認 | CWE-269 | The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.4. This is due to the `isDas |
| CVE-2026-4315 | Analyzed | 未確認 | CWE-352 | A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware W |
| CVE-2026-4317 | Deferred | 未確認 | CWE-89 | SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute arbitrary SQL |
| CVE-2026-4318 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114. Affected is the function strcpy of the file /goform/formApLbConfig. This manipulation of the argument loadBalan |
| CVE-2026-4319 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/add-item.php. Such man |
| CVE-2026-4324 | Awaiting Analysis | 未確認 | CWE-89 | A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitra |
| CVE-2026-4329 | Deferred | 未確認 | CWE-79 | The Blackhole for Bad Bots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent HTTP header in all versions up to and including 3.8. This is due to |
| CVE-2026-4331 | Deferred | 未確認 | CWE-862 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized data loss in all versions up to, and including, 8.8.2. This is due to the res |
| CVE-2026-4335 | Deferred | 未確認 | CWE-79 | The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment post_title in all versions up to, and including, 6.4.3. This is |
| CVE-2026-4340 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-4342 | Analyzed | 未確認 | CWE-20 | A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code executio |
| CVE-2026-4346 | Analyzed | 未確認 | CWE-312 | The vulnerability affecting TL-WR850N v3 allows cleartext storage of administrative and Wi-Fi credentials in a region of the device’s flash memory while the serial interface remain |
| CVE-2026-4349 | Deferred | 未確認 | CWE-287 | A vulnerability was determined in Duende IdentityServer4 up to 4.1.2. The affected element is an unknown function of the file /connect/authorize of the component Token Renewal Endp |
| CVE-2026-4354 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in TRENDnet TEW-824DRU 1.010B01/1.04B01. The impacted element is the function sub_420A78 of the file apply_sec.cgi of the component Web Interface. Su |
| CVE-2026-4355 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Portabilis i-Educar 2.11. This impacts an unknown function of the file /intranet/educar_servidor_curso_lst.php of the component Endpoint. Performing |
| CVE-2026-4356 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /add_result.php. Executing a manipulation of the argument vr can |
| CVE-2026-4358 | Analyzed | 未確認 | CWE-415 | A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution |
| CVE-2026-4359 | Analyzed | 未確認 | CWE-158 | A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver. |
| CVE-2026-4363 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions could have al |
| CVE-2026-4366 | Modified | 未確認 | CWE-918 | A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. Thi |
| CVE-2026-4368 | Awaiting Analysis | 未確認 | CWE-362 | Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session Mi |
| CVE-2026-4371 | Modified | 未確認 | CWE-126, CWE-130 | A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server we |
| CVE-2026-4373 | Deferred | 未確認 | CWE-36 | The JetFormBuilder plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 3.5.6.2. This is due to the 'Uploaded_File::se |
| CVE-2026-4389 | Deferred | 未確認 | CWE-79 | The DSGVO snippet for Leaflet Map and its Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `leafext-cookie-time` and `leafext-delete-cookie` sho |
| CVE-2026-4393 | Analyzed | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Automated Logout allows Cross Site Request Forgery.This issue affects Automated Logout: from 0.0.0 before 1.7.0, from 2.0. |
| CVE-2026-4395 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in the KCAPI ECC code path of wc_ecc_import_x963_ex() in wolfSSL wolfcrypt allows a remote attacker to write attacker-controlled data past the bounds of |
| CVE-2026-4396 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certi |
| CVE-2026-4399 | Analyzed | 未確認 | CWE-77 | Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a que |
| CVE-2026-4400 | Analyzed | 未確認 | CWE-639 | Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation I |
| CVE-2026-4404 | Analyzed | 未確認 | CWE-1393, CWE-798 | Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI. |
| CVE-2026-4407 | Awaiting Analysis | 未確認 | CWE-20, CWE-787 | Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces. |
| CVE-2026-4415 | Analyzed | 未確認 | CWE-23, CWE-787 | Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary f |
| CVE-2026-4416 | Analyzed | 未確認 | CWE-502 | The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to |
| CVE-2026-4424 | Modified | 未確認 | CWE-125 | A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size aft |
| CVE-2026-4425 | Rejected | 未確認 | Rejected reason: Reserved for EastLink case, but no need for CVE anymore | |
| CVE-2026-4426 | Modified | 未確認 | CWE-1335 | A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9 |
| CVE-2026-4427 | Rejected | 未確認 | Rejected reason: Duplicate of CVE-2026-32286 | |
| CVE-2026-4428 | Awaiting Analysis | 未確認 | CWE-299 | A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate t |
| CVE-2026-4433 | Analyzed | 未確認 | CWE-16 | An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be |
| CVE-2026-4434 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification |
| CVE-2026-4437 | Modified | 未確認 | CWE-125 | Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a cr |
| CVE-2026-4438 | Modified | 未確認 | CWE-20, CWE-88 | Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in |
| CVE-2026-4439 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
| CVE-2026-4440 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security |
| CVE-2026-4441 | Analyzed | 未確認 | CWE-416 | Use after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severit |
| CVE-2026-4442 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security se |
| CVE-2026-4443 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-4444 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium securi |
| CVE-2026-4445 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sever |
| CVE-2026-4446 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sever |
| CVE-2026-4447 | Modified | 未確認 | CWE-693 | Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-4448 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-4449 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi |
| CVE-2026-4450 | Analyzed | 未確認 | CWE-787 | Out of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security seve |
| CVE-2026-4451 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to potentially |
| CVE-2026-4452 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium se |
| CVE-2026-4453 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: H |
| CVE-2026-4454 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security seve |
| CVE-2026-4455 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security |
| CVE-2026-4456 | Analyzed | 未確認 | CWE-416 | Use after free in Digital Credentials API in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb |
| CVE-2026-4457 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: |
| CVE-2026-4458 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corrupti |
| CVE-2026-4459 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu |
| CVE-2026-4460 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security se |
| CVE-2026-4461 | Analyzed | 未確認 | Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu | |
| CVE-2026-4462 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security s |
| CVE-2026-4463 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-4464 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security seve |
| CVE-2026-4465 | Analyzed | 未確認 | CWE-77, CWE-78 | A flaw has been found in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formSysCmd. Executing a manipulation of the argument sysCmd can lead t |
| CVE-2026-4466 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Comfast CF-AC100 2.6.0.8. This affects an unknown function of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone. The manipulation lead |
| CVE-2026-4467 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Comfast CF-AC100 2.6.0.8. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET§ion=wireless_device_dissoc. The manipulation |
| CVE-2026-4468 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Comfast CF-AC100 2.6.0.8. Affected is an unknown function of the file /cgi-bin/mbox-config?method=SET§ion=update_interface_png. This manipulat |
| CVE-2026-4469 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_edit_men |
| CVE-2026-4470 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_edit_menu |
| CVE-2026-4471 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /admin/admin_edit_employee.php. Executing a manipul |
| CVE-2026-4472 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /admin/admin_edit_supplier.p |
| CVE-2026-4473 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown processing of the file /admin/appointment_action.php. The manipul |
| CVE-2026-4474 | Analyzed | 未確認 | CWE-79, CWE-94 | A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_single_student_update.php. This manipulation of the argum |
| CVE-2026-4475 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. The affected element is an unknown function of the file home/web/ipc. Such manipulation leads |
| CVE-2026-4476 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. The impacted element is an unknown function of the file home/web/ipc of the component CGI Endpoint |
| CVE-2026-4477 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was determined in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This affects an unknown function of the component WPA/WPS. Executing a manipulation can lead |
| CVE-2026-4478 | Deferred | 未確認 | CWE-345, CWE-347 | A vulnerability was identified in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This impacts an unknown function of the file home/web/ipc of the component HTTP Firmware Upda |
| CVE-2026-4484 | Deferred | 未確認 | CWE-862 | The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6. This is due to the plugin allowing a user to update the us |
| CVE-2026-4485 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/search_student.php. The manipulation of |
| CVE-2026-4486 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was found in D-Link DIR-513 1.10. This affects the function formEasySetPassword of the file /goform/formEasySetPassword of the component Web Service. The manipulati |
| CVE-2026-4487 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/websHostFilter. This manipulation causes buffer overflow |
| CVE-2026-4488 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected is the function strcpy of the file /goform/setSysAdm. Such manipulation of the argument Group |
| CVE-2026-4489 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda A18 Pro 02.03.02.28. This vulnerability affects the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipul |
| CVE-2026-4490 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda A18 Pro 02.03.02.28. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. This manipulation causes stack-based buffer over |
| CVE-2026-4491 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda A18 Pro 02.03.02.28. Impacted is the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument list lead |
| CVE-2026-4492 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda A18 Pro 02.03.02.28. The affected element is the function set_qosMib_list of the file /goform/formSetQosBand. Performing a manipulation of the ar |
| CVE-2026-4493 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda A18 Pro 02.03.02.28. The impacted element is the function sub_423B50 of the file /goform/setMacFilterCfg of the component MAC Filtering Conf |
| CVE-2026-4494 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in atjiu pybbs 6.0.0. This affects the function create of the file src/main/java/co/yiiu/pybbs/controller/api/TopicApiController.java. The manipulati |
| CVE-2026-4495 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the function create of the file src/main/java/co/yiiu/pybbs/controller/api/CommentApiController.java. The man |
| CVE-2026-4496 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in sigmade Git-MCP-Server up to 785aa159f262a02d5791a5d8a8e13c507ac42880. Affected by this vulnerability is the function child_process.exec of the file sr |
| CVE-2026-4497 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. Affected by this issue is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi. This manipulation c |
| CVE-2026-4499 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgi_main of the component SSDP. Executing a manipulation can lead to os command injection. The |
| CVE-2026-4500 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was identified in bagofwords1 bagofwords up to 0.0.297. This impacts the function generate_df of the file backend/app/ai/code_execution/code_execution.py. Such mani |
| CVE-2026-4504 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in eosphoros-ai db-gpt up to 0.7.5. This vulnerability affects unknown code of the file /api/v1/editor/ of the component Incomplete Fix. This manipulation cau |
| CVE-2026-4505 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in eosphoros-ai DB-GPT up to 0.7.5. This issue affects the function module_plugin.refresh_plugins of the file packages/dbgpt-serve/src/dbgpt_serve/ag |
| CVE-2026-4506 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in Mindinventory MindSQL up to 0.2.1. Impacted is the function ask_db of the file mindsql/core/mindsql_core.py. Performing a manipulation results in code |
| CVE-2026-4507 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in Mindinventory MindSQL up to 0.2.1. The affected element is the function ask_db of the file mindsql/core/mindsql_core.py. Executing a manipulation |
| CVE-2026-4508 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in PbootCMS up to 3.2.12. The impacted element is the function checkUsername of the file apps/home/controller/MemberController.php of the component M |
| CVE-2026-4509 | Deferred | 未確認 | CWE-183, CWE-184 | A security flaw has been discovered in PbootCMS up to 3.2.12. This affects an unknown function of the file core/function/file.php of the component File Upload. The manipulation of |
| CVE-2026-4510 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in PbootCMS up to 3.2.12. This impacts the function alert_location of the file apps/home/controller/MemberController.php of the component Parameter H |
| CVE-2026-4511 | Deferred | 未確認 | CWE-707, CWE-74 | A security vulnerability has been detected in vanna-ai vanna up to 2.0.2. Affected is the function exec of the file /src/vanna/legacy. Such manipulation leads to injection. The att |
| CVE-2026-4513 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is the function ask of the file vanna\legacy\base\base.py. Performing a manipulation resu |
| CVE-2026-4514 | Deferred | 未確認 | CWE-266, CWE-284 | A flaw has been found in PbootCMS up to 3.2.12. Affected by this issue is some unknown functionality of the file apps/admin/controller/system/UserController.php of the component Ba |
| CVE-2026-4515 | Analyzed | 未確認 | CWE-74, CWE-94 | A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1. This affects the function code_generate of the file metagpt/ext/aflow/scripts/operator.py. The manipulation |
| CVE-2026-4516 | Analyzed | 未確認 | CWE-707, CWE-74 | A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1. This vulnerability affects unknown code of the file metagpt/actions/di/write_analysis_code.py of the component D |
| CVE-2026-4519 | Modified | 未確認 | CWE-20, CWE-88 | The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Use |
| CVE-2026-4528 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in trueleaf ApiFlow 0.9.7. The impacted element is the function validateUrlSecurity of the file packages/server/src/service/proxy/http_proxy.service. |
| CVE-2026-4529 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in D-Link DHP-1320 1.00WWB04. This affects the function redirect_count_down_page of the component SOAP Handler. Such manipulation leads to stack-base |
| CVE-2026-4530 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in apconw Aix-DB up to 1.2.3. This impacts an unknown function of the file agent/text2sql/rag/terminology_retriever.py. Performing a manipulatio |
| CVE-2026-4531 | Deferred | 未確認 | CWE-404 | A weakness has been identified in Free5GC 4.1.0. Affected is the function HandleRegistrationComplete of the file internal/gmm/handler.go of the component AMF. Executing a manipulat |
| CVE-2026-4532 | Analyzed | 未確認 | CWE-425, CWE-552 | A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/ |
| CVE-2026-4533 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of |
| CVE-2026-4534 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda FH451 1.0.0.9. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. This manipulation of the argument GO causes stack-based buf |
| CVE-2026-4535 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda FH451 1.0.0.9. This vulnerability affects the function WrlclientSet of the file /goform/WrlclientSet. Such manipulation of the argument GO l |
| CVE-2026-4536 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in Acrel Environmental Monitoring Cloud Platform 1.1.0. This issue affects some unknown processing. Performing a manipulation results in unrestricted uplo |
| CVE-2026-4537 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Cudy TR1200 R46-2.4.15-20250721-164017. Impacted is the function action_ipsec_conn of the file /usr/bin/lib/lua/luci/controller/ipsec.lua. Executi |
| CVE-2026-4538 | Analyzed | 未確認 | CWE-20, CWE-502 | A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The a |
| CVE-2026-4539 | Deferred | 未確認 | CWE-1333, CWE-400 | A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in in |
| CVE-2026-4540 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in projectworlds Online Notes Sharing System 1.0. This issue affects some unknown processing of the file /login.php of the component Parameters Handler |
| CVE-2026-4541 | Deferred | 未確認 | CWE-345, CWE-347 | A flaw has been found in janmojzis tinyssh up to 20250501. Impacted is an unknown function of the file tinyssh/crypto_sign_ed25519_tinyssh.c of the component Ed25519 Signature Hand |
| CVE-2026-4542 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in SSCMS 4.7.0. The affected element is an unknown function of the file LayerImageController.Submit.cs of the component layerImage Endpoint. Such man |
| CVE-2026-4543 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is an unknown function of the file /cgi-bin/firewall.cgi of the component POST Request Handler. Perform |
| CVE-2026-4544 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects an unknown function of the file /cgi-bin/login.cgi of the component POST Request Handler. Executing a mani |
| CVE-2026-4545 | Analyzed | 未確認 | CWE-426, CWE-427 | A security flaw has been discovered in Flos Freeware Notepad2 4.2.25. This affects an unknown function in the library PROPSYS.dll. Performing a manipulation results in uncontrolled |
| CVE-2026-4546 | Analyzed | 未確認 | CWE-426, CWE-427 | A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled |
| CVE-2026-4547 | Deferred | 未確認 | CWE-840 | A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of th |
| CVE-2026-4548 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. Affected by this vulnerability is the function updateUserrole of the file actions/update-user-role.ts. The |
| CVE-2026-4549 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in mickasmt next-saas-stripe-starter 1.0.0. Affected by this issue is the function openCustomerPortal of the file actions/open-customer-portal.ts of the compo |
| CVE-2026-4550 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Tr |
| CVE-2026-4551 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSafeClientFilter of the file /goform/SafeClientFilter of the component Parameters Handl |
| CVE-2026-4552 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda F453 1.0.0.3. This issue affects the function fromVirtualSer of the file /goform/VirtualSer of the component Parameters Handler. Executing a |
| CVE-2026-4553 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda F453 1.0.0.3. Impacted is the function fromNatlimit of the file /goform/Natlimit of the component Parameters Handler. The manipulation of th |
| CVE-2026-4554 | Analyzed | 未確認 | CWE-74, CWE-77, CWE-78 | A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument ma |
| CVE-2026-4555 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A weakness has been identified in D-Link DIR-513 1.10. The impacted element is the function formEasySetTimezone of the file /goform/formEasySetTimezone of the component boa. This m |
| CVE-2026-4557 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/update_s1.php. Performing a manipulation of the argument |
| CVE-2026-4558 | Analyzed | 未確認 | CWE-77, CWE-78 | A flaw has been found in Linksys MR9600 2.0.6.206937. Affected is the function smartConnectConfigure of the file SmartConnect.lua. Executing a manipulation of the argument configAp |
| CVE-2026-4562 | Deferred | 未確認 | CWE-287, CWE-306 | A security flaw has been discovered in MacCMS 2025.1000.4052. This affects an unknown part of the file application/api/controller/Timming.php of the component Timming API Endpoint. |
| CVE-2026-4563 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in MacCMS up to 2025.1000.4052. This vulnerability affects the function order_info of the file application/index/controller/User.php of the component |
| CVE-2026-4564 | Deferred | 未確認 | CWE-74, CWE-94 | A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processing of the file /monitor/job/ of the component Quartz Job Hand |
| CVE-2026-4565 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Tenda AC21 16.03.08.16. Impacted is the function formSetQosBand of the file /goform/SetNetControlList. Performing a manipulation of the argument lis |
| CVE-2026-4566 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulation of the argument webpage ca |
| CVE-2026-4567 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda A15 15.13.07.13. The impacted element is the function UploadCfg of the file /cgi-bin/UploadCfg. The manipulation of the argument File leads |
| CVE-2026-4568 | Modified | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /update_supplier.php of the component HTTP GET Request Hand |
| CVE-2026-4569 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /view_category.php of the component HTTP POST Request |
| CVE-2026-4570 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /view_customers.php of the component HTTP POST Request |
| CVE-2026-4571 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_payments.php of t |
| CVE-2026-4572 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /view_product.php of the component |
| CVE-2026-4573 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/form_handlers/delete_post.php of the c |
| CVE-2026-4574 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of the component User Profile Update Handler. The manipulation |
| CVE-2026-4575 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/update_s2.php. This manipulation of the argument snam |
| CVE-2026-4576 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Exam Form Submission 1.0. Impacted is an unknown function of the file /admin/update_s5.php. Such manipulation of the argument sname |
| CVE-2026-4577 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unknown function of the file /admin/update_s4.php. Performing a manipulation of the |
| CVE-2026-4578 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_s3.php. Executing a manipulation of |
| CVE-2026-4579 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /viewdetail.php of the component Parameters Handler. The man |
| CVE-2026-4580 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /checkupdatestatus.php of the component Parameters Hand |
| CVE-2026-4581 | Modified | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Simple Laundry System 1.0. Affected is an unknown function of the file /checklogin.php of the component Parameters Handler. This man |
| CVE-2026-4582 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this vulnerability is an unknown functionality of the component Bluetooth. S |
| CVE-2026-4583 | Deferred | 未確認 | CWE-287, CWE-294 | A vulnerability was detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this issue is some unknown functionality of the component Bluetooth Handler. Performing a |
| CVE-2026-4584 | Deferred | 未確認 | CWE-310, CWE-319 | A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. This affects an unknown part of the component Cardholder Data Handler. Executing a manipulation can lead to c |
| CVE-2026-4585 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/ImportSystemC |
| CVE-2026-4586 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects the function Upload of the file chat2db-server/chat2db-server-web/chat2db-server-web-api/src/main/java/ai |
| CVE-2026-4587 | Deferred | 未確認 | CWE-287, CWE-295 | A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation |
| CVE-2026-4588 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was determined in kalcaddle kodbox 1.64. Impacted is the function shareSafeGroup of the file /workspace/source-code/app/controller/explorer/shareOut.class.php of th |
| CVE-2026-4589 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in kalcaddle kodbox 1.64. The affected element is the function PathDriverUrl of the file /workspace/source-code/app/controller/explorer/editor.class. |
| CVE-2026-4590 | Deferred | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in kalcaddle kodbox 1.64. The impacted element is an unknown function of the file /workspace/source-code/plugins/oauth/controller/bind/index.cla |
| CVE-2026-4591 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in kalcaddle kodbox 1.64. This affects the function checkBin of the file /workspace/source-code/plugins/fileThumb/app.php of the component fileThumb |
| CVE-2026-4592 | Deferred | 未確認 | CWE-287 | A security vulnerability has been detected in kalcaddle kodbox 1.64. This impacts the function loginAfter/tfaVerify of the file /workspace/source-code/plugins/client/controller/tfa |
| CVE-2026-4593 | Deferred | 未確認 | CWE-564, CWE-89 | A flaw has been found in erupts erupt bis 1.13.3. Affected by this vulnerability is the function EruptDataQuery of the file erupt-ai/src/main/java/xyz/erupt/ai/call/impl/EruptDataQ |
| CVE-2026-4594 | Deferred | 未確認 | CWE-564, CWE-89 | A vulnerability has been found in erupts erupt up to 1.13.3. Affected by this issue is the function geneEruptHqlOrderBy of the file erupt-data/erupt-jpa/src/main/java/xyz/erupt/jpa |
| CVE-2026-4595 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/update_s6.php. Executing a manipulation of the |
| CVE-2026-4596 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in projectworlds Lawyer Management System 1.0. This issue affects some unknown processing of the file /lawyers.php. The manipulation of the argument |
| CVE-2026-4597 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4. Impacted is the function selectAll of the file src/main/java/com/genersoft/iot/vmp/streamProxy/dao/pro |
| CVE-2026-4598 | Modified | 未確認 | CWE-1287, CWE-835 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives |
| CVE-2026-4599 | Modified | 未確認 | CWE-1023, CWE-338 | Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigInt |
| CVE-2026-4600 | Modified | 未確認 | CWE-347 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPub |
| CVE-2026-4601 | Modified | 未確認 | CWE-325 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation. |
| CVE-2026-4602 | Modified | 未確認 | CWE-681 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js. An attacker can for |
| CVE-2026-4603 | Analyzed | 未確認 | CWE-369 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowInt reduction |
| CVE-2026-4606 | Deferred | 未確認 | CWE-250 | GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level privileges, allowing any local user to gain full control of the operating system. |
| CVE-2026-4611 | Analyzed | 未確認 | CWE-77, CWE-78 | A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826. Affected by this issue is the function setLanCfg of the file /usr/sbin/shttpd. Executing a m |
| CVE-2026-4612 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0. This affects an unknown part of the file /hotel/admin/mod_users/index.php?view=edit&id=8 of the co |
| CVE-2026-4613 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester E-Commerce Site 1.0. This vulnerability affects unknown code of the file /products.php. The manipulation of the argument Search results |
| CVE-2026-4614 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode sanitize or validate this input 1.0. This issue affects some unknown processing of the file /admin/subjects.php of the component Para |
| CVE-2026-4615 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Online Catering Reservation 1.0. Impacted is an unknown function of the file /search.php. Such manipulation of the argument rcode l |
| CVE-2026-4616 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in bolo-blog up to 2.6.4. The affected element is an unknown function of the file /console/article/ of the component Article Title Handler. Perf |
| CVE-2026-4617 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/api_patient_ |
| CVE-2026-4619 | Analyzed | 未確認 | CWE-22 | Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network. |
| CVE-2026-4620 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network. |
| CVE-2026-4621 | Analyzed | 未確認 | CWE-912 | Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network. |
| CVE-2026-4622 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network. |
| CVE-2026-4623 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. This affects an unknown f |
| CVE-2026-4624 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Online Library Management System 1.0. The impacted element is an unknown function of the file /home.php of the component Parameter Ha |
| CVE-2026-4625 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program |
| CVE-2026-4626 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in projectworlds Lawyer Management System 1.0. This impacts an unknown function of the file /lawyer_booking.php. The manipulation of the argument Des |
| CVE-2026-4627 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in D-Link DIR-825 and DIR-825R 1.0.5/4.5.1. Affected is the function handler_update_system_time of the file libdeuteron_modules.so of the component NTP Se |
| CVE-2026-4628 | Modified | 未確認 | CWE-284 | A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak’s User-Managed Access (UMA) resource_set endpoint allows attackers with valid credentials to bypa |
| CVE-2026-4632 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/user/index.php?view=add of the component Param |
| CVE-2026-4633 | Modified | 未確認 | CWE-209 | A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizations are enabled. This vulnerability allo |
| CVE-2026-4639 | Analyzed | 未確認 | CWE-863 | Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, t |
| CVE-2026-4640 | Analyzed | 未確認 | CWE-306 | Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensit |
| CVE-2026-4645 | Rejected | 未確認 | Rejected reason: Duplicate of CVE-2026-32287 | |
| CVE-2026-4647 | Modified | 未確認 | CWE-125 | A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially |
| CVE-2026-4649 | Awaiting Analysis | 未確認 | CWE-306 | Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of new message ( CVE-2026 |
| CVE-2026-4652 | Analyzed | 未確認 | CWE-476 | On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an I/O queue with a bogus or stale CNTLID. An attacker with ne |
| CVE-2026-4662 | Deferred | 未確認 | CWE-89 | The JetEngine plugin for WordPress is vulnerable to SQL Injection via the `listing_load_more` AJAX action in all versions up to, and including, 3.8.6.1. This is due to the `filtere |
| CVE-2026-4673 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium secu |
| CVE-2026-4674 | Analyzed | 未確認 | CWE-125 | Out of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security seve |
| CVE-2026-4675 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security |
| CVE-2026-4676 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-4677 | Analyzed | 未確認 | CWE-125 | Inappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromi |
| CVE-2026-4678 | Analyzed | 未確認 | CWE-416 | Use after free in WebGPU in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-4679 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security se |
| CVE-2026-4680 | Analyzed | 未確認 | CWE-416 | Use after free in FedCM in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-4681 | Awaiting Analysis | 未確認 | CWE-94 | A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted |
| CVE-2026-4684 | Modified | 未確認 | CWE-362, CWE-364, CWE-416 | Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunde |
| CVE-2026-4685 | Modified | 未確認 | CWE-754, CWE-787 | Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderb |
| CVE-2026-4686 | Modified | 未確認 | CWE-754, CWE-787 | Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderb |
| CVE-2026-4687 | Modified | 未確認 | CWE-120, CWE-501, CWE-754 | Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, |
| CVE-2026-4688 | Modified | 未確認 | CWE-416, CWE-825 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9 |
| CVE-2026-4689 | Modified | 未確認 | CWE-120, CWE-190, CWE-754 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Th |
| CVE-2026-4690 | Modified | 未確認 | CWE-120, CWE-190, CWE-754 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Th |
| CVE-2026-4691 | Modified | 未確認 | CWE-416, CWE-825 | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 14 |
| CVE-2026-4692 | Modified | 未確認 | CWE-653 | Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4693 | Modified | 未確認 | CWE-754, CWE-823 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thund |
| CVE-2026-4694 | Modified | 未確認 | CWE-190, CWE-754 | Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and |
| CVE-2026-4695 | Modified | 未確認 | CWE-131, CWE-754 | Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4696 | Modified | 未確認 | CWE-416, CWE-825 | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4697 | Modified | 未確認 | CWE-754, CWE-787 | Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4698 | Modified | 未確認 | CWE-733, CWE-843 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140 |
| CVE-2026-4699 | Modified | 未確認 | CWE-754, CWE-787 | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thun |
| CVE-2026-4700 | Modified | 未確認 | CWE-288, CWE-444 | Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4701 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4702 | Modified | 未確認 | CWE-843 | JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4704 | Modified | 未確認 | CWE-400 | Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4705 | Modified | 未確認 | CWE-758 | Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4706 | Modified | 未確認 | CWE-754 | Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderb |
| CVE-2026-4707 | Modified | 未確認 | CWE-754 | Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderb |
| CVE-2026-4708 | Modified | 未確認 | CWE-754 | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4709 | Modified | 未確認 | CWE-754 | Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbir |
| CVE-2026-4710 | Modified | 未確認 | CWE-119 | Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4711 | Modified | 未確認 | CWE-416 | Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4712 | Modified | 未確認 | CWE-200 | Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4713 | Modified | 未確認 | CWE-754 | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4714 | Modified | 未確認 | CWE-754 | Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4715 | Modified | 未確認 | CWE-908 | Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4716 | Modified | 未確認 | CWE-908 | Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunder |
| CVE-2026-4717 | Modified | 未確認 | Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. | |
| CVE-2026-4718 | Modified | 未確認 | CWE-758 | Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4719 | Modified | 未確認 | CWE-119, CWE-754 | Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
| CVE-2026-4720 | Modified | 未確認 | CWE-120 | Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that |
| CVE-2026-4721 | Modified | 未確認 | CWE-120, CWE-825 | Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption |
| CVE-2026-4722 | Modified | 未確認 | Privilege escalation in the IPC component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. | |
| CVE-2026-4723 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. |
| CVE-2026-4724 | Modified | 未確認 | CWE-758 | Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. |
| CVE-2026-4725 | Modified | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. |
| CVE-2026-4726 | Modified | 未確認 | CWE-400 | Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. |
| CVE-2026-4727 | Modified | 未確認 | CWE-400 | Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149. |
| CVE-2026-4728 | Modified | 未確認 | CWE-290 | Spoofing issue in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. |
| CVE-2026-4729 | Modified | 未確認 | CWE-120, CWE-825 | Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could ha |
| CVE-2026-4731 | Deferred | 未確認 | CWE-190 | Integer Overflow or Wraparound vulnerability in artraweditor ART (rtengine modules). This vulnerability is associated with program files dcraw.C. This issue affects ART: before |
| CVE-2026-4732 | Deferred | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in tildearrow furnace (extern/libsndfile-modified/src modules). This vulnerability is associated with program files flac.C. This issue affects f |
| CVE-2026-4733 | Deferred | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3. |
| CVE-2026-4734 | Deferred | 未確認 | CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in yoyofr modizer (libs/libopenmpt/openmpt-trunk/include/premake/contrib/curl/lib modules). Th |
| CVE-2026-4735 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in DTStack chunjun (chunjun-core/src/main/java/com/dtstack/chunjun/util modules). This vulnerability is associated with program fil |
| CVE-2026-4736 | Deferred | 未確認 | CWE-229 | Improper Handling of Values vulnerability in No-Chicken Echo-Mate (SDK/rv1106-sdk/sysdrv/source/kernel/include/net/netfilter modules). This vulnerability is associated with program |
| CVE-2026-4737 | Deferred | 未確認 | CWE-416 | Use After Free vulnerability in No-Chicken Echo-Mate (SDK/rv1106-sdk/sysdrv/source/kernel/mm modules). This vulnerability is associated with program files rmap.C. This issue aff |
| CVE-2026-4738 | Awaiting Analysis | 未確認 | CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with pro |
| CVE-2026-4739 | Deferred | 未確認 | CWE-190 | Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK (Modules/ThirdParty/Expat/src/expat modules).This issue affects ITK: before 2.7.1. |
| CVE-2026-4741 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TeamJCD JoyConDroid (app/src/main/java/com/rdapps/gamepad/util modules). This vulner |
| CVE-2026-4742 | Deferred | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in visualfc liteide (liteidex/src/3rdparty/qjsonrpc/src/http-parser modules). This vu |
| CVE-2026-4743 | Deferred | 未確認 | CWE-476 | NULL Pointer Dereference vulnerability in taurusxin ncmdump (src/utils modules). This vulnerability is associated with program files cJSON.Cpp. This issue affects ncmdump: befo |
| CVE-2026-4744 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in rizonesoft Notepad3 (scintilla/oniguruma/src modules). This vulnerability is associated with program files regcomp.C. This issue affects Note |
| CVE-2026-4745 | Awaiting Analysis | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in dendibakh perf-ninja (labs/misc/pgo/lua modules). This vulnerability is associated with program files ldo |
| CVE-2026-4746 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds Write vulnerability in timeplus-io proton (base/poco/Foundation/src modules). This vulnerability is associated with program files inflate.C. This issue affects prot |
| CVE-2026-4747 | Analyzed | 未確認 | CWE-121 | Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure |
| CVE-2026-4749 | Deferred | 未確認 | NVD-CWE-noinfo vulnerability in albfan miraclecast.This issue affects miraclecast: before v1.0. | |
| CVE-2026-4750 | Deferred | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in fabiangreffrath woof.This issue affects woof: before woof_15.3.0. |
| CVE-2026-4751 | Awaiting Analysis | 未確認 | CWE-476 | NULL Pointer Dereference vulnerability in tmate-io tmate.This issue affects tmate: before 2.4.0. |
| CVE-2026-4752 | Deferred | 未確認 | CWE-416 | Use After Free vulnerability in No-Chicken Echo-Mate.This issue affects Echo-Mate: before V250329. |
| CVE-2026-4753 | Deferred | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in slajerek RetroDebugger.This issue affects RetroDebugger: before v0.64.72. |
| CVE-2026-4754 | Analyzed | 未確認 | CWE-79 | CWE-79 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. |
| CVE-2026-4755 | Analyzed | 未確認 | CWE-20 | CWE-20 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. |
| CVE-2026-4756 | Analyzed | 未確認 | CWE-787 | Out-of-bounds Write vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. |
| CVE-2026-4758 | Deferred | 未確認 | CWE-22 | The WP Job Portal plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'WPJOBPORTALcustomfields::removeFileCustom' function |
| CVE-2026-4760 | Awaiting Analysis | 未確認 | CWE-552 | From Panorama Web HMI, an attacker can gain read access to certain Web HMI server files, if he knows their paths and if these files are accessible to the Servin process execution a |
| CVE-2026-4761 | Undergoing Analysis | 未確認 | CWE-732 | When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily gr |
| CVE-2026-4766 | Deferred | 未確認 | CWE-79 | The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and including, 1.5.3. This |
| CVE-2026-4775 | Modified | 未確認 | CWE-190 | A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially c |
| CVE-2026-4777 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file view_supplier.php of the component POST Parameter Han |
| CVE-2026-4778 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file update_category.php of the component HTTP GET P |
| CVE-2026-4779 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Sales and Inventory System 1.0. This issue affects some unknown processing of the file update_customer_details.php of t |
| CVE-2026-4780 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Sales and Inventory System 1.0. Impacted is an unknown function of the file update_out_standing.php of the component HTTP GET Paramet |
| CVE-2026-4781 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Sales and Inventory System 1.0. The affected element is an unknown function of the file update_purchase.php of the component HTTP GET Parame |
| CVE-2026-4783 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/add-single-student-results.php of the c |
| CVE-2026-4784 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /checkcheckout.php of the component Parameter Handler. The manipu |
| CVE-2026-4789 | Analyzed | 未確認 | CWE-918 | Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions. |
| CVE-2026-4794 | Analyzed | 未確認 | CWE-79 | Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via differe |
| CVE-2026-4799 | Analyzed | 未確認 | CWE-601 | In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL. |
| CVE-2026-4800 | Modified | 未確認 | CWE-94 | The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the s |
| CVE-2026-4809 | Deferred | 未確認 | CWE-434 | plank/laravel-mediable through version 6.4.0 can allow upload of a dangerous file type when an application using the package accepts or prefers a client-supplied MIME type during f |
| CVE-2026-4815 | Analyzed | 未確認 | CWE-89 | A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete database via 'calls[0][message_id |
| CVE-2026-4816 | Analyzed | 未確認 | CWE-79 | A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to execute JavaScript code in the victim's browse |
| CVE-2026-4818 | Analyzed | 未確認 | CWE-285, CWE-862 | In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data st |
| CVE-2026-4819 | Analyzed | 未確認 | CWE-522, CWE-532 | In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana. |
| CVE-2026-4822 | Deferred | 未確認 | CWE-377, CWE-378 | A vulnerability was detected in Enter Software Iperius Backup up to 8.7.3. Affected is an unknown function of the file C:\ProgramData\IperiusBackup\Jobs\ of the component Backup Se |
| CVE-2026-4823 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in Enter Software Iperius Backup up to 8.7.3. Affected by this vulnerability is an unknown functionality of the component NTLM2 Handler. Executing a manipulat |
| CVE-2026-4824 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability has been found in Enter Software Iperius Backup up to 8.7.3. Affected by this issue is some unknown functionality of the component Backup Job Configuration File Han |
| CVE-2026-4825 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file /update_sales.php of the component HTTP GET Parameter Handler. |
| CVE-2026-4826 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /update_stock.php of the component HTTP GET Par |
| CVE-2026-4830 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in kalcaddle kodbox 1.64. This issue affects the function Add of the file app/controller/explorer/userShare.class.php of the component Public Share H |
| CVE-2026-4831 | Deferred | 未確認 | CWE-287 | A security flaw has been discovered in kalcaddle kodbox 1.64. Impacted is the function can of the file /workspace/source-code/app/controller/explorer/auth.class.php of the componen |
| CVE-2026-4833 | Deferred | 未確認 | CWE-404, CWE-674 | A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation ca |
| CVE-2026-4835 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an unknown function of the file /my_account/add_costumer.php of the component Web App |
| CVE-2026-4836 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Accounting System 1.0. The affected element is an unknown function of the file /my_account/delete.php. Performing a manipulation of th |
| CVE-2026-4838 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Malawi Online Market 1.0. The impacted element is an unknown function of the file /display.php. Executing a manipulation of the argument ID |
| CVE-2026-4839 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Food Ordering System 1.0. This affects an unknown function of the file /purchase.php of the component Parameter Handler. The manipu |
| CVE-2026-4840 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTools of the file /bin/netis.cgi of the component Diagnostic T |
| CVE-2026-4841 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file form/cart.php of the component Shopping Cart Module. Execu |
| CVE-2026-4842 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of |
| CVE-2026-4844 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin.php of the component Admin Login Module |
| CVE-2026-4845 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is an unknown function of the file /admin/Member/index.html. This manipulation of the argument Search causes cros |
| CVE-2026-4846 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in dameng100 muucmf 1.9.5.20260309. The affected element is an unknown function of the file channel/admin.Account/autoReply.html. Such manipulation o |
| CVE-2026-4847 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in dameng100 muucmf 1.9.5.20260309. The impacted element is an unknown function of the file /admin/config/list.html. Performing a manipulation of the argu |
| CVE-2026-4848 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in dameng100 muucmf 1.9.5.20260309. This affects an unknown function of the file /admin/extend/list.html. Executing a manipulation of the argument Na |
| CVE-2026-4849 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /modify.php of the component Parameter Handler. The manipula |
| CVE-2026-4850 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Simple Laundry System 1.0. Affected is an unknown function of the file /checkregisitem.php of the component Parameter Handler. |
| CVE-2026-4851 | Modified | 未確認 | CWE-502, CWE-95 | GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization. GRID::Machine provides Remote Procedure Calls (RPC) over SSH for Perl. Th |
| CVE-2026-4860 | Deferred | 未確認 | CWE-20, CWE-502 | A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4. This affects the function GenericFastJsonRedisSerializer of the file src/main/java/com/genersoft/iot/v |
| CVE-2026-4861 | Analyzed | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-L |
| CVE-2026-4862 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file /goform/formConfigDnsFilterGlobal of th |
| CVE-2026-4867 | Analyzed | 未確認 | CWE-1333 | Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (.). For example, /:a |
| CVE-2026-4874 | Modified | 未確認 | CWE-918 | A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery (SSRF) by manipulating the `client_session_host` parameter during refresh token requ |
| CVE-2026-4875 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /admin/mod_amenities/index.php?view=add. T |
| CVE-2026-4876 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Free Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/mod_amenities/index.php?view=editpi |
| CVE-2026-4877 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in itsourcecode Payroll Management System up to 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the a |
| CVE-2026-4887 | Modified | 未確認 | CWE-193 | A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to ope |
| CVE-2026-4897 | Modified | 未確認 | CWE-770 | A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input ( |
| CVE-2026-4898 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /dbfood/contact.php. The man |
| CVE-2026-4899 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in code-projects Online Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /dbfood/food.php. The manipul |
| CVE-2026-4900 | Deferred | 未確認 | CWE-425, CWE-552 | A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file /dbfood/localhost.sql. This manipulation causes files or d |
| CVE-2026-4902 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulati |
| CVE-2026-4903 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A flaw has been found in Tenda AC5 15.03.06.47. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. This ma |
| CVE-2026-4904 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. Such manipulat |
| CVE-2026-4905 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was found in Tenda AC5 15.03.06.47. Impacted is the function formWifiWpsOOB of the file /goform/WifiWpsOOB of the component POST Request Handler. Performing a manip |
| CVE-2026-4906 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was determined in Tenda AC5 15.03.06.47. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Exec |
| CVE-2026-4907 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in Page-Replica Page Replica up to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0. The impacted element is the function sitemap.fetch of the file /sitemap |
| CVE-2026-4908 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /modstaffinfo.php of the component Parameter Handler. T |
| CVE-2026-4909 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/update_s7.php. This manipulation of the argument sname |
| CVE-2026-4910 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus up to 1.3.44. Affected is an unknown function of the file /RemoteFormat.do of the componen |
| CVE-2026-4923 | Analyzed | 未確認 | CWE-1333 | Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtracking vulnerability req |
| CVE-2026-4926 | Modified | 未確認 | CWE-1333, CWE-400 | Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponent |
| CVE-2026-4933 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.This issue affects Unpublished Node Permissions: from 0.0.0 before 1.7.0. |
| CVE-2026-4946 | Analyzed | 未確認 | CWE-78 | Ghidra versions prior to 12.0.3 improperly process annotation directives embedded in automatically extracted binary data, resulting in arbitrary command execution when an analyst i |
| CVE-2026-4948 | Modified | 未確認 | CWE-279 | A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySe |
| CVE-2026-4953 | Deferred | 未確認 | CWE-918 | A weakness has been identified in mingSoft MCMS up to 5.5.0. This issue affects the function catchImage of the file net/mingsoft/cms/action/BaseAction.java of the component Editor |
| CVE-2026-4954 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in mingSoft MCMS up to 5.5.0. Impacted is the function list of the file net/mingsoft/cms/action/web/ContentAction.java of the component W |
| CVE-2026-4955 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. This impacts an unknown function of the file /OperateStatistic.do. The manipulation of the argument |
| CVE-2026-4956 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. The affected element is an unknown function of the file /DevicePrint.do?Action=ReadTask of the c |
| CVE-2026-4957 | Analyzed | 未確認 | CWE-200, CWE-532 | A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function FunctionHandler.handle_tool_call of the file XAgent/function_handler.py of the component API Key |
| CVE-2026-4958 | Analyzed | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplayServer.on_connect/ReplayServer.send_data of the file XAgentServer/application/websockets/rep |
| CVE-2026-4959 | Analyzed | 未確認 | CWE-287, CWE-306 | A vulnerability was found in OpenBMB XAgent 1.0.0. This impacts the function check_user of the file XAgentServer/application/websockets/share.py of the component ShareServer WebSoc |
| CVE-2026-4960 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was determined in Tenda AC6 15.03.05.16. Affected is the function fromWizardHandle of the file /goform/WizardHandle of the component POST Request Handler. Executing |
| CVE-2026-4961 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request |
| CVE-2026-4962 | Analyzed | 未確認 | CWE-426, CWE-427 | A security flaw has been discovered in UltraVNC up to 1.6.4.0. Affected by this issue is some unknown functionality in the library version.dll of the component Service. The manipul |
| CVE-2026-4963 | Analyzed | 未確認 | CWE-74, CWE-94 | A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_with of the file src/smolagents/local_pyth |
| CVE-2026-4964 | Analyzed | 未確認 | CWE-918 | A security vulnerability has been detected in letta-ai letta 0.16.4. This vulnerability affects the function _convert_message_create_to_message of the file letta/helpers/message_he |
| CVE-2026-4965 | Analyzed | 未確認 | CWE-94, CWE-95 | A vulnerability was detected in letta-ai letta 0.16.4. This issue affects the function resolve_type of the file letta/functions/ast_parsers.py of the component Incomplete Fix CVE-2 |
| CVE-2026-4966 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/mod_room/index.php?view=edit. Executing a manipulation o |
| CVE-2026-4968 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was determined in SourceCodester Diary App 1.0. The affected element is an unknown function of the file diary.php. Executing a manipulation can lead to cross-site r |
| CVE-2026-4969 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted element is an unknown function of the file /home.php of the component Alert Handler. The ma |
| CVE-2026-4970 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file delete_photos.php of the component Endpoint. The manip |
| CVE-2026-4971 | Deferred | 未確認 | CWE-352, CWE-862 | A weakness has been identified in SourceCodester Note Taking App up to 1.0. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack is pos |
| CVE-2026-4972 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databa |
| CVE-2026-4973 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Perfo |
| CVE-2026-4974 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg of the component POST Request Handler. Execu |
| CVE-2026-4975 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. The manipulation of |
| CVE-2026-4976 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the |
| CVE-2026-4980 | Analyzed | 未確認 | CWE-611 | A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing |
| CVE-2026-4982 | Awaiting Analysis | 未確認 | CWE-20 | A user with permission "update world" in any Venueless world is able to exfiltrate chat messages from direct messages or channels in other worlds on the same server due to a bug in |
| CVE-2026-4984 | Analyzed | 未確認 | CWE-345, CWE-352 | The Twilio integration webhook handler accepts any POST request without validating Twilio's 'X-Twilio-Signature'. When processing media messages, it fetches user-controlled URLs ( |
| CVE-2026-4985 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the function cgif_addframe of the file src/cgif.c of the component GIF Image Handler. The mani |
| CVE-2026-4987 | Deferred | 未確認 | CWE-20 | The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Payment Amount Bypass in all versions up to, and including, 2.5.2. This |
| CVE-2026-4988 | Analyzed | 未確認 | CWE-404 | A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b of the component CCA Message Handler. The manipulation res |
| CVE-2026-4990 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in chatwoot up to 4.11.1. The affected element is an unknown function of the file /app/login of the component Signup Endpoint. Such manip |
| CVE-2026-4991 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element is an unknown function of the file /admin/enquiry of the component Admission En |
| CVE-2026-4992 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in wandb OpenUI up to 1.0. This affects the function create_share/get_share of the file backend/openui/server.py of the component HTMLAnnotator Component. Exe |
| CVE-2026-4993 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability has been found in wandb OpenUI up to 0.0.0.0/1.0. This impacts an unknown function of the file backend/openui/config.py. The manipulation of the argument LITELLM_MA |
| CVE-2026-4994 | Deferred | 未確認 | CWE-200, CWE-209 | A vulnerability was found in wandb OpenUI up to 1.0/3.5-turb. Affected is the function generic_exception_handler of the file backend/openui/server.py of the component APIStatusErro |
| CVE-2026-4995 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in wandb OpenUI up to 1.0. Affected by this vulnerability is an unknown functionality of the file frontend/public/annotator/index.html of the compone |
| CVE-2026-4996 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4. Affected by this issue is the function delete_question_and_answers/delete_docs/update_question_answer/update_doc |
| CVE-2026-4997 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in Sinaptik AI PandasAI up to 3.0.0. This affects the function is_sql_query_safe of the file pandasai/helpers/sql_sanitizer.py. Performing a man |
| CVE-2026-4998 | Deferred | 未確認 | CWE-74, CWE-94 | A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0. This vulnerability affects the function CodeExecutor.execute of the file pandasai/core/code_execution/code_execu |
| CVE-2026-4999 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2. This issue affects the function uploadFile of the file /server/utils/uplo |
| CVE-2026-5000 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. Impacted is the function LocalGPTHandler of the file backend/server.py of the |
| CVE-2026-5001 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The affected element is the function do_POST of the file backend/server.py. This man |
| CVE-2026-5002 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The impacted element is the function _route_using_overviews of the file bac |
| CVE-2026-5003 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. This affects the function handle_index of the file rag_system/api_server.py of t |
| CVE-2026-5004 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin/firewall.cgi of the component UPNP Handler. Executing a man |
| CVE-2026-5007 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0. Affected is the function cloneRepository of the file src/index.ts of the component add_git_repository/add_text_fi |
| CVE-2026-5010 | Deferred | 未確認 | CWE-79 | A reflected Cross-Site Scripting (XSS) vulnerability has been discovered in Clickedu. This vulnerability allows an attacker to execute JavaScript code in the victim’s browser by se |
| CVE-2026-5011 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was detected in elecV2 elecV2P up to 3.8.3. This vulnerability affects the function runJSFile of the file /webhook of the component JSON Parser. Performing a manipu |
| CVE-2026-5012 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in elecV2 elecV2P up to 3.8.3. This issue affects the function pm2run of the file /rpc. Executing a manipulation can lead to os command injection. The attack |
| CVE-2026-5013 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in elecV2 elecV2P up to 3.8.3. Impacted is the function path.join of the file /store/:key. The manipulation of the argument URL leads to path travers |
| CVE-2026-5014 | Deferred | 未確認 | CWE-22 | A vulnerability was found in elecV2 elecV2P up to 3.8.3. The affected element is the function path.join of the file /log/ of the component Wildcard Handler. The manipulation result |
| CVE-2026-5015 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in elecV2 elecV2P up to 3.8.3. The impacted element is an unknown function of the file /logs of the component Endpoint. This manipulation of the argu |
| CVE-2026-5016 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the component URL Handler. Such manipulation of the argument req |
| CVE-2026-5017 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. |
| CVE-2026-5018 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Ex |
| CVE-2026-5019 | Analyzed | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file all-orders.php of t |
| CVE-2026-5020 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Totolink A3600R 4.1.2cu.5182_B20201102. Affected by this issue is the function setNoticeCfg of the file /cgi-bin/cstecgi.cgi of the component Parame |
| CVE-2026-5021 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component httpd. This manipulation of the argu |
| CVE-2026-5022 | Analyzed | 未確認 | CWE-862 | The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to download images belongin |
| CVE-2026-5023 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in DeDeveloper23 codebase-mcp up to 3ec749d237dd8eabbeef48657cf917275792fde6. This vulnerability affects the function getCodebase/getRemoteCodebase/s |
| CVE-2026-5024 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime r |
| CVE-2026-5025 | Analyzed | 未確認 | CWE-862 | The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication ( |
| CVE-2026-5026 | Analyzed | 未確認 | CWE-79 | The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sanitizing their content. Since SVG files can contain embe |
| CVE-2026-5027 | Analyzed | 未確認 | CWE-22 | The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesys |
| CVE-2026-5030 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Telnet S |
| CVE-2026-5031 | Deferred | 未確認 | CWE-99 | A vulnerability was found in BichitroGan ISP Billing Software 2025.3.20. Impacted is an unknown function of the file /?_route=settings/users-view/ of the component Endpoint. The ma |
| CVE-2026-5033 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Accounting System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_costumer.php of the component Para |
| CVE-2026-5034 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of the file /edit_costumer.php of the component Parameter Handler |
| CVE-2026-5035 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Accounting System 1.0. This affects an unknown part of the file /view_work.php of the component Parameter Handler. Such manipulation |
| CVE-2026-5036 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda 4G06 04.06.01.29. This vulnerability affects the function fromDhcpListClient of the file /goform/DhcpListClient of the component Endpoint. Perfor |
| CVE-2026-5037 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in mxml up to 4.0.4. This issue affects the function index_sort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of t |
| CVE-2026-5041 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is the function fwrite of the file admin/pageMail.php. The manipulati |
| CVE-2026-5042 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security flaw has been discovered in Belkin F9K1122 1.00.33. The affected element is the function formCrossBandSwitch of the file /goform/formCrossBandSwitch of the component Par |
| CVE-2026-5043 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A weakness has been identified in Belkin F9K1122 1.00.33. The impacted element is the function formSetPassword of the file /goform/formSetPassword of the component Parameter Handle |
| CVE-2026-5044 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A security vulnerability has been detected in Belkin F9K1122 1.00.33. This affects the function formSetSystemSettings of the file /goform/formSetSystemSettings of the component Set |
| CVE-2026-5045 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda FH1201 1.2.0.14(408). This impacts the function WrlclientSet of the file /goform/WrlclientSet of the component Parameter Handler. Performing a |
| CVE-2026-5046 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Executing a manipu |
| CVE-2026-5087 | Analyzed | 未確認 | CWE-1204, CWE-338 | PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attempts to read bytes from |
| CVE-2026-5101 | Analyzed | 未確認 | CWE-74, CWE-77, CWE-78 | A vulnerability was identified in Totolink A3300R 17.0.0cu.557_b20221024. This affects the function setLanCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. T |
| CVE-2026-5102 | Analyzed | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. This vulnerability affects the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi of the compon |
| CVE-2026-5103 | Analyzed | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. This issue affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argu |
| CVE-2026-5104 | Analyzed | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStaticRoute of the file /cgi-bin/cstecgi.cgi. Such manipulation of |
| CVE-2026-5105 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024. The affected element is the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component Paramet |
| CVE-2026-5106 | Analyzed | 未確認 | CWE-79, CWE-94 | A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_fst.php. Executing a manipulation of the argu |
| CVE-2026-5107 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. |
| CVE-2026-5115 | Analyzed | 未確認 | CWE-319 | The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking. The PaperCut NG/MF Embedded application is a software int |
| CVE-2026-5119 | Modified | 未確認 | CWE-319 | A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT |
| CVE-2026-5121 | Modified | 未確認 | CWE-190 | A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by prov |
| CVE-2026-5122 | Analyzed | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in osrg GoBGP up to 4.3.0. This affects the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component BGP OPEN Message Handler |
| CVE-2026-5123 | Analyzed | 未確認 | CWE-189, CWE-193 | A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data |
| CVE-2026-5124 | Analyzed | 未確認 | CWE-266, CWE-284 | A security vulnerability has been detected in osrg GoBGP up to 4.3.0. Affected is the function BGPHeader.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component BGP Head |
| CVE-2026-5125 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function child_process.execSync of the file src/server.ts. The manipulation |
| CVE-2026-5126 | Deferred | 未確認 | CWE-918 | A flaw has been found in SourceCodester RSS Feed Parser 1.0. Affected by this issue is the function file_get_contents. This manipulation causes server-side request forgery. The att |
| CVE-2026-5128 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-5130 | Deferred | 未確認 | CWE-565 | The Debugger & Troubleshooter plugin for WordPress was vulnerable to Unauthenticated Privilege Escalation in versions up to and including 1.3.2. This was due to the plugin acceptin |
| CVE-2026-5147 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This affects an unknown part of the file /admin-api/system/tenant/get-by-website. The manipulation of the a |
| CVE-2026-5148 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in YunaiV yudao-cloud up to 2026.01. This vulnerability affects unknown code of the file /admin-api/system/mail-log/page. This manipulation of the ar |
| CVE-2026-5150 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Accounting System 1.0. This issue affects some unknown processing of the file /viewin_costumer.php of the component Para |
| CVE-2026-5152 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the argument fileNa |
| CVE-2026-5153 | Analyzed | 未確認 | CWE-74, CWE-77 | A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can |
| CVE-2026-5154 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the component Parameter Handler. The manipu |
| CVE-2026-5155 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the a |
| CVE-2026-5156 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This manipulation |
| CVE-2026-5157 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected is an unknown function of the file /form/order.php of the component Order Module. Such man |
| CVE-2026-5164 | Analyzed | 未確認 | CWE-120 | A flaw was found in virtio-win. The `RhelDoUnMap()` function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exp |
| CVE-2026-5165 | Analyzed | 未確認 | CWE-825 | A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-f |
| CVE-2026-5170 | Analyzed | 未確認 | CWE-617 | A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is be |
| CVE-2026-5176 | Analyzed | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of |
| CVE-2026-5177 | Analyzed | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this vulnerability is the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi. Executing |
| CVE-2026-5178 | Analyzed | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi. The manipu |
| CVE-2026-5179 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Us |
| CVE-2026-5180 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=login2. This manipulation |
| CVE-2026-5181 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some unknown processing of the file /doctors_appointment/admin/ajax |
| CVE-2026-5182 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Teacher Record System 1.0. Impacted is an unknown function of the file Teacher Record System of the component Parameter Handler. Perform |
| CVE-2026-5183 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in TRENDnet TEW-713RE up to 1.02. The affected element is the function sub_421494 of the file /goform/addRouting. Executing a manipulation of the arg |
| CVE-2026-5184 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in TRENDnet TEW-713RE up to 1.02. The impacted element is an unknown function of the file /goform/setSysAdm. The manipulation of the argument admuser |
| CVE-2026-5185 | Deferred | 未確認 | CWE-119, CWE-122 | A security flaw has been discovered in Nothings stb_image up to 2.30. This affects the function stbi__gif_load_next of the file stb_image.h of the component Multi-frame GIF File Ha |
| CVE-2026-5186 | Deferred | 未確認 | CWE-119, CWE-415 | A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbi__load_gif_main of the file stb_image.h of the component Multi-frame GIF File Handler. This |
| CVE-2026-5190 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in the streaming decoder component in aws-c-event-stream before 0.6.0 might allow a third party operating a server to cause memory corruption leading to arbitra |
| CVE-2026-5195 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Student Membership System 1.0. This issue affects some unknown processing of the component User Registration Handler. Executing a manipulatio |
| CVE-2026-5196 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Student Membership System 1.0. Impacted is an unknown function of the file /delete_member.php. The manipulation of the argument ID l |
| CVE-2026-5197 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of the file /delete_user.php. The manipulation of the argument |
| CVE-2026-5198 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login |
| CVE-2026-5201 | Modified | 未確認 | CWE-122 | A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when |
| CVE-2026-5203 | Deferred | 未確認 | CWE-22 | A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function _copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of |
| CVE-2026-5204 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipu |
| CVE-2026-5205 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in chatwoot up to 4.11.2. Affected by this vulnerability is the function Webhooks::Trigger in the library lib/webhooks/trigger.rb of the component We |
| CVE-2026-5206 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Simple Gym Management System 1.0. This vulnerability affects unknown code of the component Payment Handler. The manipula |
| CVE-2026-5209 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in SourceCodester Leave Application System 1.0. Affected by this issue is some unknown functionality of the component User Management Han |
| CVE-2026-5210 | Deferred | 未確認 | CWE-73 | A vulnerability was detected in SourceCodester Leave Application System 1.0. This affects an unknown part. Performing a manipulation of the argument page results in file inclusion. |
| CVE-2026-5211 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-3 |
| CVE-2026-5212 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3 |
| CVE-2026-5213 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3 |
| CVE-2026-5214 | Analyzed | 未確認 | CWE-119, CWE-121, CWE-787 | A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, D |
| CVE-2026-5215 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3 |
| CVE-2026-5235 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function AP4_BitReader::ReadCache of the file Ap4Dac4Atom.cpp of the component MP4 File Parser. |
| CVE-2026-5236 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the component DSI v1 Parser. Suc |
| CVE-2026-5237 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_user.php of the co |