NVD公開月 2026-04
5,885 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2000-5001 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2005-20001 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2008-20002 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2008-20003 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2009-20012 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2010-20110 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2010-20116 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2010-20117 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2010-20118 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2010-20124 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2011-10031 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2013-10041 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2013-10045 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2013-10056 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2014-125120 | Rejected | 未確認 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. | |
| CVE-2015-10148 | Awaiting Analysis | 未確認 | CWE-321 | Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and OpenBAT prior to 9.10 are shipped with identical default SSH and SSL keys that cannot be changed, allowing u |
| CVE-2016-15058 | Awaiting Analysis | 未確認 | CWE-257 | Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where |
| CVE-2016-20050 | Analyzed | 未確認 | CWE-787 | NetSchedScan 1.0 contains a buffer overflow vulnerability in the scan Hostname/IP field that allows local attackers to crash the application by supplying an oversized input string. |
| CVE-2016-20051 | Analyzed | 未確認 | CWE-352 | Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms. |
| CVE-2016-20052 | Analyzed | 未確認 | CWE-434 | Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files direct |
| CVE-2016-20053 | Analyzed | 未確認 | CWE-352 | Redaxo CMS 5.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by tricking authenticated administra |
| CVE-2016-20054 | Analyzed | 未確認 | CWE-352, CWE-79 | Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms. Attackers can trick aut |
| CVE-2016-20055 | Analyzed | 未確認 | CWE-428 | IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Atta |
| CVE-2016-20056 | Deferred | 未確認 | CWE-428 | Spy Emergency build 23.0.205 contains an unquoted service path vulnerability in the SpyEmrgHealth and SpyEmrgSrv services that allows local attackers to escalate privileges by inse |
| CVE-2016-20057 | Analyzed | 未確認 | CWE-428 | NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting |
| CVE-2016-20058 | Analyzed | 未確認 | CWE-428 | Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate p |
| CVE-2016-20059 | Analyzed | 未確認 | CWE-428 | IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attacke |
| CVE-2016-20060 | Deferred | 未確認 | CWE-428 | Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executabl |
| CVE-2016-20061 | Deferred | 未確認 | CWE-428 | sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavProt service that allows local attackers to escalate privileges by exploiting the service binary path |
| CVE-2017-20230 | Analyzed | 未確認 | CWE-121 | Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated th |
| CVE-2017-20233 | Awaiting Analysis | 未確認 | CWE-284 | Hirschmann HiLCOS products OpenBAT, BAT450, WLC, BAT867 contains a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when managem |
| CVE-2017-20234 | Awaiting Analysis | 未確認 | CWE-798 | GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by exploiting a hardc |
| CVE-2017-20235 | Analyzed | 未確認 | CWE-287 | ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers |
| CVE-2017-20236 | Analyzed | 未確認 | CWE-78 | ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and |
| CVE-2017-20237 | Awaiting Analysis | 未確認 | CWE-287 | Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 contains an authentication bypass vulnerability in the master service that allows unauthenticated remote attack |
| CVE-2017-20238 | Awaiting Analysis | 未確認 | CWE-285 | Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an improper authorization vulnerability that allows read-only users to gain write |
| CVE-2017-20239 | Analyzed | 未確認 | CWE-79 | MDwiki contains a cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the location hash parameter. A |
| CVE-2018-25236 | Awaiting Analysis | 未確認 | CWE-287 | Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) management module that |
| CVE-2018-25237 | Awaiting Analysis | 未確認 | CWE-120 | Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled that allows remote a |
| CVE-2018-25238 | Deferred | 未確認 | CWE-1260 | VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through the search functionali |
| CVE-2018-25239 | Deferred | 未確認 | CWE-470 | Smart VPN 1.1.3.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the search interface. Attack |
| CVE-2018-25240 | Deferred | 未確認 | CWE-1260 | Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. |
| CVE-2018-25241 | Deferred | 未確認 | CWE-306 | VPN Browser+ 1.1.0.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through the search func |
| CVE-2018-25242 | Deferred | 未確認 | CWE-1389 | One Search 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting excessively long input strings to the search functi |
| CVE-2018-25243 | Deferred | 未確認 | CWE-763 | FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionalit |
| CVE-2018-25244 | Deferred | 未確認 | CWE-1312 | Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functional |
| CVE-2018-25245 | Deferred | 未確認 | CWE-601 | 7 Tik 1.0.1.0 contains a denial of service vulnerability that allows attackers to crash the application by submitting excessively long input strings to the search functionality. At |
| CVE-2018-25246 | Deferred | 未確認 | CWE-306 | Wikipedia 12.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through the search functional |
| CVE-2018-25247 | Modified | 未確認 | CWE-79 | MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject script payloads into post or thread subjects; when other users view |
| CVE-2018-25248 | Analyzed | 未確認 | CWE-79 | MyBB Downloads Plugin 2.0.3 contains a persistent cross-site scripting vulnerability that allows regular members to inject malicious scripts through the download title field. Attac |
| CVE-2018-25249 | Analyzed | 未確認 | CWE-79 | MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments. A |
| CVE-2018-25250 | Analyzed | 未確認 | CWE-79 | MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subject |
| CVE-2018-25251 | Deferred | 未確認 | CWE-787 | Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler (SEH) overwrite |
| CVE-2018-25252 | Analyzed | 未確認 | CWE-787 | FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the site profile IP field |
| CVE-2018-25253 | Analyzed | 未確認 | CWE-787 | Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field that allows local attackers to cause a denial of service by supplying an excessiv |
| CVE-2018-25254 | Analyzed | 未確認 | CWE-787 | NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending crafted FTP commands. Atta |
| CVE-2018-25255 | Deferred | 未確認 | CWE-787 | 10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious L |
| CVE-2018-25256 | Analyzed | 未確認 | CWE-787 | IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input. Attack |
| CVE-2018-25257 | Deferred | 未確認 | CWE-89 | Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through the name fiel |
| CVE-2018-25258 | Deferred | 未確認 | CWE-434 | RGui 3.5.0 contains a local buffer overflow vulnerability in the GUI preferences dialog that allows attackers to bypass DEP protections through structured exception handling exploi |
| CVE-2018-25259 | Analyzed | 未確認 | CWE-306 | Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by triggering s |
| CVE-2018-25260 | Analyzed | 未確認 | CWE-787 | MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting structured ex |
| CVE-2018-25261 | Analyzed | 未確認 | CWE-787 | Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute arbitrary code by su |
| CVE-2018-25262 | Analyzed | 未確認 | CWE-787 | Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input to the port selection |
| CVE-2018-25263 | Deferred | 未確認 | CWE-120 | Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler (SEH) |
| CVE-2018-25264 | Deferred | 未確認 | CWE-120 | TransMac 12.2 contains a buffer overflow vulnerability in the license key input field that allows local attackers to crash the application by submitting an oversized string. Attack |
| CVE-2018-25265 | Analyzed | 未確認 | CWE-787 | LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handlin |
| CVE-2018-25266 | Analyzed | 未確認 | CWE-787 | Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an excessively large str |
| CVE-2018-25267 | Analyzed | 未確認 | CWE-787 | UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH and SE handle |
| CVE-2018-25268 | Analyzed | 未確認 | CWE-787 | LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers |
| CVE-2018-25269 | Modified | 未確認 | CWE-79 | ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encoded payloads i |
| CVE-2018-25270 | Analyzed | 未確認 | CWE-639 | ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing paramet |
| CVE-2018-25271 | Analyzed | 未確認 | CWE-787 | Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through the Run command |
| CVE-2018-25272 | Deferred | 未確認 | CWE-326 | ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions. Attack |
| CVE-2018-25273 | Deferred | 未確認 | CWE-120 | CrossFont 7.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by submitting an oversized payload in the License Key field. Attackers c |
| CVE-2018-25274 | Deferred | 未確認 | CWE-789 | InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can creat |
| CVE-2018-25275 | Deferred | 未確認 | CWE-120 | Faleemi Plus 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can paste a 2000-by |
| CVE-2018-25276 | Deferred | 未確認 | CWE-120 | RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers |
| CVE-2018-25277 | Deferred | 未確認 | CWE-120 | PixGPS 1.1.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string to the folder path input field. Attacker |
| CVE-2018-25278 | Deferred | 未確認 | CWE-120 | PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can |
| CVE-2018-25279 | Deferred | 未確認 | CWE-789 | jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create |
| CVE-2018-25280 | Deferred | 未確認 | CWE-120 | Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attac |
| CVE-2018-25281 | Deferred | 未確認 | CWE-120 | iCash 7.6.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload through the Connect to Server dialog. At |
| CVE-2018-25282 | Deferred | 未確認 | CWE-674 | Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attac |
| CVE-2018-25283 | Deferred | 未確認 | CWE-120 | iSmartViewPro 1.5 contains a structured exception handling (SEH) buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to |
| CVE-2018-25284 | Deferred | 未確認 | CWE-120 | HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field |
| CVE-2018-25285 | Deferred | 未確認 | CWE-120 | Fathom 2.4 contains a buffer overflow vulnerability in the Authorization Code field that allows local attackers to crash the application by submitting an oversized input string. At |
| CVE-2018-25286 | Deferred | 未確認 | CWE-120 | Easy PhotoResQ 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Folder/filename fiel |
| CVE-2018-25287 | Deferred | 未確認 | CWE-120 | Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. At |
| CVE-2018-25288 | Deferred | 未確認 | CWE-120 | StyleWriter 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 6000-by |
| CVE-2018-25289 | Deferred | 未確認 | CWE-120 | Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attac |
| CVE-2018-25290 | Deferred | 未確認 | CWE-120 | Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to crash the application by supplying an oversized string. Attacker |
| CVE-2018-25291 | Deferred | 未確認 | CWE-120 | Project64 2.3.2 contains a buffer overflow vulnerability in the Plugin Directory settings field that allows local attackers to crash the application by supplying an excessively lon |
| CVE-2018-25292 | Deferred | 未確認 | CWE-120 | Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attack |
| CVE-2018-25293 | Deferred | 未確認 | CWE-120 | Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long stri |
| CVE-2018-25294 | Deferred | 未確認 | CWE-120 | CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject |
| CVE-2018-25295 | Deferred | 未確認 | CWE-789 | ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the IP inpu |
| CVE-2018-25296 | Deferred | 未確認 | CWE-120 | P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an ov |
| CVE-2018-25297 | Deferred | 未確認 | CWE-120 | Wansview 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can inject 2000-byte pa |
| CVE-2018-25298 | Awaiting Analysis | 未確認 | CWE-352 | Merge PACS 7.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by crafting malicious HTML forms targeting the merge-viewer |
| CVE-2018-25299 | Awaiting Analysis | 未確認 | CWE-120 | Prime95 29.4b8 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling (SEH) mechanisms. Attacker |
| CVE-2018-25300 | Deferred | 未確認 | CWE-89 | XATABoost CMS 1.0.0 contains a union-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id par |
| CVE-2018-25301 | Deferred | 未確認 | CWE-120 | Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying |
| CVE-2018-25302 | Deferred | 未確認 | CWE-120 | Allok AVI to DVD SVCD VCD Converter 4.0.1217 contains a structured exception handling (SEH) based buffer overflow vulnerability that allows local attackers to execute arbitrary cod |
| CVE-2018-25303 | Deferred | 未確認 | CWE-121 | Allok Video to DVD Burner 2.6.1217 contains a stack-based buffer overflow vulnerability in the License Name field that allows local attackers to execute arbitrary code by triggerin |
| CVE-2018-25304 | Deferred | 未確認 | CWE-120 | Free Download Manager 2.0 Build 417 contains a local buffer overflow vulnerability in the URL import functionality that allows attackers to trigger a structured exception handler ( |
| CVE-2018-25305 | Awaiting Analysis | 未確認 | CWE-120 | librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service by processing malformed SVG files. Attackers can supply craft |
| CVE-2018-25306 | Analyzed | 未確認 | CWE-120 | PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers c |
| CVE-2018-25307 | Deferred | 未確認 | CWE-120 | SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a |
| CVE-2018-25308 | Deferred | 未確認 | CWE-22 | BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated users to delete arbitrary files by manipulating unescaped POST |
| CVE-2018-25309 | Analyzed | 未確認 | CWE-79 | MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines. |
| CVE-2018-25310 | Deferred | 未確認 | CWE-352 | VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary system commands b |
| CVE-2018-25311 | Deferred | 未確認 | CWE-22 | VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclose arbitrary files by |
| CVE-2018-25312 | Deferred | 未確認 | CWE-22 | LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and upload arbitrary files by manipulating path parameters in th |
| CVE-2018-25313 | Deferred | 未確認 | CWE-120 | SysGauge 4.5.18 contains a buffer overflow vulnerability in the proxy configuration handler that allows local attackers to cause a denial of service by supplying an oversized strin |
| CVE-2018-25314 | Deferred | 未確認 | CWE-120 | Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized strin |
| CVE-2018-25315 | Deferred | 未確認 | CWE-120 | Alloksoft Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Name f |
| CVE-2018-25316 | Analyzed | 未確認 | CWE-290 | Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. |
| CVE-2018-25317 | Analyzed | 未確認 | CWE-290 | Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploit |
| CVE-2018-25318 | Analyzed | 未確認 | CWE-290 | Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie valid |
| CVE-2019-25656 | Deferred | 未確認 | CWE-787 | R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to trigger a structured exception handler (SEH) overwrite by s |
| CVE-2019-25657 | Analyzed | 未確認 | CWE-226 | AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the image conversion func |
| CVE-2019-25658 | Deferred | 未確認 | CWE-787 | a-Mac Address Change 5.4 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input to registration form field |
| CVE-2019-25659 | Deferred | 未確認 | CWE-787 | ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long project name. Atta |
| CVE-2019-25660 | Analyzed | 未確認 | CWE-787 | LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attackers can exploit the Fo |
| CVE-2019-25661 | Deferred | 未確認 | CWE-787 | Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer |
| CVE-2019-25662 | Analyzed | 未確認 | CWE-89 | ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'ref' param |
| CVE-2019-25663 | Analyzed | 未確認 | CWE-89 | SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the parentTab parameter. Att |
| CVE-2019-25664 | Analyzed | 未確認 | CWE-89 | SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView action that allows authenticated attackers to manipulate da |
| CVE-2019-25665 | Analyzed | 未確認 | CWE-787 | River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fi |
| CVE-2019-25666 | Analyzed | 未確認 | CWE-787 | SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an ov |
| CVE-2019-25667 | Analyzed | 未確認 | CWE-787 | TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to registration fields. Attackers can |
| CVE-2019-25668 | Analyzed | 未確認 | CWE-89 | News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID par |
| CVE-2019-25669 | Analyzed | 未確認 | CWE-89 | qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the search_by_extrafields[] parameter. Attackers |
| CVE-2019-25670 | Analyzed | 未確認 | CWE-787 | River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious |
| CVE-2019-25671 | Deferred | 未確認 | CWE-22 | VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 pa |
| CVE-2019-25672 | Analyzed | 未確認 | CWE-89 | PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'send' parameter. Atta |
| CVE-2019-25673 | Deferred | 未確認 | CWE-434 | UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipa |
| CVE-2019-25674 | Analyzed | 未確認 | CWE-89 | CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attacke |
| CVE-2019-25675 | Analyzed | 未確認 | CWE-89 | eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator authentication and disclose sensitive files by injecting SQL |
| CVE-2019-25676 | Analyzed | 未確認 | CWE-79, CWE-89 | Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attackers to inject malicious code by manipulating URL parameters |
| CVE-2019-25677 | Analyzed | 未確認 | CWE-379 | WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation dire |
| CVE-2019-25678 | Analyzed | 未確認 | CWE-306, CWE-89 | C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting mali |
| CVE-2019-25679 | Analyzed | 未確認 | CWE-787 | RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary |
| CVE-2019-25680 | Analyzed | 未確認 | CWE-89 | Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug |
| CVE-2019-25681 | Analyzed | 未確認 | CWE-787 | Xlight FTP Server 3.9.1 contains a structured exception handler (SEH) overwrite vulnerability that allows local attackers to crash the application and overwrite SEH pointers by sup |
| CVE-2019-25682 | Analyzed | 未確認 | CWE-352 | CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious HTML forms. Attackers can |
| CVE-2019-25683 | Analyzed | 未確認 | CWE-532 | FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path str |
| CVE-2019-25684 | Analyzed | 未確認 | CWE-89 | OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'where' parameter. A |
| CVE-2019-25685 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2019-25686 | Analyzed | 未確認 | CWE-306 | Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed command with |
| CVE-2019-25687 | Analyzed | 未確認 | CWE-22 | Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by exploiting unsa |
| CVE-2019-25688 | Analyzed | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the menu_lev1 paramete |
| CVE-2019-25689 | Analyzed | 未確認 | CWE-787 | HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can cra |
| CVE-2019-25690 | Analyzed | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mng_profile_id parameter. Attacker |
| CVE-2019-25691 | Deferred | 未確認 | CWE-787 | Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structured exception |
| CVE-2019-25692 | Analyzed | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id_to_modify' parameter. Attacker |
| CVE-2019-25693 | Analyzed | 未確認 | CWE-352, CWE-89 | ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keywords para |
| CVE-2019-25694 | Analyzed | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user2reset paramet |
| CVE-2019-25695 | Deferred | 未確認 | CWE-787 | R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences language field. Attacke |
| CVE-2019-25696 | Analyzed | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the language_tag parameter. Attackers |
| CVE-2019-25697 | Analyzed | 未確認 | CWE-89 | CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter. Attacke |
| CVE-2019-25698 | Analyzed | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_to_delete parameter. Attackers |
| CVE-2019-25699 | Analyzed | 未確認 | CWE-89 | Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information through time- |
| CVE-2019-25700 | Analyzed | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the sort_direction parameter. Attacker |
| CVE-2019-25701 | Analyzed | 未確認 | CWE-787 | Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that allows local attackers to overwrite the structured exception |
| CVE-2019-25702 | Analyzed | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_project parameter. Attackers ca |
| CVE-2019-25703 | Analyzed | 未確認 | CWE-89 | ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'bid' |
| CVE-2019-25704 | Analyzed | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter. Attack |
| CVE-2019-25705 | Analyzed | 未確認 | CWE-787 | Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in th |
| CVE-2019-25706 | Awaiting Analysis | 未確認 | CWE-538 | Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information by sending a |
| CVE-2019-25707 | Analyzed | 未確認 | CWE-89 | eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter |
| CVE-2019-25708 | Analyzed | 未確認 | CWE-352 | Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking authenticated users into sub |
| CVE-2019-25709 | Analyzed | 未確認 | CWE-552 | CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory. Attacker |
| CVE-2019-25710 | Analyzed | 未確認 | CWE-89 | Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries. Attacke |
| CVE-2019-25711 | Analyzed | 未確認 | CWE-807 | SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field du |
| CVE-2019-25712 | Analyzed | 未確認 | CWE-787 | BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers to crash the application by submitting an oversized key value |
| CVE-2019-25713 | Analyzed | 未確認 | CWE-89 | MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Charge[group_total |
| CVE-2019-25714 | Deferred | 未確認 | CWE-434 | Seeyon OA A8 contains an unauthenticated arbitrary file write vulnerability in the /seeyon/htmlofficeservlet endpoint that allows remote attackers to write arbitrary files to the w |
| CVE-2020-37216 | Awaiting Analysis | 未確認 | CWE-20 | Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet length fields al |
| CVE-2021-36438 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability exists in Sourcecodester Online Job Portal phppdo 1.0 ivia the category parameter in /jobportal/index.php. |
| CVE-2021-4473 | Analyzed | 未確認 | CWE-78 | Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary |
| CVE-2021-4477 | Awaiting Analysis | 未確認 | CWE-284 | Hirschmann HiLCOS OpenBAT and BAT450 products contain a firewall bypass vulnerability in IPv6 IPsec deployments that allows traffic from VPN connections to bypass configured firewa |
| CVE-2021-47960 | Analyzed | 未確認 | CWE-552 | A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation dir |
| CVE-2021-47961 | Analyzed | 未確認 | CWE-256 | A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure stor |
| CVE-2022-4986 | Analyzed | 未確認 | CWE-400 | Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or T |
| CVE-2022-4987 | Awaiting Analysis | 未確認 | CWE-426 | Hirschmann Industrial HiVision version 08.1.03 prior to 08.1.04 and 08.2.00 contains a vulnerability in the execution of user-configured external applications that allows a local a |
| CVE-2022-50992 | Deferred | 未確認 | CWE-22 | Weaver (Fanwei) E-cology 9.5 versions prior to 10.52 contain an arbitrary file read vulnerability in the XmlRpcServlet interface at the XML-RPC endpoint that allows unauthenticated |
| CVE-2022-50993 | Deferred | 未確認 | CWE-434 | Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attacker |
| CVE-2023-20585 | Awaiting Analysis | 未確認 | CWE-788 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP c |
| CVE-2023-3634 | Awaiting Analysis | 未確認 | CWE-1242 | In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of |
| CVE-2023-46945 | Analyzed | 未確認 | CWE-918 | QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted request |
| CVE-2023-54358 | Deferred | 未確認 | CWE-79 | WordPress adivaha Travel Plugin 2.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the is |
| CVE-2023-54359 | Deferred | 未確認 | CWE-89 | WordPress adivaha Travel Plugin 2.3 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL co |
| CVE-2023-54360 | Deferred | 未確認 | CWE-79 | Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the review_id URL parameter. Atta |
| CVE-2023-54361 | Deferred | 未確認 | CWE-79 | Joomla iProperty Real Estate 4.1.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the filter_keyword para |
| CVE-2023-54362 | Deferred | 未確認 | CWE-79 | Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword paramet |
| CVE-2023-54363 | Deferred | 未確認 | CWE-79 | Joomla Solidres 2.13.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating multiple GET parame |
| CVE-2023-54364 | Deferred | 未確認 | CWE-79 | Joomla HikaShop 4.7.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating GET parameters in th |
| CVE-2023-5872 | Awaiting Analysis | 未確認 | CWE-203 | In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint. |
| CVE-2023-7342 | Awaiting Analysis | 未確認 | CWE-269 | HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privil |
| CVE-2023-7343 | Awaiting Analysis | 未確認 | CWE-269 | Hirschmann Industrial HiVision versions 05.0.00 through 08.3.01 prior to 08.3.02 contain an arbitrary code execution vulnerability triggered when an administrator opens a malicious |
| CVE-2024-10242 | Analyzed | 未確認 | CWE-79 | The authentication endpoint fails to adequately validate user-supplied input before reflecting it back in the response. This allows an attacker to inject malicious script payloads |
| CVE-2024-13971 | Modified | 未確認 | CWE-611 | Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the a |
| CVE-2024-14032 | Analyzed | 未確認 | CWE-862 | Twitch Studio version 0.114.8 and prior contain a privilege escalation vulnerability in its privileged helper tool that allows local attackers to execute arbitrary code as root by |
| CVE-2024-14033 | Awaiting Analysis | 未確認 | CWE-400 | Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment. Attackers can crash the device during TLS handshake by exploi |
| CVE-2024-14034 | Awaiting Analysis | 未確認 | CWE-287 | Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to g |
| CVE-2024-1490 | Awaiting Analysis | 未確認 | CWE-94 | An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permit |
| CVE-2024-23104 | Analyzed | 未確認 | CWE-200 | An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all ve |
| CVE-2024-2374 | Analyzed | 未確認 | CWE-611 | The XML parsers within multiple WSO2 products accept user-supplied XML data without properly configuring to prevent the resolution of external entities. This omission allows malici |
| CVE-2024-33618 | Awaiting Analysis | 未確認 | CWE-400 | Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface. |
| CVE-2024-36057 | Awaiting Analysis | 未確認 | CWE-94 | Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution. The line "qx/unzip $filename -d $dirname/;" in uplo |
| CVE-2024-36058 | Awaiting Analysis | 未確認 | CWE-89 | The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter bib_list in /cgi-bin/koha/o |
| CVE-2024-39847 | Modified | 未確認 | CWE-611 | Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the applicat |
| CVE-2024-40489 | Analyzed | 未確認 | CWE-94 | There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through spe |
| CVE-2024-40849 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to break out of its sandbox. |
| CVE-2024-40858 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to access Contacts without user consent. |
| CVE-2024-43028 | Analyzed | 未確認 | CWE-77 | A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request. |
| CVE-2024-44219 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. A malicious application with root privileges may be able to access privat |
| CVE-2024-44250 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to execute arbitrary code out of its sandbox or with c |
| CVE-2024-44286 | Analyzed | 未確認 | CWE-288 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with physical access can input keyboard events to apps running on |
| CVE-2024-44303 | Analyzed | 未確認 | CWE-284 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system. |
| CVE-2024-46636 | Awaiting Analysis | 未確認 | CWE-89 | NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the category parameter |
| CVE-2024-4867 | Analyzed | 未確認 | CWE-79 | The WSO2 API Manager developer portal accepts user-supplied input without enforcing expected validation constraints or proper output encoding. This deficiency allows a malicious ac |
| CVE-2024-53412 | Deferred | 未確認 | CWE-77 | Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection o |
| CVE-2024-53828 | Analyzed | 未確認 | CWE-228 | Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degrad |
| CVE-2024-54011 | Analyzed | 未確認 | CWE-20 | Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The |
| CVE-2024-54012 | Analyzed | 未確認 | CWE-78 | Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicio |
| CVE-2024-54013 | Analyzed | 未確認 | CWE-306 | Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to uninte |
| CVE-2024-58342 | Analyzed | 未確認 | CWE-601 | XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does not adequately validate the redirect target, allowing attac |
| CVE-2024-58343 | Awaiting Analysis | 未確認 | CWE-425 | Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id. |
| CVE-2024-58344 | Deferred | 未確認 | CWE-79 | Carbon Forum 5.9.0 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript code through the Forum Name fiel |
| CVE-2024-7083 | Deferred | 未確認 | CWE-79 | The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Sit |
| CVE-2024-8010 | Analyzed | 未確認 | CWE-611 | The component accepts XML input through the publisher without disabling external entity resolution. This allows malicious actors to submit a crafted XML payload that exploits the u |
| CVE-2024-9168 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2025-0186 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticat |
| CVE-2025-0711 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-10354 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a |
| CVE-2025-10503 | Analyzed | 未確認 | CWE-79 | The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding. This allows for the injectio |
| CVE-2025-10539 | Analyzed | 未確認 | CWE-295, CWE-296, CWE-494 | Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between the client an |
| CVE-2025-10549 | Deferred | 未確認 | CWE-427 | EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially |
| CVE-2025-10681 | Awaiting Analysis | 未確認 | CWE-798 | Storage credentials are hardcoded in the mobile app and device firmware. These credentials do not adequately limit end user permissions and do not expire within a reasonable amount |
| CVE-2025-11249 | Rejected | 未確認 | Rejected reason: This CVE id was assigned as a duplicate of CVE-2025-66414. | |
| CVE-2025-11762 | Deferred | 未確認 | CWE-862 | The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.32 via t |
| CVE-2025-12141 | Analyzed | 未確認 | CWE-200 | In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:test” that |
| CVE-2025-1241 | Analyzed | 未確認 | CWE-326 | Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decrypt |
| CVE-2025-12624 | Analyzed | 未確認 | CWE-613 | Active access tokens are not revoked or invalidated when a user account is locked within WSO2 Identity Server. This failure to enforce revocation allows previously issued, valid to |
| CVE-2025-12664 | Analyzed | 未確認 | CWE-1284 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticat |
| CVE-2025-13030 | Analyzed | 未確認 | CWE-306 | All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and |
| CVE-2025-13044 | Analyzed | 未確認 | CWE-340 | IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2025-13364 | Deferred | 未確認 | CWE-79 | The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'put_wpgm' shortc |
| CVE-2025-13368 | Deferred | 未確認 | CWE-79 | The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Widget's 'onClick Event' setting in all versions up t |
| CVE-2025-13480 | Analyzed | 未確認 | CWE-863 | Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain administrator-only resources via improperly protected API endpoints. This include |
| CVE-2025-13535 | Deferred | 未確認 | CWE-79 | The King Addons for Elementor plugin for WordPress is vulnerable to multiple Contributor+ DOM-Based Stored Cross-Site Scripting vulnerabilities in all versions up to, and including |
| CVE-2025-13763 | Awaiting Analysis | 未確認 | CWE-457 | Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card |
| CVE-2025-13822 | Analyzed | 未確認 | CWE-639 | MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perfo |
| CVE-2025-13826 | Deferred | 未確認 | CWE-20 | Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is caused by inadequate validation of user-suppl |
| CVE-2025-13855 | Analyzed | 未確認 | CWE-89 | IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Server is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow th |
| CVE-2025-13890 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-12494. Reason: This candidate is a reservation duplicate of CVE-2025-12494. Notes: All CVE user | |
| CVE-2025-13914 | Analyzed | 未確認 | CWE-322 | A Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM attacker to impersonate managed dev |
| CVE-2025-13916 | Analyzed | 未確認 | CWE-327 | IBM Aspera Shares 1.9.9 through 1.11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information |
| CVE-2025-13926 | Awaiting Analysis | 未確認 | CWE-807 | An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T. |
| CVE-2025-14243 | Analyzed | 未確認 | CWE-209 | A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different erro |
| CVE-2025-14362 | Analyzed | 未確認 | CWE-307 | The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key |
| CVE-2025-14543 | Modified | 未確認 | CWE-611 | Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking. This issue affects Connext |
| CVE-2025-14545 | Deferred | 未確認 | The YML for Yandex Market WordPress plugin before 5.0.26 is vulnerable to Remote Code Execution via the feed generation process. | |
| CVE-2025-14551 | Analyzed | 未確認 | CWE-1258 | In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiqui |
| CVE-2025-14576 | Modified | 未確認 | CWE-20, CWE-94 | Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. |
| CVE-2025-14688 | Analyzed | 未確認 | CWE-1284 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service du |
| CVE-2025-14732 | Deferred | 未確認 | CWE-87 | The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widget parameters in all versions up to, |
| CVE-2025-14813 | Awaiting Analysis | 未確認 | CWE-327 | : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with p |
| CVE-2025-14815 | Awaiting Analysis | 未確認 | CWE-312 | Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, |
| CVE-2025-14816 | Awaiting Analysis | 未確認 | CWE-317 | Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and |
| CVE-2025-14821 | Analyzed | 未確認 | CWE-427 | A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation of trusted host infor |
| CVE-2025-14857 | Awaiting Analysis | 未確認 | CWE-123 | An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessible via the physical S |
| CVE-2025-14858 | Awaiting Analysis | 未確認 | CWE-226 | The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionality. When a host issue |
| CVE-2025-14859 | Awaiting Analysis | 未確認 | CWE-327 | The Semtech LR11xx LoRa transceivers implement secure boot functionality using digital signatures to authenticate firmware. However, the implementation uses a non-standard cryptogr |
| CVE-2025-14868 | Deferred | 未確認 | CWE-22 | The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. |
| CVE-2025-14938 | Deferred | 未確認 | CWE-434 | The Listeo Core plugin for WordPress is vulnerable to unauthenticated arbitrary media upload in all versions up to, and including, 2.0.27 via the "listeo_core_handle_dropped_media" |
| CVE-2025-14944 | Deferred | 未確認 | CWE-862 | The Backup Migration plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to a missing capability check on the 'init |
| CVE-2025-15064 | Deferred | 未確認 | CWE-79 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting |
| CVE-2025-15441 | Deferred | 未確認 | CWE-89 | The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injection attacks po |
| CVE-2025-15470 | Deferred | 未確認 | CWE-22 | The Eleganzo theme for WordPress is vulnerable to arbitrary directory deletion due to insufficient path validation in the akd_required_plugin_callback function in all versions up t |
| CVE-2025-15480 | Analyzed | 未確認 | CWE-1258 | In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Lau |
| CVE-2025-15484 | Deferred | 未確認 | CWE-287 | The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, enabling compl |
| CVE-2025-15565 | Deferred | 未確認 | CWE-862 | The Nexi XPay plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the redirect function in all versions up to, and includ |
| CVE-2025-15610 | Awaiting Analysis | 未確認 | CWE-502 | The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remo |
| CVE-2025-15611 | Analyzed | 未確認 | CWE-918 | The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing unauthenticated attackers t |
| CVE-2025-15620 | Analyzed | 未確認 | CWE-306 | HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reb |
| CVE-2025-15621 | Analyzed | 未確認 | CWE-522 | Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication |
| CVE-2025-15622 | Awaiting Analysis | 未確認 | CWE-522 | Insufficiently Protected Credentials vulnerability in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client reveals plaintext OAuth2 client secretDesktop client decodes the sec |
| CVE-2025-15623 | Analyzed | 未確認 | CWE-359, CWE-497 | Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty L |
| CVE-2025-15624 | Analyzed | 未確認 | CWE-256 | Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. In a setup where OpenID is used as the primary method of authentication to authenti |
| CVE-2025-15625 | Analyzed | 未確認 | CWE-200, CWE-89 | Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases. |
| CVE-2025-15626 | Deferred | 未確認 | CWE-639 | Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS application |
| CVE-2025-15632 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2. Impacted is an unknown function of the file ui/src/chat.ts of the component MdPreview. Such manipulation leads to cr |
| CVE-2025-15635 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smart Online Orde |
| CVE-2025-15636 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in emarket-design YouTube Showcase youtube-showcase allows Stored XSS.This issue |
| CVE-2025-15638 | Analyzed | 未確認 | Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. Thes | |
| CVE-2025-1794 | Deferred | 未確認 | CWE-79 | The AM LottiePlayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded SVG files in all versions up to, and including, 3.6.0 due to insufficient input s |
| CVE-2025-20628 | Awaiting Analysis | 未確認 | CWE-1220 | An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure access rules f |
| CVE-2025-24817 | Analyzed | 未確認 | CWE-78 | Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Symptom Collector application. |
| CVE-2025-24818 | Analyzed | 未確認 | CWE-77 | Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Log Search application. |
| CVE-2025-24819 | Analyzed | 未確認 | CWE-23 | Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application. |
| CVE-2025-30650 | Analyzed | 未確認 | CWE-306 | A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based lin |
| CVE-2025-31958 | Analyzed | 未確認 | CWE-444 | HCL BigFix Service Management is susceptible to HTTP Request Smuggling. HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inc |
| CVE-2025-31981 | Analyzed | 未確認 | CWE-319 | HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access. An attacker with access to the n |
| CVE-2025-31991 | Analyzed | 未確認 | CWE-307 | Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit. |
| CVE-2025-36074 | Analyzed | 未確認 | CWE-434 | IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious file upload by not validating file type. A privileg |
| CVE-2025-36122 | Analyzed | 未確認 | CWE-770 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service us |
| CVE-2025-36180 | Analyzed | 未確認 | CWE-923 | IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restriction |
| CVE-2025-36335 | Undergoing Analysis | 未確認 | CWE-256 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user. |
| CVE-2025-36373 | Analyzed | 未確認 | CWE-497 | IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM Da |
| CVE-2025-36375 | Analyzed | 未確認 | CWE-352 | IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM Da |
| CVE-2025-36568 | Analyzed | 未確認 | CWE-522 | Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1. |
| CVE-2025-36579 | Awaiting Analysis | 未確認 | CWE-640 | Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this v |
| CVE-2025-3756 | Deferred | 未確認 | CWE-1284 | A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC |
| CVE-2025-3922 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticat |
| CVE-2025-39666 | Analyzed | 未確認 | CWE-426, CWE-829 | Local privilege escalation in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0b3 allows a site user to escal |
| CVE-2025-40745 | Analyzed | 未確認 | CWE-295 | A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Sim |
| CVE-2025-40897 | Awaiting Analysis | 未確認 | CWE-863 | An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only pr |
| CVE-2025-40899 | Awaiting Analysis | 未確認 | CWE-79 | A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper validation of an input parameter. An authenticated user with custom |
| CVE-2025-41011 | Analyzed | 未確認 | CWE-79 | HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user inp |
| CVE-2025-41029 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST reque |
| CVE-2025-41118 | Modified | 未確認 | CWE-201, CWE-732 | Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS). If the database is configu |
| CVE-2025-43202 | Analyzed | 未確認 | CWE-787 | This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6. Processing a file may lead to memory corruption. |
| CVE-2025-43210 | Analyzed | 未確認 | CWE-125, CWE-787 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, |
| CVE-2025-43219 | Analyzed | 未確認 | CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image may corrupt process memory. |
| CVE-2025-43236 | Analyzed | 未確認 | CWE-843 | A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An attacker may be able to |
| CVE-2025-43238 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause |
| CVE-2025-43257 | Analyzed | 未確認 | CWE-59 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox. |
| CVE-2025-43264 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image may corrupt process memory. |
| CVE-2025-43883 | Analyzed | 未確認 | CWE-754 | Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper check for unusual or exceptional conditions vulnerability. A high privileged attacker with local access coul |
| CVE-2025-43935 | Analyzed | 未確認 | CWE-404 | Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper resource shutdown or release vulnerability. A high privileged attacker with local access could potentially e |
| CVE-2025-43937 | Analyzed | 未確認 | CWE-532 | Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could pot |
| CVE-2025-44560 | Deferred | 未確認 | CWE-120 | owntone-server 2ca10d9 is vulnerable to Buffer Overflow due to lack of recursive checking. |
| CVE-2025-45057 | Analyzed | 未確認 | CWE-120 | D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function. This vulnerability allows attackers to cause a Denial o |
| CVE-2025-45058 | Analyzed | 未確認 | CWE-120 | D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to cause a Denial of Serv |
| CVE-2025-45059 | Analyzed | 未確認 | CWE-120 | D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to cause a Denial of Ser |
| CVE-2025-45806 | Awaiting Analysis | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. |
| CVE-2025-46115 | Deferred | 未確認 | CWE-20, CWE-400 | An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification Request |
| CVE-2025-46605 | Analyzed | 未確認 | CWE-384 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnerability. A high privileged atta |
| CVE-2025-46606 | Analyzed | 未確認 | CWE-307 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper restriction of excessive authentication atte |
| CVE-2025-46607 | Analyzed | 未確認 | CWE-287 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privile |
| CVE-2025-46641 | Analyzed | 未確認 | CWE-287 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privile |
| CVE-2025-47374 | Analyzed | 未確認 | CWE-416 | Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling. |
| CVE-2025-47389 | Analyzed | 未確認 | CWE-120 | Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation. |
| CVE-2025-47390 | Analyzed | 未確認 | CWE-126 | Memory corruption while preprocessing IOCTL request in JPEG driver. |
| CVE-2025-47391 | Analyzed | 未確認 | CWE-121 | Memory corruption while processing a frame request from user. |
| CVE-2025-47392 | Analyzed | 未確認 | CWE-190 | Memory corruption when decoding corrupted satellite data files with invalid signature offsets. |
| CVE-2025-47400 | Analyzed | 未確認 | CWE-126 | Cryptographic issue while copying data to a destination buffer without validating its size. |
| CVE-2025-48431 | Modified | 未確認 | CWE-762, CWE-763 | Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade t |
| CVE-2025-48651 | Modified | 未確認 | CWE-20 | In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information |
| CVE-2025-50228 | Analyzed | 未確認 | CWE-918 | Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules. |
| CVE-2025-50229 | Analyzed | 未確認 | CWE-89 | Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module. |
| CVE-2025-50328 | Awaiting Analysis | 未確認 | CWE-290 | A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections. When an archive is downloaded from |
| CVE-2025-50644 | Modified | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of user input in the qj.asp endpoint. |
| CVE-2025-50645 | Modified | 未確認 | CWE-120 | A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated. By sen |
| CVE-2025-50646 | Modified | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qos_type_asp.asp endpoint. |
| CVE-2025-50647 | Modified | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint. |
| CVE-2025-50648 | Modified | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate input validation in the /tggl.asp endpoint. |
| CVE-2025-50649 | Modified | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper input validation in the vlan_name parameter in the /shut_set.asp endpoint. |
| CVE-2025-50650 | Modified | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routes_static parameter in the /router.asp endpoint. |
| CVE-2025-50652 | Modified | 未確認 | CWE-120 | An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm_usb.asp endpoint. |
| CVE-2025-50653 | Modified | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem parameters in the /time_group.asp endpoint. |
| CVE-2025-50654 | Modified | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in the /thd_member.asp endpoint. |
| CVE-2025-50655 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /thd_group.asp endpoint. |
| CVE-2025-50657 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the pid parameter in the /trace.asp endpoint. |
| CVE-2025-50659 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the custom_error parameter in the /user.asp endpoint. |
| CVE-2025-50660 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /url_member.asp endpoint. |
| CVE-2025-50661 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /url_rule.asp endpoint. An attacker can exploit this vuln |
| CVE-2025-50662 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /url_group.asp endpoint. |
| CVE-2025-50663 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usb_paswd.asp endpoint. |
| CVE-2025-50664 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /user_group.asp endpoint. The attacker can exploit this vulnerabil |
| CVE-2025-50665 | Modified | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /web_keyword.asp endpoint. An attacker can exploit this vuln |
| CVE-2025-50666 | Modified | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /web_post.asp endpoint. An attacker can exploit this vuln |
| CVE-2025-50667 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the iface parameter in the /wan_line_detection.asp endpoint. |
| CVE-2025-50668 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /web_list_opt.asp endpoint. |
| CVE-2025-50669 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 and DI-8003G 19.12.10A1 due to improper handling of the wan_ping parameter in the /wan_ping.asp endpoint. |
| CVE-2025-50670 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_bwr.asp endpoint. An attacker can exploit this vulnerability |
| CVE-2025-50671 | Analyzed | 未確認 | CWE-121 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_ref.asp endpoint. An attacker can exploit this vulnerability |
| CVE-2025-50672 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /yyxz_dlink.asp endpoint. |
| CVE-2025-50673 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the http_lanport parameter in the /webgl.asp endpoint. |
| CVE-2025-51414 | Deferred | 未確認 | CWE-94 | In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page. |
| CVE-2025-51846 | Analyzed | 未確認 | CWE-770 | CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed i |
| CVE-2025-51847 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2025-51849 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2025-51850 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2025-52221 | Analyzed | 未確認 | CWE-120, CWE-787 | Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters. |
| CVE-2025-52222 | Analyzed | 未確認 | CWE-120 | D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, an |
| CVE-2025-52641 | Analyzed | 未確認 | CWE-209 | HCL AION is affected by a vulnerability where certain system behaviours may allow exploration of internal filesystem structures. Exposure of such information may provide insights i |
| CVE-2025-52908 | Analyzed | 未確認 | CWE-120 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handl |
| CVE-2025-52909 | Analyzed | 未確認 | CWE-120 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handl |
| CVE-2025-53444 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro userpro allows Cross Site Request Forgery.This issue affects Userpro: from n/a through < 5.1.11. |
| CVE-2025-53847 | Modified | 未確認 | CWE-306 | A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 throu |
| CVE-2025-54324 | Analyzed | 未確認 | CWE-400 | An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W9 |
| CVE-2025-54328 | Analyzed | 未確認 | CWE-121 | An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W9 |
| CVE-2025-54502 | Awaiting Analysis | 未確認 | CWE-648, CWE-668 | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation |
| CVE-2025-54505 | Awaiting Analysis | 未確認 | A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of co | |
| CVE-2025-54510 | Awaiting Analysis | 未確認 | CWE-414 | A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-ba |
| CVE-2025-54550 | Analyzed | 未確認 | CWE-94 | The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow UI user who ha |
| CVE-2025-54601 | Analyzed | 未確認 | CWE-362 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper |
| CVE-2025-54602 | Analyzed | 未確認 | CWE-362 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper |
| CVE-2025-56015 | Analyzed | 未確認 | CWE-284 | In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint. |
| CVE-2025-56534 | Analyzed | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payloa |
| CVE-2025-56535 | Analyzed | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the zone attribute |
| CVE-2025-56536 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the user in |
| CVE-2025-56537 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted paylo |
| CVE-2025-56568 | Deferred | 未確認 | CWE-617 | Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before v2.7.5 allows remote attacke |
| CVE-2025-57175 | Analyzed | 未確認 | CWE-259 | Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password. |
| CVE-2025-57735 | Analyzed | 未確認 | CWE-613 | When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we impl |
| CVE-2025-57834 | Analyzed | 未確認 | CWE-20 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, 9110, W9 |
| CVE-2025-57835 | Analyzed | 未確認 | CWE-20 | An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W9 |
| CVE-2025-57847 | Modified | 未確認 | CWE-276 | A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permiss |
| CVE-2025-57851 | Analyzed | 未確認 | CWE-276 | A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images. This issue stems from the /etc/passwd file being created with group-writable p |
| CVE-2025-57853 | Analyzed | 未確認 | CWE-276 | A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd file being created with group-writable permissions during buil |
| CVE-2025-57854 | Analyzed | 未確認 | CWE-276 | A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images. This issue stems from the /etc/passwd file being created with group-writable perm |
| CVE-2025-5804 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Case Themes Case Theme User case-theme-user allows PHP Loca |
| CVE-2025-58136 | Analyzed | 未確認 | CWE-670 | A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12. Users ar |
| CVE-2025-58349 | Analyzed | 未確認 | CWE-400 | An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W92 |
| CVE-2025-58713 | Analyzed | 未確認 | CWE-276 | A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the /etc/passwd file being created with group-writable p |
| CVE-2025-58913 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CactusThemes VideoPro videopro allows PHP Local File Inclus |
| CVE-2025-58920 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zootemplate Cerato cerato allows Reflected XSS.This issue affects Cerato: from |
| CVE-2025-58922 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue affects Avada: from n/a before 7.13.2. |
| CVE-2025-59308 | Deferred | 未確認 | CWE-284 | In Mahara before 24.04.10 and 25 before 25.04.1, an institution administrator or institution support administrator on a multi-tenanted site can masquerade as an institution member |
| CVE-2025-59440 | Analyzed | 未確認 | CWE-400 | An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W |
| CVE-2025-59709 | Modified | 未確認 | CWE-22 | An issue was discovered in Biztalk360 through 11.5. because of mishandling of user-provided input in a path to be read by the server, a Super User attacker is able to read files on |
| CVE-2025-59710 | Modified | 未確認 | CWE-434 | An issue was discovered in Biztalk360 before 11.5. Because of incorrect access control, any user is able to request the loading a DLL file. During the loading, a method is called. |
| CVE-2025-59711 | Analyzed | 未確認 | CWE-22 | An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of |
| CVE-2025-59809 | Analyzed | 未確認 | CWE-918 | A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.2, |
| CVE-2025-59969 | Analyzed | 未確認 | CWE-120 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper Networks Junos OS Evo |
| CVE-2025-6016 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticate |
| CVE-2025-6024 | Analyzed | 未確認 | CWE-79 | The authentication endpoint fails to encode user-supplied input before rendering it in the web page, allowing for script injection. An attacker can leverage this by injecting malic |
| CVE-2025-60887 | Deferred | 未確認 | CWE-502 | An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions may lead to leaking of stack/heap addresses which may be used |
| CVE-2025-60889 | Modified | 未確認 | CWE-502 | Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to execute arbitrary code or other unspecified impacts. |
| CVE-2025-61166 | Analyzed | 未確認 | CWE-601 | An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL. |
| CVE-2025-61260 | Awaiting Analysis | 未確認 | CWE-94 | A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is |
| CVE-2025-61624 | Analyzed | 掲載 | CWE-22 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, Forti |
| CVE-2025-61848 | Modified | 未確認 | CWE-89 | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4 |
| CVE-2025-61872 | Deferred | 未確認 | CWE-79 | Mahara before 25.04.2 and 24.04.11 are vulnerable to displaying results that can trigger XSS via a malicious search query string. This occurs in the 'search site' feature when usin |
| CVE-2025-61886 | Analyzed | 未確認 | CWE-79 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSand |
| CVE-2025-62104 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Navneil Naicker ACF Galerie 4 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Galerie 4: from |
| CVE-2025-62110 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Sh |
| CVE-2025-62188 | Analyzed | 未確認 | CWE-200 | An Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Apache DolphinScheduler. This vulnerability may allow unauthorized actors to access sensitive |
| CVE-2025-62233 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module. This issue affects Apache DolphinScheduler: Version >= 3.2.0 and < 3.3.1. Attackers who c |
| CVE-2025-62373 | Analyzed | 未確認 | CWE-502 | Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Versions 0.0.41 through 0.0.93 have a vulnerability in `LivekitFrameSe |
| CVE-2025-62718 | Modified | 未確認 | CWE-1289, CWE-441, CWE-918 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. R |
| CVE-2025-62818 | Analyzed | 未確認 | CWE-787 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W93 |
| CVE-2025-63029 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows SQL Injection.Thi |
| CVE-2025-63238 | Analyzed | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in application/ |
| CVE-2025-63743 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficie |
| CVE-2025-63939 | Deferred | 未確認 | CWE-89 | Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitem_name POST parameter. |
| CVE-2025-64340 | Analyzed | 未確認 | CWE-78 | FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters (e.g., &) can cause command injection on Windo |
| CVE-2025-65104 | Analyzed | 未確認 | CWE-200 | Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating wi |
| CVE-2025-65114 | Analyzed | 未確認 | CWE-444 | Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.12, from 10.0.0 through 10.1.1. |
| CVE-2025-65115 | Analyzed | 未確認 | CWE-73 | Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT D |
| CVE-2025-65116 | Analyzed | 未確認 | CWE-120, CWE-763 | Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop |
| CVE-2025-65132 | Deferred | 未確認 | CWE-79 | alandsilva26 hotel-management-php 1.0 is vulnerable to Cross Site Scripting (XSS) in /public/admin/edit_room.php which allows an attacker to inject and execute arbitrary JavaScript |
| CVE-2025-65133 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580. An unauthenticated or authenticated remote attacker can supply a crafted HTTP r |
| CVE-2025-65134 | Deferred | 未確認 | CWE-79 | In manikandan580 School-management-system 1.0, a reflected cross-site scripting (XSS) vulnerability exists in /studentms/admin/contact-us.php via the email POST parameter. |
| CVE-2025-65135 | Deferred | 未確認 | CWE-89 | In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin/between-date-reprtsdetails.php through the fromdate POST pa |
| CVE-2025-65136 | Deferred | 未確認 | CWE-79 | In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST parameter. |
| CVE-2025-66236 | Analyzed | 未確認 | CWE-532 | Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details and security m |
| CVE-2025-66286 | Awaiting Analysis | 未確認 | CWE-639 | An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications expect to use the W |
| CVE-2025-66335 | Analyzed | 未確認 | CWE-89 | Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements |
| CVE-2025-66442 | Analyzed | 未確認 | CWE-385 | In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto throu |
| CVE-2025-66447 | Analyzed | 未確認 | CWE-601 | Chamilo LMS is a learning management system. From 1.11.0 to 2.0-beta.1, anyone can trigger a malicious redirect through the use of the redirect parameter to /login. This vulnerabil |
| CVE-2025-66483 | Analyzed | 未確認 | CWE-613 | IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system. |
| CVE-2025-66484 | Analyzed | 未確認 | CWE-79 | IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering |
| CVE-2025-66485 | Analyzed | 未確認 | CWE-644 | IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct |
| CVE-2025-66486 | Analyzed | 未確認 | CWE-80 | IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web |
| CVE-2025-66487 | Analyzed | 未確認 | CWE-770 | IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of se |
| CVE-2025-66769 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet. |
| CVE-2025-66954 | Awaiting Analysis | 未確認 | CWE-639 | A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege ro |
| CVE-2025-67223 | Deferred | 未確認 | CWE-377, CWE-532 | The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable names in a publicly accessible directory, wh |
| CVE-2025-67259 | Deferred | 未確認 | CWE-284, CWE-285 | A Broken Access Control vulnerability exists in ClassroomIO v0.1.13 where an authenticated low-privileged "student" user can access unauthorized course-level information by modifyi |
| CVE-2025-67805 | Modified | 未確認 | CWE-200, CWE-306 | A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such a |
| CVE-2025-67806 | Modified | 未確認 | CWE-203, CWE-204 | The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000. O |
| CVE-2025-67807 | Analyzed | 未確認 | CWE-204 | The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000. O |
| CVE-2025-67841 | Awaiting Analysis | 未確認 | CWE-407 | Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue. |
| CVE-2025-68152 | Analyzed | 未確認 | CWE-863 | Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From ve |
| CVE-2025-68153 | Analyzed | 未確認 | CWE-863 | Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From ve |
| CVE-2025-68649 | Analyzed | 未確認 | CWE-22 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, Fo |
| CVE-2025-69428 | Awaiting Analysis | 未確認 | CWE-552 | An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories. |
| CVE-2025-69515 | Awaiting Analysis | 未確認 | CWE-941 | An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting i |
| CVE-2025-69624 | Modified | 未確認 | CWE-476 | Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert(). When app.alert() is called with more than |
| CVE-2025-69627 | Modified | 未確認 | CWE-416 | Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc(). During execution, an internal XID ob |
| CVE-2025-69689 | Awaiting Analysis | 未確認 | CWE-269 | The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-supplied paths with elevated permissions, |
| CVE-2025-69893 | Deferred | 未確認 | CWE-385 | A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe |
| CVE-2025-69993 | Modified | 未確認 | CWE-79 | Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method. This method renders user-supplied input as raw HTML without sani |
| CVE-2025-70023 | Awaiting Analysis | 未確認 | CWE-843 | An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6. |
| CVE-2025-7024 | Analyzed | 未確認 | CWE-276 | Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTE |
| CVE-2025-70364 | Awaiting Analysis | 未確認 | CWE-94 | An issue was discovered in Kiamo before 8.4 allowing authenticated administrative attackers to execute arbitrary PHP code on the server. NOTE: the Supplier's position is that this |
| CVE-2025-70365 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability exists in Kiamo before 8.4 due to improper output encoding of user-supplied input in administrative interfaces. An authenticated a |
| CVE-2025-70420 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2025-70795 | Awaiting Analysis | 未確認 | CWE-269 | STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through |
| CVE-2025-70797 | Analyzed | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and box[url] parameters. |
| CVE-2025-70810 | Analyzed | 未確認 | CWE-352 | Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the login function and the authentication mechanism |
| CVE-2025-70811 | Analyzed | 未確認 | CWE-352 | Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality. |
| CVE-2025-70844 | Analyzed | 未確認 | CWE-94 | yaffa v2.0.0 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript into the "Add Account Group" function on the account-group page, allowing exec |
| CVE-2025-70936 | Deferred | 未確認 | CWE-79 | Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. Improper handling of user-controlled input in the _folder parameter allows |
| CVE-2025-70994 | Awaiting Analysis | 未確認 | CWE-1390 | Yadea T5 Electric Bicycles (models manufactured in/after 2024) have a weak authentication mechanism in their keyless entry system. The system utilizes the EV1527 fixed-code RF prot |
| CVE-2025-71058 | Awaiting Analysis | 未確認 | CWE-94 | Dual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that the response originates from a legitimate configured upstream DNS server. The impl |
| CVE-2025-71278 | Analyzed | 未確認 | CWE-863 | XenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes. This affects any customer using OAuth2 clients on any version of XenForo 2.3 prior to 2.3.5, |
| CVE-2025-71279 | Analyzed | 未確認 | CWE-287 | XenForo before 2.3.7 contains a security issue affecting Passkeys that have been added to user accounts. An attacker may be able to compromise the security of Passkey-based authent |
| CVE-2025-71280 | Analyzed | 未確認 | CWE-200 | XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems. On systems where multiple users share a browser or machine, cached account page |
| CVE-2025-71281 | Analyzed | 未確認 | CWE-94 | XenForo before 2.3.7 does not properly restrict methods callable from within templates. A loose prefix match was used instead of a stricter first-word match for methods accessible |
| CVE-2025-71282 | Analyzed | 未確認 | CWE-209 | XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by open_basedir restrictions. This allows an attacker to obtain information about the server's |
| CVE-2025-71284 | Analyzed | 未確認 | CWE-78 | Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST parame |
| CVE-2025-7389 | Awaiting Analysis | 未確認 | CWE-552 | A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of th |
| CVE-2025-8095 | Awaiting Analysis | 未確認 | CWE-257 | The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform. It has been identified as cryptographically weak and unsuitable for stored encodings and en |
| CVE-2025-9484 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have |
| CVE-2025-9957 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could ha |
| CVE-2026-0049 | Analyzed | 未確認 | CWE-400 | In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no addit |
| CVE-2026-0204 | Analyzed | 未確認 | CWE-1390, CWE-306 | A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions. |
| CVE-2026-0205 | Analyzed | 未確認 | CWE-35 | A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. |
| CVE-2026-0206 | Analyzed | 未確認 | CWE-121 | A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall. |
| CVE-2026-0207 | Awaiting Analysis | 未確認 | CWE-532 | A vulnerability exists in FlashBlade whereby sensitive information may be logged under specific conditions. |
| CVE-2026-0209 | Awaiting Analysis | 未確認 | CWE-783 | Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured. |
| CVE-2026-0232 | Analyzed | 未確認 | CWE-15 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged b |
| CVE-2026-0233 | Analyzed | 未確認 | CWE-295 | A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to exe |
| CVE-2026-0234 | Undergoing Analysis | 未確認 | CWE-347 | An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenti |
| CVE-2026-0390 | Analyzed | 未確認 | CWE-807 | Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-0512 | Awaiting Analysis | 未確認 | CWE-79 | Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL |
| CVE-2026-0522 | Analyzed | 未確認 | CWE-610 | A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulati |
| CVE-2026-0539 | Deferred | 未確認 | CWE-276 | Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitr |
| CVE-2026-0545 | Modified | 未確認 | CWE-306 | In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled. This vulnerabili |
| CVE-2026-0552 | Deferred | 未確認 | CWE-79 | The Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsc_display_product' shortcode in all versions up to, and including, 5 |
| CVE-2026-0626 | Deferred | 未確認 | CWE-79 | The WPFunnels – Easy Funnel Builder To Optimize Buyer Journeys And Get More Leads & Sales plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpf_optin_form' |
| CVE-2026-0634 | Awaiting Analysis | 未確認 | CWE-88 | Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection. |
| CVE-2026-0636 | Awaiting Analysis | 未確認 | CWE-90 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This |
| CVE-2026-0664 | Deferred | 未確認 | CWE-79 | The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button_text' parameter in all versions up to, and including, 1.7.1049 due |
| CVE-2026-0686 | Deferred | 未確認 | CWE-918 | The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse_authorpage' function via the 'Receiv |
| CVE-2026-0688 | Deferred | 未確認 | CWE-918 | The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 via the 'Tools::read' function. This makes it possible |
| CVE-2026-0711 | Analyzed | 未確認 | CWE-78 | A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjac |
| CVE-2026-0718 | Deferred | 未確認 | CWE-862 | The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check |
| CVE-2026-0737 | Deferred | 未確認 | CWE-79 | The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.4.7. This is due to insuffi |
| CVE-2026-0738 | Deferred | 未確認 | CWE-79 | The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the su_carousel shortcode in all versions up to, and including, |
| CVE-2026-0740 | Deferred | 未確認 | CWE-434 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'NF_FU_AJAX_Controllers_Uploads::handle_uploa |
| CVE-2026-0811 | Deferred | 未確認 | CWE-352 | The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9. This is due to missing or incorrect non |
| CVE-2026-0814 | Deferred | 未確認 | CWE-862 | The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vsz_cf7_export_to_excel' function in all |
| CVE-2026-0827 | Analyzed | 未確認 | CWE-59 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or |
| CVE-2026-0868 | Deferred | 未確認 | CWE-79 | The EMC – Easily Embed Calendly Scheduling Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's calendly shortcode in all versions up to, and |
| CVE-2026-0894 | Deferred | 未確認 | CWE-79 | The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's content_block shortcode in all versions up to, and includ |
| CVE-2026-0930 | Analyzed | 未確認 | CWE-125, CWE-126 | Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a |
| CVE-2026-0932 | Analyzed | 未確認 | CWE-918 | Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated attacke |
| CVE-2026-0971 | Analyzed | 未確認 | CWE-613 | An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the |
| CVE-2026-0972 | Modified | 未確認 | CWE-74 | HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0. Note: The title, details, and description of this CVE were corrected post-publis |
| CVE-2026-1078 | Awaiting Analysis | 未確認 | CWE-284 | An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work with Google Ch |
| CVE-2026-1079 | Awaiting Analysis | 未確認 | CWE-284 | A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension. A bad acto |
| CVE-2026-1089 | Analyzed | 未確認 | CWE-74 | User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure. |
| CVE-2026-1092 | Analyzed | 未確認 | CWE-1284 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthentica |
| CVE-2026-1101 | Analyzed | 未確認 | CWE-1284 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated us |
| CVE-2026-1114 | Analyzed | 未確認 | CWE-284 | In parisneo/lollms version 2.1.0, the application's session management is vulnerable to improper access control due to the use of a weak secret key for signing JSON Web Tokens (JWT |
| CVE-2026-1115 | Analyzed | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability was identified in the social feature of parisneo/lollms, affecting the latest version prior to 2.2.0. The vulnerability exists in |
| CVE-2026-1116 | Analyzed | 未確認 | CWE-79 | A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms prior to version 2.2.0. The vulnerability ari |
| CVE-2026-1163 | Deferred | 未確認 | CWE-613 | An insufficient session expiration vulnerability exists in the latest version of parisneo/lollms. The application fails to invalidate active sessions after a password reset, allowi |
| CVE-2026-1233 | Deferred | 未確認 | CWE-798 | The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to t |
| CVE-2026-1243 | Analyzed | 未確認 | CWE-79 | IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web |
| CVE-2026-1263 | Deferred | 未確認 | CWE-79 | The Webling plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.9.0 due to insufficient input sanitization, insufficient outpu |
| CVE-2026-1272 | Analyzed | 未確認 | CWE-613 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulnerability in the user access control panel. |
| CVE-2026-1274 | Analyzed | 未確認 | CWE-840 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerability in the access management control panel. |
| CVE-2026-1314 | Deferred | 未確認 | CWE-862 | The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on t |
| CVE-2026-1342 | Analyzed | 未確認 | CWE-829 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S |
| CVE-2026-1343 | Analyzed | 未確認 | CWE-918 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S |
| CVE-2026-1345 | Analyzed | 未確認 | CWE-78 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S |
| CVE-2026-1346 | Analyzed | 未確認 | CWE-250 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S |
| CVE-2026-1352 | Analyzed | 未確認 | CWE-1284 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service du |
| CVE-2026-1354 | Awaiting Analysis | 未確認 | CWE-322 | Zero Motorcycles firmware versions 44 and prior enable an attacker to forcibly pair a device with the motorcycle via Bluetooth. Once paired, an attacker can utilize over-the-air |
| CVE-2026-1379 | Deferred | 未確認 | CWE-79 | The HTTP Headers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.19.2 due to insufficient input sanitiz |
| CVE-2026-1395 | Deferred | 未確認 | CWE-79 | The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's block_id attribute in all versions up to, and including, 1.1.3. This is |
| CVE-2026-1396 | Deferred | 未確認 | CWE-79 | The Magic Conversation For Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'magic-conversation' shortcode in all versions up to, and includi |
| CVE-2026-1460 | Analyzed | 未確認 | CWE-78 | A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(A |
| CVE-2026-1462 | Modified | 未確認 | CWE-502 | A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` m |
| CVE-2026-1491 | Analyzed | 未確認 | CWE-444 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S |
| CVE-2026-1493 | Analyzed | 未確認 | CWE-79 | LEX Baza Dokumentów is vulnerable to DOM-based XSS in "em" cookie parameter. The application unsafely processes the parameter on the client side, allowing an attacker to execute ar |
| CVE-2026-1502 | Awaiting Analysis | 未確認 | CWE-93 | CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. |
| CVE-2026-1509 | Deferred | 未確認 | CWE-94 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Arbitrary WordPress Action Execution in all versions up to, and including, 3.15.1. This is due to the plugin's `out |
| CVE-2026-1516 | Analyzed | 未確認 | CWE-94 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have a |
| CVE-2026-1540 | Deferred | 未確認 | CWE-94 | The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution b |
| CVE-2026-1541 | Deferred | 未確認 | CWE-639 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.15.1. This is due to the plugin's `fusion_ge |
| CVE-2026-1555 | Deferred | 未確認 | CWE-434 | The WebStack theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the io_img_upload() function in all versions up to, and including, 1 |
| CVE-2026-1559 | Deferred | 未確認 | CWE-79 | The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkin_place_id' parameter in all versions up to, and including, 1.3.6 due to insufficient i |
| CVE-2026-1564 | Analyzed | 未確認 | CWE-80 | Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role. |
| CVE-2026-1572 | Deferred | 未確認 | CWE-79 | The Livemesh Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data and Stored Cross-Site Scripting via plugin settings in all versions up to, |
| CVE-2026-1577 | Modified | 未確認 | CWE-1284, CWE-20 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service du |
| CVE-2026-1584 | Modified | 未確認 | CWE-476 | A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK |
| CVE-2026-1607 | Deferred | 未確認 | CWE-79 | The Surbma | Booking.com Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `surbma-bookingcom` shortcode in all versions up to, and inclu |
| CVE-2026-1620 | Deferred | 未確認 | CWE-98 | The Livemesh Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.0. This is due to insufficient sanitization of |
| CVE-2026-1636 | Analyzed | 未確認 | CWE-427 | A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local authenticated user to execute code with elevated p |
| CVE-2026-1660 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could ha |
| CVE-2026-1672 | Deferred | 未確認 | CWE-352 | The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and |
| CVE-2026-1673 | Deferred | 未確認 | CWE-352 | The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and |
| CVE-2026-1711 | Analyzed | 未確認 | CWE-79 | Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a develo |
| CVE-2026-1726 | Modified | 未確認 | CWE-269 | IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege escalation, allowing unauthorized users to perform administrative operations after being d |
| CVE-2026-1752 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated us |
| CVE-2026-1782 | Deferred | 未確認 | CWE-20 | The MetForm Pro plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 3.9.7 This is due to the payment integrations (Stripe/PayPal) |
| CVE-2026-1789 | Awaiting Analysis | 未確認 | CWE-807 | A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain pr |
| CVE-2026-1830 | Deferred | 未確認 | CWE-862 | The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1. This is due to insufficient authorization checks on RE |
| CVE-2026-1838 | Deferred | 未確認 | CWE-79 | The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode_id' parameter in all versions up to, and including, 1.1.6 due to insufficient inp |
| CVE-2026-1839 | Analyzed | 未確認 | CWE-502 | A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. The `_load_rng_state()` method in `src/transforme |
| CVE-2026-1845 | Deferred | 未確認 | CWE-79 | The Real Estate Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.9 due to insufficient input sanit |
| CVE-2026-1852 | Deferred | 未確認 | CWE-352 | The Product Pricing Table by WooBeWoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorr |
| CVE-2026-1858 | Analyzed | 未確認 | CWE-20 | wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for |
| CVE-2026-1865 | Deferred | 未確認 | CWE-89 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vul |
| CVE-2026-1879 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in Harvard University IQSS Dataverse up to 6.8. This affects an unknown function of the file /ThemeAndWidgets.xhtml of the component Theme Customizatio |
| CVE-2026-1880 | Awaiting Analysis | 未確認 | CWE-367 | An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execu |
| CVE-2026-1900 | Analyzed | 未確認 | CWE-306 | The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates. |
| CVE-2026-1913 | Deferred | 未確認 | CWE-79 | The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's login_link shortcode in all versions up to, and including, 2.6.4 due |
| CVE-2026-1923 | Deferred | 未確認 | CWE-79 | The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.3.4.2 due |
| CVE-2026-1924 | Deferred | 未確認 | CWE-352 | The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4. This is due to missing nonce verification on t |
| CVE-2026-1930 | Deferred | 未確認 | CWE-862 | The Emailchef plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the page_options_ajax_disconnect() function in all versio |
| CVE-2026-1949 | Analyzed | 未確認 | CWE-131 | Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service. |
| CVE-2026-1950 | Analyzed | 未確認 | CWE-121 | Delta Electronics AS320T has No checking of the length of the buffer with the file name vulnerability. |
| CVE-2026-1951 | Analyzed | 未確認 | CWE-121 | Delta Electronics AS320T has no checking of the length of the buffer with the directory name vulnerability. |
| CVE-2026-1952 | Analyzed | 未確認 | CWE-912 | Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability. |
| CVE-2026-20041 | Undergoing Analysis | 未確認 | CWE-918 | A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack t |
| CVE-2026-20042 | Analyzed | 未確認 | CWE-295 | A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files |
| CVE-2026-20059 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of |
| CVE-2026-20060 | Analyzed | 未確認 | CWE-601 | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This |
| CVE-2026-20061 | Analyzed | 未確認 | CWE-89 | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack against an affected |
| CVE-2026-20078 | Analyzed | 未確認 | CWE-23 | Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system. To exploit these vulnerab |
| CVE-2026-20081 | Analyzed | 未確認 | CWE-23 | Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system. To exploit these vulnerab |
| CVE-2026-20085 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface |
| CVE-2026-20087 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again |
| CVE-2026-20088 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again |
| CVE-2026-20089 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again |
| CVE-2026-20090 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again |
| CVE-2026-20093 | Awaiting Analysis | 未確認 | CWE-20 | A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and ga |
| CVE-2026-20094 | Analyzed | 未確認 | CWE-77 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on a |
| CVE-2026-20095 | Analyzed | 未確認 | CWE-77 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on |
| CVE-2026-20096 | Analyzed | 未確認 | CWE-77 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on |
| CVE-2026-20097 | Analyzed | 未確認 | CWE-20, CWE-787 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root u |
| CVE-2026-20132 | Analyzed | 未確認 | CWE-79 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative write |
| CVE-2026-20136 | Analyzed | 未確認 | CWE-116 | A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with adminis |
| CVE-2026-20147 | Analyzed | 未確認 | CWE-77 | A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. |
| CVE-2026-20148 | Analyzed | 未確認 | CWE-22 | A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system and read arbitrary |
| CVE-2026-20151 | Analyzed | 未確認 | CWE-201 | A vulnerability in the web interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges on an affected system |
| CVE-2026-20152 | Awaiting Analysis | 未確認 | CWE-305 | A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authenticat |
| CVE-2026-20155 | Analyzed | 未確認 | CWE-862 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to acce |
| CVE-2026-20160 | Analyzed | 未確認 | CWE-668 | A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating syst |
| CVE-2026-20161 | Awaiting Analysis | 未確認 | CWE-59 | A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system |
| CVE-2026-20170 | Analyzed | 未確認 | CWE-80 | A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cis |
| CVE-2026-20174 | Analyzed | 未確認 | CWE-22 | A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an affected system. Th |
| CVE-2026-20180 | Analyzed | 未確認 | CWE-22 | A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affecte |
| CVE-2026-20184 | Awaiting Analysis | 未確認 | CWE-295 | A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user w |
| CVE-2026-20186 | Analyzed | 未確認 | CWE-77 | A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affecte |
| CVE-2026-20202 | Analyzed | 未確認 | CWE-176 | In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20, 10.0.2503.13, |
| CVE-2026-20203 | Analyzed | 未確認 | CWE-284 | In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.19, 10.0.2503.13, |
| CVE-2026-20204 | Analyzed | 未確認 | CWE-377 | In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.5, 10.2.2510.9, 10.1.2507.19, 10.0.2503.13, |
| CVE-2026-20205 | Awaiting Analysis | 未確認 | CWE-532 | In Splunk MCP Server app versions below 1.0.3 , a user who holds a role with access to the Splunk `_internal` index or possesses the high-privilege capability `mcp_tool_admin` coul |
| CVE-2026-2028 | Deferred | 未確認 | CWE-639 | The MaxiBlocks Builder plugin for WordPress is vulnerable to arbitrary media file deletion due to insufficient file ownership validation on the 'maxi_remove_custom_image_size' AJAX |
| CVE-2026-20431 | Analyzed | 未確認 | CWE-770 | In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attack |
| CVE-2026-20432 | Analyzed | 未確認 | CWE-787 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station co |
| CVE-2026-20433 | Analyzed | 未確認 | CWE-787 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station co |
| CVE-2026-20446 | Analyzed | 未確認 | CWE-190, CWE-787 | In sec boot, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service, if an attacker has physical access to the device, with |
| CVE-2026-20709 | Awaiting Analysis | 未確認 | CWE-1394 | Use of Default Cryptographic Key in the hardware for some Intel(R) Pentium(R) Processor Silver Series, Intel(R) Celeron(R) Processor J Series, Intel(R) Celeron(R) Processor N Serie |
| CVE-2026-20766 | Awaiting Analysis | 未確認 | CWE-122 | An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras. |
| CVE-2026-20806 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information locally. |
| CVE-2026-20884 | Analyzed | 未確認 | CWE-190 | An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. |
| CVE-2026-20889 | Modified | 未確認 | CWE-120, CWE-190 | A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overf |
| CVE-2026-20911 | Modified | 未確認 | CWE-120, CWE-131 | A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead t |
| CVE-2026-20928 | Analyzed | 未確認 | CWE-212 | Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physi |
| CVE-2026-20930 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges local |
| CVE-2026-20945 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-21003 | Analyzed | 未確認 | Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions. | |
| CVE-2026-21006 | Analyzed | 未確認 | Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents. | |
| CVE-2026-21007 | Analyzed | 未確認 | CWE-754 | Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard. |
| CVE-2026-21008 | Analyzed | 未確認 | Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information. | |
| CVE-2026-21009 | Analyzed | 未確認 | CWE-754 | Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning. |
| CVE-2026-21010 | Analyzed | 未確認 | Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions. | |
| CVE-2026-21011 | Analyzed | 未確認 | CWE-732 | Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock. |
| CVE-2026-21012 | Analyzed | 未確認 | External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege. | |
| CVE-2026-21013 | Analyzed | 未確認 | CWE-276 | Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information. |
| CVE-2026-21014 | Analyzed | 未確認 | Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability. | |
| CVE-2026-21023 | Analyzed | 未確認 | Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific ap | |
| CVE-2026-2104 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated |
| CVE-2026-21331 | Analyzed | 未確認 | CWE-79 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL re |
| CVE-2026-21367 | Analyzed | 未確認 | CWE-126 | Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans. |
| CVE-2026-21371 | Analyzed | 未確認 | CWE-126 | Memory Corruption when retrieving output buffer with insufficient size validation. |
| CVE-2026-21372 | Analyzed | 未確認 | CWE-122 | Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations. |
| CVE-2026-21373 | Analyzed | 未確認 | CWE-126 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. |
| CVE-2026-21374 | Analyzed | 未確認 | CWE-126 | Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation. |
| CVE-2026-21375 | Analyzed | 未確認 | CWE-126 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. |
| CVE-2026-21376 | Analyzed | 未確認 | CWE-126 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. |
| CVE-2026-21378 | Analyzed | 未確認 | CWE-126 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. |
| CVE-2026-21380 | Analyzed | 未確認 | CWE-416 | Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory. |
| CVE-2026-21381 | Analyzed | 未確認 | CWE-126 | Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection. |
| CVE-2026-21382 | Analyzed | 未確認 | CWE-120 | Memory Corruption when handling power management requests with improperly sized input/output buffers. |
| CVE-2026-21388 | Analyzed | 未確認 | CWE-770 | Mattermost Plugins versions <=2.3.1 fail to limit the request body size on the {{/lifecycle}} webhook endpoint which allows an authenticated attacker to cause memory exhaustion and |
| CVE-2026-21413 | Modified | 未確認 | CWE-129, CWE-787 | A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can le |
| CVE-2026-21515 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-21571 | Analyzed | 未確認 | CWE-78 | This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center. T |
| CVE-2026-21629 | Analyzed | 未確認 | CWE-284 | The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers. |
| CVE-2026-21630 | Analyzed | 未確認 | CWE-89 | Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint. |
| CVE-2026-21631 | Analyzed | 未確認 | CWE-79 | Lack of output escaping leads to a XSS vector in the multilingual associations component. |
| CVE-2026-21632 | Analyzed | 未確認 | CWE-79 | Lack of output escaping for article titles leads to XSS vectors in various locations. |
| CVE-2026-21709 | Awaiting Analysis | 未確認 | CWE-77 | A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement. |
| CVE-2026-21719 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command. |
| CVE-2026-21726 | Analyzed | 未確認 | CWE-22 | The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API end |
| CVE-2026-21727 | Modified | 未確認 | CWE-732 | A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecting legacy correlation records. Due to a backward compatibility condition allowing org_id = |
| CVE-2026-21728 | Modified | 未確認 | CWE-400, CWE-770 | Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy. Mitigation can be done b |
| CVE-2026-21733 | Analyzed | 未確認 | CWE-20, CWE-280 | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files. This is cause |
| CVE-2026-21741 | Analyzed | 未確認 | CWE-601 | An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 |
| CVE-2026-21742 | Analyzed | 未確認 | CWE-319 | A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, |
| CVE-2026-21765 | Analyzed | 未確認 | CWE-276, CWE-732 | HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly |
| CVE-2026-21767 | Analyzed | 未確認 | CWE-306 | HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the application without proper authentication. |
| CVE-2026-21904 | Analyzed | 未確認 | CWE-79 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in th |
| CVE-2026-21915 | Analyzed | 未確認 | CWE-183, CWE-78 | A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows a local, high privileged attacker |
| CVE-2026-21916 | Analyzed | 未確認 | CWE-61 | A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileg |
| CVE-2026-21919 | Analyzed | 未確認 | CWE-821 | An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to c |
| CVE-2026-21997 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science Applications (component: Common Core). Supported versions that are affected are 9.2.1-9.2. |
| CVE-2026-21998 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi |
| CVE-2026-21999 | Analyzed | 未確認 | CWE-200 | Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.1. Difficult to exploit vulnerability allows unauthent |
| CVE-2026-22001 | Analyzed | 未確認 | CWE-200 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9. |
| CVE-2026-22002 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi |
| CVE-2026-22003 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u4 |
| CVE-2026-22004 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploita |
| CVE-2026-22005 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi |
| CVE-2026-22006 | Analyzed | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Employee Snapshot). The supported version that is affected is 9.2. Easily |
| CVE-2026-22007 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affecte |
| CVE-2026-22008 | Analyzed | 未確認 | CWE-250 | Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticate |
| CVE-2026-22009 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi |
| CVE-2026-22010 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions t |
| CVE-2026-22011 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit |
| CVE-2026-22013 | Analyzed | 未確認 | CWE-693 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected ar |
| CVE-2026-22014 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Workflow and Business Events). Supported versions that are affected are 12.2.7-12.2.15. |
| CVE-2026-22015 | Analyzed | 未確認 | CWE-200 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9. |
| CVE-2026-22016 | Modified | 未確認 | CWE-200, CWE-502, CWE-611 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected ar |
| CVE-2026-22017 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi |
| CVE-2026-22018 | Analyzed | 未確認 | CWE-770 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affect |
| CVE-2026-22019 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search). The supported version that is affected is 9.2. Easily ex |
| CVE-2026-22021 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected ar |
| CVE-2026-22051 | Analyzed | 未確認 | CWE-200 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an au |
| CVE-2026-22070 | Analyzed | 未確認 | CWE-22, CWE-23 | ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal. |
| CVE-2026-22077 | Deferred | 未確認 | CWE-346 | OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sen |
| CVE-2026-22154 | Analyzed | 未確認 | CWE-79 | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7 |
| CVE-2026-22155 | Analyzed | 未確認 | CWE-319 | A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, |
| CVE-2026-22336 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Bookin |
| CVE-2026-22337 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4. |
| CVE-2026-22560 | Analyzed | 未確認 | CWE-601 | An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by manipulating parameters within a SAML endpoint. |
| CVE-2026-22562 | Deferred | 未確認 | CWE-22 | A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used fo |
| CVE-2026-22563 | Deferred | 未確認 | CWE-20 | A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play Po |
| CVE-2026-22564 | Deferred | 未確認 | CWE-284 | An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system. Affected P |
| CVE-2026-22565 | Deferred | 未確認 | CWE-20 | An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding. Affected Products: UniFi P |
| CVE-2026-22566 | Deferred | 未確認 | CWE-284 | An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials. Affected Products: UniFi Play |
| CVE-2026-22573 | Analyzed | 未確認 | CWE-22 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5 all versions, For |
| CVE-2026-22574 | Analyzed | 未確認 | CWE-257, CWE-522 | A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, Forti |
| CVE-2026-22576 | Analyzed | 未確認 | CWE-257, CWE-522 | A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, Forti |
| CVE-2026-22615 | Analyzed | 未確認 | CWE-20 | Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the local system to i |
| CVE-2026-22616 | Analyzed | 未確認 | CWE-307 | Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This secur |
| CVE-2026-22617 | Analyzed | 未確認 | CWE-614 | Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑th |
| CVE-2026-22618 | Analyzed | 未確認 | CWE-358 | A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users |
| CVE-2026-22619 | Analyzed | 未確認 | CWE-427 | Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the so |
| CVE-2026-2262 | Deferred | 未確認 | CWE-200 | The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.21 via the `/wp-json/wp/v2/eablocks/ea_appoint |
| CVE-2026-2263 | Deferred | 未確認 | CWE-862 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'hust |
| CVE-2026-2265 | Awaiting Analysis | 未確認 | An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user i | |
| CVE-2026-22661 | Modified | 未確認 | CWE-22 | prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attackers to write arbitrary files to the client system by crafting |
| CVE-2026-22662 | Analyzed | 未確認 | CWE-918 | prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform server-side f |
| CVE-2026-22663 | Analyzed | 未確認 | CWE-862 | prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate checks across API endpoints and page metadata generation that a |
| CVE-2026-22664 | Modified | 未確認 | CWE-918 | prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media status polling feature that allows authenticated users to perform arbi |
| CVE-2026-22665 | Modified | 未確認 | CWE-178 | prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and re |
| CVE-2026-22666 | Analyzed | 未確認 | CWE-94, CWE-95 | Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution vulnerability in the dol_eval_standard() function that fails to apply forbidden string chec |
| CVE-2026-22675 | Modified | 未確認 | CWE-79 | OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript by submit |
| CVE-2026-22676 | Awaiting Analysis | 未確認 | CWE-732 | Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive fi |
| CVE-2026-22679 | Modified | 未確認 | CWE-306 | Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpo |
| CVE-2026-22680 | Analyzed | 未確認 | CWE-862 | OpenViking versions prior to 0.3.3 contain a missing authorization vulnerability in the task polling endpoints that allows unauthorized attackers to enumerate or retrieve backgroun |
| CVE-2026-22682 | Deferred | 未確認 | CWE-863 | OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in built-in file tools due to inconsistent parameter handling in permission enforcement, allow |
| CVE-2026-22683 | Analyzed | 未確認 | CWE-862 | Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation and modificati |
| CVE-2026-22692 | Analyzed | 未確認 | CWE-284, CWE-693 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.13 and versions 4.0.0 through 4.1.4 contain a sandbox bypass vulnerability in the optional Twig |
| CVE-2026-22711 | Awaiting Analysis | 未確認 | CWE-87 | Improper neutralization of alternate XSS syntax vulnerability in The Wikimedia Foundation Mediawiki - Wikilove Extension allows Cross-Site Scripting (XSS).The issue has been remedi |
| CVE-2026-22734 | Awaiting Analysis | 未確認 | CWE-290 | Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems. This vulnerability exists when SAML 2.0 |
| CVE-2026-22740 | Analyzed | 未確認 | CWE-400 | A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the |
| CVE-2026-22741 | Analyzed | 未確認 | CWE-524 | Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are |
| CVE-2026-22745 | Analyzed | 未確認 | CWE-400 | Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the fol |
| CVE-2026-22746 | Analyzed | 未確認 | CWE-208 | Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnabled, #isAccountNonExpired, or #isAccountNonLocked user attributes, to enable, expire, or l |
| CVE-2026-22747 | Modified | 未確認 | CWE-295, CWE-297 | Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong |
| CVE-2026-22748 | Analyzed | 未確認 | CWE-20 | Vulnerability in Spring Spring Security. When an application configures JWT decoding with NimbusJwtDecoder or NimbusReactiveJwtDecoder, it must configure an OAuth2TokenValidator<J |
| CVE-2026-22750 | Analyzed | 未確認 | CWE-15 | When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configuration was silently ignored and the default SSL configuration |
| CVE-2026-22751 | Analyzed | 未確認 | CWE-367 | Vulnerability in Spring Spring Security. Applications that explicitly configure One-Time Token login with JdbcOneTimeTokenService are vulnerable to a Time-of-check Time-of-use (TOC |
| CVE-2026-22753 | Analyzed | 未確認 | CWE-693 | Vulnerability in Spring Spring Security. If an application is using securityMatchers(String) and a PathPatternRequestMatcher.Builder bean to prepend a servlet path, matching reques |
| CVE-2026-22754 | Modified | 未確認 | CWE-284, CWE-551 | Vulnerability in Spring Spring Security. If an application uses <sec:intercept-url servlet-path="/servlet-path" pattern="/endpoint/**"/> to define the servlet path for computing a |
| CVE-2026-22761 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vuln |
| CVE-2026-22767 | Analyzed | 未確認 | CWE-61 | Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulne |
| CVE-2026-22768 | Analyzed | 未確認 | CWE-732 | Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exp |
| CVE-2026-22815 | Analyzed | 未確認 | CWE-400, CWE-770 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, insufficient restrictions in header/trailer handling could cause uncapped m |
| CVE-2026-22828 | Analyzed | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote unauthenticated attacker t |
| CVE-2026-2305 | Deferred | 未確認 | CWE-79 | The AddFunc Head & Footer Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `aFhfc_head_code`, `aFhfc_body_code`, and `aFhfc_footer_code` post meta val |
| CVE-2026-2311 | Analyzed | 未確認 | CWE-284 | IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check. A malicious actor could cause user-co |
| CVE-2026-2332 | Modified | 未確認 | CWE-444 | In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.i |
| CVE-2026-2336 | Analyzed | 未確認 | CWE-331 | A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own webstax_auth session |
| CVE-2026-23401 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO |
| CVE-2026-23402 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Adjust KVM's sanity check against | |
| CVE-2026-23403 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets `*ns = NULL` on every call, leaking the namespace |
| CVE-2026-23404 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion wh | |
| CVE-2026-23405 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix: limit the number of levels of policy namespaces Currently the number of policy namespaces is no | |
| CVE-2026-23406 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in match_char() macro usage The match_char() macro evaluates its character param |
| CVE-2026-23407 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verify_dfa() The verify_dfa() function only checks DEFA |
| CVE-2026-23408 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix double free of ns_name in aa_replace_profiles() if ns_name is NULL after 1071 error = aa |
| CVE-2026-23409 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix differential encoding verification Differential encoding allows loops to be created if it is abu |
| CVE-2026-23410 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: |
| CVE-2026-23411 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to i_private da |
| CVE-2026-23412 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: defer hook memory release until rcu readers are done Yiming Qian reports UaF when concurrent p |
| CVE-2026-23413 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: clsact: Fix use-after-free in init/destroy rollback asymmetry Fix a use-after-free in the clsact qdisc upon in |
| CVE-2026-23414 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: tls: Purge async_hold in tls_decrypt_async_wait() The async_hold queue pins encrypted input skbs while the AEA |
| CVE-2026-23415 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_opt() executi |
| CVE-2026-23416 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Previously we stored the end of the current VMA in curr_end, and t | |
| CVE-2026-23417 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix constant blinding for PROBE_MEM32 stores BPF_ST | BPF_PROBE_MEM32 immediate stores are not handled by | |
| CVE-2026-23418 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Fix leak on xa_store failure Free the newly allocated entry when xa_store() fails to avoid a me |
| CVE-2026-23419 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net/rds: Fix circular locking dependency in rds_tcp_tune syzbot reported a circular locking dependency in rds_ |
| CVE-2026-23420 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Fix a locking bug Make sure that wl->mutex is locked before it is unlocked. This has been detect |
| CVE-2026-23421 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/configfs: Free ctx_restore_mid_bb in release ctx_restore_mid_bb memory is allocated in wa_bb_store(), b | |
| CVE-2026-23422 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Commit 31a7a0bbeb00 ("dpaa2-switch: |
| CVE-2026-23423 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: btrfs: free pages on error in btrfs_uring_read_extent() In this function the 'pages' object is never freed in |
| CVE-2026-23424 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Validate command buffer payload count The count field in the command header is used to determin | |
| CVE-2026-23425 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix ID register initialization for non-protected pKVM guests In protected mode, the hypervisor mai | |
| CVE-2026-23426 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() The logicvc_drm_config_parse() funct | |
| CVE-2026-23427 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in durable v2 replay of active file handles parse_durable_handle_context() unconditi |
| CVE-2026-23428 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of share_conf in compound request smb2_get_ksmbd_tcon() reuses work->tcon in compoun |
| CVE-2026-23429 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Fix crash in iommu_sva_unbind_device() domain->mm->iommu_mm can be freed by iommu_domain_free(): | |
| CVE-2026-23430 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's dirty tracker here cau |
| CVE-2026-23431 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() In aml_spisg_probe(), ctlr is allocated by spi_alloc_ |
| CVE-2026-23432 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mshv: Fix use-after-free in mshv_map_user_memory error path In the error path of mshv_map_user_memory(), calli |
| CVE-2026-23433 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Fix null pointer dereference when restoring bandwidth counters When an MSC supporting memory bandwid |
| CVE-2026-23434 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: serialize lock/unlock against other NAND operations nand_lock() and nand_unlock() call into chip |
| CVE-2026-23435 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: perf/x86: Move event pointer setup earlier in x86_pmu_enable() A production AMD EPYC system crashed with a NUL |
| CVE-2026-23436 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect from late creation of hierarchy We look up a netdev during prep of Netlink ops (pre- call | |
| CVE-2026-23437 | Modified | 未確認 | CWE-662 | In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect late read accesses to the hierarchy We look up a netdev during prep of Netlink ops (pre- |
| CVE-2026-23438 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: guard flow control update with global_tx_fc in buffer switching mvpp2_bm_switch_buffers() uncondit |
| CVE-2026-23439 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n When CONFIG_IPV6 is disabled, the udp |
| CVE-2026-23440 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN (E |
| CVE-2026-23441 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent concurrent access to IPSec ASO context The query or updating IPSec offload object is throug |
| CVE-2026-23442 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks for idev in SRv6 paths __in6_dev_get() can return NULL when the device has no IPv6 confi |
| CVE-2026-23443 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix previous acpi_processor_errata_piix4() fix After commi f132e089fe89 ("ACPI: processor: Fi |
| CVE-2026-23444 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure ieee80211_tx_prepare_skb() has three err |
| CVE-2026-23445 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: igc: fix page fault in XDP TX timestamps handling If an XDP application that requested TX timestamping is shut |
| CVE-2026-23446 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: Do not perform PM inside suspend callback syzbot reports "task hung in rpm_resume" This is | |
| CVE-2026-23447 | Modified | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check The same bounds-check bug fixed for NDP16 in th |
| CVE-2026-23448 | Modified | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check cdc_ncm_rx_verify_ndp16() validates that the ND |
| CVE-2026-23449 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: net/sched: teql: Fix double-free in teql_master_xmit Whenever a TEQL devices has a lockless Qdisc as root, qdi |
| CVE-2026-23450 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Syzkaller reported a panic in smc_tcp_syn_rec |
| CVE-2026-23451 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse() can loop if a stack of two |
| CVE-2026-23452 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: PM: runtime: Fix a race condition related to device removal The following code in pm_runtime_work() may derefe |
| CVE-2026-23453 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode Page recycling was removed from the |
| CVE-2026-23454 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown A potential race condition |
| CVE-2026-23455 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path |
| CVE-2026-23456 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case In decode_int(), the CONS case calls get_ |
| CVE-2026-23457 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() sip_help_tcp() parses the SIP |
| CVE-2026-23458 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() ctnetlink_dump_exp_ct() stores a conntrack |
| CVE-2026-23459 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS Blamed commits forgot that vxlan/geneve use | |
| CVE-2026-23460 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect syzkaller reported a bug [1], and th |
| CVE-2026-23461 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user After commit ab4eedb790ca ("Bluetooth: L2CAP: Fi |
| CVE-2026-23462 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: Fix possible UAF This fixes the following trace caused by not dropping l2cap_conn reference w |
| CVE-2026-23463 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: fix race condition in qman_destroy_fq When QMAN_FQ_FLAG_DYNAMIC_FQID is set, there's a race c |
| CVE-2026-23464 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() In mpfs_sys_controller_probe(), if of_get |
| CVE-2026-23465 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: log new dentries when logging parent dir of a conflicting inode If we log the parent directory of a con | |
| CVE-2026-23466 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Open-code GGTT MMIO access protection GGTT MMIO access is currently protected by hotplug (drm_dev_ente |
| CVE-2026-23467 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Fix an unlikely NULL pointer deference at probe intel_dmc_update_dc6_allowed_count() oopses when |
| CVE-2026-23468 | Modified | 未確認 | CWE-770 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of |
| CVE-2026-23469 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Synchronize interrupts before suspending the GPU The runtime PM suspend callback doesn't know |
| CVE-2026-23470 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix deadlock in soft reset sequence The soft reset sequence is currently executed from the th |
| CVE-2026-23471 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-23472 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN uart_write_room() and uart_write() behave inco |
| CVE-2026-23473 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-23474 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIG_FORTIFY_SOURCE=y and a recent compiler, c | |
| CVE-2026-23475 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller per-cpu statistics is not allocated until after the controller h |
| CVE-2026-23500 | Analyzed | 未確認 | CWE-78 | Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions prior to 23.0.0 , the ODT to PDF conversion process in od |
| CVE-2026-23653 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information o |
| CVE-2026-23657 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-23666 | Modified | 未確認 | CWE-366, CWE-755 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network. |
| CVE-2026-23670 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-23696 | Awaiting Analysis | 未確認 | CWE-89 | Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows authenticated attackers to i |
| CVE-2026-23708 | Analyzed | 未確認 | CWE-287, CWE-862 | A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-p |
| CVE-2026-23751 | Awaiting Analysis | 未確認 | CWE-306, CWE-441 | Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port 2424 via the Ascent Cap |
| CVE-2026-23752 | Analyzed | 未確認 | CWE-79 | GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the template group creation and editing functionality that allows authenticated administrators to |
| CVE-2026-23753 | Analyzed | 未確認 | CWE-79 | GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the language management functionality where the charset POST parameter is passed directly to SWIF |
| CVE-2026-23756 | Analyzed | 未確認 | CWE-79 | GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject POST parameter is not sanitized in Controller_Step.In |
| CVE-2026-23757 | Analyzed | 未確認 | CWE-79 | GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title parameter is passed directly to SWIFT_Report::Create() withou |
| CVE-2026-23758 | Analyzed | 未確認 | CWE-79 | GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the ticket subject field that allows authenticated staff members to inject malicious JavaScript b |
| CVE-2026-2377 | Modified | 未確認 | CWE-918 | A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback U |
| CVE-2026-23772 | Awaiting Analysis | 未確認 | CWE-269 | Dell Storage Manager - Replay Manager for Microsoft Servers, version(s) 8.0, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access |
| CVE-2026-23773 | Awaiting Analysis | 未確認 | CWE-918 | Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentia |
| CVE-2026-23774 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 r |
| CVE-2026-23775 | Analyzed | 未確認 | CWE-532 | Dell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feature Release versions 8.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10 con |
| CVE-2026-23776 | Analyzed | 未確認 | CWE-295 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r |
| CVE-2026-23777 | Analyzed | 未確認 | CWE-200 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r |
| CVE-2026-23778 | Analyzed | 未確認 | CWE-77 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r |
| CVE-2026-23779 | Analyzed | 未確認 | CWE-77 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r |
| CVE-2026-23780 | Analyzed | 未確認 | CWE-89 | An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A SQL injection vulnerability in the MFT API's debug interface allows an authenticated attacker to inject malici |
| CVE-2026-23781 | Analyzed | 未確認 | CWE-798 | An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A set of default debug user credentials is hardcoded in cleartext within the application package. If left unchan |
| CVE-2026-23782 | Analyzed | 未確認 | CWE-284 | An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. An API management endpoint allows unauthenticated users to obtain both an API identifier and its corresponding s |
| CVE-2026-23818 | Analyzed | 未確認 | CWE-601 | A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vul |
| CVE-2026-23853 | Analyzed | 未確認 | CWE-1391 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r |
| CVE-2026-23869 | Awaiting Analysis | 未確認 | CWE-400, CWE-502, CWE-770 | A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webp |
| CVE-2026-23891 | Analyzed | 未確認 | CWE-79 | Decidim is a participatory democracy framework. In versions below 0.30.5 and 0.31.0.rc1 through 0.31.0, a stored code execution vulnerability in the user name field allows a low-pr |
| CVE-2026-23898 | Analyzed | 未確認 | CWE-73 | Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism. |
| CVE-2026-23899 | Analyzed | 未確認 | CWE-284 | An improper access check allows unauthorized access to webservice endpoints. |
| CVE-2026-23900 | Analyzed | 未確認 | CWE-79 | Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered. |
| CVE-2026-23902 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Apache DolphinScheduler allows authenticated users with system login permissions to use tenants that are not defined on the platform during |
| CVE-2026-2394 | Modified | 未確認 | CWE-125, CWE-126 | Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 be |
| CVE-2026-2396 | Deferred | 未確認 | CWE-79 | The List View Google Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the event description in all versions up to, and including, 7.4.3 due to insuffi |
| CVE-2026-2399 | Analyzed | 未確認 | CWE-22 | CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files overwritten with text data when a Web Adm |
| CVE-2026-2400 | Analyzed | 未確認 | CWE-93 | CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reset when a Web Admin user alters the P |
| CVE-2026-2401 | Analyzed | 未確認 | CWE-532 | CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when a Web Admin user executes a malicious fi |
| CVE-2026-2402 | Analyzed | 未確認 | CWE-307 | CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an arbitrary nu |
| CVE-2026-2403 | Analyzed | 未確認 | CWE-1284 | CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting log integrity when a Web Admin user alters |
| CVE-2026-24032 | Awaiting Analysis | 未確認 | CWE-347 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of |
| CVE-2026-2404 | Analyzed | 未確認 | CWE-116 | CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request payloa |
| CVE-2026-2405 | Analyzed | 未確認 | CWE-400 | CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the s |
| CVE-2026-24069 | Deferred | 未確認 | CWE-863 | Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application. Kiuwan Cloud was affected, an |
| CVE-2026-24096 | Analyzed | 未確認 | CWE-280 | Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged |
| CVE-2026-24146 | Analyzed | 未確認 | CWE-789 | NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a large number of outputs could cause a server crash. A successful exploit of this v |
| CVE-2026-24147 | Analyzed | 未確認 | CWE-22 | NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker may cause an information disclosure by uploading a model configuration. A successful expl |
| CVE-2026-24156 | Analyzed | 未確認 | CWE-502 | NVIDIA DALI contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to arbitrary code exec |
| CVE-2026-24173 | Analyzed | 未確認 | CWE-190 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vuln |
| CVE-2026-24174 | Analyzed | 未確認 | CWE-681 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vuln |
| CVE-2026-24175 | Analyzed | 未確認 | CWE-248 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header to the server. A successful exploit of th |
| CVE-2026-24176 | Awaiting Analysis | 未確認 | CWE-863 | NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references. A successful exploit of this vulnerabilit |
| CVE-2026-24177 | Awaiting Analysis | 未確認 | CWE-306 | NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization. A successful exploit of this vulnerability might lead to informati |
| CVE-2026-24178 | Analyzed | 未確認 | CWE-639 | NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-con |
| CVE-2026-24186 | Analyzed | 未確認 | CWE-502 | NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit |
| CVE-2026-24189 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request. A successful ex |
| CVE-2026-24204 | Analyzed | 未確認 | CWE-20 | NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to inform |
| CVE-2026-24222 | Analyzed | 未確認 | CWE-497 | NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected |
| CVE-2026-24231 | Analyzed | 未確認 | CWE-918 | NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted |
| CVE-2026-24303 | Modified | 未確認 | CWE-284 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-24318 | Awaiting Analysis | 未確認 | CWE-539 | Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session tokens and reuse |
| CVE-2026-2434 | Deferred | 未確認 | CWE-79 | The Pz-LinkCard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blogcard' shortcode attributes in all versions up to, and including, 2.5.8.1 due to insuf |
| CVE-2026-2437 | Deferred | 未確認 | CWE-79 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wte_trip_tax' shortcode in a |
| CVE-2026-24450 | Analyzed | 未確認 | CWE-190 | An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer ov |
| CVE-2026-24467 | Analyzed | 未確認 | CWE-640 | OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Starting in version 1.0.0 and prior to versio |
| CVE-2026-24468 | Deferred | 未確認 | CWE-204 | OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Starting in version 1.11.0 and prior to versi |
| CVE-2026-2449 | Awaiting Analysis | 未確認 | CWE-88 | Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileg |
| CVE-2026-2450 | Awaiting Analysis | 未確認 | CWE-520 | .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affec |
| CVE-2026-24504 | Analyzed | 未確認 | CWE-20 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improp |
| CVE-2026-24505 | Analyzed | 未確認 | CWE-20 | Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit |
| CVE-2026-24506 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS com |
| CVE-2026-24511 | Analyzed | 未確認 | CWE-209 | Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.0, contains a generation of error message containing sensitive information vulnerabili |
| CVE-2026-24660 | Modified | 未確認 | CWE-120, CWE-190 | A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overf |
| CVE-2026-24661 | Analyzed | 未確認 | CWE-770 | Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated attacker to cause memory exhaustion and |
| CVE-2026-24749 | Deferred | 未確認 | CWE-863 | The Silverstripe Assets Module is a required component of Silverstripe Framework. In versions prior to 2.4.5 and 3.0.0-rc1 through 3.1.2, images rendered in templates or otherwise |
| CVE-2026-2475 | Analyzed | 未確認 | CWE-601 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S |
| CVE-2026-2481 | Deferred | 未確認 | CWE-79 | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings[js]' parameter in versions up to |
| CVE-2026-24880 | Analyzed | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via invalid chunk extension. This issue affects Apache Tomcat: from |
| CVE-2026-24893 | Analyzed | 未確認 | CWE-20, CWE-78 | openITCOCKPIT is an open source monitoring tool built for different monitoring engines. openITCOCKPIT Community Edition prior to version 5.5.2 contains a command injection vulnerab |
| CVE-2026-24906 | Analyzed | 未確認 | CWE-79 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting (XSS) vulnerability in the Backend Editor S |
| CVE-2026-24907 | Analyzed | 未確認 | CWE-79 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.14 and 4.1.10 contain a stored cross-site scripting (XSS) vulnerability in the Event Log mail p |
| CVE-2026-24913 | Analyzed | 未確認 | CWE-89 | SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user |
| CVE-2026-25043 | Analyzed | 未確認 | CWE-770 | Budibase is an open-source low-code platform. Prior to version 3.23.25, a business logic vulnerability exists in Budibase’s password reset functionality due to the absence of rate |
| CVE-2026-25044 | Analyzed | 未確認 | CWE-78 | Budibase is an open-source low-code platform. Prior to version 3.33.4, the bash automation step executes user-provided commands using execSync without proper sanitization or valida |
| CVE-2026-2505 | Deferred | 未確認 | CWE-79 | The Categories Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.1, via the 'z_taxonomy_image' shortcode. This is due t |
| CVE-2026-25058 | Analyzed | 未確認 | CWE-306, CWE-862 | Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Vexa transcription-collector service exposes an internal endpo |
| CVE-2026-2509 | Deferred | 未確認 | CWE-79 | The Page Builder: Pagelayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget's Custom Attributes field in all versions up to, and including, |
| CVE-2026-25118 | Analyzed | 未確認 | CWE-598 | immich is a high performance self-hosted photo and video management solution. Prior to version 2.6.0, the Immich application is vulnerable to credential disclosure when a user auth |
| CVE-2026-25125 | Analyzed | 未確認 | CWE-200, CWE-94 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.14 and 4.1.10 contain a server-side information disclosure vulnerability in the INI settings pa |
| CVE-2026-25133 | Analyzed | 未確認 | CWE-79 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.14 and 4.1.10 contain a stored cross-site scripting (XSS) vulnerability in the SVG sanitization |
| CVE-2026-25184 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Applocker Filter Driver (applockerfltr.sys) allows an authorized attacker to elevate |
| CVE-2026-2519 | Deferred | 未確認 | CWE-472 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the 'tips' parameter in all versions up to, and including |
| CVE-2026-25197 | Analyzed | 未確認 | CWE-639 | A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call. |
| CVE-2026-25203 | Awaiting Analysis | 未確認 | CWE-276 | Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1. |
| CVE-2026-25204 | Analyzed | 未確認 | CWE-502, CWE-843 | Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. This issue affects escarogt prior |
| CVE-2026-25205 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d33 |
| CVE-2026-25206 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. |
| CVE-2026-25207 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. |
| CVE-2026-25208 | Analyzed | 未確認 | CWE-190 | Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. |
| CVE-2026-25209 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. |
| CVE-2026-25212 | Analyzed | 未確認 | CWE-250 | An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add dat |
| CVE-2026-25219 | Analyzed | 未確認 | CWE-200 | The `access_key` and `connection_string` connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values |
| CVE-2026-25524 | Analyzed | 未確認 | CWE-502 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backwar |
| CVE-2026-25525 | Analyzed | 未確認 | CWE-184, CWE-22 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backwar |
| CVE-2026-25542 | Modified | 未確認 | CWE-185 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 0.43.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, |
| CVE-2026-25601 | Analyzed | 未確認 | CWE-798 | A vulnerability was identified in MEPIS RM, an industrial software product developed by Metronik. The application contained a hardcoded cryptographic key within the Mx.Web.Componen |
| CVE-2026-25654 | Awaiting Analysis | 未確認 | CWE-639 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do not properly validate user authorization when processing password reset requests. T |
| CVE-2026-25660 | Analyzed | 未確認 | CWE-290, CWE-863 | CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the URL ends with Authenti |
| CVE-2026-25691 | Analyzed | 未確認 | CWE-22 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, Forti |
| CVE-2026-25720 | Analyzed | 未確認 | CWE-613 | A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended pe |
| CVE-2026-25726 | Analyzed | 未確認 | CWE-338 | Cloudreve is a self-hosted file management and sharing system. Prior to version 4.13.0, the application uses the weak pseudo-random number generator math/rand seeded with time.Now( |
| CVE-2026-25742 | Analyzed | 未確認 | CWE-862 | Zulip is an open-source team collaboration tool. Prior to version 11.6, Zulip is an open-source team collaboration tool. From version 1.4.0 to before version 11.6, even after spect |
| CVE-2026-25773 | Analyzed | 未確認 | CWE-89 | ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to sanitize category IDs before incorporating them into dynamic SQL statements when reordering categories. An attacker |
| CVE-2026-25775 | Deferred | 未確認 | CWE-306 | A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization. The service |
| CVE-2026-25776 | Analyzed | 未確認 | CWE-94 | Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script. |
| CVE-2026-2582 | Deferred | 未確認 | CWE-94 | The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5. |
| CVE-2026-25833 | Analyzed | 未確認 | CWE-121 | Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function |
| CVE-2026-25834 | Analyzed | 未確認 | CWE-295, CWE-327 | Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade. |
| CVE-2026-25835 | Analyzed | 未確認 | CWE-335 | Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG). |
| CVE-2026-25852 | Deferred | 未確認 | CWE-427 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212. |
| CVE-2026-25854 | Analyzed | 未確認 | CWE-601 | Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve. This issue affects Apache Tomcat: from 11.0.0-M1 t |
| CVE-2026-25874 | Analyzed | 未確認 | CWE-502 | LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticate |
| CVE-2026-25883 | Analyzed | 未確認 | CWE-918 | Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Vexa webhook feature allows authenticated users to configure a |
| CVE-2026-25908 | Analyzed | 未確認 | CWE-250 | Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain an Execution with Unnecessary Privileges vulnerability in the AWCC. A low privileged attacker with local a |
| CVE-2026-25917 | Modified | 未確認 | CWE-502 | Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors ar |
| CVE-2026-25932 | Analyzed | 未確認 | CWE-116, CWE-79 | GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a supplier fields. This vulnerabi |
| CVE-2026-2600 | Deferred | 未確認 | CWE-79 | The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ekit_tab_title' parameter in the Simple Tab widget in all |
| CVE-2026-26015 | Modified | 未確認 | CWE-77 | DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing both the official DocsGPT website or any local and public deplo |
| CVE-2026-26026 | Analyzed | 未確認 | CWE-1336, CWE-94 | GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. This vulnerability is fixed in 11.0.6. |
| CVE-2026-26027 | Analyzed | 未確認 | CWE-116, CWE-306, CWE-79 | GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated user can store an XSS payload through the inventory endpoint. This vulnera |
| CVE-2026-26058 | Analyzed | 未確認 | CWE-22 | Zulip is an open-source team collaboration tool. From version 1.4.0 to before version 11.6, ./manage.py import reads arbitrary files from the server filesystem via path traversal i |
| CVE-2026-26067 | Deferred | 未確認 | CWE-184, CWE-863 | October is a Content Management System (CMS) and web platform. Prior to 3.7.14 and 4.1.10, a server-side information disclosure vulnerability was identified in the handling of CSS |
| CVE-2026-26135 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-26143 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-26149 | Analyzed | 未確認 | CWE-150 | Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-26150 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-26151 | Modified | 未確認 | CWE-357 | Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-26152 | Analyzed | 未確認 | CWE-922 | Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26153 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26154 | Analyzed | 未確認 | CWE-20 | Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-26155 | Analyzed | 未確認 | CWE-126 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
| CVE-2026-26156 | Analyzed | 未確認 | CWE-122, CWE-125, CWE-20 | Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally. |
| CVE-2026-26159 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26160 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26161 | Analyzed | 未確認 | CWE-20, CWE-822 | Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26162 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26163 | Analyzed | 未確認 | CWE-415 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26165 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26166 | Analyzed | 未確認 | CWE-415 | Double free in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26167 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-26168 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevat |
| CVE-2026-26169 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally. |
| CVE-2026-26170 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26171 | Modified | 未確認 | CWE-400, CWE-611, CWE-776 | Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-26172 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-26173 | Analyzed | 未確認 | CWE-362, CWE-416, CWE-476 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevat |
| CVE-2026-26174 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authorized attacker to elevate privileges loc |
| CVE-2026-26175 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack. |
| CVE-2026-26176 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26177 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26178 | Analyzed | 未確認 | CWE-190, CWE-681 | Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-26179 | Analyzed | 未確認 | CWE-415 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26180 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26181 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26182 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26183 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26184 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-2619 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have |
| CVE-2026-26204 | Analyzed | 未確認 | CWE-124, CWE-191 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs i |
| CVE-2026-26206 | Analyzed | 未確認 | CWE-307, CWE-362, CWE-367 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, Wazuh's server API brute-force protection |
| CVE-2026-26210 | Analyzed | 未確認 | CWE-502 | KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all inter |
| CVE-2026-2625 | Analyzed | 未確認 | CWE-347 | A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager (RPM) file. During the RPM signature verif |
| CVE-2026-26263 | Analyzed | 未確認 | CWE-89 | GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated time-based blind SQL injection exists in GLPI's Search engine. This vulner |
| CVE-2026-26274 | Deferred | 未確認 | CWE-184, CWE-863 | October is a Content Management System (CMS) and web platform. Prior to 3.7.14 and 4.1.10, a vulnerability was identified in the Twig sandbox security policy that allowed database |
| CVE-2026-26291 | Deferred | 未確認 | CWE-79 | Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier. If this vulnerability is exploited, an arbitrary script may be executed in a user's web browser. |
| CVE-2026-26354 | Analyzed | 未確認 | CWE-121, CWE-787 | Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 releas |
| CVE-2026-26399 | Awaiting Analysis | 未確認 | CWE-562 | A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structure on the stack and pa |
| CVE-2026-26460 | Deferred | 未確認 | CWE-80 | A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the Da |
| CVE-2026-26477 | Analyzed | 未確認 | CWE-400, CWE-770 | An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php file |
| CVE-2026-26895 | Modified | 未確認 | CWE-203 | User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the platform. |
| CVE-2026-26927 | Deferred | 未確認 | CWE-348 | Szafir SDK Web is a browser plug-in that can run SzafirHost application which download the necessary files when launched. In Szafir SDK Web it is possible to change the URL (HTTP O |
| CVE-2026-26928 | Deferred | 未確認 | CWE-354 | SzafirHost downloads necessary files in the context of the initiating web page. When called, SzafirHost updates its dynamic library. JAR files are correctly verified based on a lis |
| CVE-2026-26942 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability. A high |
| CVE-2026-26943 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS com |
| CVE-2026-26944 | Analyzed | 未確認 | CWE-306 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a missing |
| CVE-2026-26951 | Analyzed | 未確認 | CWE-121 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a stack-b |
| CVE-2026-2696 | Deferred | 未確認 | CWE-200 | The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts) in a predictable pattern using a random 6-digit number. Thes |
| CVE-2026-26961 | Analyzed | 未確認 | CWE-436 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser extracts the boundary parameter from multipart/form-data using a g |
| CVE-2026-26962 | Analyzed | 未確認 | CWE-93 | Rack is a modular Ruby web server interface. From version 3.2.0 to before version 3.2.6, Rack::Multipart::Parser unfolds folded multipart part headers incorrectly. When a multipart |
| CVE-2026-2699 | Analyzed | 未確認 | CWE-284, CWE-698 | Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration a |
| CVE-2026-2701 | Analyzed | 未確認 | CWE-434, CWE-78, CWE-94 | Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution. |
| CVE-2026-2708 | Analyzed | 未確認 | CWE-444 | A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditional |
| CVE-2026-27101 | Analyzed | 未確認 | CWE-22 | Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Pat |
| CVE-2026-27102 | Analyzed | 未確認 | CWE-266 | Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.1, contains an incorrect privilege assignment vulnerability. A low privileged attacker |
| CVE-2026-27105 | Analyzed | 未確認 | CWE-59 | Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with l |
| CVE-2026-2712 | Deferred | 未確認 | CWE-863 | The WP-Optimize plugin for WordPress is vulnerable to unauthorized access of functionality due to missing capability checks in the `receive_heartbeat()` function in `includes/class |
| CVE-2026-27124 | Analyzed | 未確認 | CWE-441 | FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, while testing the GitHubProvider OAuth integration, which allows authentication to a FastMC |
| CVE-2026-2714 | Deferred | 未確認 | CWE-79 | The Institute Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Enquiry Form Title' setting in all versions up to, and including, 5.5. This is d |
| CVE-2026-27140 | Modified | 未確認 | CWE-641, CWE-863 | SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass. |
| CVE-2026-27143 | Analyzed | 未確認 | Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, p | |
| CVE-2026-27144 | Analyzed | 未確認 | CWE-843 | The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about no |
| CVE-2026-2717 | Deferred | 未確認 | CWE-93 | The HTTP Headers plugin for WordPress is vulnerable to CRLF Injection in all versions up to, and including, 1.19.2. This is due to insufficient sanitization of custom header name a |
| CVE-2026-27172 | Modified | 未確認 | CWE-502 | The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegistry and its inner ConsulRegistryUtils.deserialize method) read Java-serialized |
| CVE-2026-2719 | Deferred | 未確認 | CWE-79 | The Private WP suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Exceptions' setting in all versions up to, and including, 0.4.1. This is due to insu |
| CVE-2026-27222 | Modified | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-27238 | Modified | 未確認 | CWE-122 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-27243 | Analyzed | 未確認 | CWE-79 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malici |
| CVE-2026-27245 | Analyzed | 未確認 | CWE-79 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malici |
| CVE-2026-27246 | Analyzed | 未確認 | CWE-79 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malici |
| CVE-2026-27258 | Modified | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-2728 | Analyzed | 未確認 | CWE-79 | LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. Successful exploitation requires administrative privileg |
| CVE-2026-27282 | Analyzed | 未確認 | CWE-20 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverag |
| CVE-2026-27283 | Analyzed | 未確認 | CWE-416 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
| CVE-2026-27284 | Analyzed | 未確認 | CWE-125 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an |
| CVE-2026-27285 | Analyzed | 未確認 | CWE-122 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to application denial-of-service. An attacker could ex |
| CVE-2026-27286 | Analyzed | 未確認 | CWE-122 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vu |
| CVE-2026-27287 | Analyzed | 未確認 | CWE-125 | InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated |
| CVE-2026-27288 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulat |
| CVE-2026-27289 | Analyzed | 未確認 | CWE-125 | Photoshop Desktop versions 27.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocat |
| CVE-2026-27290 | Analyzed | 未確認 | CWE-426 | Adobe Framemaker versions 2022.8 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the curre |
| CVE-2026-27291 | Analyzed | 未確認 | CWE-787 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-27292 | Analyzed | 未確認 | CWE-416 | Adobe Framemaker versions 2022.8 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploi |
| CVE-2026-27293 | Analyzed | 未確認 | CWE-122 | Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-27294 | Analyzed | 未確認 | CWE-125 | Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an alloca |
| CVE-2026-27295 | Analyzed | 未確認 | CWE-787 | Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
| CVE-2026-27296 | Analyzed | 未確認 | CWE-191 | Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of |
| CVE-2026-27297 | Analyzed | 未確認 | CWE-191 | Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of |
| CVE-2026-27298 | Analyzed | 未確認 | CWE-843 | Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code exec |
| CVE-2026-27299 | Analyzed | 未確認 | CWE-20 | Adobe Framemaker versions 2022.8 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could leverage th |
| CVE-2026-27300 | Analyzed | 未確認 | CWE-824 | Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to memory exposure. An attacker could leverage this vu |
| CVE-2026-27301 | Analyzed | 未確認 | CWE-122 | Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerab |
| CVE-2026-27303 | Analyzed | 未確認 | CWE-502 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of t |
| CVE-2026-27304 | Analyzed | 未確認 | CWE-20 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre |
| CVE-2026-27305 | Analyzed | 未確認 | CWE-22 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a |
| CVE-2026-27306 | Analyzed | 未確認 | CWE-20 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre |
| CVE-2026-27307 | Analyzed | 未確認 | CWE-400 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileg |
| CVE-2026-27308 | Analyzed | 未確認 | CWE-400 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileg |
| CVE-2026-27310 | Analyzed | 未確認 | CWE-122 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-27311 | Analyzed | 未確認 | CWE-122 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-27312 | Analyzed | 未確認 | CWE-122 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-27313 | Analyzed | 未確認 | CWE-122 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-27314 | Analyzed | 未確認 | CWE-267 | Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identi |
| CVE-2026-27315 | Analyzed | 未確認 | CWE-532 | Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via ~/.cassandra/cqlsh_h |
| CVE-2026-27316 | Analyzed | 未確認 | CWE-522 | A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an |
| CVE-2026-2737 | Analyzed | 未確認 | CWE-79 | A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigg |
| CVE-2026-27447 | Analyzed | 未確認 | CWE-863 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon (cupsd) contains an authorization byp |
| CVE-2026-27456 | Analyzed | 未確認 | CWE-269, CWE-367, CWE-59 | util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mo |
| CVE-2026-27460 | Analyzed | 未確認 | CWE-409 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.5, a critical Denial of Service (DoS) vulnerability was in the rec |
| CVE-2026-27481 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, an au |
| CVE-2026-27489 | Modified | 未確認 | CWE-22, CWE-23, CWE-61 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read ar |
| CVE-2026-27634 | Analyzed | 未確認 | CWE-89 | Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters (f_min_date_available, f_max_date_available, f_min_date_cre |
| CVE-2026-27655 | Analyzed | 未確認 | CWE-79 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report. |
| CVE-2026-27668 | Awaiting Analysis | 未確認 | CWE-266 | A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8). User Administrators are allowed to administer groups they bel |
| CVE-2026-27672 | Awaiting Analysis | 未確認 | CWE-862 | The Material Master application does not enforce authorization checks for authenticated users when executing reports, resulting in the disclosure of sensitive information. This vul |
| CVE-2026-27673 | Awaiting Analysis | 未確認 | CWE-862 | Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthorized control |
| CVE-2026-27674 | Analyzed | 未確認 | CWE-94 | Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply crafted input that is interpreted by the |
| CVE-2026-27675 | Awaiting Analysis | 未確認 | CWE-94 | SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating sys |
| CVE-2026-27676 | Awaiting Analysis | 未確認 | CWE-862 | Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Technical Object Structures), an attacker could update and delete child entities via exposed OData serv |
| CVE-2026-27677 | Awaiting Analysis | 未確認 | CWE-862 | Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Reference Equipment), an attacker could update and delete child entities via OData services without pro |
| CVE-2026-27678 | Awaiting Analysis | 未確認 | CWE-862 | Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData ser |
| CVE-2026-27679 | Analyzed | 未確認 | CWE-862 | Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData se |
| CVE-2026-27681 | Awaiting Analysis | 未確認 | CWE-89 | Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statements to read, mo |
| CVE-2026-27683 | Awaiting Analysis | 未確認 | CWE-79 | SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs. When a victim accesses the URL, |
| CVE-2026-27760 | Deferred | 未確認 | CWE-94 | OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injec |
| CVE-2026-27769 | Analyzed | 未確認 | CWE-862 | Mattermost versions 10.11.x <= 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspace which allows a malicious remote server connected usin |
| CVE-2026-27774 | Analyzed | 未確認 | CWE-427 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902. |
| CVE-2026-27785 | Awaiting Analysis | 未確認 | CWE-798 | Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials. |
| CVE-2026-27787 | Analyzed | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user wh |
| CVE-2026-27806 | Analyzed | 未確認 | CWE-78 | Fleet is open source device management software. Prior to 4.81.1, the Orbit agent's FileVault disk encryption key rotation flow on collects a local user's password via a GUI dialog |
| CVE-2026-27820 | Analyzed | 未確認 | CWE-120, CWE-131 | zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib |
| CVE-2026-27833 | Analyzed | 未確認 | CWE-862 | Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the pwg.history.search API method in Piwigo is registered without the admin_only option, al |
| CVE-2026-27834 | Analyzed | 未確認 | CWE-89 | Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, a SQL Injection vulnerability exists in the pwg.users.getList Web Service API method. The f |
| CVE-2026-27841 | Analyzed | 未確認 | CWE-352 | A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) protections. Because |
| CVE-2026-27843 | Analyzed | 未確認 | CWE-306 | A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without sufficient authentication or server-side v |
| CVE-2026-27885 | Analyzed | 未確認 | CWE-89 | Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, a SQL Injection vulnerability was discovered in Piwigo affecting the Activity List API endp |
| CVE-2026-27890 | Analyzed | 未確認 | CWE-119, CWE-787 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCT_specific_data segments during authentication, t |
| CVE-2026-27906 | Analyzed | 未確認 | CWE-20 | Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-27907 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27908 | Analyzed | 未確認 | CWE-416 | Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27909 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27910 | Analyzed | 未確認 | CWE-280 | Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27911 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges local |
| CVE-2026-27912 | Analyzed | 未確認 | CWE-285 | Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-27913 | Analyzed | 未確認 | CWE-20 | Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-27914 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27915 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27916 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27917 | Analyzed | 未確認 | CWE-416 | Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27918 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27919 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27920 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27921 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27922 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27923 | Analyzed | 未確認 | CWE-416 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27924 | Analyzed | 未確認 | CWE-416 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27925 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-27926 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privi |
| CVE-2026-27927 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allows an authorized attacker to elevate privileges loc |
| CVE-2026-27928 | Analyzed | 未確認 | CWE-20 | Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-27929 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-27930 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
| CVE-2026-27931 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
| CVE-2026-27937 | Deferred | 未確認 | CWE-79 | October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, a reflected Cross-Site Scripting (XSS) vulnerability was identified in the backend DataTa |
| CVE-2026-27949 | Analyzed | 未確認 | CWE-200, CWE-598 | Plane is an an open-source project management tool. Prior to 1.3.0, a vulnerability was identified in Plane's authentication flow where a user's email address is included as a quer |
| CVE-2026-28040 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Stored XSS.This is |
| CVE-2026-2810 | Awaiting Analysis | 未確認 | CWE-125 | Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unpri |
| CVE-2026-28205 | Analyzed | 未確認 | CWE-1188 | OpenPLC_V3 is vulnerable to an Initialization of a Resource with an Insecure Default vulnerability which could allow an attacker to gain access to the system by bypassing authentic |
| CVE-2026-28212 | Analyzed | 未確認 | CWE-476 | Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an op_slice network packet, the server passes |
| CVE-2026-28214 | Analyzed | 未確認 | CWE-190, CWE-835 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize() function can overflow the tota |
| CVE-2026-28221 | Analyzed | 未確認 | CWE-121, CWE-400 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer overflow exists in p |
| CVE-2026-28224 | Analyzed | 未確認 | CWE-476 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when the server receives an op_crypt_key_callback packet without pri |
| CVE-2026-2826 | Deferred | 未確認 | CWE-862 | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.3. This is due t |
| CVE-2026-28261 | Analyzed | 未確認 | CWE-532 | Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0, contains an Insertion of Sensitive Information into Log |
| CVE-2026-28263 | Analyzed | 未確認 | CWE-79 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r |
| CVE-2026-28264 | Analyzed | 未確認 | CWE-732 | Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local a |
| CVE-2026-28265 | Analyzed | 未確認 | CWE-22, CWE-35 | PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modifi |
| CVE-2026-28291 | Modified | 未確認 | CWE-78 | simple-git enables running native Git commands from JavaScript. Versions up to and including 3.31.1 allow execution of arbitrary commands through Git option manipulation, bypassing |
| CVE-2026-2834 | Deferred | 未確認 | CWE-79 | The Age Verification & Identity Verification by Token of Trust plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘description’ parameter in all versions up |
| CVE-2026-28373 | Analyzed | 未確認 | CWE-22 | The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property. A |
| CVE-2026-2838 | Deferred | 未確認 | CWE-79 | The Whole Enquiry Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘woowhole_success_msg’ parameter in all versions up to, and includi |
| CVE-2026-28386 | Analyzed | 未確認 | CWE-125 | Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing p |
| CVE-2026-28387 | Modified | 未確認 | CWE-416 | Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after- |
| CVE-2026-28388 | Modified | 未確認 | CWE-476 | Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. |
| CVE-2026-28389 | Modified | 未確認 | CWE-476 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process |
| CVE-2026-28390 | Modified | 未確認 | CWE-476 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that pro |
| CVE-2026-2840 | Deferred | 未確認 | CWE-79 | The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in all versions up to |
| CVE-2026-28525 | Analyzed | 未確認 | CWE-125, CWE-191 | SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows unauthenticated attackers to cause a denial of service by se |
| CVE-2026-28532 | Analyzed | 未確認 | CWE-125, CWE-190 | FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable |
| CVE-2026-28553 | Analyzed | 未確認 | CWE-275 | Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-2862 | Analyzed | 未確認 | CWE-444 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S |
| CVE-2026-28684 | Analyzed | 未確認 | CWE-59, CWE-61 | python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, `set_key()` and `unset_key()` in python-dotenv follow symbol |
| CVE-2026-28703 | Analyzed | 未確認 | CWE-79 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Between Users report. |
| CVE-2026-28704 | Analyzed | 未確認 | CWE-427 | Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege of the user inv |
| CVE-2026-28728 | Analyzed | 未確認 | CWE-427 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902. |
| CVE-2026-28736 | Analyzed | 未確認 | CWE-639 | ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to validate file ownership when serving uploaded files. This allows an authenticated attacker who knows a victim's file |
| CVE-2026-28741 | Analyzed | 未確認 | CWE-352 | Mattermost versions 10.11.x <= 10.11.12, 11.5.x <= 11.5.0, 11.4.x <= 11.4.2, 11.3.x <= 11.3.2 fail to validate CSRF tokens on an authentication endpoint which allows an attacker to |
| CVE-2026-28747 | Awaiting Analysis | 未確認 | CWE-639 | A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed. |
| CVE-2026-28754 | Analyzed | 未確認 | CWE-79 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report. |
| CVE-2026-28756 | Analyzed | 未確認 | CWE-79 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report. |
| CVE-2026-28766 | Analyzed | 未確認 | CWE-306 | A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication. |
| CVE-2026-28767 | Analyzed | 未確認 | CWE-306 | A specific administrative endpoint notifications is accessible without proper authentication. |
| CVE-2026-28797 | Analyzed | 未確認 | CWE-1336, CWE-20, CWE-78, CWE-94 | RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions 0.24.0 and prior, a Server-Side Template Injection (SSTI) vulnerability exists in RAGFlow's Agent |
| CVE-2026-28798 | Analyzed | 未確認 | CWE-918 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. Prior to version 1.5.3, a proxy endpoint (/v1/sys/proxy) exposed by ZimaOS's web inte |
| CVE-2026-28805 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.10.2, multiple AJAX select handlers in OpenSTAManager are vulnerable |
| CVE-2026-28808 | Modified | 未確認 | CWE-551, CWE-863 | Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory rules when served via script_alias. When sc |
| CVE-2026-28810 | Modified | 未確認 | CWE-340 | Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel (inet_res, inet_db modules) allows DNS Cache Poisoning. The built-in DNS resolver (inet_res) us |
| CVE-2026-28815 | Analyzed | 未確認 | CWE-125 | A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure de |
| CVE-2026-28909 | Analyzed | 未確認 | CWE-522 | Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container ve |
| CVE-2026-2892 | Deferred | 未確認 | CWE-285 | The Otter Blocks plugin for WordPress is vulnerable to Purchase Verification Bypass in all versions up to, and including, 3.1.4. This is due to the 'get_customer_data' method relyi |
| CVE-2026-28950 | Modified | 未確認 | CWE-359 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 2 |
| CVE-2026-29002 | Analyzed | 未確認 | CWE-639 | CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the f_k_levels_list parameter in |
| CVE-2026-29013 | Analyzed | 未確認 | CWE-125 | libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely on assert() for bound |
| CVE-2026-29014 | Analyzed | 未確認 | CWE-94 | MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote attackers to execute arbitrary code by sending crafted request |
| CVE-2026-2902 | Deferred | 未確認 | CWE-79 | The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'frontend_rewrite' function's 'WPMETEOR[N]WPMETEOR' placeho |
| CVE-2026-29043 | Analyzed | 未確認 | CWE-122 | HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control an h5 file parsed by HDF5 can trigger a write-based heap buffer overflow condition in the H |
| CVE-2026-29047 | Analyzed | 未確認 | CWE-89 | GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. Th |
| CVE-2026-29050 | Analyzed | 未確認 | CWE-22 | melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, an attacker who can influence a melange configuratio |
| CVE-2026-29051 | Analyzed | 未確認 | CWE-22 | melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, `melange lint --persist-lint-results` (opt-in flag, |
| CVE-2026-29129 | Analyzed | 未確認 | CWE-327 | Configured cipher preference order not preserved vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.16 through 11.0.18, from 10.1.51 through 10.1.52, from |
| CVE-2026-29131 | Analyzed | 未確認 | CWE-90 | SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read the contents of emails encrypted for other users. |
| CVE-2026-29132 | Analyzed | 未確認 | CWE-306 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GINA account to bypass a second-password check and read protected emails. |
| CVE-2026-29133 | Analyzed | 未確認 | CWE-20 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match their email address. |
| CVE-2026-29134 | Analyzed | 未確認 | CWE-807 | SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass per-domain restrictions. |
| CVE-2026-29135 | Analyzed | 未確認 | CWE-20 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization. |
| CVE-2026-29136 | Analyzed | 未確認 | CWE-79 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new CA certificates. |
| CVE-2026-29137 | Analyzed | 未確認 | CWE-20 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a long subject. |
| CVE-2026-29138 | Analyzed | 未確認 | CWE-90 | SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim another user's PGP signature as their own. |
| CVE-2026-29139 | Analyzed | 未確認 | CWE-288 | SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to reset a victim account password. |
| CVE-2026-29140 | Analyzed | 未確認 | CWE-295 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be used for future encryption to a victim by adding the certific |
| CVE-2026-29141 | Analyzed | 未確認 | CWE-20 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags such as [signed OK]. |
| CVE-2026-29142 | Analyzed | 未確認 | CWE-325 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email. |
| CVE-2026-29143 | Analyzed | 未確認 | CWE-20 | SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allowing an attacker to control trusted head |
| CVE-2026-29144 | Analyzed | 未確認 | CWE-20 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security tags using Unicode lookalike characters. |
| CVE-2026-29145 | Analyzed | 未確認 | CWE-287 | CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache |
| CVE-2026-29146 | Modified | 未確認 | CWE-1240, CWE-209, CWE-642 | Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.0.0-M1 thr |
| CVE-2026-29179 | Deferred | 未確認 | CWE-863 | October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, fine-grained sub-permission checks for asset and blueprint file operations were not enfor |
| CVE-2026-29181 | Modified | 未確認 | CWE-770 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each header field-value independently and aggregate |
| CVE-2026-29197 | Analyzed | 未確認 | CWE-284 | In versions <8.4.0, <8.3.2, <8.2.2, <8.1.3, <8.0.4, <7.13.6, <7.12.7, <7.11.7, and <7.10.10, the endpoints /api/apps/logs and /api/apps/:id/logs have a typo in the required permiss |
| CVE-2026-29198 | Analyzed | 未確認 | CWE-89 | In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability can lead to account takeover of the first user with a generat |
| CVE-2026-2924 | Deferred | 未確認 | CWE-79 | The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'imageLoad' parameter in versions up to, |
| CVE-2026-2936 | Deferred | 未確認 | CWE-79 | The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_title' parameter in all versions up to, and including, 8.4 |
| CVE-2026-2942 | Deferred | 未確認 | CWE-434 | The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'proSol_fileUploadProcess' function in all version |
| CVE-2026-2949 | Deferred | 未確認 | CWE-79 | The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Icon Box widget in versions up to, and including, 1.4.24 due |
| CVE-2026-2951 | Deferred | 未確認 | CWE-79 | The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.5.5 due to |
| CVE-2026-29598 | Deferred | 未確認 | CWE-79 | Multiple stored cross-site scripting (XSS) vulnerabilities in the submit_add_user.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allow attackers to execute arbitrary web script |
| CVE-2026-29628 | Deferred | 未確認 | CWE-121 | A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a crafted .mtl file |
| CVE-2026-29642 | Awaiting Analysis | 未確認 | CWE-1244 | A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted reads/writes to menvcfg (e.g., csrrs in M-mode). On affected |
| CVE-2026-29643 | Deferred | 未確認 | CWE-703 | XiangShan (Open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) contains an improper exceptional-condition handling flaw in i |
| CVE-2026-29644 | Deferred | 未確認 | CWE-284 | XiangShan (open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) has improper gating of its distributed CSR write-enable path, |
| CVE-2026-29645 | Analyzed | 未確認 | CWE-1287, CWE-131 | NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder. The decoder does not correctly validate the funct3 |
| CVE-2026-29646 | Deferred | 未確認 | CWE-267 | In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interrupt-enable CSR (sie) may be handled inco |
| CVE-2026-29647 | Deferred | 未確認 | CWE-269 | In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared |
| CVE-2026-29648 | Deferred | 未確認 | CWE-269 | In OpenXiangShan NEMU, when Smstateen is enabled, clearing mstateen0.ENVCFG does not correctly restrict access to henvcfg and senvcfg. As a result, less-privileged code may read or |
| CVE-2026-29649 | Analyzed | 未確認 | CWE-693 | NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorrectly masked/updated based on menvcfg[7:4], |
| CVE-2026-29782 | Analyzed | 未確認 | CWE-502 | OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.10.2, the oauth2.php file in OpenSTAManager is an unauthenticated en |
| CVE-2026-2986 | Deferred | 未確認 | CWE-79 | The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes' parameter in versions up to, and including, 4.2.1 due to i |
| CVE-2026-29861 | Deferred | 未確認 | CWE-89 | PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php. |
| CVE-2026-2988 | Deferred | 未確認 | CWE-79 | The Blubrry PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'powerpress' and 'podcast' shortcodes in versions up to, and including, 11.15.15 du |
| CVE-2026-29923 | Awaiting Analysis | 未確認 | CWE-269 | The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map ar |
| CVE-2026-29955 | Analyzed | 未確認 | CWE-94 | The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. The component uses `subprocess.Popen()` with `shell=True` para |
| CVE-2026-29971 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0. User-controlled input is reflected into HTML and JavaScript c |
| CVE-2026-3005 | Deferred | 未確認 | CWE-79 | The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.94.0 due to i |
| CVE-2026-3006 | Awaiting Analysis | 未確認 | CWE-362, CWE-368 | Successful exploitation of the race condition vulnerability could allow an attacker to trigger a kernel heap overflow, potentially leading to local privilege escalation and grantin |
| CVE-2026-3007 | Deferred | 未確認 | CWE-79 | Successful exploitation of the stored cross-site scripting (XSS) vulnerability could allow an attacker to execute arbitrary JavaScript on any user account that has access to Koolla |
| CVE-2026-30075 | Analyzed | 未確認 | CWE-120 | OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response ( |
| CVE-2026-30078 | Analyzed | 未確認 | CWE-20 | OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message specification requires Initiating |
| CVE-2026-30079 | Analyzed | 未確認 | CWE-288 | In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure. This allows authentication to be bypassed completely. I |
| CVE-2026-3008 | Awaiting Analysis | 未確認 | CWE-134 | Successful exploitation of the string injection vulnerability could allow an attacker to obtain memory address information or crash the application. |
| CVE-2026-30080 | Analyzed | 未確認 | CWE-294 | OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection. Configuration has supported integrity NIA1 and NIA2. But if an UE sends initial registratio |
| CVE-2026-30139 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in |
| CVE-2026-3017 | Deferred | 未確認 | CWE-502 | The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3. |
| CVE-2026-30232 | Analyzed | 未確認 | CWE-918 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 4.8.5, Chartbrew allows authenticated users |
| CVE-2026-30251 | Analyzed | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javasc |
| CVE-2026-30252 | Analyzed | 未確認 | CWE-79 | Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Java |
| CVE-2026-30266 | Modified | 未確認 | CWE-277 | Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file |
| CVE-2026-30269 | Analyzed | 未確認 | CWE-269 | Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to update their own account role to a non-admin privileged role via /platform/user/{username}. Th |
| CVE-2026-30273 | Analyzed | 未確認 | CWE-89 | pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component. |
| CVE-2026-30287 | Analyzed | 未確認 | CWE-73 | An arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4.5 allows attackers to overwrite critical internal files via the file import proces |
| CVE-2026-30289 | Analyzed | 未確認 | CWE-73 | An arbitrary file overwrite vulnerability in Tinybeans Private Family Album App v5.9.5-prod allows attackers to overwrite critical internal files via the file import process, leadi |
| CVE-2026-30291 | Deferred | 未確認 | CWE-73 | An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, lea |
| CVE-2026-30292 | Deferred | 未確認 | CWE-73 | An arbitrary file overwrite vulnerability in Docudepot PDF Reader: PDF Viewer APP v1.0.34 allows attackers to overwrite critical internal files via the file import process, leading |
| CVE-2026-30332 | Awaiting Analysis | 未確認 | CWE-367 | A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalate privileges and execute arbitrary code |
| CVE-2026-30346 | Deferred | 未確認 | CWE-601 | An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via supplying a crafted URL. |
| CVE-2026-30350 | Awaiting Analysis | 未確認 | CWE-400 | An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
| CVE-2026-30351 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a allows attackers to read arbitrary files via sending crafted URL path containing tra |
| CVE-2026-30352 | Deferred | 未確認 | CWE-77 | A remote code execution (RCE) vulnerability in the /devserver/start endpoint of leonvanzyl autocoder commit 79d02a allows attackers to execute arbitrary code via providing a crafte |
| CVE-2026-30364 | Awaiting Analysis | 未確認 | CWE-121 | CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function. |
| CVE-2026-30368 | Deferred | 未確認 | CWE-863 | A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing c |
| CVE-2026-30452 | Analyzed | 未確認 | CWE-284 | Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with low privileges to modify articles owned b |
| CVE-2026-30459 | Modified | 未確認 | CWE-640 | An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link pl |
| CVE-2026-30460 | Modified | 未確認 | CWE-94 | Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module. |
| CVE-2026-30461 | Modified | 未確認 | CWE-77 | Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Installer.php and the function add_git_subm |
| CVE-2026-30462 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal. |
| CVE-2026-30478 | Awaiting Analysis | 未確認 | CWE-427 | A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer for Windows version 5 allows attackers to escalate privileges via a crafted executable. |
| CVE-2026-30479 | Awaiting Analysis | 未確認 | CWE-94 | A Dynamic-link Library Injection vulnerability in OSGeo Project MapServer before v8.0 allows attackers to execute arbitrary code via a crafted executable. |
| CVE-2026-30480 | Awaiting Analysis | 未確認 | CWE-98 | A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from |
| CVE-2026-30522 | Analyzed | 未確認 | CWE-602 | A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Pl |
| CVE-2026-30523 | Analyzed | 未確認 | CWE-20 | A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define "Loa |
| CVE-2026-30526 | Modified | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0. The vulnerability is located in the login page, specifically within the ms |
| CVE-2026-30573 | Analyzed | 未確認 | CWE-1284 | A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. The vulnerability is located in the add-sales.php file. The application fails to val |
| CVE-2026-30603 | Awaiting Analysis | 未確認 | CWE-345, CWE-494 | An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a craft |
| CVE-2026-30613 | Awaiting Analysis | 未確認 | CWE-200 | An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debug |
| CVE-2026-30615 | Deferred | 未確認 | CWE-77 | A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system. When Windsurf processes attacker-controlled HTML co |
| CVE-2026-30616 | Deferred | 未確認 | CWE-77 | Jaaz 1.0.30 contains a remote code execution vulnerability in its MCP STDIO command execution handling. A remote attacker can send crafted network requests to the network-accessibl |
| CVE-2026-30617 | Deferred | 未確認 | CWE-77 | LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execution handling. A remote attacker can access the publicly expo |
| CVE-2026-30624 | Analyzed | 未確認 | CWE-77 | Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature. The application allows users to define MCP servers using a JSON c |
| CVE-2026-30625 | Deferred | 未確認 | CWE-77 | Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command |
| CVE-2026-30643 | Analyzed | 未確認 | CWE-94 | An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload. |
| CVE-2026-30656 | Awaiting Analysis | 未確認 | CWE-476 | A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does |
| CVE-2026-30769 | Analyzed | 未確認 | CWE-20, CWE-269 | An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests |
| CVE-2026-30778 | Analyzed | 未確認 | CWE-202 | The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3. |
| CVE-2026-30804 | Analyzed | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue affects Pandora FMS: from 777 through 800 |
| CVE-2026-30806 | Analyzed | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report. This issue affects Pandora FMS: from 777 through 800 |
| CVE-2026-30809 | Analyzed | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affects Pandora FMS: from 777 throu |
| CVE-2026-30811 | Analyzed | 未確認 | CWE-276 | Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800 |
| CVE-2026-30812 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 80 |
| CVE-2026-30813 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora FMS: from 777 through 800 |
| CVE-2026-30814 | Modified | 未確認 | CWE-121, CWE-787 | A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute |
| CVE-2026-30815 | Modified | 未確認 | CWE-78 | An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafte |
| CVE-2026-30816 | Modified | 未確認 | CWE-15, CWE-610 | An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious conf |
| CVE-2026-30817 | Modified | 未確認 | CWE-15, CWE-610 | An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious config |
| CVE-2026-30818 | Modified | 未確認 | CWE-78 | An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially crafted |
| CVE-2026-30867 | Analyzed | 未確認 | CWE-617 | CocoaMQTT is a MQTT 5.0 client library for iOS and macOS written in Swift. Prior to version 2.2.2, a vulnerability exists in the packet parsing logic of CocoaMQTT that allows an at |
| CVE-2026-3087 | Modified | 未確認 | CWE-22 | If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory whi |
| CVE-2026-30893 | Analyzed | 未確認 | CWE-22, CWE-73 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path traversal vulnerability in Wazuh's |
| CVE-2026-30898 | Analyzed | 未確認 | CWE-77 | An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of |
| CVE-2026-30912 | Analyzed | 未確認 | CWE-668 | In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to |
| CVE-2026-30993 | Deferred | 未確認 | CWE-94 | Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php. This vulnerability is exploitable via a cra |
| CVE-2026-30994 | Deferred | 未確認 | CWE-284 | Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive information, including active session credentials |
| CVE-2026-30995 | Deferred | 未確認 | CWE-89 | Slah CMS v1.5.0 and below was discovered to contain a SQL injection vulnerability via the id parameter in the vereador_ver.php endpoint. |
| CVE-2026-30996 | Deferred | 未確認 | CWE-22 | An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via |
| CVE-2026-30997 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-30998 | Analyzed | 未確認 | CWE-400 | An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a cr |
| CVE-2026-30999 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-31013 | Analyzed | 未確認 | CWE-79 | Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied |
| CVE-2026-31014 | Analyzed | 未確認 | CWE-352 | Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF). The affected endpoint processes state-changing requests without requiring a CSRF to |
| CVE-2026-31017 | Modified | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML is insufficien |
| CVE-2026-31018 | Modified | 未確認 | CWE-284, CWE-94 | In Dolibarr ERP & CRM <= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allowing an authen |
| CVE-2026-31019 | Modified | 未確認 | CWE-78 | In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system command execution |
| CVE-2026-31027 | Analyzed | 未確認 | CWE-120 | TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability occurs because the rootSs |
| CVE-2026-31040 | Analyzed | 未確認 | CWE-94 | A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution. |
| CVE-2026-31048 | Deferred | 未確認 | CWE-94 | An issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string message. |
| CVE-2026-31049 | Deferred | 未確認 | CWE-1236 | An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field |
| CVE-2026-31050 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code |
| CVE-2026-31051 | Deferred | 未確認 | CWE-400 | An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Client Balance component |
| CVE-2026-31052 | Deferred | 未確認 | CWE-400 | An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Checkout Authentication Flow component |
| CVE-2026-31053 | Analyzed | 未確認 | CWE-415 | A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup chains, relocation entries may |
| CVE-2026-31058 | Analyzed | 未確認 | CWE-120 | UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function. This vulnerability a |
| CVE-2026-31059 | Modified | 未確認 | CWE-77 | A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a cr |
| CVE-2026-31060 | Analyzed | 未確認 | CWE-120 | UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the formGroupConfig function. This vulnerability allows attackers to |
| CVE-2026-31061 | Analyzed | 未確認 | CWE-120 | UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers |
| CVE-2026-31062 | Analyzed | 未確認 | CWE-120 | UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attacker |
| CVE-2026-31063 | Analyzed | 未確認 | CWE-120 | UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the formArpBindConfig function. This vulnerability allows attackers |
| CVE-2026-31065 | Analyzed | 未確認 | CWE-120 | UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This vulnerability allows |
| CVE-2026-31066 | Analyzed | 未確認 | CWE-120 | UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function. This vulnerability allows attackers |
| CVE-2026-31067 | Analyzed | 未確認 | CWE-78 | A remote command execution (RCE) vulnerability in the /goform/formReleaseConnect component of UTT Aggressive 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via |
| CVE-2026-31150 | Analyzed | 未確認 | CWE-284, CWE-639 | Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources. |
| CVE-2026-31151 | Analyzed | 未確認 | CWE-288 | An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources. |
| CVE-2026-31153 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in Bynder before 12 January 2026 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. |
| CVE-2026-31159 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the password parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31160 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31162 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31163 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31164 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31165 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeServiceName parameter to /cgi-bin/cstecgi. |
| CVE-2026-31166 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31167 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the mode parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31168 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31169 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the week parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31170 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31171 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the url parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31172 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the user parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31173 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31174 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the informEnable parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31175 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunEnable parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31176 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun_user parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31177 | Analyzed | 未確認 | CWE-78 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMinAlive parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31178 | Analyzed | 未確認 | CWE-78 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMaxAlive parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31179 | Analyzed | 未確認 | CWE-77 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi. |
| CVE-2026-31181 | Analyzed | 未確認 | CWE-78 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to /cgi-bin/cstecgi.cg |
| CVE-2026-31192 | Analyzed | 未確認 | CWE-20, CWE-284 | Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attackers to obtain sensitive user data via a crafted request. |
| CVE-2026-31255 | Modified | 未確認 | CWE-77 | A command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi. The vulnerability is located in the /goform/SetSambaCfg interface, where improper handling of the guestus |
| CVE-2026-31256 | Analyzed | 未確認 | CWE-476 | A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request for the path rts |
| CVE-2026-31262 | Analyzed | 未確認 | CWE-200 | Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform (SB2) v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the U |
| CVE-2026-31271 | Awaiting Analysis | 未確認 | CWE-288 | megagao production_ssm v1.0 contains an authorization bypass vulnerability in the user addition functionality. The insert() method in UserController.java lacks authentication check |
| CVE-2026-31272 | Analyzed | 未確認 | CWE-284 | MRCMS 3.1.2 contains an access control vulnerability. The save() method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, e |
| CVE-2026-31280 | Deferred | 未確認 | CWE-120 | An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause a Denial of Service (DoS) via supplying crafted RFCOMM fram |
| CVE-2026-31281 | Deferred | 未確認 | CWE-79 | Totara LMS v19.1.5 and before is vulnerable to HTML Injection. An attacker can inject malicious HTML code in a message and send it to all the users in the application, resulting in |
| CVE-2026-31282 | Deferred | 未確認 | CWE-284 | Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control. The login page code can be manipulated to reveal the login form. An attacker can chain that with missing ra |
| CVE-2026-31283 | Deferred | 未確認 | CWE-770 | In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Su |
| CVE-2026-31313 | Modified | 未確認 | CWE-79 | An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via in |
| CVE-2026-31317 | Deferred | 未確認 | CWE-918 | Craftql v1.3.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the vendor/markhuot/craftql/src/Listeners/GetAs |
| CVE-2026-31350 | Modified | 未確認 | CWE-79 | An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into |
| CVE-2026-31351 | Analyzed | 未確認 | CWE-79 | An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via in |
| CVE-2026-31352 | Modified | 未確認 | CWE-79 | An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via inj |
| CVE-2026-31353 | Modified | 未確認 | CWE-79 | An authenticated stored cross-site scripting (XSS) vulnerability in the Category module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting |
| CVE-2026-31354 | Modified | 未確認 | CWE-79 | Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the Permissions module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via |
| CVE-2026-31368 | Deferred | 未確認 | CWE-269 | AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability. |
| CVE-2026-31369 | Deferred | 未確認 | CWE-269 | PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability |
| CVE-2026-31370 | Deferred | 未確認 | CWE-200 | Honor E APP is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-31389 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration failure Make sure to deregister from driver core also in th |
| CVE-2026-31390 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xe_vm_madvise_ioctl When check_bo_args_are_sane() validation fails, jump to the new |
| CVE-2026-31391 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix OOM ->tfm_count leak If memory allocation fails, decrement ->tfm_count to avoid bl | |
| CVE-2026-31392 | Modified | 未確認 | CWE-287 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix krb5 mount with username option Customer reported that some of their krb5 mounts were failing |
| CVE-2026-31393 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access l2cap_information_rsp() checks that cmd |
| CVE-2026-31394 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations ieee80211_chan_bw_change() iterates all s |
| CVE-2026-31395 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler The ASYNC_EVENT_CMPL_EVENT_ID_DBG_BUF_PRODUCER |
| CVE-2026-31396 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the interface an |
| CVE-2026-31397 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd() move_pages_huge_pmd() handles UFFDIO_MOVE for b |
| CVE-2026-31398 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix incorrect pte restoration for lazyfree folios We batch unmap anonymous lazyfree folios by folio_u |
| CVE-2026-31399 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: nvdimm/bus: Fix potential use after free in asynchronous initialization Dingisoul with KASAN reports a use aft |
| CVE-2026-31400 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix cache_request leak in cache_release When a reader's file descriptor is closed while in the middle |
| CVE-2026-31401 | Modified | 未確認 | CWE-120, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: HID: bpf: prevent buffer overflow in hid_hw_request right now the returned value is considered to be always va |
| CVE-2026-31402 | Modified | 未確認 | CWE-122, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buf |
| CVE-2026-31403 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd The /proc/fs/nfs/exports proc entry is cr |
| CVE-2026-31404 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-31405 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-net: fix OOB access in ULE extension header tables The ule_mandatory_ext_handlers[] and ule_optiona |
| CVE-2026-31406 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() After cancel_delayed_work_sync() is c | |
| CVE-2026-31407 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: add missing netlink policy validations Hyunwoo Kim reports out-of-bounds access in sctp |
| CVE-2026-31408 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold sco_recv_frame() reads conn->s |
| CVE-2026-31409 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset conn->binding on failed binding request When a multichannel SMB2_SESSION_SETUP request with SMB2_ | |
| CVE-2026-31410 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Use sb->s_uuid for a proper volume identifier as the primar | |
| CVE-2026-31411 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1]. The ATM send p |
| CVE-2026-31412 | Analyzed | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() The `check_comma |
| CVE-2026-31413 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR maybe_fork_scalars() is called for both BPF |
| CVE-2026-31414 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper Use expect->helper in ctnetlink and /proc to dump the helpe |
| CVE-2026-31415 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows in ip6_datagram_send_ctl() Yiming Qian reported : <quote> I believe I found a locally t |
| CVE-2026-31416 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink header size This is a followup to an old bug fix: NLMSG_DONE nee | |
| CVE-2026-31417 | Modified | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets Add a check to ensure that `x25_sock.fraglen` does not overflo |
| CVE-2026-31418 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in mtype_del mtype_del() counts empty slots below n->pos in k, | |
| CVE-2026-31419 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for th |
| CVE-2026-3142 | Deferred | 未確認 | CWE-79 | The Pinterest Site Verification plugin using Meta Tag plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_var' parameter in versions up to, and includin |
| CVE-2026-31420 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic br_mrp_start_test() and br_mrp_start_in_test() accep |
| CVE-2026-31421 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL pointer dereference on shared blocks The old-method path in fw_classify() calls tc |
| CVE-2026-31422 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: fix NULL pointer dereference on shared blocks flow_change() calls tcf_block_q() and deref |
| CVE-2026-31423 | Modified | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() m2sm() converts a u32 slope to a u64 scaled value. For |
| CVE-2026-31424 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Weiming Shi says: xt_ |
| CVE-2026-31425 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rds_ib_get_mr() extracts the rds_ib_conn |
| CVE-2026-31426 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() When ec_install_handlers() returns -EPROBE_DEF |
| CVE-2026-31427 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp process_sdp() declares union nf_ |
| CVE-2026-31428 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD __build_packet_message() manually co |
| CVE-2026-31429 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKB_SMALL_HEAD_CACHE_SIZE is intentionally set to |
| CVE-2026-31430 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds access when parsing extensions Leo reports an out-of-bounds access when parsing a cer |
| CVE-2026-31431 | Analyzed | 掲載 | CWE-1288, CWE-669 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the c |
| CVE-2026-31432 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix OOB write in QUERY_INFO for compound requests When a compound request such as READ + QUERY_INFO(Sec |
| CVE-2026-31433 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial OOB in get_file_all_info() for compound requests When a compound request consists of QUER |
| CVE-2026-31434 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix leak of kobject name for sub-group space_info When create_space_info_sub_group() allocates elements |
| CVE-2026-31435 | Modified | 未確認 | CWE-125, CWE-457 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix read abandonment during retry Under certain circumstances, all the remaining subrequests from a rea |
| CVE-2026-31436 | Modified | 未確認 | CWE-476, CWE-758 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() At the end of this function, d |
| CVE-2026-31437 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry When a write subrequest is marked NET |
| CVE-2026-31438 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators When a process crashes and the kernel writ |
| CVE-2026-31439 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap init error handling devm_regmap_init_mmio returns an ERR_PTR() upon error, | |
| CVE-2026-31440 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory During the device remove process, the device is reset, causing t |
| CVE-2026-31441 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset idxd_wq_disable_cleanup() which is called from the reset p |
| CVE-2026-31442 | Modified | 未確認 | CWE-125, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible invalid memory access after FLR In the case that the first Function Level Reset |
| CVE-2026-31443 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is disabled If reporting errors to the event log is not supporte | |
| CVE-2026-31444 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() smb_grant_oplock() has two issues in the oplock |
| CVE-2026-31445 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committed context One major usage of damon_call() is online DAMON para |
| CVE-2026-31446 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in update_super_work when racing with umount Commit b98535d09179 ("ext4: fix bug_on i |
| CVE-2026-31447 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with s_first_data_block != 0 bigalloc with s_first_data_block != 0 is not suppo |
| CVE-2026-31448 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual data On the mkdir/mknod path, when mapping logical blocks to phy |
| CVE-2026-31449 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ext4: validate p_idx bounds in ext4_ext_correct_indexes ext4_ext_correct_indexes() walks up the extent tree co |
| CVE-2026-31450 | Modified | 未確認 | CWE-362, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ext4: publish jinode after initialization ext4_inode_attach_jinode() publishes ei->jinode to concurrent users. |
| CVE-2026-31451 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Replace BUG_ON() with proper error h |
| CVE-2026-31452 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4_setattr() to conver |
| CVE-2026-31453 | Modified | 未確認 | CWE-416, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: xfs: avoid dereferencing log items after push callbacks After xfsaild_push_item() calls iop_push(), the log it |
| CVE-2026-31454 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfs_inode_item_push() and xfs_qm_dquot_logite |
| CVE-2026-31455 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfs: stop reclaim before pushing AIL during unmount The unmount sequence in xfs_unmount_flush_inodes() pushed |
| CVE-2026-31456 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split and refault The splitting of a PUD entry in walk_pud_range() ca |
| CVE-2026-31457 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr in repeat_call_fn damon_sysfs_repeat_call_fn() calls damon_sysfs_upd_tuned_ |
| CVE-2026-31458 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Multiple sysfs command paths dereference c |
| CVE-2026-31459 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Patch series "mm/damon/sysfs: fix mem |
| CVE-2026-31460 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if ext_caps is valid in BL setup LVDS connectors don't have extended backlight caps so | |
| CVE-2026-31461 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix drm_edid leak in amdgpu_dm [WHAT] When a sink is connected, aconnector->drm_edid was over |
| CVE-2026-31462 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue when process immediatel | |
| CVE-2026-31463 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iomap: fix invalid folio access when i_blkbits differs from I/O granularity Commit aa35dd5cbc06 ("iomap: fix i | |
| CVE-2026-31464 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() A malicious or compromised VIO server can retur |
| CVE-2026-31465 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB_I_NO_DATA_INTEGRITY sup | |
| CVE-2026-31466 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() On arm64 server, we found folio that get from mi |
| CVE-2026-31467 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: erofs: add GFP_NOIO in the bio completion if needed The bio completion path in the process context (e.g. dm-ve |
| CVE-2026-31468 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Fix double free in dma-buf feature The error path through vfio_pci_core_feature_dma_buf() ignores it |
| CVE-2026-31469 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false A UAF issue occurs wh |
| CVE-2026-31470 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host controlled value `quote_b |
| CVE-2026-31471 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: only publish mode_data after clone setup iptfs_clone_state() stores x->mode_data before allocatin |
| CVE-2026-31472 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: validate inner IPv4 header length in IPTFS payload Add validation of the inner IPv4 packet tot_le |
| CVE-2026-31473 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex MEDIA_REQUEST_IOC_REINIT can run concurrent |
| CVE-2026-31474 | Modified | 未確認 | CWE-364, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() isotp_sendmsg() uses only cmpxchg() on so->tx.state t |
| CVE-2026-31475 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: fix double free of devm_kzalloc() memory A previous change added NULL checks and cleanup for al |
| CVE-2026-31476 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: do not expire session on binding failure When a multichannel session binding request fails (e.g. wrong | |
| CVE-2026-31477 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leaks and NULL deref in smb2_lock() smb2_lock() has three error handling issues after list_d |
| CVE-2026-31478 | Modified | 未確認 | CWE-131 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() After this commit (e2b76ab8b5 |
| CVE-2026-31479 | Modified | 未確認 | CWE-662 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next During 3D workload, user is reporting hitting: [ 413.361679] WA |
| CVE-2026-31480 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential deadlock in cpu hotplug with osnoise The following sequence may leads deadlock in cpu h |
| CVE-2026-31481 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: tracing: Drain deferred trigger frees if kthread creation fails Boot-time trigger registration can fail before |
| CVE-2026-31482 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/entry: Scrub r12 register on kernel entry Before commit f33f2d4c7c80 ("s390/bp: remove TIF_ISOLATE_BP"), | |
| CVE-2026-31483 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is directly controlled | |
| CVE-2026-31484 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check __io_uring_show_fdinfo() iterates over pending SQEs and, |
| CVE-2026-31485 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue (UAF) There is a teardown order issue in the driver. The SPI cont |
| CVE-2026-31486 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) Protect regulator operations with mutex The regulator operations pmbus_regulator_get_volta |
| CVE-2026-31487 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: spi: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' ma |
| CVE-2026-31488 | Modified | 未確認 | CWE-1288, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/ |
| CVE-2026-31489 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path meson_spicc_probe() registers the controller with devm_spi_reg |
| CVE-2026-31490 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore When an error is returned from xe_sriov_pf_migration_restor |
| CVE-2026-31491 | Analyzed | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ |
| CVE-2026-31492 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize free_qp completion before using it In irdma_create_qp, if ib_copy_to_udata fails, it wi |
| CVE-2026-31493 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the admin command comple |
| CVE-2026-31494 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: net: macb: use the current queue number for stats There's a potential mismatch between the memory reserved for |
| CVE-2026-31495 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use netlink policy range checks Replace manual range and mask validations with netlink p | |
| CVE-2026-31496 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: skip expectations in other netns via proc Skip expectations that do not reside | |
| CVE-2026-31497 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: clamp SCO altsetting table indices btusb_work() maps the number of active SCO links to USB a | |
| CVE-2026-31498 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop l2cap_config_req() processes CONFIG_REQ for |
| CVE-2026-31499 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() l2cap_conn_del() calls cancel_delayed_work_sync() for both |
| CVE-2026-31500 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock btintel_hw_error() issues two __hci_cm |
| CVE-2026-31501 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path cppi5_hdesc_get_psdata() returns a poi |
| CVE-2026-31502 | Modified | 未確認 | CWE-843 | In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type confusion with non-Ethernet ports Similar to commit 950803f72547 ("bonding: fix type |
| CVE-2026-31503 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: udp: Fix wildcard bind conflict check when using hash2 When binding a udp_sock to a local address and port, UD | |
| CVE-2026-31504 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race `packet_release()` has a race window where `NETDEV_ |
| CVE-2026-31505 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() iavf incorrectly uses real_num_tx_queues for ETH_SS |
| CVE-2026-31506 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not need to free wol_irq since it was instantiated with devm_req |
| CVE-2026-31507 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer smc_rx_splice() allocates on |
| CVE-2026-31508 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Avoid releasing netdev before teardown completes The patch cited in the Fixes tag below chan |
| CVE-2026-31509 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nci_close_device nci_close_device() flushes rx_wq and tx_wq while |
| CVE-2026-31510 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Before using sk pointer, check if it is null. Fix |
| CVE-2026-31511 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete This fixes the condition check |
| CVE-2026-31512 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() l2cap_ecred_data_rcv | |
| CVE-2026-31513 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req Syzbot reported a KASAN stack-out-of-bo |
| CVE-2026-31514 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short read case For file-backed mount, IO requests are handled by vfs_iocb_ite | |
| CVE-2026-31515 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: af_key: validate families in pfkey_send_migrate() syzbot was able to trigger a crash in skb_put() [1] Issue i |
| CVE-2026-31516 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfrm: prevent policy_hthresh.work from racing with netns teardown A XFRM_MSG_NEWSPDINFO request can queue the |
| CVE-2026-31517 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly In iptfs_reassem_cont(), IP-TFS attempts |
| CVE-2026-31518 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full, esp_output_tail_tcp w |
| CVE-2026-31519 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create We have recently observed a number of subvolumes wit |
| CVE-2026-31520 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in apple_report_fixup() The apple_report_fixup() function was returning a newly |
| CVE-2026-31521 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: module: Fix kernel panic when a symbol st_shndx is out of bounds The module loader doesn't check for bounds of |
| CVE-2026-31522 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmouse_report_fixup() The magicmouse_report_fixup() function was ret |
| CVE-2026-31523 | Analyzed | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at run time. There's a |
| CVE-2026-31524 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup() The asus_report_fixup() function was returning a newly all |
| CVE-2026-31525 | Modified | 未確認 | CWE-190, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN The BPF interpreter's signed 32-bit division |
| CVE-2026-31526 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs process_bpf_exit_full() passes check_lock = !curframe to ch |
| CVE-2026-31527 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: driver core: platform: use generic driver_override infrastructure When a driver is probed through __driver_att |
| CVE-2026-31528 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: perf: Make sure to use pmu_ctx->pmu for groups Oliver reported that x86_pmu_del() ended up doing an out-of-bou |
| CVE-2026-31529 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix leakage in __construct_region() Failing the first sysfs_update_group() needs to explicitly kfr |
| CVE-2026-31530 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use after free of parent_port in cxl_detach_ep() cxl_detach_ep() is called during bottom-up remo |
| CVE-2026-31531 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() When querying a nexthop object via RTM_GETNEXTHOP | |
| CVE-2026-31532 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_r |
| CVE-2026-31533 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling in tls_do_encryption |
| CVE-2026-31534 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-31535 | Analyzed | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: smb: client: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv credits by cou |
| CVE-2026-31536 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a completion without IB_SEND_SIGNALED With smbdirect_send_batch processing w | |
| CVE-2026-31537 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.send_io.bcredits It turns out that our code will corrupt the stream | |
| CVE-2026-31538 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv credits by cou | |
| CVE-2026-31539 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available The logic off managing recv credits by co |
| CVE-2026-31540 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Check set_default_submission() before deferencing When the i915 driver firmware binaries are not |
| CVE-2026-31541 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix trace_marker copy link list updates When the "copy_trace_marker" option is enabled for an instanc |
| CVE-2026-31542 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Handle deconfigured sockets When a socket is deconfigured, it's mapped to SOCK_EMPTY (0xffff) | |
| CVE-2026-31543 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_ | |
| CVE-2026-31544 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix NULL dereference on notify error path Since commit b5daf93b809d1 ("firmware: arm_scmi: |
| CVE-2026-31545 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFC: nxp-nci: allow GPIOs to sleep Allow the firmware and enable GPIOs to sleep. This fixes a `WARN_ON' and a | |
| CVE-2026-31546 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL deref in bond_debug_rlb_hash_show rlb_clear_slave intentionally keeps RLB hash-table en |
| CVE-2026-31547 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix missing runtime PM reference in ccs_mode_store ccs_mode_store() calls xe_gt_reset() which internal | |
| CVE-2026-31548 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down When the nl80211 socket that originated a PMSR |
| CVE-2026-31549 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: i2c: cp2615: fix serial string NULL-deref at probe The cp2615 driver uses the USB device serial string as the |
| CVE-2026-3155 | Deferred | 未確認 | CWE-862 | The OneSignal – Web Push Notifications plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.8.0. This is due to the plugin not properly ve |
| CVE-2026-31550 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: Increase ASB control timeout The bcm2835_asb_control() function uses a tight pol | |
| CVE-2026-31551 | Analyzed | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. syzbot reported static_branch_dec() underfl |
| CVE-2026-31552 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Since upstream commit e75665dd |
| CVE-2026-31553 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() Using "(u64 __user *)hva + offset" to get the v | |
| CVE-2026-31554 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identical flags Nicholas reported that his LLM found it was possibl |
| CVE-2026-31555 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex: Clear stale exiting pointer in futex_lock_pi() retry path Fuzzying/stressing futexes triggered: WA | |
| CVE-2026-31556 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot before early return in quota scrub xchk_quota_item can return early after calling xch | |
| CVE-2026-31557 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: nvmet: move async event work off nvmet-wq For target nvmet_ctrl_free() flushes ctrl->async_event_work. If nvme |
| CVE-2026-31558 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust kvm_get_vcpu_by_cpuid() takes a cpuid parameter whose |
| CVE-2026-31559 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing NULL checks for kstrdup() 1. Replace "of_find_node_by_path("/")" with "of_root" to avoi |
| CVE-2026-31560 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-dw-dma: fix print error log when wait finish transaction If an error occurs, the device may not have | |
| CVE-2026-31561 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask Commit in Fixes added the FRED CR4 bit to the CR4 p | |
| CVE-2026-31562 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register The call to mipi_dsi_host_register |
| CVE-2026-31563 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: macb: Use dev_consume_skb_any() to free TX SKBs The napi_consume_skb() function is not intended to be cal | |
| CVE-2026-31564 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access() In function kvm_eiointc_regs_access( | |
| CVE-2026-31565 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix deadlock during netdev reset with active connections Resolve deadlock that occurs when user ex |
| CVE-2026-31566 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib amdgpu_amdkfd_submit_ib() submits a GPU job a |
| CVE-2026-31567 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask() Commit 35e4a69b2003f ("PM: sleep: Allow pm_restr |
| CVE-2026-31568 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add missing secure storage access fixups for donated memory There are special cases where secure stor |
| CVE-2026-31569 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Handle the case that EIOINTC's coremap is empty EIOINTC's coremap in eiointc_update_sw_coremap |
| CVE-2026-31570 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: can: gw: fix OOB heap access in cgw_csum_crc8_rel() cgw_csum_crc8_rel() correctly computes bounds-safe indices |
| CVE-2026-31571 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Unlink NV12 planes earlier unlink_nv12_plane() will clobber parts of the plane state potentially alr | |
| CVE-2026-31572 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: i2c: designware: amdisp: Fix resume-probe race condition issue Identified resume-probe race condition in kerne |
| CVE-2026-31573 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Fix kernel panic due to __initconst misuse Fix a kernel panic when probing the driver as a | |
| CVE-2026-31574 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the next_event_forced flag The prevention mechanism against timer interrupt | |
| CVE-2026-31575 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix hugetlb fault mutex hash calculation In mfill_atomic_hugetlb(), linear_page_index() is use | |
| CVE-2026-31576 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: media: hackrf: fix to not free memory after the device is registered in hackrf_probe() In hackrf driver, the f |
| CVE-2026-31577 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map The DAT inode's btree node cache (i |
| CVE-2026-31578 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: media: as102: fix to not free memory after the device is registered in as102_usb_probe() In as102_usb driver, |
| CVE-2026-31579 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit wg_netns_pre_exit() manually |
| CVE-2026-31580 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bcache: fix cached_dev.sb_bio use-after-free and crash In our production environment, we have received multipl |
| CVE-2026-31581 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6fire_chip_abort(), the chip struct is allocated as the ca |
| CVE-2026-31582 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (powerz) Fix use-after-free on USB disconnect After powerz_disconnect() frees the URB and releases the |
| CVE-2026-31583 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free in em28xx_v4l2_open() em28xx_v4l2_open() reads dev->v4l2 without holding dev |
| CVE-2026-31584 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix use-after-free in encoder release path The fops_vcodec_release() function frees t |
| CVE-2026-31585 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix nfeeds state corruption on start_streaming failure syzbot reported a memory leak in vidtv_ps |
| CVE-2026-31586 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() cgwb_release_workfn() calls css_put(wb->blkcg_css) |
| CVE-2026-31587 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm: move component registration to unmanaged version q6apm component registers dais dynamically |
| CVE-2026-31588 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use scratch field in MMIO fragment to hold small write values When exiting to userspace to service a |
| CVE-2026-31589 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mm: call ->free_folio() directly in folio_unmap_invalidate() We can only call filemap_free_folio() if we have |
| CVE-2026-31590 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION Drop the WARN in sev_pin_memory() on npage | |
| CVE-2026-31591 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Lock all vCPUs when synchronizing and e | |
| CVE-2026-31592 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock Take and hold kvm->lock for before che |
| CVE-2026-31593 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Reject synchronizing vCPU state t | |
| CVE-2026-31594 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown epf_ntb_epc_destroy() duplicates the teardown | |
| CVE-2026-31595 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup Disable the delayed work before clea | |
| CVE-2026-31596 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: handle invalid dinode in ocfs2_group_extend [BUG] kernel BUG at fs/ocfs2/resize.c:308! Oops: invalid op | |
| CVE-2026-31597 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY filemap_fault() may drop the mmap_lock before r |
| CVE-2026-31598 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dio_end_io_write ocfs2_unlink takes orphan dir inode_lock firs |
| CVE-2026-31599 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections syzbot reported a general prote |
| CVE-2026-31600 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Handle invalid large leaf mappings correctly It has been possible for a long time to mark ptes in t |
| CVE-2026-31601 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vfio/xe: Reorganize the init to decouple migration from reset Attempting to issue reset on VF devices that don | |
| CVE-2026-31602 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Limit PTP to a single page Commit 391e69143d0a increased CT_PTP_NUM from 1 to 4 to support 256 pl | |
| CVE-2026-31603 | Modified | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: staging: sm750fb: fix division by zero in ps_to_hz() ps_to_hz() is called from hw_sm750_crtc_set_mode() withou |
| CVE-2026-31604 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix device leak on probe failure Driver core holds a reference to the USB interface and its paren |
| CVE-2026-31605 | Modified | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avo |
| CVE-2026-31606 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: don't call cdev_init while cdev in use When calling unbind, then bind again, cdev_init rei | |
| CVE-2026-31607 | Modified | 未確認 | CWE-787, CWE-805 | In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receives a RET_SUBMIT respon |
| CVE-2026-31608 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() smb_direct_flush_ |
| CVE-2026-31609 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() smbd_send_batch_flush() al |
| CVE-2026-31610 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc The kernel ASN.1 BER decoder calls action |
| CVE-2026-31611 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: require 3 sub-authorities before reading sub_auth[2] parse_dacl() compares each ACE SID against sid_uni | |
| CVE-2026-31612 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate EaNameLength in smb2_get_ea() smb2_get_ea() reads ea_req->EaNameLength from the client request | |
| CVE-2026-31613 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns STATUS_STOPPED_ON_SYMLINK, smb |
| CVE-2026-31614 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in check_wsl_eas() The bounds check uses (u8 *)ea + nlen + 1 + vlen as |
| CVE-2026-31615 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: renesas_usb3: validate endpoint index in standard request handlers The GET_STATUS and SET/CLEAR_F |
| CVE-2026-31616 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() A broken/bored/mean USB host can overflow |
| CVE-2026-31617 | Modified | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() The block_len read from the host-supplied N |
| CVE-2026-31618 | Modified | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Av |
| CVE-2026-31619 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookup The status field in an EFW response i | |
| CVE-2026-31620 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 A malicious USB device with the TASCAM US-144MKI |
| CVE-2026-31621 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: bnge: return after auxiliary_device_uninit() in error path When auxiliary_device_add() fails, the error block |
| CVE-2026-31622 | Modified | 未確認 | CWE-120 | In the Linux kernel, the following vulnerability has been resolved: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler The NFC-A anti-collision cascade in dig |
| CVE-2026-31623 | Modified | 未確認 | CWE-120 | In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() A malicious USB device claiming to be a CDC Ph |
| CVE-2026-31624 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp report_size in s32ton() to avoid undefined shift s32ton() shifts by n-1 where n is the field' | |
| CVE-2026-31625 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Add HID_CLAIMED_INPUT g |
| CVE-2026-31626 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() Initialize le_tmp64 to zero in rtw_BIP_verify() to |
| CVE-2026-31627 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: s3c24xx: check the size of the SMBUS message before using it The first byte of an i2c SMBUS message is th | |
| CVE-2026-31628 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU: Fix FPDSS on Zen1 Zen1's hardware divider can leave, under certain circumstances, partial results fro | |
| CVE-2026-31629 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: add missing return after LLCP_CLOSED checks In nfc_llcp_recv_hdlc() and nfc_llcp_recv_disc(), when |
| CVE-2026-31630 | Modified | 未確認 | CWE-121 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: proc: size address buffers for %pISpc output The AF_RXRPC procfs helpers format local and remote socket |
| CVE-2026-31631 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() Fix rxgk_do_verify_authenticator() to check the b |
| CVE-2026-31632 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of rxgk context in rxgk_verify_response() Fix rxgk_verify_response() to clean up the rxgk cont |
| CVE-2026-31633 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix integer overflow in rxgk_verify_response() In rxgk_verify_response(), there's a potential integer o |
| CVE-2026-31634 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix reference count leak in rxrpc_server_keyring() This patch fixes a reference count leak in rxrpc_ser | |
| CVE-2026-31635 | Modified | 未確認 | CWE-130 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix oversized RESPONSE authenticator length check rxgk_verify_response() decodes auth_len from the pack |
| CVE-2026-31636 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix RESPONSE authenticator parser OOB read rxgk_verify_authenticator() copies auth_len bytes into a tem |
| CVE-2026-31637 | Modified | 未確認 | CWE-754 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: reject undecryptable rxkad response tickets rxkad_decrypt_ticket() decrypts the RXKAD response ticket a |
| CVE-2026-31638 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Only put the call ref if one was acquired rxrpc_input_packet_on_conn() can process a to-client packet a |
| CVE-2026-31639 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key reference count leak from call->key When creating a client call in rxrpc_alloc_client_call(), t | |
| CVE-2026-31640 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial In rxrpc_post_response(), the code sho |
| CVE-2026-31641 | Modified | 未確認 | CWE-125, CWE-190 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix RxGK token loading to check bounds rxrpc_preparse_xdr_yfs_rxgk() reads the raw key length and ticke |
| CVE-2026-31642 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call removal to use RCU safe deletion Fix rxrpc call removal from the rxnet->calls list to use list |
| CVE-2026-31643 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key parsing memleak In rxrpc_preparse_xdr_yfs_rxgk(), the memory attached to token->rxgk can be lea |
| CVE-2026-31644 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() When lan966x_fdma_reload() fails to allocat |
| CVE-2026-31645 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page pool leak in error paths lan966x_fdma_rx_alloc() creates a page pool but does not destr |
| CVE-2026-31646 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() page_pool_create() can return |
| CVE-2026-31647 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling Switch from using the completion's raw spin | |
| CVE-2026-31648 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() When running stress-ng on my Arm64 machi |
| CVE-2026-31649 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix integer underflow in chain mode The jumbo_frm() chain-mode implementation unconditionally com |
| CVE-2026-31650 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on disconnect The vub300 driver maintains an explicit reference count for the |
| CVE-2026-31651 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix NULL-deref on disconnect Make sure to deregister the controller before dropping the reference |
| CVE-2026-31652 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: deallocate damon_call() failure leaking damon_ctx damon_stat_start() always allocates the modul |
| CVE-2026-31653 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails damon_call() for repeat_call_control of DAMO | |
| CVE-2026-31654 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix memory leak in __mmap_region() commit 605f6586ecf7 ("mm/vma: do not leak memory when .mmap_prepare |
| CVE-2026-31655 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled Keep the NOC_HDCP clock always enabled to fix the p | |
| CVE-2026-31656 | Modified | 未確認 | CWE-191, CWE-362 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat A use-after-free / refcount underflow is po |
| CVE-2026-31657 | Modified | 未確認 | CWE-416, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw an |
| CVE-2026-31658 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() When dma_map_single() fails in tse_star |
| CVE-2026-31659 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject oversized global TT response buffers batadv_tt_prepare_tvlv_global_data() builds the alloca |
| CVE-2026-31660 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: allocate rx skb before consuming bytes pn532_receive_buf() reports the number of accepted bytes to | |
| CVE-2026-31661 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: Fix dma_free_coherent() size dma_alloc_consistent() may change the size to align it. The new s | |
| CVE-2026-31662 | Modified | 未確認 | CWE-190, CWE-191 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG The GRP_ACK_MSG handler in tipc_group_proto_rcv() curre |
| CVE-2026-31663 | Modified | 未確認 | CWE-416, CWE-826 | In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_HOOK After async crypto completes, xfrm_input_resume() call |
| CVE-2026-31664 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: clear trailing padding in build_polexpire() build_expire() clears the trailing padding bytes of struct x | |
| CVE-2026-31665 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix use-after-free in timeout object destroy nft_ct_timeout_obj_destroy() frees the timeout |
| CVE-2026-31666 | Modified | 未確認 | CWE-754 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() After commit 1618aa3c2e01 (" |
| CVE-2026-31667 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency with ff-core A lockdep circular locking dependency warning can |
| CVE-2026-31668 | Modified | 未確認 | CWE-459 | In the Linux kernel, the following vulnerability has been resolved: seg6: separate dst_cache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dst_cache |
| CVE-2026-31669 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in __inet_lookup_established The ehash table lookups are lockless and rely on S |
| CVE-2026-31670 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: rfkill: prevent unlimited numbers of rfkill events from being created Userspace can create an unlimited n | |
| CVE-2026-31671 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_report() struct xfrm_user_report is a __u8 proto field followed by a struct |
| CVE-2026-31672 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00usb: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources shoul |
| CVE-2026-31673 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: af_unix: read UNIX_DIAG_VFS data under unix_state_lock Exact UNIX diag lookups hold a reference to the socket, |
| CVE-2026-31674 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Reject rt match rules whose addrnr exceeds IP6T_ |
| CVE-2026-31675 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_netem: fix out-of-bounds access in packet corruption In netem_enqueue(), the packet corruption |
| CVE-2026-31676 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: only handle RESPONSE during service challenge Only process RESPONSE packets while the service connectio |
| CVE-2026-31677 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - limit RX SG extraction by receive buffer budget Make af_alg_get_rsgl() limit each RX scatterl | |
| CVE-2026-31678 | Modified | 未確認 | CWE-362, CWE-367 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTE |
| CVE-2026-31679 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/set_masked payload length validate_set() accepted OVS_KEY_ATTR_MPLS as variable |
| CVE-2026-31680 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: flowlabel: defer exclusive option free until RCU teardown `ip6fl_seq_show()` walks the global flowl |
| CVE-2026-31681 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_multiport: validate range encoding in checkentry ports_match_v1() treats any non-zero pflags ent | |
| CVE-2026-31682 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: linearize skb before parsing ND options br_nd_send() parses neighbour discovery options fr |
| CVE-2026-31683 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: avoid OGM aggregation when skb tailroom is insufficient When OGM aggregation state is toggled at r | |
| CVE-2026-31684 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: sched: act_csum: validate nested VLAN headers tcf_csum_act() walks nested VLAN headers directly from skb- | |
| CVE-2026-31685 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from |
| CVE-2026-31686 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: mm/kasan: fix double free for kasan pXds kasan_free_pxd() assumes the page table is always struct page aligned |
| CVE-2026-31687 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe() Commit 11a78b794496 ("ARM: OMAP: MPUIO wake updates") registers |
| CVE-2026-31688 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-31689 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edac_mc_alloc() When the mci->pvt_info allocation in edac_mc_alloc() fails |
| CVE-2026-31690 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: firmware: thead: Fix buffer overflow and use standard endian macros Addresses two issues in the TH1520 AON fir |
| CVE-2026-31691 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: igb: remove napi_synchronize() in igb_down() When an AF_XDP zero-copy application terminates abruptly (e.g., k | |
| CVE-2026-31692 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capabili | |
| CVE-2026-31693 | Modified | 未確認 | CWE-665, CWE-908 | In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the sta |
| CVE-2026-3177 | Deferred | 未確認 | CWE-345 | The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in |
| CVE-2026-31786 | Modified | 未確認 | CWE-120, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c The build id returned by HYPERVISOR_xen_version(XENVER_build_i |
| CVE-2026-31787 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but neither .may |
| CVE-2026-31789 | Modified | 未確認 | CWE-787 | Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overfl |
| CVE-2026-31790 | Modified | 未確認 | CWE-754 | Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact sum |
| CVE-2026-31818 | Analyzed | 未確認 | CWE-1188, CWE-918 | Budibase is an open-source low-code platform. Prior to version 3.33.4, a server-side request forgery (SSRF) vulnerability exists in Budibase's REST datasource connector. The platfo |
| CVE-2026-3184 | Analyzed | 未確認 | CWE-289 | A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before sett |
| CVE-2026-31842 | Modified | 未確認 | CWE-444 | Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c. The is_chunked_tr |
| CVE-2026-31843 | Deferred | 未確認 | CWE-284 | The goodoneuz/pay-uz Laravel package (<= 2.2.24) contains a critical vulnerability in the /payment/api/editable/update endpoint that allows unauthenticated attackers to overwrite e |
| CVE-2026-31845 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6.4 and earlier in the Zadarma telephony API endpoint (/api/tel/zadarma.php). The applicati |
| CVE-2026-31908 | Analyzed | 未確認 | CWE-75 | Header injection vulnerability in Apache APISIX. The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Ap |
| CVE-2026-31923 | Analyzed | 未確認 | CWE-319 | Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. This can occur due to `ssl_verify` in openid-connect plugin configuration being set to false by def |
| CVE-2026-31924 | Analyzed | 未確認 | CWE-319 | Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. tencent-cloud-cls log export uses plaintext HTTP This issue affects Apache APISIX: from 2.99.0 thro |
| CVE-2026-31927 | Modified | 未確認 | CWE-23 | Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized SSH access when |
| CVE-2026-31931 | Analyzed | 未確認 | CWE-476 | Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, use of the "tls.alpn" rule keyword can cause Suricata to crash with a NULL dereference. T |
| CVE-2026-31932 | Analyzed | 未確認 | CWE-407 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched i |
| CVE-2026-31933 | Analyzed | 未確認 | CWE-407 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. Thi |
| CVE-2026-31934 | Analyzed | 未確認 | CWE-407 | Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages ov |
| CVE-2026-31935 | Analyzed | 未確認 | CWE-400, CWE-770 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in t |
| CVE-2026-31937 | Analyzed | 未確認 | CWE-407 | Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DCERPC buffering can lead to a performance degradation. This issue has been patched in versi |
| CVE-2026-31939 | Analyzed | 未確認 | CWE-22, CWE-73 | Chamilo LMS is a learning management system. Prior to 1.11.38, there is a path traversal in main/exercise/savescores.php leading to arbitrary file feletion. User input from $_REQUE |
| CVE-2026-31940 | Analyzed | 未確認 | CWE-384 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, in main/lp/aicc_hacp.php, user-controlled request parameters are directly used to set the PHP session |
| CVE-2026-31941 | Analyzed | 未確認 | CWE-918 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS contains a Server-Side Request Forgery (SSRF) vulnerability in the Social Wall feature. Th |
| CVE-2026-31952 | Analyzed | 未確認 | CWE-184, CWE-89 | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Versions 1.7 through 4.4.0 have an SQL injection vulnerabi |
| CVE-2026-31953 | Analyzed | 未確認 | CWE-79 | Xibo is an open source digital signage platform with a web content management system and Windows display player software. A stored Cross-Site Scripting (XSS) vulnerability in versi |
| CVE-2026-31955 | Analyzed | 未確認 | CWE-918 | Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated Server-Side Request Forgery (SSRF) vulner |
| CVE-2026-31956 | Analyzed | 未確認 | CWE-639 | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to version 4.4.1, any authenticated user can manuall |
| CVE-2026-31987 | Analyzed | 未確認 | CWE-532 | JWT Tokens used by tasks were exposed in logs. This could allow UI users to act as Dag Authors. Users are advised to upgrade to Airflow version that contains fix. Users are recom |
| CVE-2026-3199 | Analyzed | 未確認 | CWE-502 | A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to exec |
| CVE-2026-32068 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32069 | Analyzed | 未確認 | CWE-415 | Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32070 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32071 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-32072 | Analyzed | 未確認 | CWE-287 | Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally. |
| CVE-2026-32073 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32074 | Analyzed | 未確認 | CWE-415 | Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32075 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32076 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32077 | Modified | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32078 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32079 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-32080 | Analyzed | 未確認 | CWE-416 | Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32081 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-32082 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32083 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32084 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-32085 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to disclose information locally. |
| CVE-2026-32086 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privi |
| CVE-2026-32087 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32088 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to bypass a security featur |
| CVE-2026-32089 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32090 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to elevate privileges local |
| CVE-2026-32091 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges |
| CVE-2026-32093 | Analyzed | 未確認 | CWE-122, CWE-362, CWE-367 | Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privi |
| CVE-2026-32105 | Analyzed | 未確認 | CWE-354 | xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code (MAC) signature of encrypted RDP packets whe |
| CVE-2026-32107 | Analyzed | 未確認 | CWE-273 | xrdp is an open source RDP server. In versions through 0.10.5, the session execution component did not properly handle an error during the privilege drop process. This improper pri |
| CVE-2026-32135 | Analyzed | 未確認 | CWE-122 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Versions prior to 0.24.11 have a remotely triggerable heap buffer overflow in the `uri_param_parse` function o |
| CVE-2026-32144 | Modified | 未確認 | CWE-295, CWE-347 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows OCSP designated-responder authorization bypass via missing signature verification |
| CVE-2026-32145 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing. The multipart_body function bypas |
| CVE-2026-32146 | Modified | 未確認 | CWE-22 | Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download. Dependency names |
| CVE-2026-32147 | Modified | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to modify file a |
| CVE-2026-32148 | Analyzed | 未確認 | CWE-354, CWE-494 | Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConverger module) allows dependency integrity bypass via unverified lockfile checksums. Hex st |
| CVE-2026-32149 | Analyzed | 未確認 | CWE-122, CWE-191, CWE-20 | Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-32150 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privi |
| CVE-2026-32151 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network. |
| CVE-2026-32152 | Analyzed | 未確認 | CWE-416 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32153 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32154 | Analyzed | 未確認 | CWE-416 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32155 | Analyzed | 未確認 | CWE-416 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32156 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally. |
| CVE-2026-32157 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-32158 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-32159 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-32160 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-32162 | Analyzed | 未確認 | CWE-349 | Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-32163 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges local |
| CVE-2026-32164 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges local |
| CVE-2026-32165 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32167 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32168 | Analyzed | 未確認 | CWE-20 | Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32171 | Analyzed | 未確認 | CWE-522 | Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-32172 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network. |
| CVE-2026-32173 | Analyzed | 未確認 | CWE-287, CWE-863 | Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-32176 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32178 | Modified | 未確認 | CWE-138 | Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-32181 | Modified | 未確認 | CWE-269 | Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally. |
| CVE-2026-32183 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally. |
| CVE-2026-32184 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32186 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-32188 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-32189 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-3219 | Awaiting Analysis | 未確認 | CWE-434 | pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation be |
| CVE-2026-32190 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-32192 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32195 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32196 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-32197 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-32198 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-32199 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-32200 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
| CVE-2026-32201 | Analyzed | 掲載 | CWE-20 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-32202 | Analyzed | 掲載 | CWE-693 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-32203 | Modified | 未確認 | CWE-121, CWE-20, CWE-787 | Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. |
| CVE-2026-32210 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-32211 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-32212 | Analyzed | 未確認 | CWE-269, CWE-59 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. |
| CVE-2026-32213 | Analyzed | 未確認 | CWE-285, CWE-863 | Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-32214 | Analyzed | 未確認 | CWE-284 | Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. |
| CVE-2026-32215 | Analyzed | 未確認 | CWE-532 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-32216 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally. |
| CVE-2026-32217 | Analyzed | 未確認 | CWE-532 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-32218 | Analyzed | 未確認 | CWE-532 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-32219 | Analyzed | 未確認 | CWE-362, CWE-415 | Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32220 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-32221 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. |
| CVE-2026-32222 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32223 | Modified | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-32224 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32225 | Modified | 未確認 | CWE-693 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-32226 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network. |
| CVE-2026-32228 | Analyzed | 未確認 | CWE-863 | UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue. |
| CVE-2026-32252 | Analyzed | 未確認 | CWE-285 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 4.9.0, a cross-tenant authorization bypass e |
| CVE-2026-32270 | Deferred | 未確認 | CWE-200, CWE-862 | Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 and 5.0.0 through 5.5.4, the PaymentsController::actionPay discloses some order data to unau |
| CVE-2026-32271 | Deferred | 未確認 | CWE-89 | Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 and 5.0.0 through 5.5.4, there is an SQL injection vulnerability in the Commerce TotalRevenu |
| CVE-2026-32272 | Deferred | 未確認 | CWE-89 | Craft Commerce is an ecommerce platform for Craft CMS. In versions 5.0.0 through 5.5.4, an SQL injection vulnerability exists where the ProductQuery::hasVariant and VariantQuery::h |
| CVE-2026-32280 | Modified | 未確認 | CWE-770 | During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which ca |
| CVE-2026-32281 | Analyzed | 未確認 | CWE-295 | Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial |
| CVE-2026-32282 | Analyzed | 未確認 | CWE-59 | On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies |
| CVE-2026-32283 | Modified | 未確認 | CWE-764, CWE-770 | If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. |
| CVE-2026-32288 | Analyzed | 未確認 | CWE-770 | tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" for |
| CVE-2026-32289 | Analyzed | 未確認 | CWE-79 | Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template |
| CVE-2026-32311 | Analyzed | 未確認 | CWE-78 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Flowsint allows a user to create investigations, w |
| CVE-2026-32316 | Modified | 未確認 | CWE-122, CWE-190 | jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_string_append() and jvp_string_copy_replace_bad functions, where |
| CVE-2026-32324 | Analyzed | 未確認 | CWE-321 | Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, enabling decryption of MQTT traffic and potential interaction with device mess |
| CVE-2026-3239 | Deferred | 未確認 | CWE-79 | The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonial_view shortcode in all versions up to, and including, 3.2.21 d |
| CVE-2026-3243 | Deferred | 未確認 | CWE-22 | The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up t |
| CVE-2026-3254 | Analyzed | 未確認 | CWE-1021 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user to load unaut |
| CVE-2026-32588 | Analyzed | 未確認 | CWE-400 | Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to v |
| CVE-2026-32589 | Modified | 未確認 | CWE-639 | A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in prog |
| CVE-2026-3259 | Awaiting Analysis | 未確認 | CWE-209 | A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authen |
| CVE-2026-32590 | Modified | 未確認 | CWE-502 | A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered |
| CVE-2026-32591 | Modified | 未確認 | CWE-918 | A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network con |
| CVE-2026-32602 | Analyzed | 未確認 | CWE-367 | Homarr is an open-source dashboard. Prior to 1.57.0, the user registration endpoint (/api/trpc/user.register) is vulnerable to a race condition that allows an attacker to create mu |
| CVE-2026-32604 | Analyzed | 未確認 | CWE-20 | Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands v |
| CVE-2026-32605 | Analyzed | 未確認 | CWE-125, CWE-193 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, an untrusted peer could cr |
| CVE-2026-32613 | Analyzed | 未確認 | CWE-94 | Spinnaker is an open source, multi-cloud continuous delivery platform. Echo like some other services, uses SPeL (Spring Expression Language) to process information - specifically a |
| CVE-2026-32623 | Analyzed | 未確認 | CWE-122 | xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in the NeutrinoRDP module. When proxying RDP sessions from xrdp to ano |
| CVE-2026-32624 | Analyzed | 未確認 | CWE-122 | xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environments where domain_user_separator i |
| CVE-2026-32629 | Analyzed | 未確認 | CWE-20, CWE-79 | phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, an unauthenticated attacker can submit a guest FAQ with an email address that is syntactically valid per RFC |
| CVE-2026-32631 | Awaiting Analysis | 未確認 | CWE-200 | Git for Windows is the Windows port of Git. Versions prior to 2.53.0.windows.3 do not have protections that prevent attackers from obtaining a user's NTLM hash. The NTLM hash can b |
| CVE-2026-32644 | Awaiting Analysis | 未確認 | CWE-321 | Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys. |
| CVE-2026-32646 | Analyzed | 未確認 | CWE-306 | A specific administrative endpoint is accessible without proper authentication, exposing device management functions. |
| CVE-2026-32648 | Analyzed | 未確認 | CWE-862 | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnaissance against |
| CVE-2026-32649 | Awaiting Analysis | 未確認 | CWE-78 | A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras. |
| CVE-2026-32650 | Analyzed | 未確認 | CWE-757 | Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and enabling una |
| CVE-2026-32655 | Analyzed | 未確認 | CWE-272 | Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially e |
| CVE-2026-32662 | Analyzed | 未確認 | CWE-489 | Development and test API endpoints are present that mirror production functionality. |
| CVE-2026-32679 | Analyzed | 未確認 | CWE-427 | The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (CanonNWCamPlugin |
| CVE-2026-32688 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion. Plug.Cowbo |
| CVE-2026-32690 | Analyzed | 未確認 | CWE-668 | Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked. |
| CVE-2026-32712 | Analyzed | 未確認 | CWE-79 | Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Scripting (XSS) vulnerability exi |
| CVE-2026-32762 | Analyzed | 未確認 | CWE-436 | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21 and 3.2.0 to before 3.2.6, Rack::Utils.forwarded_values parses the RFC 7239 Forwarded header |
| CVE-2026-32860 | Analyzed | 未確認 | CWE-787 | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVIEW. This vulnerability may result in information disclosure |
| CVE-2026-32861 | Analyzed | 未確認 | CWE-787 | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVCLASS file in NI LabVIEW. This vulnerability may result in information disclosu |
| CVE-2026-32862 | Analyzed | 未確認 | CWE-787 | There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabVIEW. This vulnerability may result in information disclosur |
| CVE-2026-32863 | Analyzed | 未確認 | CWE-125 | There is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation() in NI LabVIEW. This vulnerability may result in information d |
| CVE-2026-32864 | Analyzed | 未確認 | CWE-125 | There is a memory corruption vulnerability due to an out-of-bounds read in mgcore_SH_25_3!aligned_free() in NI LabVIEW. This vulnerability may result in information disclosure or |
| CVE-2026-32870 | Analyzed | 未確認 | CWE-91 | Kirby is an open-source content management system. Kirby's `Xml::value()` method has special handling for `<![CDATA[ ]]>` blocks. If the input value is already valid `CDATA`, it is |
| CVE-2026-32871 | Modified | 未確認 | CWE-918 | FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifica |
| CVE-2026-32885 | Analyzed | 未確認 | CWE-22 | DDEV is an open-source tool for running local web development environments for PHP and Node.js. Versions prior to 1.25.2 have unsanitized extraction in both `Untar()` and `Unzip()` |
| CVE-2026-32892 | Analyzed | 未確認 | CWE-78 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS contains an OS Command Injection vulnerability in the file move function. The move() funct |
| CVE-2026-32893 | Analyzed | 未確認 | CWE-79 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, a Reflected Cross-Site Scripting (XSS) vulnerability in the exercise question list admin panel allows an attacker |
| CVE-2026-32894 | Analyzed | 未確認 | CWE-476, CWE-639 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure Direct Object Reference (IDOR) vulnerability in the gradebook result view page allows any |
| CVE-2026-32925 | Analyzed | 未確認 | CWE-121 | V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom. Opening a crafted V7 file may lead to arbitrary code execution o |
| CVE-2026-32926 | Analyzed | 未確認 | CWE-125 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Opening a crafted V7 file may lead to information disclosure from the aff |
| CVE-2026-32927 | Analyzed | 未確認 | CWE-125 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from |
| CVE-2026-32928 | Analyzed | 未確認 | CWE-121 | V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution |
| CVE-2026-32929 | Analyzed | 未確認 | CWE-125 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may lead to information disclosure from the affected prod |
| CVE-2026-32930 | Analyzed | 未確認 | CWE-639 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure Direct Object Reference (IDOR) vulnerability in the gradebook evaluation edit page allows |
| CVE-2026-32931 | Analyzed | 未確認 | CWE-434 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an unrestricted file upload vulnerability in the exercise sound upload function allows an authenticate |
| CVE-2026-32932 | Analyzed | 未確認 | CWE-601 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Open Redirect vulnerability in the session course edit page allows an attacker to redirect an authe |
| CVE-2026-32952 | Analyzed | 未確認 | CWE-190 | go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic |
| CVE-2026-32955 | Analyzed | 未確認 | CWE-121 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a stack-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be executed on t |
| CVE-2026-32956 | Analyzed | 未確認 | CWE-122 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be executed on th |
| CVE-2026-32957 | Analyzed | 未確認 | CWE-306 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue on firmware maintenance. Arbitrary file may be uploaded on |
| CVE-2026-32958 | Analyzed | 未確認 | CWE-321 | SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fake firmware update. |
| CVE-2026-32959 | Analyzed | 未確認 | CWE-327 | SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a broken or risky cryptographic algorithm. Information in the traffic may be retrieved vi |
| CVE-2026-3296 | Deferred | 未確認 | CWE-502 | The Everest Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.3 via deserialization of untrusted input from form entry meta |
| CVE-2026-32960 | Analyzed | 未確認 | CWE-226 | SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a sensitive information in resource not removed before reuse. An attacker may login to the device |
| CVE-2026-32961 | Analyzed | 未確認 | CWE-122 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in packet data processing of sx_smpd. Processing a crafted packet may |
| CVE-2026-32962 | Analyzed | 未確認 | CWE-306 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentica |
| CVE-2026-32963 | Analyzed | 未確認 | CWE-79 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a reflected cross-site scripting vulnerability. When a user logs in to the affected device and access some craft |
| CVE-2026-32964 | Analyzed | 未確認 | CWE-93 | SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configura |
| CVE-2026-32965 | Analyzed | 未確認 | CWE-1188 | Initialization of a resource with an insecure default vulnerability exists in SD-330AC and AMC Manager provided by silex technology, Inc. When the affected device is connected to t |
| CVE-2026-3298 | Awaiting Analysis | 未確認 | CWE-787 | The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an ou |
| CVE-2026-3299 | Deferred | 未確認 | CWE-79 | The WP YouTube Lyte plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lyte' shortcode in all versions up to, and including, 1.7.29 due to insuffic |
| CVE-2026-32990 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614. This issue affects Apache Tomcat: from 11.0.15 through 11.0.19, from 10.1.50 t |
| CVE-2026-33005 | Analyzed | 未確認 | CWE-274 | Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their credentials and get files/sub-folders of an |
| CVE-2026-33018 | Analyzed | 未確認 | CWE-416 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a Use-After-Free vulnerability via the load_gif() function in fromgi |
| CVE-2026-33019 | Analyzed | 未確認 | CWE-125, CWE-190 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow leading to an out-of-bounds heap read in the --c |
| CVE-2026-33020 | Analyzed | 未確認 | CWE-122, CWE-190 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow which leads to a heap buffer overflow via sixel_ |
| CVE-2026-33021 | Analyzed | 未確認 | CWE-416 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a use-after-free vulnerability in sixel_encoder_encode_bytes() becau |
| CVE-2026-33023 | Analyzed | 未確認 | CWE-416 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. In versions 1.8.7 and prior, when built with the --with-gdk-pixbuf2 option, a use-after-free vulnerab |
| CVE-2026-33031 | Analyzed | 未確認 | CWE-284, CWE-863 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, a user who was disabled by an administrator can use previously issued API tokens for up to the to |
| CVE-2026-33033 | Analyzed | 未確認 | CWE-407 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `MultiPartParser` allows remote attackers to degrade performance by submitting multipart uplo |
| CVE-2026-33034 | Analyzed | 未確認 | CWE-770 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. ASGI requests with a missing or understated `Content-Length` header could bypass the `DATA_U |
| CVE-2026-3307 | Analyzed | 未確認 | CWE-639 | An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed an attacker with admin access on one repository to modify the secret scanning push pro |
| CVE-2026-33076 | Analyzed | 未確認 | CWE-22 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the haproxy_section_save interface presents a vulnerability that co |
| CVE-2026-33077 | Analyzed | 未確認 | CWE-22 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the oldconfig parameter in the haproxy_section_save interface has a |
| CVE-2026-33078 | Analyzed | 未確認 | CWE-89 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 8.2.6.4 have a SQL injection vulnerability in the haproxy_section_save func |
| CVE-2026-33082 | Analyzed | 未確認 | CWE-89 | DataEase is an open source data visualization analysis tool. Versions 2.10.20 and below contain a SQL injection vulnerability in the dataset export functionality. The expressionTre |
| CVE-2026-33083 | Analyzed | 未確認 | CWE-89 | DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the orderDirection parameter used in datas |
| CVE-2026-33084 | Analyzed | 未確認 | CWE-89 | DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the sort parameter of the /de2api/datasetD |
| CVE-2026-33088 | Analyzed | 未確認 | CWE-89 | Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement. |
| CVE-2026-3309 | Deferred | 未確認 | CWE-94 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode |
| CVE-2026-33092 | Deferred | 未確認 | CWE-15 | Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True I |
| CVE-2026-33093 | Analyzed | 未確認 | CWE-862 | Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing camera, exposing visual information about the deployment env |
| CVE-2026-33095 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-33096 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. |
| CVE-2026-33098 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33099 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33100 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33101 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33102 | Analyzed | 未確認 | CWE-601 | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-33103 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally. |
| CVE-2026-33104 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33105 | Analyzed | 未確認 | CWE-285, CWE-863 | Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-33107 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-3311 | Deferred | 未確認 | CWE-79 | The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the |
| CVE-2026-33114 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-33115 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-33116 | Modified | 未確認 | CWE-20, CWE-400, CWE-776, CWE-835 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network. |
| CVE-2026-33118 | Modified | 未確認 | CWE-451 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-33119 | Analyzed | 未確認 | CWE-451 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-33120 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-33121 | Analyzed | 未確認 | CWE-89 | DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the API datasource saving process. The deT |
| CVE-2026-33122 | Analyzed | 未確認 | CWE-89 | DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the API datasource update process. When a |
| CVE-2026-33141 | Analyzed | 未確認 | CWE-639, CWE-862 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, an Insecure Direct Object Reference (IDOR) vulnerability in the REST API stats endpoint allows any authenticated u |
| CVE-2026-33145 | Analyzed | 未確認 | CWE-78 | xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShe |
| CVE-2026-33146 | Analyzed | 未確認 | CWE-285 | Docmost is open-source collaborative wiki and documentation software. An authorization bypass vulnerability in versions 0.70.0 through 0.70.2 exposes restricted child page titles a |
| CVE-2026-3317 | Deferred | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not properly sa |
| CVE-2026-33175 | Analyzed | 未確認 | CWE-287, CWE-290 | OAuthenticator is software that allows OAuth2 identity providers to be plugged in and used with JupyterHub. Prior to version 17.4.0, an authentication bypass vulnerability in oauth |
| CVE-2026-33184 | Analyzed | 未確認 | CWE-191 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, the discovery handler acce |
| CVE-2026-33193 | Analyzed | 未確認 | CWE-79 | Docmost is open-source collaborative wiki and documentation software. Versions prior to 0.70.0 are vulnerable to a stored cross-site scripting (XSS) attack due to improper handling |
| CVE-2026-33207 | Analyzed | 未確認 | CWE-89 | DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the /datasource/getTableField endpoint. Th |
| CVE-2026-33208 | Analyzed | 未確認 | CWE-78 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the /config/ < service > /find-in-config endpoint in Roxy-WI fails |
| CVE-2026-33212 | Analyzed | 未確認 | CWE-284 | Weblate is a web based localization tool. In versions prior to 5.17, the tasks API didn't verify user access for pending tasks. This could expose logs of in-progress operations to |
| CVE-2026-33214 | Analyzed | 未確認 | CWE-862 | Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn't enforce proper access control. Th |
| CVE-2026-33220 | Analyzed | 未確認 | CWE-200, CWE-22 | Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn't perform proper access control. Th |
| CVE-2026-33227 | Analyzed | 未確認 | CWE-22 | Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache Ac |
| CVE-2026-33229 | Analyzed | 未確認 | CWE-862 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an improperly protected scripting API allows a |
| CVE-2026-3323 | Analyzed | 未確認 | CWE-306 | An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes. |
| CVE-2026-3324 | Analyzed | 未確認 | CWE-288 | Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration. |
| CVE-2026-3325 | Deferred | 未確認 | CWE-89 | SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint. The vulnerability arises from inadeq |
| CVE-2026-33254 | Analyzed | 未確認 | CWE-770 | An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are dis |
| CVE-2026-33256 | Analyzed | 未確認 | CWE-770 | An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by defaul |
| CVE-2026-33257 | Analyzed | 未確認 | CWE-770 | An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by defaul |
| CVE-2026-33258 | Analyzed | 未確認 | CWE-770 | By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressive NSEC(3) caches. |
| CVE-2026-33259 | Analyzed | 未確認 | CWE-416 | Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the recursor. Normally concurrent transfers of the same RPZ zon |
| CVE-2026-33260 | Analyzed | 未確認 | CWE-770 | An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by defaul |
| CVE-2026-33261 | Analyzed | 未確認 | CWE-353 | A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service. |
| CVE-2026-33262 | Analyzed | 未確認 | CWE-476 | An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default. |
| CVE-2026-33266 | Analyzed | 未確認 | CWE-321 | Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being au |
| CVE-2026-33271 | Analyzed | 未確認 | CWE-732 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902. |
| CVE-2026-33273 | Analyzed | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an adminis |
| CVE-2026-33277 | Analyzed | 未確認 | CWE-78 | An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user. |
| CVE-2026-3330 | Deferred | 未確認 | CWE-89 | The Form Maker by 10Web plugin for WordPress is vulnerable to SQL Injection via the 'ip_search', 'startdate', 'enddate', 'username_search', and 'useremail_search' parameters in all |
| CVE-2026-33317 | Analyzed | 未確認 | CWE-125, CWE-787 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In versions 3.13.0 |
| CVE-2026-33318 | Analyzed | 未確認 | CWE-284, CWE-862 | Actual is a local-first personal finance tool. Prior to version 26.4.0, any authenticated user (including `BASIC` role) can escalate to `ADMIN` on servers migrated from password au |
| CVE-2026-33337 | Analyzed | 未確認 | CWE-120, CWE-502 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when deserializing a slice packet, the xdr_datum() function does not |
| CVE-2026-33350 | Analyzed | 未確認 | CWE-89 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. Prior to 27.0.3 and 2 |
| CVE-2026-33392 | Analyzed | 未確認 | CWE-1336 | In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass |
| CVE-2026-3340 | Analyzed | 未確認 | CWE-918 | IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests fr |
| CVE-2026-33403 | Analyzed | 未確認 | CWE-79 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, a reflected DOM-based XSS vul |
| CVE-2026-33404 | Analyzed | 未確認 | CWE-79 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, client hostnames and IP addre |
| CVE-2026-33405 | Analyzed | 未確認 | CWE-79 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, the formatInfo() function in |
| CVE-2026-33406 | Analyzed | 未確認 | CWE-79 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, configuration values from the |
| CVE-2026-33414 | Modified | 未確認 | CWE-78, CWE-94 | Podman is a tool for managing OCI containers and pods. Versions 4.8.0 through 5.8.1 contain a command injection vulnerability in the HyperV machine backend in pkg/machine/hyperv/st |
| CVE-2026-33431 | Analyzed | 未確認 | CWE-24 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the POST /config/<service>/show API endpoint accepts a configver pa |
| CVE-2026-33432 | Analyzed | 未確認 | CWE-287 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions up to and including 8.2.8.2, when LDAP authentication is enabled, Roxy-WI constru |
| CVE-2026-33435 | Analyzed | 未確認 | CWE-23, CWE-434, CWE-94 | Weblate is a web based localization tool. In versions prior to 5.17, the project backup didn't filter Git and Mercurial configuration files which could lead to remote code executio |
| CVE-2026-33436 | Analyzed | 未確認 | CWE-116, CWE-20, CWE-79 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. In versions prior to 2.0.0, file upload endpoints render user-supplied filenames |
| CVE-2026-33439 | Analyzed | 未確認 | CWE-502 | Open Access Management (OpenAM) is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to pre-authentication Remote Code Execution (RCE) via u |
| CVE-2026-33440 | Analyzed | 未確認 | CWE-918 | Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOMAINS setting applied only to the first issued requests and didn't restrict possible redire |
| CVE-2026-33446 | Analyzed | 未確認 | CWE-120 | CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special pa |
| CVE-2026-33447 | Analyzed | 未確認 | CWE-121 | CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packe |
| CVE-2026-33448 | Analyzed | 未確認 | CWE-200 | CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force t |
| CVE-2026-33449 | Analyzed | 未確認 | CWE-121 | CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographi |
| CVE-2026-3345 | Analyzed | 未確認 | CWE-22 | IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot do |
| CVE-2026-33450 | Analyzed | 未確認 | CWE-125 | CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modified server can send a malformed packet to |
| CVE-2026-33451 | Analyzed | 未確認 | CWE-125 | CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed |
| CVE-2026-33452 | Analyzed | 未確認 | CWE-121 | CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to ‘blue scree |
| CVE-2026-33453 | Modified | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component. Apache Camel's camel-coap component is vulnerabl |
| CVE-2026-33454 | Modified | 未確認 | CWE-1173, CWE-502 | The Camel-Mail component is vulnerable to Camel message header injection. The custom header filter strategy used by the component (MailHeaderFilterStrategy) only filters the 'out' |
| CVE-2026-33455 | Analyzed | 未確認 | CWE-140 | Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input |
| CVE-2026-33456 | Analyzed | 未確認 | CWE-140 | Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Live |
| CVE-2026-33457 | Analyzed | 未確認 | CWE-140 | Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted s |
| CVE-2026-33458 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass ho |
| CVE-2026-33459 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with access to the automatic import |
| CVE-2026-3346 | Analyzed | 未確認 | CWE-89 | IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in |
| CVE-2026-33460 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to cross-space information disclosure via Privilege Abuse (CAPEC-122). A user with Fleet agent management privileges in one Kib |
| CVE-2026-33461 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). A user with limited Fleet privileges can exploit an internal API end |
| CVE-2026-33466 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal |
| CVE-2026-33467 | Analyzed | 未確認 | CWE-347 | Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence th |
| CVE-2026-33471 | Analyzed | 未確認 | CWE-1284, CWE-190, CWE-20, CWE-345 | nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::verify` computes its quorum check using `BitSet.len()`, then iterates `BitSet` ind |
| CVE-2026-33472 | Analyzed | 未確認 | CWE-305, CWE-319 | Cryptomator is an open-source client-side encryption application for cloud storage. Version 1.19.1 contains a logic flaw in CheckHostTrustController.getAuthority() that allows an a |
| CVE-2026-33510 | Analyzed | 未確認 | CWE-601, CWE-87 | Homarr is an open-source dashboard. Prior to 1.57.0, a DOM-based Cross-Site Scripting (XSS) vulnerability has been discovered in Homarr's /auth/login page. The application improper |
| CVE-2026-33516 | Analyzed | 未確認 | CWE-125 | xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read vulnerability during the RDP capability exchange phase. The issue occurs when memory is acc |
| CVE-2026-33518 | Analyzed | 未確認 | CWE-266 | An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that |
| CVE-2026-33519 | Analyzed | 未確認 | CWE-266 | An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions assigned to |
| CVE-2026-33524 | Analyzed | 未確認 | CWE-789 | Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, a crafted payload as small as 4-5 bytes can force memory |
| CVE-2026-33533 | Analyzed | 未確認 | CWE-942 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, the Glances XML-RPC server (activated with glances -s or glances --server) sends Access-Con |
| CVE-2026-33534 | Analyzed | 未確認 | CWE-918 | EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have an authenticated Server-Side Request Forgery (SSRF) vulnerability that allows |
| CVE-2026-33540 | Analyzed | 未確認 | CWE-918 | Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, in pull-through cache mode, distribution discovers token auth endpoints by parsing WW |
| CVE-2026-33544 | Analyzed | 未確認 | CWE-362 | Tinyauth is an authentication and authorization server. Prior to version 5.0.5, all three OAuth service implementations (GenericOAuthService, GithubOAuthService, GoogleOAuthService |
| CVE-2026-3355 | Deferred | 未確認 | CWE-79 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘crsearch’ parameter in all versions up to, and including, 5.101.0 |
| CVE-2026-33551 | Analyzed | 未確認 | CWE-863 | An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a res |
| CVE-2026-33555 | Modified | 未確認 | CWE-130 | An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is clo |
| CVE-2026-33557 | Modified | 未確認 | CWE-1285, CWE-303 | A possible security vulnerability has been identified in Apache Kafka. By default, the broker property `sasl.oauthbearer.jwt.validator.class` is set to `org.apache.kafka.common.se |
| CVE-2026-33558 | Analyzed | 未確認 | CWE-533 | Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses information in the DEBUG log level in |
| CVE-2026-33566 | Analyzed | 未確認 | CWE-943 | There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered. |
| CVE-2026-33569 | Analyzed | 未確認 | CWE-319 | Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device. |
| CVE-2026-3357 | Analyzed | 未確認 | CWE-502 | IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the |
| CVE-2026-3358 | Deferred | 未確認 | CWE-862 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized private course enrollment in all versions up to, and including, 3.9.7. This |
| CVE-2026-33593 | Analyzed | 未確認 | CWE-369 | A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query. |
| CVE-2026-33594 | Analyzed | 未確認 | CWE-770 | A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate into a buffer that will |
| CVE-2026-33595 | Analyzed | 未確認 | CWE-770 | A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until t |
| CVE-2026-33596 | Analyzed | 未確認 | CWE-190 | A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries that are routed |
| CVE-2026-33597 | Analyzed | 未確認 | CWE-116 | PRSD detection denial of service |
| CVE-2026-33598 | Analyzed | 未確認 | CWE-125 | A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress() or getAddressListByDomain() on a packet cache. |
| CVE-2026-33599 | Analyzed | 未確認 | CWE-125 | A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or auto_upgrade |
| CVE-2026-3360 | Deferred | 未確認 | CWE-862 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is |
| CVE-2026-33600 | Analyzed | 未確認 | CWE-476 | An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. |
| CVE-2026-33601 | Analyzed | 未確認 | CWE-476 | If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a null pointer dereference, caused by a missing consistency ch |
| CVE-2026-33602 | Analyzed | 未確認 | CWE-122 | A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service |
| CVE-2026-33608 | Analyzed | 未確認 | CWE-94 | An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, lea |
| CVE-2026-33609 | Analyzed | 未確認 | CWE-90 | Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees. |
| CVE-2026-3361 | Deferred | 未確認 | CWE-79 | The WP Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpsl_address' post meta value in versions up to, and including, 2.2.261 due to insuf |
| CVE-2026-33610 | Analyzed | 未確認 | CWE-400 | A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it. |
| CVE-2026-33611 | Analyzed | 未確認 | CWE-190 | An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using |
| CVE-2026-33613 | Analyzed | 未確認 | CWE-78 | Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the generateSrpArray function, resulting in full |
| CVE-2026-33614 | Analyzed | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint due to improper neutralization of special elements in a SQL SE |
| CVE-2026-33615 | Analyzed | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UP |
| CVE-2026-33616 | Analyzed | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vulnerability in the mb24api endpoint due to improper neutralization of special elements in a |
| CVE-2026-33617 | Analyzed | 未確認 | CWE-497 | An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint expo |
| CVE-2026-33618 | Analyzed | 未確認 | CWE-95 | Chamilo LMS is a learning management system. Prior to .0.0-RC.3, the PlatformConfigurationController::decodeSettingArray() method uses PHP's eval() to parse platform settings from |
| CVE-2026-3362 | Deferred | 未確認 | CWE-79 | The Short Comment Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Minimum Count' settings field in all versions up to and including 2.2. This is d |
| CVE-2026-33626 | Analyzed | 未確認 | CWE-918 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's |
| CVE-2026-33641 | Analyzed | 未確認 | CWE-78 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, Glances supports dynamic configuration values in which substrings enclosed in backticks are |
| CVE-2026-33656 | Analyzed | 未確認 | CWE-22 | EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, EspoCRM's built-in formula scripting engine allowing updating attachment's sourceId |
| CVE-2026-33657 | Analyzed | 未確認 | CWE-116, CWE-80 | EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML injection vulnerability that allows any authenticated user with |
| CVE-2026-33659 | Analyzed | 未確認 | CWE-367, CWE-918 | EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Attachment/fromImageUrl endpoint is vulnerable to Server-Side |
| CVE-2026-33662 | Analyzed | 未確認 | CWE-190 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. From 3.8.0 to 4.10 |
| CVE-2026-33666 | Analyzed | 未確認 | CWE-190 | Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, in BitStreamReader.h readBytes() / readString(), the setB |
| CVE-2026-33667 | Analyzed | 未確認 | CWE-307 | OpenProject is an open-source project management application. In versions prior to 17.3.0, 2FA OTP verification in the confirm_otp action of the two_factor_authentication module ha |
| CVE-2026-33689 | Analyzed | 未確認 | CWE-125 | xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vulnerability in the pre-authentication RDP message parsing logic. A remote, unauthenticated a |
| CVE-2026-3369 | Deferred | 未確認 | CWE-79 | The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded image title in versions up to, and including, 1. |
| CVE-2026-33691 | Modified | 未確認 | CWE-178 | The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.9 and 4.25.0, a bypass was identif |
| CVE-2026-33694 | Analyzed | 未確認 | CWE-59 | This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arb |
| CVE-2026-33698 | Analyzed | 未確認 | CWE-552 | Chamilo LMS is a learning management system. Prior to 1.11.38, a chained attack can enable otherwise-blocked PHP code from the main/install/ directory and allow an unauthenticated |
| CVE-2026-33702 | Analyzed | 未確認 | CWE-639 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS contains an Insecure Direct Object Reference (IDOR) vulnerability in the Learning Path pro |
| CVE-2026-33703 | Analyzed | 未確認 | CWE-639 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, an Insecure Direct Object Reference (IDOR) vulnerability in the /social-network/personal-data/{userId} endpoint al |
| CVE-2026-33704 | Analyzed | 未確認 | CWE-434 | Chamilo LMS is a learning management system. Prior to 1.11.38, any authenticated user (including students) can write arbitrary content to files on the server via the BigUpload endp |
| CVE-2026-33705 | Analyzed | 未確認 | CWE-538 | Chamilo LMS is a learning management system. Prior to 1.11.38, Twig template files (.tpl) under /main/template/default/ are directly accessible without authentication via HTTP GET |
| CVE-2026-33706 | Analyzed | 未確認 | CWE-269 | Chamilo LMS is a learning management system. Prior to 1.11.38, any authenticated user with a REST API key can modify their own status field via the update_user_from_username endpoi |
| CVE-2026-33707 | Analyzed | 未確認 | CWE-640 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, the default password reset mechanism generates tokens using sha1($email) with no random component, no |
| CVE-2026-33708 | Analyzed | 未確認 | CWE-862 | Chamilo LMS is a learning management system. Prior to 1.11.38, the get_user_info_from_username REST API endpoint returns personal information (email, first name, last name, user ID |
| CVE-2026-33709 | Analyzed | 未確認 | CWE-601 | JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to version 5.4.4, an open redirect vulnerability in JupyterHub allows attackers to |
| CVE-2026-3371 | Deferred | 未確認 | CWE-639 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is due |
| CVE-2026-33710 | Analyzed | 未確認 | CWE-330 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, REST API keys are generated using md5(time() + (user_id * 5) - rand(10000, 10000)). The rand(10000, 10 |
| CVE-2026-33714 | Analyzed | 未確認 | CWE-89 | Chamilo is an open-source learning management system (LMS). Version 2.0.0-RC.2 contains a SQL Injection vulnerability in the statistics AJAX endpoint, which is an incomplete fix fo |
| CVE-2026-33715 | Analyzed | 未確認 | CWE-306, CWE-918 | Chamilo LMS is an open-source learning management system. In version 2.0-RC.2, the file public/main/inc/ajax/install.ajax.php is accessible without authentication on fully installe |
| CVE-2026-33727 | Analyzed | 未確認 | CWE-269 | Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Version 6.4 has a local privilege-escalation vulnerability allows code execution as root f |
| CVE-2026-33733 | Analyzed | 未確認 | CWE-23 | EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, the admin template management endpoints accept attacker-controlled `name` and `scope |
| CVE-2026-33736 | Analyzed | 未確認 | CWE-639 | Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, any authenticated user (including ROLE_STUDENT) can enumerate all platform users and access personal information ( |
| CVE-2026-33737 | Analyzed | 未確認 | CWE-611 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, multiple files use simplexml_load_string() without XXE protection. With LIBXML_NOENT flag, arbitrary s |
| CVE-2026-33740 | Analyzed | 未確認 | CWE-639 | EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Email/importEml endpoint contains an Insecure Direct Object Re |
| CVE-2026-33746 | Analyzed | 未確認 | CWE-287, CWE-347 | Convoy is a KVM server management panel for hosting businesses. From version 3.9.0-beta to before version 4.5.1, the JWTService::decode() method did not verify the cryptographic si |
| CVE-2026-33752 | Analyzed | 未確認 | CWE-918 | curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libc |
| CVE-2026-33753 | Analyzed | 未確認 | CWE-295 | rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerability in rfc3161-client's signa |
| CVE-2026-33756 | Analyzed | 未確認 | CWE-770 | Saleor is an e-commerce platform. From 2.0.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, Saleor supports query batching by submitting multiple GraphQL operations in a singl |
| CVE-2026-33771 | Analyzed | 未確認 | CWE-521 | A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacker to exploit weak pas |
| CVE-2026-33773 | Analyzed | 未確認 | An Incorrect Initialization of Resource vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series and QFX Series device allows an unaut | |
| CVE-2026-33774 | Analyzed | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, net |
| CVE-2026-33775 | Analyzed | 未確認 | CWE-401 | A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS on MX Series allows an |
| CVE-2026-33776 | Analyzed | 未確認 | CWE-862 | A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive information. A local u |
| CVE-2026-33778 | Analyzed | 未確認 | CWE-1286 | An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an |
| CVE-2026-33779 | Analyzed | 未確認 | CWE-296 | An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device |
| CVE-2026-33780 | Analyzed | 未確認 | CWE-401 | A Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an adjace |
| CVE-2026-33781 | Analyzed | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX and QFX Series devices allow |
| CVE-2026-33782 | Analyzed | 未確認 | CWE-401 | A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, unauthenticated attack |
| CVE-2026-33783 | Analyzed | 未確認 | CWE-686 | A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, authenticated attacker |
| CVE-2026-33784 | Analyzed | 未確認 | CWE-1393 | A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to |
| CVE-2026-33785 | Analyzed | 未確認 | CWE-862 | A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which |
| CVE-2026-33786 | Analyzed | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1600, SRX2300 and SRX4300 allows a |
| CVE-2026-33787 | Analyzed | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1500, SRX4100, SRX4200 and SRX4600 |
| CVE-2026-33788 | Analyzed | 未確認 | CWE-306 | A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticat |
| CVE-2026-33790 | Analyzed | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker sending a specific, m |
| CVE-2026-33791 | Modified | 未確認 | CWE-78 | An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted C |
| CVE-2026-33793 | Analyzed | 未確認 | CWE-250 | An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to gain |
| CVE-2026-33797 | Modified | 未確認 | CWE-20 | An Improper Input Validation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker, sending a specific genuine BGP packet in |
| CVE-2026-33804 | Analyzed | 未確認 | CWE-436 | @fastify/middie versions 9.3.1 and earlier are vulnerable to middleware bypass when the deprecated Fastify ignoreDuplicateSlashes option is enabled. The middleware path matching lo |
| CVE-2026-33805 | Modified | 未確認 | CWE-444, CWE-644 | @fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier process the client's Connection header after the proxy has added its own headers via rewriteRequ |
| CVE-2026-33806 | Modified | 未確認 | CWE-1287, CWE-1289 | Impact: Fastify applications using schema.body.content for per-content-type body validation can have validation bypassed entirely by prepending a space to the Content-Type header. |
| CVE-2026-33807 | Analyzed | 未確認 | CWE-436 | @fastify/express v4.0.4 and earlier contains a path handling bug in the onRegister function that causes middleware paths to be doubled when inherited by child plugins. When a child |
| CVE-2026-33808 | Analyzed | 未確認 | CWE-436 | Impact@fastify/express v4.0.4 and earlier fails to normalize URLs before passing them to Express middleware when Fastify router normalization options are enabled. This allows compl |
| CVE-2026-33810 | Modified | 未確認 | CWE-1289, CWE-295 | When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constra |
| CVE-2026-33812 | Analyzed | 未確認 | CWE-770 | Parsing a malicious font file can cause excessive memory allocation. |
| CVE-2026-33813 | Modified | 未確認 | Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. | |
| CVE-2026-33815 | Modified | 未確認 | CWE-787 | Memory-safety vulnerability in github.com/jackc/pgx/v5. |
| CVE-2026-33816 | Modified | 未確認 | CWE-787 | Memory-safety vulnerability in github.com/jackc/pgx/v5. |
| CVE-2026-33817 | Rejected | 未確認 | Rejected reason: CVE confirmed to be a false positive | |
| CVE-2026-33819 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network. |
| CVE-2026-33822 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-33824 | Analyzed | 掲載 | CWE-415 | Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. |
| CVE-2026-33825 | Analyzed | 掲載 | CWE-1220 | Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33826 | Analyzed | 未確認 | CWE-20 | Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network. |
| CVE-2026-33827 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
| CVE-2026-33829 | Modified | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-33845 | Modified | 未確認 | CWE-191 | A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-o |
| CVE-2026-33858 | Analyzed | 未確認 | CWE-502 | Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors ar |
| CVE-2026-33865 | Analyzed | 未確認 | CWE-79 | MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface. An authenticated attacker can upload a mali |
| CVE-2026-33866 | Analyzed | 未確認 | CWE-862 | MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permiss |
| CVE-2026-33877 | Analyzed | 未確認 | CWE-208 | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and prior contain a timing side-channel vulnerability in the password reset endpoint (/api/v1/@ap |
| CVE-2026-33888 | Analyzed | 未確認 | CWE-200, CWE-863 | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and prior contain an authorization bypass vulnerability in the getRestQuery method of the @apostr |
| CVE-2026-33889 | Analyzed | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and prior contain a stored cross-site scripting vulnerability in the @apostrophecms/color-field m |
| CVE-2026-33892 | Awaiting Analysis | 未確認 | CWE-305 | A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), I |
| CVE-2026-33899 | Analyzed | 未確認 | CWE-122, CWE-191 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-189 and 6.9.13-44, when `Magick` parses an XML file it is pos |
| CVE-2026-33900 | Analyzed | 未確認 | CWE-190 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the viff encoder contains an integer t |
| CVE-2026-33901 | Modified | 未確認 | CWE-122, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a heap buffer overflow occurs in the M |
| CVE-2026-33902 | Analyzed | 未確認 | CWE-674 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a stack overflow vulnerability in Imag |
| CVE-2026-33905 | Analyzed | 未確認 | CWE-125 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bo |
| CVE-2026-33908 | Modified | 未確認 | CWE-674, CWE-776 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the memory of the XML tre |
| CVE-2026-33929 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples. This issue affects the ExtractEmbeddedFiles example in Apa |
| CVE-2026-33947 | Analyzed | 未確認 | CWE-674 | jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), jv_getpath(), and delpaths_sorted() in jq's src/jv_aux.c use unbounded recursion whose dep |
| CVE-2026-33948 | Analyzed | 未確認 | CWE-170, CWE-20 | jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded N |
| CVE-2026-33949 | Analyzed | 未確認 | CWE-22, CWE-73 | Tina is a headless content management system. Prior to version 2.2.2, a path traversal vulnerability in @tinacms/graphql allows unauthenticated users to write and overwrite arbitra |
| CVE-2026-33950 | Analyzed | 未確認 | CWE-285, CWE-288, CWE-862 | Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0-beta.4, there is a privilege escalation vulnerability by Admin Role Injection |
| CVE-2026-33951 | Analyzed | 未確認 | CWE-284, CWE-306 | Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0-beta.1, the SignalK Server exposes an unauthenticated HTTP endpoint that allow |
| CVE-2026-3396 | Deferred | 未確認 | CWE-89 | WCAPF – WooCommerce Ajax Product Filter plugin is vulnerable to time-based SQL Injection via the 'post-author' parameter in all versions up to, and including, 4.2.3 due to insuffic |
| CVE-2026-33978 | Analyzed | 未確認 | CWE-79 | Notesnook is a note-taking app focused on user privacy & ease of use. Prior to version 3.3.17, a stored XSS vulnerability exists in the mobile share / web clip flow because attacke |
| CVE-2026-33990 | Analyzed | 未確認 | CWE-918 | Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker. Prior to version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI |
| CVE-2026-33999 | Awaiting Analysis | 未確認 | CWE-191 | A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server |
| CVE-2026-34001 | Awaiting Analysis | 未確認 | CWE-825 | A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An atta |
| CVE-2026-34003 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memo |
| CVE-2026-34018 | Analyzed | 未確認 | CWE-89 | An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product. |
| CVE-2026-34020 | Analyzed | 未確認 | CWE-598 | Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login endpoint uses HTTP GET method with username and password passed as quer |
| CVE-2026-34045 | Modified | 未確認 | CWE-209, CWE-284, CWE-400, CWE-770 | Podman Desktop is a graphical tool for developing on containers and Kubernetes. Prior to 1.26.2, an unauthenticated HTTP server exposed by Podman Desktop allows any network attacke |
| CVE-2026-34052 | Analyzed | 未確認 | CWE-401, CWE-770 | LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without |
| CVE-2026-34061 | Analyzed | 未確認 | CWE-345 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, an elected validator propo |
| CVE-2026-34062 | Analyzed | 未確認 | CWE-770 | nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `MessageCodec::read_request` and `read_response` call `read_to_end()` on inbound substreams, |
| CVE-2026-34063 | Analyzed | 未確認 | CWE-617 | Nimiq's network-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `network-libp2p` discovery uses a libp2p `ConnectionHandler` state machine. the ha |
| CVE-2026-34064 | Analyzed | 未確認 | CWE-191 | nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to version 1.3.0, `VestingContract::can_change_balance` returns `AccountError::Insufficie |
| CVE-2026-34065 | Analyzed | 未確認 | CWE-252, CWE-755 | nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust implementation. Prior to version 1.3.0, an untrusted p2p peer can cause a node t |
| CVE-2026-34066 | Analyzed | 未確認 | CWE-20, CWE-617, CWE-754 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Prior to version 1.3.0, `HistoryStore::put_historic_txns` uses an `assert!` to enforce invariant |
| CVE-2026-34067 | Analyzed | 未確認 | CWE-617 | nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, `HistoryTreeProof::verify` panics on a malformed proof where |
| CVE-2026-34068 | Analyzed | 未確認 | CWE-347 | nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, the staking contract accepts `UpdateValidator` transactions |
| CVE-2026-34069 | Analyzed | 未確認 | CWE-617 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. In versions 1.2.2 and below, an unauthenticated p2 |
| CVE-2026-34072 | Analyzed | 未確認 | CWE-287, CWE-306, CWE-693 | Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs. Prior to version 2.2.0, an authentication bypass in middle |
| CVE-2026-34076 | Deferred | 未確認 | CWE-918 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. In @clerk/hono from versions 0.1.0 to before 0.1.5, @clerk/express from versions 2.0.0 to before 2. |
| CVE-2026-34078 | Modified | 未確認 | CWE-59, CWE-61 | Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled sy |
| CVE-2026-34079 | Analyzed | 未確認 | CWE-22 | Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app con |
| CVE-2026-34080 | Modified | 未確認 | CWE-1289 | xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=tru |
| CVE-2026-34082 | Analyzed | 未確認 | CWE-284, CWE-863 | Dify is an open-source LLM app development platform. Prior to 1.13.1, the method `DELETE /console/api/installed-apps/<appId>/conversations/<conversationId>` has poor authorization |
| CVE-2026-34083 | Analyzed | 未確認 | CWE-346, CWE-601 | Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0, SignalK Server contains a code-level vulnerability in its OIDC login and logo |
| CVE-2026-34118 | Modified | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C100/C101 v5, C210 v3.6 and C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of r |
| CVE-2026-34119 | Analyzed | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when appending segmented request bodies without continuous write‑ |
| CVE-2026-34120 | Analyzed | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of local video stream content due to insufficient alignment an |
| CVE-2026-34121 | Analyzed | 未確認 | CWE-287 | An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authoriz |
| CVE-2026-34122 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within a configuration handling component due to insufficient input validation. An attacker |
| CVE-2026-34124 | Analyzed | 未確認 | CWE-120 | A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length restrictions on the raw |
| CVE-2026-34148 | Analyzed | 未確認 | CWE-400, CWE-770 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to 1.9.6, 1.10.5, 2.0.8, and 2.1.1, @fedify/fedify follows HTTP redirects recursivel |
| CVE-2026-34159 | Analyzed | 未確認 | CWE-119 | llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation when a tensor's buffer field is |
| CVE-2026-34160 | Analyzed | 未確認 | CWE-306, CWE-918 | Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the PENS (Package Exchange Notification Services) plugin endpoint at public/plugin/Pens/p |
| CVE-2026-34161 | Analyzed | 未確認 | CWE-79 | Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site Scripting (XSS) vulnerability exists in the social post attachment up |
| CVE-2026-34164 | Deferred | 未確認 | CWE-532 | Valtimo is an open-source business process automation platform. In versions 13.0.0 through 13.21.0, the InboxHandlingService logs the full content of every incoming inbox message a |
| CVE-2026-34166 | Analyzed | 未確認 | CWE-400 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, the replace filter in LiquidJS incorrectly accounts for memory usage when the |
| CVE-2026-34177 | Analyzed | 未確認 | CWE-184 | Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and raw.qemu.con |
| CVE-2026-34178 | Analyzed | 未確認 | CWE-20 | In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from backup/contai |
| CVE-2026-34179 | Analyzed | 未確認 | CWE-915 | In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests to /1.0/certif |
| CVE-2026-34184 | Modified | 未確認 | CWE-862 | AlanWeb SCADA does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critic |
| CVE-2026-34185 | Modified | 未確認 | CWE-89 | AlanWeb SCADA is vulnerable to SQL Injection across most scripts and input parameters. Because no protections are in place, an authenticated attacker can inject arbitrary SQL comma |
| CVE-2026-34186 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800 |
| CVE-2026-34188 | Analyzed | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 t |
| CVE-2026-34197 | Analyzed | 掲載 | CWE-20, CWE-78, CWE-94 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the |
| CVE-2026-34208 | Analyzed | 未確認 | CWE-693, CWE-915 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, SandboxJS blocks direct assignment to global objects (for example Math.random = ...), but this protection can be bypa |
| CVE-2026-34211 | Analyzed | 未確認 | CWE-674 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, the @nyariv/sandboxjs parser contains unbounded recursion in the restOfExp function and the lispify/lispifyExpr call |
| CVE-2026-34212 | Analyzed | 未確認 | CWE-79 | Docmost is open-source collaborative wiki and documentation software. In versions prior to 0.71.0, improper neutralization of attachment URLs in Docmost allows a low-privileged aut |
| CVE-2026-34213 | Analyzed | 未確認 | CWE-639 | Docmost is open-source collaborative wiki and documentation software. Starting in version 0.3.0 and prior to version 0.71.0, improper authorization in Docmost allows a low-privileg |
| CVE-2026-34217 | Analyzed | 未確認 | CWE-668 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, a scope modification vulnerability exists in @nyariv/sandboxjs. The vulnerability allows untrusted sandboxed code to |
| CVE-2026-34222 | Analyzed | 未確認 | CWE-285 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.11, there is a broken access control vulnerability in tool v |
| CVE-2026-34225 | Analyzed | 未確認 | CWE-918 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.7.2 and below contain a Blind Server Side Request Forgery in the funct |
| CVE-2026-34228 | Analyzed | 未確認 | CWE-352 | Emlog is an open source website building system. Prior to version 2.6.8, the backend upgrade interface accepts remote SQL and ZIP URLs via GET parameters. The server first download |
| CVE-2026-34229 | Analyzed | 未確認 | CWE-79 | Emlog is an open source website building system. Prior to version 2.6.8, there is a stored cross-site scripting (XSS) vulnerability in emlog comment module via URI scheme validatio |
| CVE-2026-34230 | Analyzed | 未確認 | CWE-400, CWE-407 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.select_best_encoding processes Accept-Encoding values with quadratic time comp |
| CVE-2026-34232 | Analyzed | 未確認 | CWE-228 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the xdr_status_vector() function does not handle the isc_arg_cstring |
| CVE-2026-34236 | Analyzed | 未確認 | CWE-331 | Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. From version 8.0.0 to before version 8.19.0, in applications built with the Auth0 PHP SDK, cookies are encrypte |
| CVE-2026-34238 | Analyzed | 未確認 | CWE-190, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle o |
| CVE-2026-34242 | Analyzed | 未確認 | CWE-200, CWE-22, CWE-59 | Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feature didn't verify downloaded files, potentially following symlinks outside the repository |
| CVE-2026-34244 | Analyzed | 未確認 | CWE-200, CWE-918 | Weblate is a web based localization tool. In versions prior to 5.17, a user with the project.edit permission (granted by the per-project "Administration" role) can configure machin |
| CVE-2026-34248 | Analyzed | 未確認 | CWE-284 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations (means they can see each other's tickets) could see fields whi |
| CVE-2026-34256 | Awaiting Analysis | 未確認 | CWE-862 | Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Premise), an authenticated attacker could execute a particular ABAP report to overwrite any ex |
| CVE-2026-34257 | Analyzed | 未確認 | CWE-601 | Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be r |
| CVE-2026-34261 | Awaiting Analysis | 未確認 | CWE-862 | Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, p |
| CVE-2026-34262 | Analyzed | 未確認 | CWE-522 | Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer |
| CVE-2026-34264 | Analyzed | 未確認 | CWE-204 | During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns specific messages. Due to this, an authenticated user with low privileges could gues |
| CVE-2026-34266 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Eas |
| CVE-2026-34267 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability a |
| CVE-2026-34268 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affecte |
| CVE-2026-34269 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.62. Easily exploitable vul |
| CVE-2026-34270 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9. |
| CVE-2026-34271 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9. |
| CVE-2026-34272 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.6.0. Easily exploitable vulnerability al |
| CVE-2026-34273 | Analyzed | 未確認 | CWE-200 | Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 23.4-23.10. Easily exploitable vulnerability allows unauthenticated attacker wi |
| CVE-2026-34274 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-34275 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Setup and Administration). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-34276 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9. |
| CVE-2026-34277 | Analyzed | 未確認 | CWE-284, CWE-400 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.61-8.62. Easily exploitable |
| CVE-2026-34278 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability a |
| CVE-2026-34279 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and |
| CVE-2026-3428 | Awaiting Analysis | 未確認 | CWE-367, CWE-494 | A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege escalation to Administrator via |
| CVE-2026-34280 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Job Profile Manager). The supported version that is affected is 9.2. Easil |
| CVE-2026-34281 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low pri |
| CVE-2026-34282 | Modified | 未確認 | CWE-400, CWE-835 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affec |
| CVE-2026-34283 | Analyzed | 未確認 | CWE-284, CWE-601 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Identity Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0 |
| CVE-2026-34284 | Analyzed | 未確認 | CWE-284, CWE-601 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human workflow 11g+). Supported versions that are affected are 12.2.1 |
| CVE-2026-34285 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploit |
| CVE-2026-34286 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploit |
| CVE-2026-34287 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploit |
| CVE-2026-34288 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Difficult to e |
| CVE-2026-34289 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Difficult to e |
| CVE-2026-34290 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploit |
| CVE-2026-34291 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to ex |
| CVE-2026-34292 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily expl |
| CVE-2026-34293 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows |
| CVE-2026-34294 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory). The supported version that is affected is 12.2 |
| CVE-2026-34295 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable |
| CVE-2026-34296 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a |
| CVE-2026-34297 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integration). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-34298 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily |
| CVE-2026-34299 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supported version that is affected is 9 |
| CVE-2026-34300 | Analyzed | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise FIN Contracts product of Oracle PeopleSoft (component: Contracts). The supported version that is affected is 9.2. Easily exploitable vu |
| CVE-2026-34301 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supported version that is affected is 9 |
| CVE-2026-34302 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable v |
| CVE-2026-34303 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi |
| CVE-2026-34304 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploita |
| CVE-2026-34305 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2. |
| CVE-2026-34306 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is affected is 9.2. Easily exploitab |
| CVE-2026-34307 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow). Supported versions that are affected are 8.61-8.62. Easily exploitable v |
| CVE-2026-34308 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily ex |
| CVE-2026-34309 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.62. Easily exploitable v |
| CVE-2026-34310 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions t |
| CVE-2026-34312 | Analyzed | 未確認 | CWE-284 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.30. Easily exploitable vulnerability allows high privileged attack |
| CVE-2026-34313 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions t |
| CVE-2026-34314 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions t |
| CVE-2026-34315 | Analyzed | 未確認 | CWE-285, CWE-601 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2. |
| CVE-2026-34317 | Analyzed | 未確認 | CWE-404 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi |
| CVE-2026-34318 | Analyzed | 未確認 | CWE-200 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Diff |
| CVE-2026-34319 | Analyzed | 未確認 | CWE-204 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi |
| CVE-2026-34320 | Analyzed | 未確認 | CWE-285 | Vulnerability in the Oracle Financial Services Customer Screening product of Oracle Financial Services Applications (component: User Interface). The supported version that is aff |
| CVE-2026-34321 | Analyzed | 未確認 | CWE-285 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported vers |
| CVE-2026-34323 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authentication). Supported versions that are affected are 7.0.1.0 and |
| CVE-2026-34324 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: App Server). Supported versions that are affected are 7.0.1.0 and 7.0.1.1 |
| CVE-2026-34325 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported vers |
| CVE-2026-34370 | Analyzed | 未確認 | CWE-285, CWE-639 | Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the notebook module contains an Insecure Direct Object Reference (IDOR) vulnerability tha |
| CVE-2026-34371 | Analyzed | 未確認 | CWE-22 | LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the execute_code sandbox when persisting code-generated artifacts |
| CVE-2026-34376 | Analyzed | 未確認 | CWE-863 | PdfDing is a selfhosted PDF manager, viewer and editor offering a seamless user experience on multiple devices. Prior to version 1.7.0, an access-control vulnerability allows unaut |
| CVE-2026-34378 | Analyzed | 未確認 | CWE-190 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.4.0 to before 3.4.9, a missi |
| CVE-2026-34379 | Modified | 未確認 | CWE-475, CWE-704, CWE-787, CWE-843 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, |
| CVE-2026-3438 | Analyzed | 未確認 | CWE-79 | A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execute arbitrary J |
| CVE-2026-34380 | Analyzed | 未確認 | CWE-190, CWE-787 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, |
| CVE-2026-34392 | Analyzed | 未確認 | CWE-552 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before |
| CVE-2026-34393 | Analyzed | 未確認 | CWE-269 | Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the scope of edits. This issue has been fixed in version 5 |
| CVE-2026-34397 | Analyzed | 未確認 | CWE-269 | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional l |
| CVE-2026-34402 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-39330. Reason: This candidate is a duplicate of CVE-2026-39330. Notes: All CVE users should ref | |
| CVE-2026-34403 | Analyzed | 未確認 | CWE-1385 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.5, all WebSocket endpoints in nginx-ui use a gorilla/websocket Upgrader with CheckOrigin uncondition |
| CVE-2026-34413 | Deferred | 未確認 | CWE-497 | Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where an HTT |
| CVE-2026-34414 | Deferred | 未確認 | CWE-22 | Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where the n |
| CVE-2026-34415 | Deferred | 未確認 | CWE-184 | Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vulnerability in the elFinder connector endpoint that fails to block PHP-executable extension |
| CVE-2026-34424 | Deferred | 未確認 | CWE-506 | Smart Slider 3 Pro version 3.5.1.35 for WordPress and Joomla contains a multi-stage remote access toolkit injected through a compromised update system that allows unauthenticated a |
| CVE-2026-34425 | Analyzed | 未確認 | CWE-184 | OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by u |
| CVE-2026-34426 | Analyzed | 未確認 | CWE-184 | OpenClaw versions prior to commit b57b680 contain an approval bypass vulnerability due to inconsistent environment variable normalization between approval and execution paths, allo |
| CVE-2026-34427 | Deferred | 未確認 | CWE-915 | Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their ow |
| CVE-2026-34428 | Deferred | 未確認 | CWE-918 | Vvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedProxy action of the editor/editor module where the url parameter is passed directly to getU |
| CVE-2026-34429 | Deferred | 未確認 | CWE-79 | Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticated users with media upload and rename permissions to execute arbitrary JavaScript |
| CVE-2026-34430 | Undergoing Analysis | 未確認 | CWE-184 | ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host sys |
| CVE-2026-34444 | Modified | 未確認 | CWE-284, CWE-639, CWE-914 | Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attributes are accessed through built-in function |
| CVE-2026-34445 | Analyzed | 未確認 | CWE-20, CWE-400, CWE-915 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setatt |
| CVE-2026-34446 | Analyzed | 未確認 | CWE-22, CWE-61 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is an issue in onnx.load, the code checks for symlinks |
| CVE-2026-34447 | Analyzed | 未確認 | CWE-22, CWE-61 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data |
| CVE-2026-3445 | Deferred | 未確認 | CWE-862 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized members |
| CVE-2026-34454 | Analyzed | 未確認 | CWE-384, CWE-613 | OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. A regression introduced in 7.11.0 prevents OAuth2 Proxy from clearing the session cookie when r |
| CVE-2026-34455 | Analyzed | 未確認 | CWE-89 | Hi.Events is an open-source event management and ticket selling platform. From version 0.8.0-beta.1 to before version 1.7.1-beta, multiple repository classes pass the user-supplied |
| CVE-2026-34456 | Analyzed | 未確認 | CWE-284 | Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go. From version 26.2.0-beta.1 to before version 26.2.0-beta.5, a vulner |
| CVE-2026-34457 | Analyzed | 未確認 | CWE-290 | OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions prior to 7.15.2 contain a configuration-dependent authentication bypass in deployments |
| CVE-2026-3446 | Awaiting Analysis | 未確認 | CWE-345 | When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be |
| CVE-2026-34476 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version |
| CVE-2026-34477 | Analyzed | 未確認 | CWE-295, CWE-297 | The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it addressed hostname verification only when enabled via the log4j2.sslVerifyH |
| CVE-2026-34478 | Analyzed | 未確認 | CWE-117, CWE-684 | Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CR |
| CVE-2026-34479 | Analyzed | 未確認 | CWE-116 | The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output. Conforming XML parsers a |
| CVE-2026-34480 | Analyzed | 未確認 | CWE-116 | Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters forbidden b |
| CVE-2026-34481 | Modified | 未確認 | CWE-116 | Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when |
| CVE-2026-34483 | Analyzed | 未確認 | CWE-116 | Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from |
| CVE-2026-34486 | Analyzed | 掲載 | CWE-311, CWE-807 | Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomc |
| CVE-2026-34487 | Analyzed | 未確認 | CWE-532 | Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue af |
| CVE-2026-34488 | Awaiting Analysis | 未確認 | CWE-427 | IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with admini |
| CVE-2026-34500 | Analyzed | 未確認 | CWE-287 | CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0- |
| CVE-2026-34510 | Analyzed | 未確認 | CWE-41 | OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that accepts remote-host file URLs and UNC-style paths before local-path validation. Atta |
| CVE-2026-34511 | Analyzed | 未確認 | CWE-330 | OpenClaw before 2026.4.2 reuses the PKCE verifier as the OAuth state parameter in the Gemini OAuth flow, exposing it through the redirect URL. Attackers who capture the redirect UR |
| CVE-2026-34512 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to invoke admin-l |
| CVE-2026-34513 | Analyzed | 未確認 | CWE-770 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resu |
| CVE-2026-34514 | Analyzed | 未確認 | CWE-113 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the content_type parameter in aiohttp could use th |
| CVE-2026-34515 | Analyzed | 未確認 | CWE-36, CWE-918 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, on Windows the static resource handler may expose information about a NTLMv |
| CVE-2026-34516 | Analyzed | 未確認 | CWE-770 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, a response with an excessive number of multipart headers may be allowed to |
| CVE-2026-34517 | Analyzed | 未確認 | CWE-770 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, for some multipart form fields, aiohttp read the entire field into memory b |
| CVE-2026-34518 | Analyzed | 未確認 | CWE-200 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, when following redirects to a different origin, aiohttp drops the Authoriza |
| CVE-2026-34519 | Analyzed | 未確認 | CWE-113 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the reason parameter when creating a Response may |
| CVE-2026-34520 | Analyzed | 未確認 | CWE-113 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser (the default for most installs) accepted null bytes and contro |
| CVE-2026-34522 | Analyzed | 未確認 | CWE-22, CWE-73 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-34523 | Analyzed | 未確認 | CWE-22 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-34524 | Analyzed | 未確認 | CWE-22 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-34525 | Analyzed | 未確認 | CWE-20, CWE-444 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, multiple Host headers were allowed in aiohttp. This issue has been patched |
| CVE-2026-34526 | Analyzed | 未確認 | CWE-918 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-34528 | Analyzed | 未確認 | CWE-269 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the signupHandler |
| CVE-2026-34529 | Analyzed | 未確認 | CWE-79 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the EPUB preview f |
| CVE-2026-34530 | Analyzed | 未確認 | CWE-79 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the SPA index page |
| CVE-2026-34531 | Modified | 未確認 | CWE-287 | Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes a request to a token protected r |
| CVE-2026-34538 | Analyzed | 未確認 | CWE-668 | Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only have DAG Run read permissions, such as the Viewer role.This behav |
| CVE-2026-34543 | Analyzed | 未確認 | CWE-908 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before versio |
| CVE-2026-34544 | Analyzed | 未確認 | CWE-190, CWE-787 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before versio |
| CVE-2026-34545 | Modified | 未確認 | CWE-122, CWE-1284, CWE-190 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before versio |
| CVE-2026-34559 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34560 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34561 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34562 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34563 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34564 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34565 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34566 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34567 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34568 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34569 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34570 | Modified | 未確認 | CWE-1254, CWE-284, CWE-613 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34571 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, a Stored Cr |
| CVE-2026-34572 | Analyzed | 未確認 | CWE-1254, CWE-284, CWE-613 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the applica |
| CVE-2026-34576 | Analyzed | 未確認 | CWE-918 | Postiz is an AI social media scheduling tool. Prior to version 2.21.3, the POST /public/v1/upload-from-url endpoint accepts a user-supplied URL and fetches it server-side using axi |
| CVE-2026-34577 | Analyzed | 未確認 | CWE-918 | Postiz is an AI social media scheduling tool. Prior to version 2.21.3, the GET /public/stream endpoint in PublicController accepts a user-supplied url query parameter and proxies t |
| CVE-2026-34578 | Analyzed | 未確認 | CWE-90 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDAP authentication connector passes the login username directly into an LDAP search filter w |
| CVE-2026-34580 | Modified | 未確認 | CWE-295 | Botan is a C++ cryptography library. In 3.11.0, the function Certificate_Store::certificate_known had a misleading name; it would return true if any certificate in the store had a |
| CVE-2026-34581 | Analyzed | 未確認 | CWE-288 | goshs is a SimpleHTTPServer written in Go. From version 1.1.0 to before version 2.0.0-beta.2, when using the Share Token it is possible to bypass the limited selected file download |
| CVE-2026-34582 | Modified | 未確認 | CWE-166, CWE-841 | Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed prior to the Finished message being receive |
| CVE-2026-34584 | Analyzed | 未確認 | CWE-639 | listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, bugs in list permission checks allows users in a multi-user |
| CVE-2026-34587 | Analyzed | 未確認 | CWE-1336 | Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, Kirby's user permissions control which user role is allowed to perform specific actions to con |
| CVE-2026-34588 | Modified | 未確認 | CWE-125, CWE-190, CWE-787 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, |
| CVE-2026-34589 | Modified | 未確認 | CWE-190, CWE-787 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, |
| CVE-2026-34590 | Analyzed | 未確認 | CWE-918 | Postiz is an AI social media scheduling tool. Prior to version 2.21.4, the POST /webhooks/ endpoint for creating webhooks uses WebhooksDto which validates the url field with only @ |
| CVE-2026-34591 | Analyzed | 未確認 | CWE-22 | Poetry is a dependency manager for Python. From version 1.4.0 to before version 2.3.3, a crafted wheel can contain ../ paths that Poetry writes to disk without containment checks, |
| CVE-2026-34593 | Analyzed | 未確認 | CWE-400, CWE-770 | Ash Framework is a declarative, extensible framework for building Elixir applications. Prior to version 3.22.0, Ash.Type.Module.cast_input/2 unconditionally creates a new Erlang at |
| CVE-2026-34598 | Analyzed | 未確認 | CWE-79, CWE-87 | YesWiki is a wiki system written in PHP. Prior to version 4.6.0, a stored and blind XSS vulnerability exists in the form title field. A malicious attacker can inject JavaScript wit |
| CVE-2026-34601 | Deferred | 未確認 | CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In xmldom versions 0.6.0 and prior and @xmldom/xmldom prior to version |
| CVE-2026-34602 | Analyzed | 未確認 | CWE-639 | Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the /api/course_rel_users endpoint is vulnerable to Insecure Direct Object Reference (IDO |
| CVE-2026-34603 | Analyzed | 未確認 | CWE-22, CWE-59 | Tina is a headless content management system. Prior to version 2.2.2, @tinacms/cli recently added lexical path-traversal checks to the dev media routes, but the implementation stil |
| CVE-2026-34604 | Analyzed | 未確認 | CWE-22, CWE-59 | Tina is a headless content management system. Prior to version 2.2.2, @tinacms/graphql uses string-based path containment checks in FilesystemBridge. That blocks plain ../ traversa |
| CVE-2026-34606 | Analyzed | 未確認 | CWE-79 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. From version 2.27.0 to before version 2.48.0, Frappe LMS was vulnerable to st |
| CVE-2026-34607 | Analyzed | 未確認 | CWE-22 | Emlog is an open source website building system. In versions 2.6.2 and prior, a path traversal vulnerability exists in the emUnZip() function (include/lib/common.php:793). When ext |
| CVE-2026-34608 | Analyzed | 未確認 | CWE-125, CWE-457 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to version 0.24.10, in NanoMQ's webhook_inproc.c, the hook_work_cb() function processes nng messages by |
| CVE-2026-3461 | Deferred | 未確認 | CWE-288 | The Visa Acceptance Solutions plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.1.0. This is due to the `express_pay_product_page_ |
| CVE-2026-34610 | Analyzed | 未確認 | CWE-681 | The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() cast |
| CVE-2026-34612 | Analyzed | 未確認 | CWE-89 | Kestra is an open-source, event-driven orchestration platform. Prior to version 1.3.7, Kestra (default docker-compose deployment) contains a SQL Injection vulnerability that leads |
| CVE-2026-34614 | Analyzed | 未確認 | CWE-79 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL re |
| CVE-2026-34615 | Analyzed | 未確認 | CWE-502 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of t |
| CVE-2026-34617 | Analyzed | 未確認 | CWE-79 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could result in privilege escalation. A low-privileged attacker cou |
| CVE-2026-34618 | Analyzed | 未確認 | CWE-787 | Illustrator versions 30.2, 29.8.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
| CVE-2026-34619 | Analyzed | 未確認 | CWE-22 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in |
| CVE-2026-34621 | Analyzed | 掲載 | CWE-1321 | Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerab |
| CVE-2026-34622 | Analyzed | 未確認 | CWE-1321 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollut |
| CVE-2026-34623 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulat |
| CVE-2026-34624 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulat |
| CVE-2026-34625 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulat |
| CVE-2026-34626 | Analyzed | 未確認 | CWE-1321 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollut |
| CVE-2026-34627 | Analyzed | 未確認 | CWE-122 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-34628 | Analyzed | 未確認 | CWE-122 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-34629 | Analyzed | 未確認 | CWE-122 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-34630 | Analyzed | 未確認 | CWE-122 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-34631 | Analyzed | 未確認 | CWE-787 | InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Expl |
| CVE-2026-34632 | Analyzed | 未確認 | CWE-427 | Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. |
| CVE-2026-3464 | Deferred | 未確認 | CWE-22 | The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in the 'ajax_attach_file' function in all versi |
| CVE-2026-3466 | Modified | 未確認 | CWE-79 | Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5 |
| CVE-2026-34715 | Analyzed | 未確認 | CWE-113 | ewe is a Gleam web server. Prior to version 3.0.6, the encode_headers function in src/ewe/internal/encoder.gleam directly interpolates response header keys and values into raw HTTP |
| CVE-2026-34717 | Analyzed | 未確認 | CWE-89 | OpenProject is an open-source, web-based project management software. Prior to version 17.2.3, the =n operator in modules/reporting/lib/report/operator.rb:177 embeds user input dir |
| CVE-2026-34718 | Analyzed | 未確認 | CWE-80 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the HTML sanitizer for ticket articles was missing proper sanitization of data: ... UR |
| CVE-2026-34719 | Analyzed | 未確認 | CWE-918 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the webhook model was missing a proper validation for loop back addresses, or link-loc |
| CVE-2026-34720 | Analyzed | 未確認 | CWE-346 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the SSO mechanism in Zammad was not verifying the header originates from a trusted SSO |
| CVE-2026-34721 | Analyzed | 未確認 | CWE-352 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the OAuth callback endpoints for Microsoft, Google, and Facebook external credentials |
| CVE-2026-34722 | Analyzed | 未確認 | CWE-862 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the used endpoint for ticket creation was missing authorization if the related paramet |
| CVE-2026-34723 | Analyzed | 未確認 | CWE-284 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, unauthenticated remote attackers were able to access the getting started endpoint to g |
| CVE-2026-34724 | Analyzed | 未確認 | CWE-1336, CWE-94 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a server-side template injection vulnerability which leads to RCE via AI Agent exists. Impact i |
| CVE-2026-34725 | Deferred | 未確認 | CWE-79, CWE-94 | DbGate is cross-platform database manager. From version 7.0.0 to before version 7.1.5, a stored XSS vulnerability exists in DbGate because attacker-controlled SVG icon strings are |
| CVE-2026-34726 | Analyzed | 未確認 | CWE-22 | Copier is a library and CLI app for rendering project templates. Prior to version 9.14.1, Copier's _subdirectory setting is documented as the subdirectory to use as the template ro |
| CVE-2026-34727 | Analyzed | 未確認 | CWE-287 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the OIDC callback handler issues a full JWT token without checking whether the matched user has TOTP |
| CVE-2026-34728 | Analyzed | 未確認 | CWE-22 | phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the MediaBrowserController::index() method handles file deletion for the media browser. When the fileRemove |
| CVE-2026-34729 | Analyzed | 未確認 | CWE-79 | phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, there is a stored XSS vulnerability via Regex Bypass in Filter::removeAttributes(). This issue has been patc |
| CVE-2026-34730 | Analyzed | 未確認 | CWE-22 | Copier is a library and CLI app for rendering project templates. Prior to version 9.14.1, Copier's _external_data feature allows a template to load YAML files using template-contro |
| CVE-2026-34734 | Modified | 未確認 | CWE-416, CWE-825 | HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigge |
| CVE-2026-34735 | Deferred | 未確認 | CWE-434 | The Hytale Modding Wiki is a free service for Hytale mods to host their documentation & wikis. In version 1.2.0 and prior, the quickUpload() endpoint validates uploaded files by ch |
| CVE-2026-34736 | Awaiting Analysis | 未確認 | CWE-287 | Open edX Platform enables the authoring and delivery of online learning at any scale. From the maple release to before the ulmo release, an unauthenticated attacker can fully bypas |
| CVE-2026-34742 | Modified | 未確認 | CWE-1188 | The Go MCP SDK used Go's standard encoding/json. Prior to version 1.4.0, the Model Context Protocol (MCP) Go SDK does not enable DNS rebinding protection by default for HTTP-based |
| CVE-2026-34743 | Modified | 未確認 | CWE-122 | XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no R |
| CVE-2026-34745 | Analyzed | 未確認 | CWE-22 | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.5.3, the fix for CVE-2026-33645 was applied to the authenticated /api/uploadChunked endpoint but was no |
| CVE-2026-34746 | Analyzed | 未確認 | CWE-918 | Payload is a free and open source headless content management system. Prior to version 3.79.1, an authenticated Server-Side Request Forgery (SSRF) vulnerability exists in the uploa |
| CVE-2026-34747 | Analyzed | 未確認 | CWE-89 | Payload is a free and open source headless content management system. Prior to version 3.79.1, certain request inputs were not properly validated. An attacker could craft requests |
| CVE-2026-34748 | Analyzed | 未確認 | CWE-79 | Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/next, a stored Cross-Site Scripting (XSS) vulnerability existed in the |
| CVE-2026-34749 | Analyzed | 未確認 | CWE-352 | Payload is a free and open source headless content management system. Prior to version 3.79.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the authentication flow. |
| CVE-2026-34750 | Analyzed | 未確認 | CWE-22 | Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/storage-azure, @payloadcms/storage-gcs, @payloadcms/storage-r2, and @pa |
| CVE-2026-34751 | Analyzed | 未確認 | CWE-472, CWE-640 | Payload is a free and open source headless content management system. Prior to version 3.79.1 in @payloadcms/graphql and payload, a vulnerability in the password recovery flow coul |
| CVE-2026-34752 | Analyzed | 未確認 | CWE-248 | Haraka is a Node.js mail server. Prior to version 3.1.4, sending an email with __proto__: as a header name crashes the Haraka worker process. This issue has been patched in version |
| CVE-2026-34753 | Analyzed | 未確認 | CWE-918 | vLLM is an inference and serving engine for large language models (LLMs). From 0.16.0 to before 0.19.0, a server-side request forgery (SSRF) vulnerability in download_bytes_from_ur |
| CVE-2026-34755 | Modified | 未確認 | CWE-770 | vLLM is an inference and serving engine for large language models (LLMs). From 0.7.0 to before 0.19.0, the VideoMediaIO.load_base64() method at vllm/multimodal/media/video.py split |
| CVE-2026-34756 | Modified | 未確認 | CWE-1284, CWE-770 | vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denial of Service vulnerability exists in the vLLM OpenAI-compatible API se |
| CVE-2026-34757 | Analyzed | 未確認 | CWE-416 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.0.9 to before 1.6.57, passing a p |
| CVE-2026-34758 | Analyzed | 未確認 | CWE-306 | OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allow |
| CVE-2026-34759 | Analyzed | 未確認 | CWE-862 | OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, multiple notification API endpoints are registered without authentication middleware, w |
| CVE-2026-34760 | Analyzed | 未確認 | CWE-20 | vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before version 0.18.0, Librosa defaults to using numpy.mean for mono downmixing (to_ |
| CVE-2026-34761 | Analyzed | 未確認 | CWE-476 | Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB t |
| CVE-2026-34762 | Analyzed | 未確認 | CWE-20 | Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, the PUT /api/v1/subscriber/{imsi} API accepts an IMSI identifier from both the URL path and the JSON r |
| CVE-2026-34763 | Analyzed | 未確認 | CWE-625 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Directory interpolates the configured root path directly into a regular expression w |
| CVE-2026-34764 | Analyzed | 未確認 | CWE-416 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 33.0.0-alpha.1 to before 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, ap |
| CVE-2026-34765 | Analyzed | 未確認 | CWE-668 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, when a renderer calls w |
| CVE-2026-34766 | Analyzed | 未確認 | CWE-862 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, the select-usb- |
| CVE-2026-34767 | Analyzed | 未確認 | CWE-113, CWE-74 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.3, 40.8.3, and 41.0.3, apps that register cus |
| CVE-2026-34768 | Analyzed | 未確認 | CWE-428 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, on Windows, app |
| CVE-2026-34769 | Modified | 未確認 | CWE-88, CWE-912 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, an undocumented |
| CVE-2026-3477 | Deferred | 未確認 | CWE-862 | The PZ Frontend Manager plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.0.6. The pzfm_user_request_action_callback() function, reg |
| CVE-2026-34770 | Analyzed | 未確認 | CWE-416 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, apps that use t |
| CVE-2026-34771 | Modified | 未確認 | CWE-364, CWE-416 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that regis |
| CVE-2026-34772 | Analyzed | 未確認 | CWE-416 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that allow |
| CVE-2026-34773 | Analyzed | 未確認 | CWE-20, CWE-74 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, on Windows, app.setAsD |
| CVE-2026-34774 | Modified | 未確認 | CWE-416, CWE-825 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 39.8.1, 40.7.0, and 41.0.0, apps that use offscreen render |
| CVE-2026-34775 | Analyzed | 未確認 | CWE-653 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.4, 40.8.4, and 41.0.0, the nodeIntegrationInW |
| CVE-2026-34776 | Analyzed | 未確認 | CWE-125 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, on macOS and Linux, ap |
| CVE-2026-34777 | Analyzed | 未確認 | CWE-346 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, when an iframe request |
| CVE-2026-34778 | Analyzed | 未確認 | CWE-290, CWE-345 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, a service worker runni |
| CVE-2026-34779 | Analyzed | 未確認 | CWE-78 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, on macOS, app.m |
| CVE-2026-34780 | Modified | 未確認 | CWE-1188, CWE-501, CWE-668 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 39.0.0-alpha.1 to before 39.8.0, 40.0.0-alpha.1 to before 40.7 |
| CVE-2026-34781 | Analyzed | 未確認 | CWE-476 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, apps that call clipboar |
| CVE-2026-34782 | Analyzed | 未確認 | CWE-862 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the REST endpoint POST /api/v1/ai_assistance/text_tools/:id was not checking if a user |
| CVE-2026-34783 | Analyzed | 未確認 | CWE-22, CWE-73 | Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4, a path traversal vulnerability in Ferret's IO::FS::WRITE standard library function allows a malici |
| CVE-2026-34785 | Modified | 未確認 | CWE-187, CWE-200, CWE-552 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static determines whether a request should be served as a static file using a simple |
| CVE-2026-34786 | Analyzed | 未確認 | CWE-180 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static#applicable_rules evaluates several header_rules types against the raw URL-enc |
| CVE-2026-34787 | Analyzed | 未確認 | CWE-98 | Emlog is an open source website building system. In versions 2.6.2 and prior, a Local File Inclusion (LFI) vulnerability exists in admin/plugin.php at line 80. The $plugin paramete |
| CVE-2026-34788 | Analyzed | 未確認 | CWE-89 | Emlog is an open source website building system. In versions 2.6.2 and prior, a SQL injection vulnerability exists in include/model/tag_model.php at line 168. The updateTagName() f |
| CVE-2026-34790 | Analyzed | 未確認 | CWE-22 | Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi. The rem |
| CVE-2026-34791 | Analyzed | 未確認 | CWE-78 | Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_proxy.cgi. The DATE parameter value is u |
| CVE-2026-34792 | Analyzed | 未確認 | CWE-78 | Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_clamav.cgi. The DATE parameter value is |
| CVE-2026-34793 | Analyzed | 未確認 | CWE-78 | Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_firewall.cgi. The DATE parameter value i |
| CVE-2026-34794 | Analyzed | 未確認 | CWE-78 | Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_ids.cgi. The DATE parameter value is use |
| CVE-2026-34795 | Analyzed | 未確認 | CWE-78 | Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_log.cgi. The DATE parameter value is use |
| CVE-2026-34796 | Analyzed | 未確認 | CWE-78 | Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_openvpn.cgi. The DATE parameter value is |
| CVE-2026-34797 | Analyzed | 未確認 | CWE-78 | Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_smtp.cgi. The DATE parameter value is us |
| CVE-2026-34798 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/routing.cgi. An authenticated attacker can inject arbitrary Ja |
| CVE-2026-34799 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dnsmasq/hosts/. An authenticated attacker can inject arbitrary |
| CVE-2026-3480 | Deferred | 未確認 | CWE-862 | The WP Blockade plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 0.9.14. The plugin registers an admin_post action hook 'wp-blockade- |
| CVE-2026-34800 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the NAME parameter to /cgi-bin/uplinkeditor.cgi. An authenticated attacker can inject arbitrary |
| CVE-2026-34801 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dhcp/fixed_leases/. An authenticated attacker can inject arbitr |
| CVE-2026-34802 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark user ham spam parameter to /cgi-bin/salearn.cgi. An authenticated attacker can injec |
| CVE-2026-34803 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the name parameter to /manage/qos/classes/. An authenticated attacker can inject arbitrary Java |
| CVE-2026-34804 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the dscp parameter to /manage/qos/rules/. An authenticated attacker can inject arbitrary JavaSc |
| CVE-2026-34805 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/dnat.cgi. An authenticated attacker can inject arbitrary JavaS |
| CVE-2026-34806 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/snat.cgi. An authenticated attacker can inject arbitrary JavaS |
| CVE-2026-34807 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/incoming.cgi. An authenticated attacker can inject arbitrary J |
| CVE-2026-34808 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/outgoingfw.cgi. An authenticated attacker can inject arbitrary |
| CVE-2026-34809 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/zonefw.cgi. An authenticated attacker can inject arbitrary Jav |
| CVE-2026-34810 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/vpnfw.cgi. An authenticated attacker can inject arbitrary Java |
| CVE-2026-34811 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/xtaccess.cgi. An authenticated attacker can inject arbitrary J |
| CVE-2026-34812 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the mimetypes parameter to /cgi-bin/proxypolicy.cgi. An authenticated attacker can inject arbit |
| CVE-2026-34813 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the user parameter to /cgi-bin/proxyuser.cgi. An authenticated attacker can inject arbitrary Ja |
| CVE-2026-34814 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the group parameter to /cgi-bin/proxygroup.cgi. An authenticated attacker can inject arbitrary |
| CVE-2026-34815 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the DOMAIN parameter to /cgi-bin/smtpdomains.cgi. An authenticated attacker can inject arbitrar |
| CVE-2026-34816 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the domain parameter to /manage/smtpscan/domainrouting/. An authenticated attacker can inject a |
| CVE-2026-34817 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the ADDRESS BCC parameter to /cgi-bin/smtprouting.cgi. An authenticated attacker can inject arb |
| CVE-2026-34818 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dnsmasq/localdomains/. An authenticated attacker can inject arb |
| CVE-2026-34819 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the REMARK parameter to /cgi-bin/openvpnclient.cgi. An authenticated attacker can inject arbitr |
| CVE-2026-34820 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/ipsec/. An authenticated attacker can inject arbitrary JavaScri |
| CVE-2026-34821 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/vpnauthentication/user/. An authenticated attacker can inject a |
| CVE-2026-34822 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the new_cert_name parameter to /manage/ca/certificate/. An authenticated attacker can inject ar |
| CVE-2026-34823 | Analyzed | 未確認 | CWE-79 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/password/web/. An authenticated attacker can inject arbitrary J |
| CVE-2026-34824 | Analyzed | 未確認 | CWE-125, CWE-770 | Mesop is a Python-based UI framework that allows users to build web applications. From version 1.2.3 to before version 1.2.5, an uncontrolled resource consumption vulnerability exi |
| CVE-2026-34825 | Analyzed | 未確認 | CWE-89 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.30, NocoBase plugin-workflow-sql substitutes t |
| CVE-2026-34826 | Analyzed | 未確認 | CWE-400, CWE-770 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.get_byte_ranges parses the HTTP Range header without limiting the number of in |
| CVE-2026-34827 | Modified | 未確認 | CWE-400, CWE-407, CWE-770 | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Multipart::Parser#handle_mime_head parses quoted multipart |
| CVE-2026-34828 | Analyzed | 未確認 | CWE-613 | listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued |
| CVE-2026-34829 | Modified | 未確認 | CWE-400, CWE-770 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser only wraps the request body in a BoundedIO when CONTENT_LENGTH is |
| CVE-2026-34830 | Analyzed | 未確認 | CWE-625 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Sendfile#map_accel_path interpolates the value of the X-Accel-Mapping request header |
| CVE-2026-34831 | Analyzed | 未確認 | CWE-130, CWE-135 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Files#fail sets the Content-Length response header using String#size instead of Stri |
| CVE-2026-34832 | Analyzed | 未確認 | CWE-639 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.66.1, Scoold contains an authenticated authorization flaw in feedback deletion that allows any logged |
| CVE-2026-34833 | Analyzed | 未確認 | CWE-312 | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to version 1.4.10, the GET /api/auth/session endpoint previously included the user's plaintext passw |
| CVE-2026-34834 | Analyzed | 未確認 | CWE-287 | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to version 1.4.10, the verifyIdentity() function contained logic that returned true if no session co |
| CVE-2026-34835 | Analyzed | 未確認 | CWE-1286 | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host header using an AUTHORITY regular |
| CVE-2026-34837 | Analyzed | 未確認 | CWE-862 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, he REST endpoint POST /api/v1/ai_assistance/text_tools/:id contains an authorization failure. Co |
| CVE-2026-34838 | Analyzed | 未確認 | CWE-502 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.156, 25.0.90, and 26.0.12, a vulnerability in the AbstractSettingsCollectio |
| CVE-2026-34839 | Analyzed | 未確認 | CWE-200, CWE-306, CWE-942 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Glances web server exposes a REST API (`/api/4/*`) that is accessible without authentic |
| CVE-2026-34840 | Analyzed | 未確認 | CWE-347 | OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, OneUptime's SAML SSO implementation (App/FeatureSet/Identity/Utils/SSO.ts) has decouple |
| CVE-2026-34841 | Analyzed | 未確認 | CWE-494, CWE-506 | Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, whi |
| CVE-2026-34847 | Analyzed | 未確認 | CWE-601 | hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, the /enter page contains a DOM-based open redirect vulnerability. The redirect query parameter is |
| CVE-2026-34848 | Analyzed | 未確認 | CWE-79 | hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This is |
| CVE-2026-34849 | Analyzed | 未確認 | CWE-362 | UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34850 | Analyzed | 未確認 | CWE-362 | Race condition vulnerability in the notification service. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34851 | Analyzed | 未確認 | CWE-362 | Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34852 | Analyzed | 未確認 | CWE-835 | Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34853 | Analyzed | 未確認 | CWE-270 | Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34854 | Analyzed | 未確認 | CWE-416 | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
| CVE-2026-34855 | Analyzed | 未確認 | CWE-20 | Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
| CVE-2026-34856 | Analyzed | 未確認 | CWE-362 | UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34857 | Analyzed | 未確認 | CWE-362 | UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34858 | Analyzed | 未確認 | CWE-362 | UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34859 | Analyzed | 未確認 | CWE-416 | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
| CVE-2026-34860 | Analyzed | 未確認 | CWE-284 | Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
| CVE-2026-34861 | Analyzed | 未確認 | CWE-362 | Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34862 | Analyzed | 未確認 | CWE-362 | Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34863 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34864 | Analyzed | 未確認 | CWE-119 | Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34865 | Analyzed | 未確認 | CWE-122 | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
| CVE-2026-34866 | Analyzed | 未確認 | CWE-120 | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
| CVE-2026-34867 | Analyzed | 未確認 | CWE-415 | Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-34871 | Analyzed | 未確認 | CWE-338 | An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number Generator (PRNG). |
| CVE-2026-34872 | Analyzed | 未確認 | CWE-347 | An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using fi |
| CVE-2026-34873 | Analyzed | 未確認 | CWE-287 | An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session. |
| CVE-2026-34874 | Analyzed | 未確認 | CWE-476 | An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attacker to write to addre |
| CVE-2026-34875 | Analyzed | 未確認 | CWE-120 | An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys. |
| CVE-2026-34876 | Analyzed | 未確認 | CWE-125 | An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in library/ccm.c allows attackers to obtain adjacent CCM context d |
| CVE-2026-34877 | Analyzed | 未確認 | CWE-250, CWE-502 | An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who |
| CVE-2026-3488 | Deferred | 未確認 | CWE-862 | The WP Statistics plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 14.16.4. This is due to missing capability checks on multiple AJ |
| CVE-2026-34885 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects |
| CVE-2026-34889 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows DOM-Based XS |
| CVE-2026-3489 | Deferred | 未確認 | CWE-89 | The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to SQL Injection via the 'packages' parameter in versions up to, and including, |
| CVE-2026-34890 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark O’Donnell MSTW League Manager allows DOM-Based XSS.This issue affects MST |
| CVE-2026-34896 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construct |
| CVE-2026-34897 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS.This issue affects Med |
| CVE-2026-34899 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Eniture technology LTL Freight Quotes – Worldwide Express Edition allows Exploiting Incorrectly Configured Access Control Security Levels.Thi |
| CVE-2026-34903 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ocean Extra: from n/a through |
| CVE-2026-34904 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify Simple Social Media Share Buttons allows Cross Site Request Forgery.This issue affects Simple Social Media Share Button |
| CVE-2026-34931 | Analyzed | 未確認 | CWE-601 | hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is an open redirect vulnerability that leads to token exfiltration. With these tokens, the |
| CVE-2026-34932 | Analyzed | 未確認 | CWE-79 | hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability that can lead to CSRF. This issue has been patched in version |
| CVE-2026-34933 | Analyzed | 未確認 | CWE-617 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-d |
| CVE-2026-34934 | Analyzed | 未確認 | CWE-89 | PraisonAI is a multi-agent teams system. Prior to version 4.5.90, the get_all_user_threads function constructs raw SQL queries using f-strings with unescaped thread IDs fetched fro |
| CVE-2026-34935 | Analyzed | 未確認 | CWE-78 | PraisonAI is a multi-agent teams system. From version 4.5.15 to before version 4.5.69, the --mcp CLI argument is passed directly to shlex.split() and forwarded through the call cha |
| CVE-2026-34936 | Analyzed | 未確認 | CWE-918 | PraisonAI is a multi-agent teams system. Prior to version 4.5.90, passthrough() and apassthrough() in praisonai accept a caller-controlled api_base parameter that is concatenated w |
| CVE-2026-34937 | Analyzed | 未確認 | CWE-78 | PraisonAI is a multi-agent teams system. Prior to version 1.5.90, run_python() in praisonai constructs a shell command string by interpolating user-controlled code into python3 -c |
| CVE-2026-34938 | Analyzed | 未確認 | CWE-693 | PraisonAI is a multi-agent teams system. Prior to version 1.5.90, execute_code() in praisonai-agents runs attacker-controlled Python inside a three-layer sandbox that can be fully |
| CVE-2026-34939 | Analyzed | 未確認 | CWE-1333 | PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no vali |
| CVE-2026-34940 | Modified | 未確認 | CWE-78 | KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command |
| CVE-2026-34941 | Analyzed | 未確認 | CWE-125 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime contains a vulnerability where when transcoding a UTF-16 string to the latin1+utf16 com |
| CVE-2026-34942 | Analyzed | 未確認 | CWE-129 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of transcoding strings into the Component Model's utf16 or latin1+utf1 |
| CVE-2026-34943 | Analyzed | 未確認 | CWE-248 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime contains a possible panic which can happen when a flags-typed component model value is |
| CVE-2026-34944 | Analyzed | 未確認 | CWE-248 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86-64 platforms with SSE3 disabled Wasmtime's compilation of the f64x2.splat WebAssembly ins |
| CVE-2026-34945 | Analyzed | 未確認 | CWE-681 | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler contains a bug where a 64-bit table, part of the memory64 proposa |
| CVE-2026-34946 | Analyzed | 未確認 | CWE-670 | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler contains a vulnerability where the compilation of the table.fill |
| CVE-2026-34947 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, stage |
| CVE-2026-34950 | Analyzed | 未確認 | CWE-327 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, the publicKeyPemMatcher regex in fast-jwt/src/crypto.js uses a ^ anchor that is defeated by any le |
| CVE-2026-34951 | Analyzed | 未確認 | CWE-79 | Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains a reflecte |
| CVE-2026-34952 | Analyzed | 未確認 | CWE-306 | PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authe |
| CVE-2026-34953 | Analyzed | 未確認 | CWE-863 | PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by defaul |
| CVE-2026-34954 | Analyzed | 未確認 | CWE-918 | PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url |
| CVE-2026-34955 | Analyzed | 未確認 | CWE-78 | PraisonAI is a multi-agent teams system. Prior to version 4.5.97, SubprocessSandbox in all modes (BASIC, STRICT, NETWORK_ISOLATED) calls subprocess.run() with shell=True and relies |
| CVE-2026-34965 | Deferred | 未確認 | CWE-94 | Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection m |
| CVE-2026-34969 | Analyzed | 未確認 | CWE-200, CWE-598 | Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth provider callback flow places the refresh token directly into the redirect URL |
| CVE-2026-34971 | Modified | 未確認 | CWE-125, CWE-787 | Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Cranelift compilation backend contains a bug on aarch64 when performing a certai |
| CVE-2026-34972 | Analyzed | 未確認 | CWE-863 | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. From 1.8.0 to 1.13.1, under specific conditions, Ba |
| CVE-2026-34973 | Analyzed | 未確認 | CWE-943 | phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the searchCustomPages() method in phpmyfaq/src/phpMyFAQ/Search.php uses real_escape_string() (via escape()) |
| CVE-2026-34974 | Analyzed | 未確認 | CWE-79 | phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the regex-based SVG sanitizer in phpMyFAQ (SvgSanitizer.php) can be bypassed using HTML entity encoding in j |
| CVE-2026-34975 | Analyzed | 未確認 | CWE-93 | Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied values fo |
| CVE-2026-34976 | Analyzed | 未確認 | CWE-862 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from the authorization middleware config (admin.go), making it c |
| CVE-2026-34977 | Modified | 未確認 | CWE-78 | Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, when uploading a JPEG, a user can specify an optional password to accompany the JPEG. This |
| CVE-2026-34978 | Analyzed | 未確認 | CWE-22 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, the RSS notifier allows .. path traversal in noti |
| CVE-2026-34979 | Analyzed | 未確認 | CWE-122 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS |
| CVE-2026-3498 | Deferred | 未確認 | CWE-79 | The BlockArt Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'clientId' block attribute in all versions up to, and including, 2.2.15. This is due t |
| CVE-2026-34980 | Analyzed | 未確認 | CWE-20 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target q |
| CVE-2026-34981 | Analyzed | 未確認 | CWE-918 | The whisperX API is a tool for enhancing and analyzing audio content. From 0.3.1 to 0.5.0, FileService.download_from_url() in app/services/file_service.py calls requests.get(url) w |
| CVE-2026-34982 | Modified | 未確認 | CWE-78 | Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. |
| CVE-2026-34983 | Analyzed | 未確認 | CWE-416 | Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. |
| CVE-2026-34984 | Analyzed | 未確認 | CWE-200 | External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Versions 2.2.0 and below contain a vulnerability |
| CVE-2026-34985 | Analyzed | 未確認 | CWE-639 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 16.1.0 to before |
| CVE-2026-34986 | Modified | 未確認 | CWE-131, CWE-248 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS) |
| CVE-2026-34987 | Analyzed | 未確認 | CWE-125, CWE-787 | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler backend may allow properly construc |
| CVE-2026-34988 | Analyzed | 未確認 | CWE-119 | Wasmtime is a runtime for WebAssembly. From 28.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of its pooling allocator contains a bug where in certain configur |
| CVE-2026-34989 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 31.0.0.0, the application fai |
| CVE-2026-3499 | Deferred | 未確認 | CWE-352 | The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 13.4.6 through 13.5.2. |
| CVE-2026-34990 | Analyzed | 未確認 | CWE-287 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into a |
| CVE-2026-34992 | Analyzed | 未確認 | CWE-311 | Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to 2.4.5 and 2.5.2, a missing encryption vulnerability affects inter-Node Pod traffic. In Antrea |
| CVE-2026-34994 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-34995 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-34996 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-34997 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-34998 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-34999 | Analyzed | 未確認 | CWE-306 | OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability in the bot proxy router that allows remote unauthenticated attackers to access protected bo |
| CVE-2026-35000 | Analyzed | 未確認 | CWE-184 | ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary local files by |
| CVE-2026-35002 | Analyzed | 未確認 | CWE-95 | Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulat |
| CVE-2026-35020 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected by the its CVE Numbering Authority (CNA). It was determined that the attack requires an attacker to already control arbitrary environ | |
| CVE-2026-35021 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected by its CVE Numbering Authority (CNA). It was determined that the affected code path cannot be triggered through normal usage of Claud | |
| CVE-2026-35022 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected by its CVE Numbering Authority (CNA). It was determined that the -p flag behavior is documented in Anthropic's claude -h output with | |
| CVE-2026-35023 | Analyzed | 未確認 | CWE-639 | Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference vulnerability in the preview.php endpoint where the item_id parameter lacks proper aut |
| CVE-2026-35029 | Modified | 未確認 | CWE-425, CWE-863 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user |
| CVE-2026-35030 | Modified | 未確認 | CWE-222, CWE-287 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo |
| CVE-2026-35031 | Analyzed | 未確認 | CWE-187, CWE-20, CWE-22 | Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a vulnerability chain in the subtitle upload endpoint (POST /Videos/{itemId}/Subtitles), wher |
| CVE-2026-35032 | Analyzed | 未確認 | CWE-73, CWE-918 | Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a vulnerability chain in the LiveTV M3U tuner endpoint (POST /LiveTv/TunerHosts), where the t |
| CVE-2026-35033 | Analyzed | 未確認 | CWE-862, CWE-88 | Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain an unauthenticated arbitrary file read vulnerability via ffmpeg argument injection through th |
| CVE-2026-35034 | Analyzed | 未確認 | CWE-400 | Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a denial of service vulnerability in the SyncPlay group creation endpoint (POST /SyncPlay/New |
| CVE-2026-35035 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.2.0, the application fai |
| CVE-2026-35036 | Analyzed | 未確認 | CWE-918 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to 4.2.8, Ech0 implements link preview (editor fetches a page title) through GET /api/websi |
| CVE-2026-35037 | Analyzed | 未確認 | CWE-918 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to 4.2.8, the GET /api/website/title endpoint accepts an arbitrary URL via the website_url |
| CVE-2026-35038 | Analyzed | 未確認 | CWE-125, CWE-20, CWE-200 | Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0, there is an arbitrary prototype read vulnerability via `from` field bypass. T |
| CVE-2026-35039 | Analyzed | 未確認 | CWE-1289, CWE-345, CWE-706 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 0.0.1 to before 6.2.0, setting up a custom cacheKeyBuilder method which does not properly create unique keys for di |
| CVE-2026-35040 | Analyzed | 未確認 | CWE-440, CWE-697 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allo |
| CVE-2026-35041 | Analyzed | 未確認 | CWE-1333 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 5.0.0 to 6.2.0, a denial-of-service condition exists in fast-jwt when the allowedAud verification option is configu |
| CVE-2026-35042 | Analyzed | 未確認 | CWE-345, CWE-636 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, fast-jwt does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When |
| CVE-2026-35043 | Analyzed | 未確認 | CWE-78 | BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the cloud deployment path in src/bentoml/_internal/cloud |
| CVE-2026-35044 | Analyzed | 未確認 | CWE-1336 | BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the Dockerfile generation function generate_containerfil |
| CVE-2026-35045 | Analyzed | 未確認 | CWE-639 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the PUT /api/recipe/batch_update/ endpoint in Tandoor Recipes a |
| CVE-2026-35046 | Analyzed | 未確認 | CWE-79 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, Tandoor Recipes allows authenticated users to inject arbitrary |
| CVE-2026-35047 | Analyzed | 未確認 | CWE-434 | Brave CMS is an open-source CMS. Prior to 2.0.6, an Unrestricted File Upload vulnerability in the CKEditor endpoint allows attackers to upload arbitrary files, including executable |
| CVE-2026-3505 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This v |
| CVE-2026-35050 | Analyzed | 未確認 | CWE-22 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root direct |
| CVE-2026-35051 | Modified | 未確認 | CWE-345, CWE-501 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traefik's ForwardAuth midd |
| CVE-2026-35052 | Analyzed | 未確認 | CWE-79 | D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data structures. Prior to 3.22.0, users hosting D-Tale publicly while using a redis or |
| CVE-2026-35053 | Analyzed | 未確認 | CWE-306 | OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, the Worker service's ManualAPI exposes workflow execution endpoints (GET /workflow/manu |
| CVE-2026-35054 | Analyzed | 未確認 | CWE-79 | XenForo before 2.3.9 is vulnerable to stored cross-site scripting (XSS) related to BB code rendering. An attacker can inject malicious scripts through BB code that are stored and e |
| CVE-2026-35055 | Analyzed | 未確認 | CWE-79 | XenForo before 2.3.9 and before 2.2.18 is vulnerable to cross-site scripting (XSS) related to lightbox usage in posts. An attacker can inject malicious scripts that execute when us |
| CVE-2026-35056 | Analyzed | 未確認 | CWE-94 | XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users. An attacker with admin panel access can execute arbitrary co |
| CVE-2026-35057 | Analyzed | 未確認 | CWE-79 | XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting (XSS) in structured text mentions, primarily affecting legacy profile post content. An attacker |
| CVE-2026-35061 | Analyzed | 未確認 | CWE-862 | Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without authentication, revealing sensitive operational imagery. |
| CVE-2026-35063 | Analyzed | 未確認 | CWE-862 | OpenPLC_V3 REST API endpoint checks for JWT presence but never verifies the caller's role. Any authenticated user with role=user can delete any other user, including administrators |
| CVE-2026-35064 | Analyzed | 未確認 | CWE-306 | A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of de |
| CVE-2026-35072 | Modified | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7. |
| CVE-2026-35073 | Modified | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7. |
| CVE-2026-35074 | Modified | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7. |
| CVE-2026-35091 | Modified | 未確認 | CWE-253 | A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a spe |
| CVE-2026-35092 | Modified | 未確認 | CWE-190 | A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram |
| CVE-2026-35093 | Modified | 未確認 | CWE-94 | A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain system or user configuration directories can bypass security restricti |
| CVE-2026-35094 | Analyzed | 未確認 | CWE-825 | A flaw was found in libinput. An attacker capable of deploying a Lua plugin file in specific system directories can exploit a dangling pointer vulnerability. This occurs when a gar |
| CVE-2026-35099 | Deferred | 未確認 | CWE-362 | Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM. The fixed versions are 11.2.1.28, 11.3.0.38, 11.4.0.24, and 11 |
| CVE-2026-3513 | Deferred | 未確認 | CWE-79 | The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableon_button' shortcode in all versions up to and includ |
| CVE-2026-35153 | Modified | 未確認 | CWE-88 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7. |
| CVE-2026-35154 | Modified | 未確認 | CWE-269 | Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 |
| CVE-2026-35155 | Analyzed | 未確認 | CWE-522 | Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenti |
| CVE-2026-35164 | Analyzed | 未確認 | CWE-434 | Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestricted file upload vulnerability exists in the CKEditor upload functionality. It is found in app/Http/Controllers/Dashboar |
| CVE-2026-35165 | Analyzed | 未確認 | CWE-639 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 21.0.0 to before |
| CVE-2026-35166 | Analyzed | 未確認 | CWE-79 | Hugo is a static site generator. From 0.60.0 to before 0.159.2, links and image links in the default markdown to HTML renderer are not properly escaped. Hugo users who trust their |
| CVE-2026-35167 | Analyzed | 未確認 | CWE-22 | Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_path() method in kedro/io/core.py constructs filesystem paths by directly interpolating use |
| CVE-2026-35168 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.10.2, the Aggiornamenti (Updates) module in OpenSTAManager contains |
| CVE-2026-35169 | Analyzed | 未確認 | CWE-552, CWE-79 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From to before 27.0. |
| CVE-2026-3517 | Analyzed | 未確認 | CWE-77 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary |
| CVE-2026-35170 | Analyzed | 未確認 | CWE-125 | openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in BitParser::parseHeader() that allows out-of-bounds heap |
| CVE-2026-35171 | Analyzed | 未確認 | CWE-502, CWE-94 | Kedro is a toolbox for production-ready data science. Prior to 1.3.0, Kedro allows the logging configuration file path to be set via the KEDRO_LOGGING_CONFIG environment variable a |
| CVE-2026-35172 | Modified | 未確認 | CWE-284, CWE-524 | Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage. |
| CVE-2026-35173 | Analyzed | 未確認 | CWE-639, CWE-914 | Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing per |
| CVE-2026-35174 | Analyzed | 未確認 | CWE-22, CWE-434, CWE-73 | Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, a path traversal vulnerability exists in the administration console that allows an administrator or a user wit |
| CVE-2026-35175 | Analyzed | 未確認 | CWE-862 | Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even |
| CVE-2026-35176 | Analyzed | 未確認 | CWE-125 | openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in POFParser::parseSection() that allows out-of-bounds hea |
| CVE-2026-35177 | Analyzed | 未確認 | CWE-22 | Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially cra |
| CVE-2026-35178 | Analyzed | 未確認 | CWE-94 | Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains remote cod |
| CVE-2026-35179 | Analyzed | 未確認 | CWE-862 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the SocialMediaPublisher plugin exposes a publishInstagram.json.php endpoint that acts as an unauthenticat |
| CVE-2026-3518 | Analyzed | 未確認 | CWE-77 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on th |
| CVE-2026-35180 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the site customization endpoint at admin/customize_settings_nativeUpdate.json.php lacks CSRF token validat |
| CVE-2026-35181 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the player skin configuration endpoint at admin/playerUpdate.json.php does not validate CSRF tokens. The p |
| CVE-2026-35182 | Analyzed | 未確認 | CWE-862 | Brave CMS is an open-source CMS. Prior to 2.0.6, this vulnerability is a missing authorization check found in the update role endpoint at routes/web.php. The POST route for /rights |
| CVE-2026-35183 | Analyzed | 未確認 | CWE-639 | Brave CMS is an open-source CMS. Prior to 2.0.6, an Insecure Direct Object Reference (IDOR) vulnerability exists in the article image deletion feature. It is located in app/Http/Co |
| CVE-2026-35184 | Analyzed | 未確認 | CWE-89 | EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom and value parameters. T |
| CVE-2026-35185 | Analyzed | 未確認 | CWE-284, CWE-522, CWE-532 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to 25.0.0, the /server-status endpoint is publicly accessible and exposes sensitive information including |
| CVE-2026-35186 | Analyzed | 未確認 | CWE-789 | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler backend contains a bug where translating the table.grow operator |
| CVE-2026-35187 | Analyzed | 未確認 | CWE-918 | pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the parse_urls API function in src/pyload/core/api/__init__.py fetches arbitrary |
| CVE-2026-3519 | Analyzed | 未確認 | CWE-77 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary |
| CVE-2026-35195 | Analyzed | 未確認 | CWE-787 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of transcoding strings between components contains a bug where the ret |
| CVE-2026-35196 | Analyzed | 未確認 | CWE-78 | Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an OS Command Injection vulnerability exists in the main/inc/ajax/gradebook.ajax.php endp |
| CVE-2026-35197 | Analyzed | 未確認 | CWE-94 | dye is a portable and respectful color library for shell scripts. Prior to 1.1.1, certain dye template expressions would result in execution of arbitrary code. This issue was disco |
| CVE-2026-35199 | Analyzed | 未確認 | CWE-122 | SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a |
| CVE-2026-35200 | Analyzed | 未確認 | CWE-436 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.73 and 9.7.1-alpha.4, a file can be uploaded with a filename ex |
| CVE-2026-35201 | Analyzed | 未確認 | CWE-125 | Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the def |
| CVE-2026-35203 | Analyzed | 未確認 | CWE-125 | ZLMediaKit is a streaming media service framework. the VP9 RTP payload parser in ext-codec/VP9Rtp.cpp reads multiple fields from the RTP payload based on flag bits in the first byt |
| CVE-2026-35204 | Modified | 未確認 | CWE-22 | Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, a specially crafted Helm plugin, when installed or updated, will cause Helm to write the contents of the p |
| CVE-2026-35205 | Modified | 未確認 | CWE-347, CWE-636 | Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vu |
| CVE-2026-35206 | Analyzed | 未確認 | CWE-22 | Helm is a package manager for Charts for Kubernetes. In Helm versions <=3.20.1 and <=4.1.3, a specially crafted Chart will cause helm pull --untar [chart URL | repo/chartname] to |
| CVE-2026-35207 | Awaiting Analysis | 未確認 | CWE-295 | dde-control-center is the control panel of DDE, the Deepin Desktop Environment. plugin-deepinid is a plugin in dde-control-center, which provides the deepinid cloud service. Prior |
| CVE-2026-35208 | Analyzed | 未確認 | CWE-116, CWE-79 | lichess.org is the forever free, adless and open source chess server. Any approved streamer can inject arbitrary HTML into /streamer and the homepage “Live streams” widget by placi |
| CVE-2026-35209 | Analyzed | 未確認 | CWE-1321 | defu is software that allows uers to assign default properties recursively. Prior to version 6.1.5, applications that pass unsanitized user input (e.g. parsed JSON request bodies, |
| CVE-2026-35213 | Analyzed | 未確認 | CWE-1333 | @hapi/content provided HTTP Content-* headers parsing. All versions of @hapi/content through 6.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via crafted HTTP h |
| CVE-2026-35214 | Analyzed | 未確認 | CWE-22 | Budibase is an open-source low-code platform. Prior to version 3.33.4, the plugin file upload endpoint (POST /api/plugin/upload) passes the user-supplied filename directly to creat |
| CVE-2026-35215 | Analyzed | 未確認 | CWE-369 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdl_desc() function does not validate the length of a decoded SD |
| CVE-2026-35216 | Analyzed | 未確認 | CWE-78 | Budibase is an open-source low-code platform. Prior to version 3.33.4, an unauthenticated attacker can achieve Remote Code Execution (RCE) on the Budibase server by triggering an a |
| CVE-2026-35218 | Analyzed | 未確認 | CWE-79 | Budibase is an open-source low-code platform. Prior to version 3.32.5, Budibase's Builder Command Palette renders entity names (tables, views, queries, automations) using Svelte's |
| CVE-2026-35225 | Awaiting Analysis | 未確認 | CWE-754 | An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new co |
| CVE-2026-35229 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.30 and 21.3-21.21. Easily exploitable vulnerability allows unau |
| CVE-2026-35230 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability |
| CVE-2026-35231 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financial Services Transaction Filtering product of Oracle Financial Services Applications (component: User Interface). The supported version that is |
| CVE-2026-35232 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerab |
| CVE-2026-35234 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are affected are 9.0.0-9.6.0. Easily exploitable vulnerability al |
| CVE-2026-35235 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 9.0.0-9.6.0. Easily exploitable vulnerability allows h |
| CVE-2026-35236 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploita |
| CVE-2026-35237 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploita |
| CVE-2026-35238 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploita |
| CVE-2026-35239 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exp |
| CVE-2026-3524 | Analyzed | 未確認 | CWE-862 | Mattermost Plugin Legal Hold versions <=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, crea |
| CVE-2026-35240 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi |
| CVE-2026-35241 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2. Easily e |
| CVE-2026-35242 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability |
| CVE-2026-35243 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 |
| CVE-2026-35244 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.24.0.0 |
| CVE-2026-35245 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability al |
| CVE-2026-35246 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability |
| CVE-2026-35247 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability al |
| CVE-2026-35248 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability |
| CVE-2026-35249 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability al |
| CVE-2026-35250 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability al |
| CVE-2026-35251 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability |
| CVE-2026-35252 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API). Supported versions that are affected are 12.2.1.4.0 and 12.1.3.0.0 |
| CVE-2026-35337 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Storm. Versions Affected: before 2.8.6. Description: When processing topology credentials submitted via the Nimbus Thri |
| CVE-2026-35338 | Analyzed | 未確認 | CWE-22 | A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is litera |
| CVE-2026-35339 | Analyzed | 未確認 | CWE-253 | The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files. The final return value is determined solely by the s |
| CVE-2026-35340 | Analyzed | 未確認 | CWE-253 | A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is deter |
| CVE-2026-35341 | Analyzed | 未確認 | CWE-732 | A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because a file already exis |
| CVE-2026-35342 | Analyzed | 未確認 | CWE-377 | The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR is an empty string, th |
| CVE-2026-35343 | Analyzed | 未確認 | CWE-670 | The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter. The implementation fails to verify th |
| CVE-2026-35344 | Analyzed | 未確認 | CWE-252 | The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts. While intended to mimic GNU b |
| CVE-2026-35345 | Analyzed | 未確認 | CWE-367, CWE-59 | A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU tail, the uutils impl |
| CVE-2026-35346 | Analyzed | 未確認 | CWE-176 | The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. The implementation uses String::from_utf8_lossy(), which repla |
| CVE-2026-35347 | Analyzed | 未確認 | CWE-20 | The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations. The are_files_identical function opens and read |
| CVE-2026-35348 | Analyzed | 未確認 | CWE-248 | The sort utility in uutils coreutils is vulnerable to a process panic when using the --files0-from option with inputs containing non-UTF-8 filenames. The implementation enforces UT |
| CVE-2026-35349 | Analyzed | 未確認 | CWE-59 | A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protection. The implementation uses a path-string check rather than comparing device an |
| CVE-2026-3535 | Deferred | 未確認 | CWE-434 | The DSGVO Google Web Fonts GDPR plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the `DSGVOGWPdownloadGoogleFonts()` function in a |
| CVE-2026-35350 | Analyzed | 未確認 | CWE-281 | The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p (preserve) flag, the utility applies |
| CVE-2026-35351 | Analyzed | 未確認 | CWE-281 | The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that cr |
| CVE-2026-35352 | Modified | 未確認 | CWE-367 | A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs a path-based chmod to set perm |
| CVE-2026-35353 | Analyzed | 未確認 | CWE-367 | The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory with umask-derived permissions (typically 0755) before subseque |
| CVE-2026-35354 | Analyzed | 未確認 | CWE-367 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv utility of uutils coreutils during cross-device moves. The extended attribute (xattr) preservation logic uses |
| CVE-2026-35355 | Analyzed | 未確認 | CWE-367 | The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during file installation. The implementation unlinks an existing des |
| CVE-2026-35356 | Analyzed | 未確認 | CWE-367 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the install utility of uutils coreutils when using the -D flag. The command creates parent directories and subsequen |
| CVE-2026-35357 | Analyzed | 未確認 | CWE-367 | The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destination files are initially created with umask-derived permissions (e.g., 0644) be |
| CVE-2026-35358 | Analyzed | 未確認 | CWE-706 | The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats character and block device nodes as stream sources rather than preserving them. Becaus |
| CVE-2026-35359 | Analyzed | 未確認 | CWE-367, CWE-59 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows an attacker to bypass no-dereference intent. The utility checks if a source path |
| CVE-2026-35360 | Analyzed | 未確認 | CWE-367 | The touch utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during file creation. When the utility identifies a missing path, it l |
| CVE-2026-35361 | Analyzed | 未確認 | CWE-281, CWE-459 | The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempt |
| CVE-2026-35362 | Analyzed | 未確認 | CWE-367 | The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) symlink races using file-descriptor-relative syscalls, is inc |
| CVE-2026-35363 | Analyzed | 未確認 | CWE-22 | A vulnerability in the rm utility of uutils coreutils allows the bypass of safeguard mechanisms intended to protect the current directory. While the utility correctly refuses to de |
| CVE-2026-35364 | Analyzed | 未確認 | CWE-367 | A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mv utility of uutils coreutils during cross-device operations. The utility removes the destination path before |
| CVE-2026-35365 | Analyzed | 未確認 | CWE-59 | The mv utility in uutils coreutils improperly handles directory trees containing symbolic links during moves across filesystem boundaries. Instead of preserving symlinks, the imple |
| CVE-2026-35366 | Analyzed | 未確認 | CWE-754 | The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in environment strings, |
| CVE-2026-35367 | Analyzed | 未確認 | CWE-732 | The nohup utility in uutils coreutils creates its default output file, nohup.out, without specifying explicit restricted permissions. This causes the file to inherit umask-based pe |
| CVE-2026-35368 | Analyzed | 未確認 | CWE-426 | A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via getpwnam() after entering the chr |
| CVE-2026-35369 | Analyzed | 未確認 | CWE-20 | An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal (SIGTERM) to PID -1. Sending a signal to PI |
| CVE-2026-35370 | Analyzed | 未確認 | CWE-863 | The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of their effective GID to compute the group li |
| CVE-2026-35371 | Analyzed | 未確認 | CWE-451 | The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effe |
| CVE-2026-35372 | Analyzed | 未確認 | CWE-61 | A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference (or -n) flag is explicitly provided. The |
| CVE-2026-35373 | Analyzed | 未確認 | CWE-176 | A logic error in the ln utility of uutils coreutils causes the program to reject source paths containing non-UTF-8 filename bytes when using target-directory forms (e.g., ln SOURCE |
| CVE-2026-35374 | Analyzed | 未確認 | CWE-367 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the split utility of uutils coreutils. The program attempts to prevent data loss by checking for identity between in |
| CVE-2026-35375 | Analyzed | 未確認 | CWE-176 | A logic error in the split utility of uutils coreutils causes the corruption of output filenames when provided with non-UTF-8 prefix or suffix inputs. The implementation utilizes t |
| CVE-2026-35376 | Analyzed | 未確認 | CWE-367 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the chcon utility of uutils coreutils during recursive operations. The implementation resolves recursive targets usi |
| CVE-2026-35377 | Analyzed | 未確認 | CWE-20 | A logic error in the env utility of uutils coreutils causes a failure to correctly parse command-line arguments when utilizing the -S (split-string) option. In GNU env, backslashes |
| CVE-2026-35378 | Analyzed | 未確認 | CWE-768 | A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This |
| CVE-2026-35379 | Analyzed | 未確認 | CWE-684 | A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the [:graph:] and [:print:] character classes. The implementation mistakenly includes t |
| CVE-2026-35380 | Analyzed | 未確認 | CWE-20 | A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' (two single quotes) as an empty delimiter. The imple |
| CVE-2026-35381 | Analyzed | 未確認 | CWE-684 | A logic error in the cut utility of uutils coreutils causes the utility to ignore the -s (only-delimited) flag when using the -z (null-terminated) and -d '' (empty delimiter) optio |
| CVE-2026-35382 | Rejected | 未確認 | Rejected reason: Voluntarily withdrawn | |
| CVE-2026-35383 | Awaiting Analysis | 未確認 | CWE-540 | Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages. An unauthenticated attacker could use this token to enumerate or delete certain as |
| CVE-2026-35385 | Modified | 未確認 | CWE-281 | In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (l |
| CVE-2026-35386 | Analyzed | 未確認 | CWE-696 | In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is |
| CVE-2026-35387 | Analyzed | 未確認 | CWE-670 | OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECD |
| CVE-2026-35388 | Analyzed | 未確認 | CWE-420 | OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. |
| CVE-2026-35389 | Analyzed | 未確認 | CWE-295 | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, S/MIME signature verification did not validate the certificate trust chain (checkChain: f |
| CVE-2026-35390 | Analyzed | 未確認 | CWE-79 | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, the reverse proxy (proxy.ts) set the Content-Security-Policy-Report-Only header instead o |
| CVE-2026-35391 | Analyzed | 未確認 | CWE-348 | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, the getClientIP() function in lib/admin/session.ts trusted the first (leftmost) entry of |
| CVE-2026-35392 | Analyzed | 未確認 | CWE-22 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, PUT upload in httpserver/updown.go has no path sanitization. This vulnerability is fixed in 2.0.0-beta.3. |
| CVE-2026-35393 | Analyzed | 未確認 | CWE-22 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, the POST multipart upload directory not sanitized. This vulnerability is fixed in 2.0.0-beta.3. |
| CVE-2026-35394 | Analyzed | 未確認 | CWE-939 | Mobile Next is an MCP server for mobile development and automation. Prior to 0.0.50, the mobile_open_url tool in mobile-mcp passes user-supplied URLs directly to Android's intent s |
| CVE-2026-35395 | Analyzed | 未確認 | CWE-89 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in dao/memorando/ |
| CVE-2026-35396 | Analyzed | 未確認 | CWE-601 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA applicati |
| CVE-2026-35398 | Analyzed | 未確認 | CWE-601 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA applicati |
| CVE-2026-35399 | Analyzed | 未確認 | CWE-79 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, a stored XSS vulnerability allows an attacker to inject malicious scripts through a backup filename. This could |
| CVE-2026-35400 | Analyzed | 未確認 | CWE-59 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before |
| CVE-2026-35401 | Analyzed | 未確認 | CWE-770 | Saleor is an e-commerce platform. From 2.0.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, a malicious actor can include many GraphQL mutations or queries in a single API cal |
| CVE-2026-35402 | Deferred | 未確認 | CWE-284 | mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases. In versions prior to 0.6.0, the read_only mode enforcement can be bypassed using APOC CALL p |
| CVE-2026-35403 | Analyzed | 未確認 | CWE-79 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 15.10 to before |
| CVE-2026-35404 | Modified | 未確認 | CWE-601 | Open edX Platform enables the authoring and delivery of online learning at any scale. The view_survey endpoint accepts a redirect_url GET parameter that is passed directly to HttpR |
| CVE-2026-35405 | Analyzed | 未確認 | CWE-770 | libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, libp2p-rendezvous server has no limit on how many namespaces a single peer |
| CVE-2026-35406 | Analyzed | 未確認 | CWE-400, CWE-835 | Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to ent |
| CVE-2026-35407 | Analyzed | 未確認 | CWE-285 | Saleor is an e-commerce platform. From 2.10.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, a business-logic and authorization flaw was found in the account email change work |
| CVE-2026-35408 | Analyzed | 未確認 | CWE-346, CWE-693 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus's Single Sign-On (SSO) login pages lacked a Cross-Origin-Opener-Policy ( |
| CVE-2026-35409 | Analyzed | 未確認 | CWE-918 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.0, a Server-Side Request Forgery (SSRF) protection bypass has been identified and fi |
| CVE-2026-35410 | Analyzed | 未確認 | CWE-184, CWE-601 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, an open redirect vulnerability exists in the login redirection logic. The isLogin |
| CVE-2026-35411 | Analyzed | 未確認 | CWE-601 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, Directus is vulnerable to an open redirect via the redirect query parameter on th |
| CVE-2026-35412 | Analyzed | 未確認 | CWE-863 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, Directus' TUS resumable upload endpoint (/files/tus) allows any authenticated use |
| CVE-2026-35413 | Analyzed | 未確認 | CWE-200 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, when GRAPHQL_INTROSPECTION=false is configured, Directus correctly blocks standar |
| CVE-2026-35414 | Analyzed | 未確認 | CWE-670 | OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certai |
| CVE-2026-35431 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-35441 | Analyzed | 未確認 | CWE-400, CWE-770 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus' GraphQL endpoints (/graphql and /graphql/system) did not deduplicate re |
| CVE-2026-35442 | Analyzed | 未確認 | CWE-200, CWE-863 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, aggregate functions (min, max) applied to fields with the conceal special type in |
| CVE-2026-35444 | Analyzed | 未確認 | CWE-125 | SDL_image is a library to load images of various formats as SDL surfaces. In do_layer_surface() in src/IMG_xcf.c, pixel index values from decoded XCF tile data are used directly as |
| CVE-2026-35446 | Analyzed | 未確認 | CWE-552 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 24.0.0 to before |
| CVE-2026-35448 | Analyzed | 未確認 | CWE-862 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without |
| CVE-2026-35449 | Analyzed | 未確認 | CWE-200 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die() |
| CVE-2026-35450 | Analyzed | 未確認 | CWE-306 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/API/check.ffmpeg.json.php endpoint probes the FFmpeg remote server configuration and returns co |
| CVE-2026-35451 | Deferred | 未確認 | CWE-79 | Twenty is an open source CRM. Prior to 1.20.6, a Stored Cross-Site Scripting (XSS) vulnerability exists in the BlockNote editor component. Due to a lack of protocol validation in t |
| CVE-2026-35452 | Analyzed | 未確認 | CWE-200 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/CloneSite/client.log.php endpoint serves the clone operation log file without any authenticatio |
| CVE-2026-35454 | Analyzed | 未確認 | CWE-22 | The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketplace allowed a malicious VSIX f |
| CVE-2026-35455 | Analyzed | 未確認 | CWE-79 | immich is a high performance self-hosted photo and video management solution. Prior to 2.7.0, sStored Cross-Site Scripting (XSS) in the 360° panorama viewer allows any authenticate |
| CVE-2026-35457 | Analyzed | 未確認 | CWE-770 | libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, the rendezvous server stores pagination cookies without bounds. An unauthe |
| CVE-2026-35458 | Analyzed | 未確認 | CWE-1333 | Gotenberg is an API for converting document formats. In 8.29.1 and earlier, Gotenberg uses dlclark/regexp2 to compile user-supplied scope patterns without setting a proper timeout. |
| CVE-2026-35459 | Analyzed | 未確認 | CWE-918 | pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, pyLoad has a server-side request forgery (SSRF) vulnerability. The fix for CVE-20 |
| CVE-2026-35460 | Analyzed | 未確認 | CWE-79, CWE-80 | Papra is a minimalistic document management and archiving platform. Prior to 26.4.0, transactional email templates in Papra interpolate user.name directly into HTML without escapin |
| CVE-2026-35461 | Analyzed | 未確認 | CWE-918 | Papra is a minimalistic document management and archiving platform. Prior to 26.4.0, the Papra webhook system allows authenticated users to register arbitrary URLs as webhook endpo |
| CVE-2026-35462 | Analyzed | 未確認 | CWE-613 | Papra is a minimalistic document management and archiving platform. Prior to 26.4.0, API keys with an expiresAt date are never validated against the current time during authenticat |
| CVE-2026-35463 | Analyzed | 未確認 | CWE-78 | pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the ADMIN_ONLY_OPTIONS protection mechanism restricts security-critical configura |
| CVE-2026-35464 | Analyzed | 未確認 | CWE-502, CWE-863 | pyLoad is a free and open-source download manager written in Python. The fix for CVE-2026-33509 added an ADMIN_ONLY_OPTIONS set to block non-admin users from modifying security-cri |
| CVE-2026-35465 | Analyzed | 未確認 | CWE-36, CWE-73 | SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. In versions 0.17.4 and below, a compro |
| CVE-2026-35466 | Analyzed | 未確認 | CWE-79 | XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services |
| CVE-2026-35467 | Analyzed | 未確認 | CWE-522 | The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials. |
| CVE-2026-35468 | Analyzed | 未確認 | CWE-252 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus |
| CVE-2026-35469 | Deferred | 未確認 | CWE-770 | spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and len |
| CVE-2026-35470 | Analyzed | 未確認 | CWE-89 | OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to 2.10.2, confronta_righe.php files across different modules in OpenSTAManager c |
| CVE-2026-35471 | Analyzed | 未確認 | CWE-22 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, tdeleteFile() missing return after path traversal check. This vulnerability is fixed in 2.0.0-beta.3. |
| CVE-2026-35472 | Analyzed | 未確認 | CWE-601 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA applicati |
| CVE-2026-35473 | Analyzed | 未確認 | CWE-601 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA applicati |
| CVE-2026-35474 | Analyzed | 未確認 | CWE-601 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken directly from $_GET with no URL va |
| CVE-2026-35475 | Analyzed | 未確認 | CWE-601 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, the redirect parameter is taken directly from $_GET with no URL validation or whitelist check, then used verbati |
| CVE-2026-35476 | Analyzed | 未確認 | CWE-285 | InvenTree is an Open Source Inventory Management System. Prior to 1.2.7 and 1.3.0, a non-staff authenticated user can elevate their account to a staff level via a POST request agai |
| CVE-2026-35477 | Analyzed | 未確認 | CWE-1336 | InvenTree is an Open Source Inventory Management System. From 1.2.3 to 1.2.6, the fix for CVE-2026-27629 upgraded the PART_NAME_FORMAT validator to use jinja2.sandbox.SandboxedEnvi |
| CVE-2026-35478 | Analyzed | 未確認 | CWE-639 | InvenTree is an Open Source Inventory Management System. From 0.16.0 to before 1.2.7, any authenticated InvenTree user can create a valid API token attributed to any other user in |
| CVE-2026-35479 | Analyzed | 未確認 | CWE-285 | InvenTree is an Open Source Inventory Management System. Prior to 1.2.7 and 1.3.0, any users who have staff access permissions can install plugins via the API, without requiring "s |
| CVE-2026-35480 | Analyzed | 未確認 | CWE-770 | go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for b |
| CVE-2026-35481 | Rejected | 未確認 | Rejected reason: Further research determined the issue does not satisfy the assignment rules. | |
| CVE-2026-35483 | Analyzed | 未確認 | CWE-22 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_template() allows rea |
| CVE-2026-35484 | Analyzed | 未確認 | CWE-22 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_preset() allows readi |
| CVE-2026-35485 | Analyzed | 未確認 | CWE-22 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_grammar() allows read |
| CVE-2026-35486 | Analyzed | 未確認 | CWE-918 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user-supplied URLs via re |
| CVE-2026-35487 | Analyzed | 未確認 | CWE-22 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_prompt() allows readi |
| CVE-2026-35488 | Analyzed | 未確認 | CWE-749 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, RecipeBookViewSet and RecipeBookEntryViewSet use CustomIsShared |
| CVE-2026-35489 | Analyzed | 未確認 | CWE-1284, CWE-639 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the POST /api/food/{id}/shopping/ endpoint reads amount and uni |
| CVE-2026-35490 | Analyzed | 未確認 | CWE-863 | changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, the @login_optionally_required decorator is placed before (outer to) @blueprint.route() in |
| CVE-2026-35491 | Analyzed | 未確認 | CWE-863 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, Pi-hole FTL supports a CLI password feature (webs |
| CVE-2026-35492 | Deferred | 未確認 | CWE-22 | Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated d |
| CVE-2026-35496 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that should not be acce |
| CVE-2026-35503 | Analyzed | 未確認 | CWE-798 | A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-ex |
| CVE-2026-35507 | Analyzed | 未確認 | CWE-348 | Shynet before 0.14.0 allows Host header injection in the password reset flow. |
| CVE-2026-35508 | Analyzed | 未確認 | CWE-79 | Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters, |
| CVE-2026-3551 | Deferred | 未確認 | CWE-79 | The Custom New User Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's admin settings in all versions up to, and including, 1.2.0. This |
| CVE-2026-35512 | Analyzed | 未確認 | CWE-122 | xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX (graphics dynamic virtual channel) implementation due to insufficient valid |
| CVE-2026-35514 | Deferred | 未確認 | CWE-306 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, the endpoint POST /user/invited doe |
| CVE-2026-35515 | Analyzed | 未確認 | CWE-74 | Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStream._transform() interpolates message.type and message.id directly into Server-S |
| CVE-2026-35516 | Analyzed | 未確認 | CWE-918 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs. An authenticated us |
| CVE-2026-35517 | Analyzed | 未確認 | CWE-78, CWE-93 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Exe |
| CVE-2026-35518 | Analyzed | 未確認 | CWE-78, CWE-93 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Exe |
| CVE-2026-35519 | Analyzed | 未確認 | CWE-78, CWE-93 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Exe |
| CVE-2026-35520 | Analyzed | 未確認 | CWE-78, CWE-93 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Exe |
| CVE-2026-35521 | Analyzed | 未確認 | CWE-78, CWE-93 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Exe |
| CVE-2026-35523 | Analyzed | 未確認 | CWE-306 | Strawberry GraphQL is a library for creating GraphQL APIs. Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. The le |
| CVE-2026-35525 | Analyzed | 未確認 | CWE-61 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, for {% include %}, {% render %}, and {% layout %}, LiquidJS checks whether the |
| CVE-2026-35526 | Analyzed | 未確認 | CWE-770 | Strawberry GraphQL is a library for creating GraphQL APIs. Prior to 0.312.3, Strawberry GraphQL's WebSocket subscription handlers for both the graphql-transport-ws and legacy graph |
| CVE-2026-35533 | Analyzed | 未確認 | CWE-284 | mise manages dev tools like node, python, cmake, and terraform. From 2026.2.18 through 2026.4.5, mise loads trust-control settings from a local project .mise.toml before the trust |
| CVE-2026-35534 | Analyzed | 未確認 | CWE-116, CWE-79, CWE-87 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripting vulnerability exists in PersonView.php due to incorrect use of sanitizeText() as |
| CVE-2026-35535 | Modified | 未確認 | CWE-271, CWE-272 | In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to p |
| CVE-2026-35536 | Analyzed | 未確認 | CWE-159 | In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characte |
| CVE-2026-35537 | Analyzed | 未確認 | CWE-502 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by u |
| CVE-2026-35538 | Analyzed | 未確認 | CWE-88 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsanitized IMAP SEARCH command arguments could lead to IMAP injection or CSRF bypass during mail search. |
| CVE-2026-35539 | Analyzed | 未確認 | CWE-79 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exists because of insufficient HTML attachment sanitization in preview mode. A victim must preview a text |
| CVE-2026-35540 | Analyzed | 未確認 | CWE-669 | An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14. Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Dis |
| CVE-2026-35541 | Analyzed | 未確認 | CWE-843 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Incorrect password comparison in the password plugin could lead to type confusion that allows a password chan |
| CVE-2026-35542 | Analyzed | 未確認 | CWE-669 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking feature can be bypassed via a crafted background attribute of a BODY element in an |
| CVE-2026-35543 | Analyzed | 未確認 | CWE-669 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking feature can be bypassed via SVG content (with animate attributes) in an e-mail mess |
| CVE-2026-35544 | Analyzed | 未確認 | CWE-669 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to a fixed-position m |
| CVE-2026-35545 | Analyzed | 未確認 | CWE-669 | An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to info |
| CVE-2026-35546 | Analyzed | 未確認 | CWE-306 | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a |
| CVE-2026-35547 | Modified | 未確認 | CWE-122, CWE-130 | When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of validation allows a malicious program to write outside the bound |
| CVE-2026-35548 | Analyzed | 未確認 | CWE-918 | An issue was discovered in guardsix (formerly Logpoint) ODBC Enrichment Plugins before 5.2.1 (5.2.1 is used in guardsix 7.9.0.0). A logic flaw allowed stored database credentials t |
| CVE-2026-35549 | Analyzed | 未確認 | CWE-789 | An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is install |
| CVE-2026-35553 | Awaiting Analysis | 未確認 | CWE-121 | Bluetooth ACPI Drivers provided by Dynabook Inc. contain a stack-based buffer overflow vulnerability. An attacker may execute arbitrary code by modifying certain registry values. |
| CVE-2026-35554 | Analyzed | 未確認 | CWE-362, CWE-416 | A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. When a produce batch expires du |
| CVE-2026-35556 | Analyzed | 未確認 | CWE-256 | OpenPLC_V3 is vulnerable to a Plaintext Storage of a Password vulnerability that could allow an attacker to retrieve credentials and access sensitive information. |
| CVE-2026-35558 | Modified | 未確認 | CWE-77 | Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or red |
| CVE-2026-35559 | Modified | 未確認 | CWE-787 | Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data th |
| CVE-2026-35560 | Modified | 未確認 | CWE-295 | Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to intercept |
| CVE-2026-35561 | Modified | 未確認 | CWE-862 | Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or |
| CVE-2026-35562 | Modified | 未確認 | CWE-770 | Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering c |
| CVE-2026-35565 | Analyzed | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpo |
| CVE-2026-35566 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-39319. Reason: This candidate is a duplicate of CVE-2026-39319. Notes: All CVE users should ref | |
| CVE-2026-35567 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-39327. Reason: This candidate is a duplicate of CVE-2026-39327. Notes: All CVE users should ref | |
| CVE-2026-35568 | Analyzed | 未確認 | CWE-346 | MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allows |
| CVE-2026-35569 | Modified | 未確認 | CWE-116, CWE-79 | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and prior contain a stored cross-site scripting vulnerability in SEO-related fields (SEO Title an |
| CVE-2026-35570 | Analyzed | 未確認 | CWE-22, CWE-284 | OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in `bashToolHasPermission()` inside |
| CVE-2026-35571 | Analyzed | 未確認 | CWE-79 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, Mustache navigation templates interpolated configuration-controlled link values directly into href attributes |
| CVE-2026-35572 | Analyzed | 未確認 | CWE-918 | ChurchCRM is an open-source church management system. Prior to 6.5.3, it is possible to trigger server-side HTTP/HTTPS requests to arbitrary hosts (SSRF) by supplying a crafted URL |
| CVE-2026-35573 | Analyzed | 未確認 | CWE-22, CWE-434 | ChurchCRM is an open-source church management system. Prior to 6.5.3, a path traversal vulnerability in ChurchCRM's backup restore functionality allows authenticated administrators |
| CVE-2026-35574 | Analyzed | 未確認 | CWE-79 | ChurchCRM is an open-source church management system. Prior to 6.5.3, a stored Cross-Site Scripting (XSS) vulnerability in ChurchCRM's Note Editor allows authenticated users with n |
| CVE-2026-35575 | Analyzed | 未確認 | CWE-1004, CWE-79 | ChurchCRM is an open-source church management system. Prior to 6.5.3, a Stored Cross-Site Scripting (Stored XSS) vulnerability in the admin panel’s group-creation feature allows an |
| CVE-2026-35576 | Analyzed | 未確認 | CWE-79 | ChurchCRM is an open-source church management system. Prior to 7.0.0, a stored cross-site scripting (XSS) vulnerability exists in ChurchCRM within the Person Property Management su |
| CVE-2026-35577 | Analyzed | 未確認 | CWE-346 | Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MCP tools. Prior to version 1.7.0, the Apollo MCP Server did not validate the Host header on |
| CVE-2026-35578 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE.** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-39940. Reason: This candidate is a reservation duplic | |
| CVE-2026-35580 | Analyzed | 未確認 | CWE-77 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs |
| CVE-2026-35581 | Analyzed | 未確認 | CWE-78 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the Executrix utility class constructed shell commands by concatenating configuration-derived values — includi |
| CVE-2026-35582 | Analyzed | 未確認 | CWE-116, CWE-78 | Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executrix.getCommand() is vulnerable to OS command injection because it interpolates temporary f |
| CVE-2026-35583 | Analyzed | 未確認 | CWE-22 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the configuration API endpoint (/api/configuration/{name}) validated configuration names using a blacklist app |
| CVE-2026-35584 | Analyzed | 未確認 | CWE-306, CWE-639 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, the endpoint GET /thread/read/{conversation_id}/{thread_id} does not require au |
| CVE-2026-35585 | Modified | 未確認 | CWE-78, CWE-88 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.0.0 until 2.33.8, the hook system in |
| CVE-2026-35586 | Analyzed | 未確認 | CWE-863 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the ADMIN_ONLY_CORE_OPTIONS authorization set in set_config_value() uses incorrect opti |
| CVE-2026-35587 | Analyzed | 未確認 | CWE-918 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, a Server-Side Request Forgery (SSRF) vulnerability exists in the Glances IP plugin due to i |
| CVE-2026-35588 | Analyzed | 未確認 | CWE-89 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module (`glances/exports/glances_cassandra/__init__.py`) interpolates |
| CVE-2026-35589 | Analyzed | 未確認 | CWE-1385 | nanobot is a personal AI assistant. Versions prior to 0.1.5 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability exists in the bridge's WebSocket server in bridge/src/ser |
| CVE-2026-35592 | Analyzed | 未確認 | CWE-22 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the _safe_extractall() function in src/pyload/plugins/extractors/UnTar.py uses os.path. |
| CVE-2026-35594 | Analyzed | 未確認 | CWE-613 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's link share authentication (GetLinkShareFromClaims in pkg/models/link_sharing.go) construct |
| CVE-2026-35595 | Analyzed | 未確認 | CWE-269 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CanUpdate check at pkg/models/project_permissions.go:139-148 only requires CanWrite on the new p |
| CVE-2026-35596 | Analyzed | 未確認 | CWE-863 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the hasAccessToLabel function contains a SQL operator precedence bug that allows any authenticated u |
| CVE-2026-35597 | Analyzed | 未確認 | CWE-307 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the TOTP failed-attempt lockout mechanism is non-functional due to a database transaction handling b |
| CVE-2026-35598 | Analyzed | 未確認 | CWE-862 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV GetResource and GetResourcesByList methods fetch tasks by UID from the database without v |
| CVE-2026-35599 | Analyzed | 未確認 | CWE-407 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the addRepeatIntervalToTime function uses an O(n) loop that advances a date by the task's RepeatAfte |
| CVE-2026-35600 | Analyzed | 未確認 | CWE-79 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, task titles are embedded directly into Markdown link syntax in overdue email notifications without e |
| CVE-2026-35601 | Analyzed | 未確認 | CWE-93 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV output generator builds iCalendar VTODO entries via raw string concatenation without appl |
| CVE-2026-35602 | Analyzed | 未確認 | CWE-770 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the Vikunja file import endpoint uses the attacker-controlled Size field from the JSON metadata insi |
| CVE-2026-35603 | Analyzed | 未確認 | CWE-426 | Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\ProgramData\ClaudeCode\managed-setti |
| CVE-2026-35604 | Analyzed | 未確認 | CWE-863 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, when an admin revokes a us |
| CVE-2026-35605 | Analyzed | 未確認 | CWE-22 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the Matches() function in |
| CVE-2026-35606 | Analyzed | 未確認 | CWE-862 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the resourceGetHandler in |
| CVE-2026-35607 | Analyzed | 未確認 | CWE-269 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the fix in commit b6a4fb1 |
| CVE-2026-35608 | Analyzed | 未確認 | CWE-79 | QuickDrop is an easy-to-use file sharing application. Prior to 1.5.3, a stored XSS vulnerability exists in the file preview endpoint. The application allows SVG files to be uploade |
| CVE-2026-35610 | Analyzed | 未確認 | CWE-285 | PolarLearn is a free and open-source learning program. In 0-PRERELEASE-14 and earlier, setCustomPassword(userId, password) and deleteUser(userId) in the account-management module |
| CVE-2026-35611 | Analyzed | 未確認 | CWE-1333 | Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 to before 2.9.0, within the URI template implementation i |
| CVE-2026-35613 | Analyzed | 未確認 | CWE-22 | coursevault-preview is a utility for previewing course material files from a configured directory. coursevault-preview versions prior to 0.1.1 contain a path traversal vulnerabilit |
| CVE-2026-35614 | Analyzed | 未確認 | CWE-89 | Frappe is a full-stack web application framework. Prior to 16.14.0 and 15.104.0, Frappe has a SQL injection in bulk_update. This vulnerability is fixed in 16.14.0 and 15.104.0. |
| CVE-2026-35615 | Analyzed | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, _validate_path() calls os.path.normpath() first, which collapses .. sequences, then checks for '..' in normalized. Since |
| CVE-2026-35616 | Analyzed | 掲載 | CWE-284 | A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted re |
| CVE-2026-35617 | Analyzed | 未確認 | CWE-807 | OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Google Chat group policy enforcement that relies on mutable space display names. Attackers can rebind gr |
| CVE-2026-35618 | Analyzed | 未確認 | CWE-294 | OpenClaw before 2026.3.23 contains a replay identity vulnerability in Plivo V2 signature verification that allows attackers to bypass replay protection by modifying query parameter |
| CVE-2026-35619 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.24 contains an authorization bypass vulnerability in the HTTP /v1/models endpoint that fails to enforce operator read scope requirements. Attackers with only |
| CVE-2026-35620 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.3.24 contains missing authorization vulnerabilities in the /send and /allowlist chat command handlers. The /send command allows non-owner command-authorized se |
| CVE-2026-35621 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.3.24 contains a privilege escalation vulnerability where the /allowlist command fails to re-validate gateway client scopes for internal callers, allowing opera |
| CVE-2026-35622 | Analyzed | 未確認 | CWE-290 | OpenClaw before 2026.3.22 contains an improper authentication verification vulnerability in Google Chat app-url webhook handling that accepts add-on principals outside intended dep |
| CVE-2026-35623 | Analyzed | 未確認 | CWE-307 | OpenClaw before 2026.3.25 contains a missing rate limiting vulnerability in webhook authentication that allows attackers to brute-force weak webhook passwords without throttling. R |
| CVE-2026-35624 | Analyzed | 未確認 | CWE-807 | OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens. Attackers can exploit sim |
| CVE-2026-35625 | Analyzed | 未確認 | CWE-648 | OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permis |
| CVE-2026-35626 | Analyzed | 未確認 | CWE-405 | OpenClaw before 2026.3.22 contains an unauthenticated resource exhaustion vulnerability in voice call webhook handling that buffers request bodies before provider signature checks. |
| CVE-2026-35627 | Analyzed | 未確認 | CWE-696 | OpenClaw before 2026.3.22 performs cryptographic and dispatch operations on inbound Nostr direct messages before enforcing sender and pairing policy validation. Attackers can trigg |
| CVE-2026-35628 | Analyzed | 未確認 | CWE-307 | OpenClaw before 2026.3.25 contains a missing rate limiting vulnerability in Telegram webhook authentication that allows attackers to brute-force weak webhook secrets. The vulnerabi |
| CVE-2026-35629 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.3.25 contains a server-side request forgery vulnerability in multiple channel extensions that fail to properly guard configured base URLs against SSRF attacks. |
| CVE-2026-35631 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.3.22 fails to enforce operator.admin scope on mutating internal ACP chat commands, allowing unauthorized modifications. Attackers without admin privileges can |
| CVE-2026-35632 | Analyzed | 未確認 | CWE-61 | OpenClaw through 2026.2.22 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment |
| CVE-2026-35633 | Analyzed | 未確認 | CWE-770, CWE-789 | OpenClaw before 2026.3.22 contains an unbounded memory allocation vulnerability in remote media HTTP error handling that allows attackers to trigger excessive memory consumption. A |
| CVE-2026-35634 | Analyzed | 未確認 | CWE-288 | OpenClaw before 2026.3.23 contains an authentication bypass vulnerability in the Canvas gateway where authorizeCanvasRequest() unconditionally allows local-direct requests without |
| CVE-2026-35635 | Analyzed | 未確認 | CWE-706, CWE-863 | OpenClaw before 2026.3.22 contains a webhook path route replacement vulnerability in the Synology Chat extension that allows attackers to collapse multi-account configurations onto |
| CVE-2026-35636 | Analyzed | 未確認 | CWE-696 | OpenClaw versions 2026.3.11 through 2026.3.24 contain a session isolation bypass vulnerability where session_status resolves sessionId to canonical session keys before enforcing vi |
| CVE-2026-35637 | Analyzed | 未確認 | CWE-696 | OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth decisions. Atta |
| CVE-2026-35638 | Analyzed | 未確認 | CWE-286 | OpenClaw before 2026.3.22 contains a privilege escalation vulnerability in the Control UI that allows unauthenticated sessions to retain self-declared privileged scopes without dev |
| CVE-2026-35639 | Analyzed | 未確認 | CWE-648 | OpenClaw before 2026.3.22 contains a privilege escalation vulnerability in the device.pair.approve method that allows an operator.pairing approver to approve pending device request |
| CVE-2026-35640 | Analyzed | 未確認 | CWE-696 | OpenClaw before 2026.3.25 parses JSON request bodies before validating webhook signatures, allowing unauthenticated attackers to force resource-intensive parsing operations. Remote |
| CVE-2026-35641 | Modified | 未確認 | CWE-349 | OpenClaw before 2026.3.24 contains an arbitrary code execution vulnerability in local plugin and hook installation that allows attackers to execute malicious code by crafting a .np |
| CVE-2026-35642 | Analyzed | 未確認 | CWE-288 | OpenClaw before 2026.3.25 contains an authorization bypass vulnerability where group reaction events bypass the requireMention access control mechanism. Attackers can trigger react |
| CVE-2026-35643 | Analyzed | 未確認 | CWE-940 | OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canv |
| CVE-2026-35644 | Analyzed | 未確認 | CWE-312 | OpenClaw before 2026.3.22 contains an information disclosure vulnerability that allows attackers with operator.read scope to expose credentials embedded in channel baseUrl and http |
| CVE-2026-35645 | Analyzed | 未確認 | CWE-648, CWE-863 | OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in the gateway plugin subagent fallback deleteSession function that uses a synthetic operator.admin runtime |
| CVE-2026-35646 | Analyzed | 未確認 | CWE-307 | OpenClaw before 2026.3.25 contains a pre-authentication rate-limit bypass vulnerability in webhook token validation that allows attackers to brute-force weak webhook secrets. The v |
| CVE-2026-35647 | Analyzed | 未確認 | CWE-288 | OpenClaw before 2026.3.25 contains an access control vulnerability where verification notices bypass DM policy checks and reply to unpaired peers. Attackers can send verification n |
| CVE-2026-35648 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.3.22 contains a policy bypass vulnerability where queued node actions are not revalidated against current command policy when delivered. Attackers can exploit |
| CVE-2026-35649 | Analyzed | 未確認 | CWE-183 | OpenClaw before 2026.3.22 contains a settings reconciliation vulnerability that allows attackers to bypass intended deny-all revocations by exploiting empty allowlist handling. The |
| CVE-2026-3565 | Deferred | 未確認 | CWE-352 | The Taqnix plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to a missing nonce verification in the taqnix_d |
| CVE-2026-35650 | Analyzed | 未確認 | CWE-15 | OpenClaw before 2026.3.22 contains an environment variable override handling vulnerability that allows attackers to bypass the shared host environment policy through inconsistent s |
| CVE-2026-35651 | Analyzed | 未確認 | CWE-150 | OpenClaw versions 2026.2.13 through 2026.3.24 contain an ANSI escape sequence injection vulnerability in approval prompts that allows attackers to spoof terminal output. Untrusted |
| CVE-2026-35652 | Analyzed | 未確認 | CWE-696 | OpenClaw before 2026.3.22 contains an authorization bypass vulnerability in interactive callback dispatch that allows non-allowlisted senders to execute action handlers. Attackers |
| CVE-2026-35653 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.24 contains an incorrect authorization vulnerability in the POST /reset-profile endpoint that allows authenticated callers with operator.write access to brow |
| CVE-2026-35654 | Analyzed | 未確認 | CWE-288 | OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Microsoft Teams feedback invokes that allows unauthorized senders to record session feedback. Attackers |
| CVE-2026-35655 | Analyzed | 未確認 | CWE-807 | OpenClaw before 2026.3.22 contains an identity spoofing vulnerability in ACP permission resolution that trusts conflicting tool identity hints from rawInput and metadata. Attackers |
| CVE-2026-35656 | Analyzed | 未確認 | CWE-290 | OpenClaw before 2026.3.22 contains an authentication bypass vulnerability in the X-Forwarded-For header processing when trustedProxies is configured, allowing attackers to spoof lo |
| CVE-2026-35657 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in the HTTP /sessions/:sessionKey/history route that skips operator.read scope validation. Attackers can ac |
| CVE-2026-35658 | Analyzed | 未確認 | CWE-668 | OpenClaw before 2026.3.2 contains a filesystem boundary bypass vulnerability in the image tool that fails to honor tools.fs.workspaceOnly restrictions. Attackers can traverse sandb |
| CVE-2026-35659 | Analyzed | 未確認 | CWE-345 | OpenClaw before 2026.3.22 contains a service discovery vulnerability where TXT metadata from Bonjour and DNS-SD could influence CLI routing even when actual service resolution fail |
| CVE-2026-3566 | Rejected | 未確認 | Rejected reason: After further discussion, the issue was determined to not meet the criteria for CVE assignment. | |
| CVE-2026-35660 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.3.23 contains an insufficient access control vulnerability in the Gateway agent /reset endpoint that allows callers with operator.write permission to reset adm |
| CVE-2026-35661 | Analyzed | 未確認 | CWE-288 | OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Telegram callback query handling that allows attackers to mutate session state without satisfying normal |
| CVE-2026-35662 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.3.22 fails to enforce controlScope restrictions on the send action, allowing leaf subagents to message controlled child sessions beyond their authorized scope. |
| CVE-2026-35663 | Analyzed | 未確認 | CWE-648 | OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing non-admin operators to self-request broader scopes during backend reconnect. Attackers can bypass p |
| CVE-2026-35664 | Analyzed | 未確認 | CWE-288 | OpenClaw before 2026.3.25 contains an authentication bypass vulnerability in raw card send surface that allows unpaired recipients to mint legacy callback payloads. Attackers can s |
| CVE-2026-35665 | Analyzed | 未確認 | CWE-405 | OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-32011 where the Feishu webhook handler accepts request bodies with permissive limits of 1MB and 30-second timeout |
| CVE-2026-35666 | Analyzed | 未確認 | CWE-706 | OpenClaw before 2026.3.22 contains an allowlist bypass vulnerability in system.run approvals that fails to unwrap /usr/bin/time wrappers. Attackers can bypass executable binding re |
| CVE-2026-35667 | Analyzed | 未確認 | CWE-404 | OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-27486 where the !stop chat command uses an unpatched killProcessTree function from shell-utils.ts that sends SIGKI |
| CVE-2026-35668 | Analyzed | 未確認 | CWE-22 | OpenClaw before 2026.3.24 contains a path traversal vulnerability in sandbox enforcement allowing sandboxed agents to read arbitrary files from other agents' workspaces via unnorma |
| CVE-2026-35669 | Analyzed | 未確認 | CWE-648 | OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in gateway-authenticated plugin HTTP routes that incorrectly mint operator.admin runtime scope regardless of |
| CVE-2026-35670 | Analyzed | 未確認 | CWE-807 | OpenClaw before 2026.3.22 contains a webhook reply delivery vulnerability that allows attackers to rebind chat replies to unintended users by exploiting mutable username matching i |
| CVE-2026-35679 | Deferred | 未確認 | CWE-358 | Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout |
| CVE-2026-3568 | Deferred | 未確認 | CWE-639 | The MStore API plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.18.3. This is due to the update_user_profile() functi |
| CVE-2026-35682 | Analyzed | 未確認 | CWE-77 | Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑l |
| CVE-2026-3569 | Deferred | 未確認 | CWE-862 | The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint. |
| CVE-2026-3571 | Deferred | 未確認 | CWE-862 | The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th |
| CVE-2026-3574 | Deferred | 未確認 | CWE-79 | The Experto Dashboard for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings fields (including 'Navigation Font Size', 'Navigat |
| CVE-2026-3581 | Deferred | 未確認 | CWE-862 | The Basic Google Maps Placemarks plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.10.7. This is due to the plugin not properly verifyi |
| CVE-2026-3590 | Analyzed | 未確認 | CWE-367 | Mattermost versions 10.11.x <= 10.11.12, 11.5.x <= 11.5.0, 11.4.x <= 11.4.2, 11.3.x <= 11.3.2 fail to enforce atomic single-use consumption of guest magic link tokens, which allows |
| CVE-2026-35901 | Analyzed | 未確認 | CWE-400 | A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SET |
| CVE-2026-35902 | Analyzed | 未確認 | CWE-307 | The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP requests with invalid auth |
| CVE-2026-35903 | Analyzed | 未確認 | CWE-287 | MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service. After successful Digest authentication in an initial |
| CVE-2026-3594 | Deferred | 未確認 | CWE-200 | The Riaxe Product Customizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4 via the '/wp-json/InkXEProductDesignerLi |
| CVE-2026-3595 | Deferred | 未確認 | CWE-862 | The Riaxe Product Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.2. This is due to the plugin registering a REST AP |
| CVE-2026-3596 | Deferred | 未確認 | CWE-862 | The Riaxe Product Customizer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.2. The plugin registers an unauthenticated AJAX ac |
| CVE-2026-3599 | Deferred | 未確認 | CWE-89 | The Riaxe Product Customizer plugin for WordPress is vulnerable to SQL Injection via the 'options' parameter keys within 'product_data' of the /wp-json/InkXEProductDesignerLite/add |
| CVE-2026-3600 | Deferred | 未確認 | CWE-79 | The Investi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'investi-announcements-accordion' shortcode's 'maximum-num-years' attribute in all versions up |
| CVE-2026-3605 | Modified | 未確認 | CWE-288, CWE-639 | An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of- |
| CVE-2026-3614 | Deferred | 未確認 | CWE-862 | The AcyMailing plugin for WordPress is vulnerable to privilege escalation in all versions From 9.11.0 up to, and including, 10.8.1 due to a missing capability check on the `wp_ajax |
| CVE-2026-3618 | Deferred | 未確認 | CWE-79 | The Columns by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the [print_clmns] shortcode in all versions up to a |
| CVE-2026-3621 | Analyzed | 未確認 | CWE-269 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited conditions when an ap |
| CVE-2026-36232 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' par |
| CVE-2026-36233 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers |
| CVE-2026-36234 | Analyzed | 未確認 | CWE-89 | itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter. |
| CVE-2026-36235 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'subjcode' para |
| CVE-2026-36236 | Analyzed | 未確認 | CWE-89 | SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter. |
| CVE-2026-36340 | Deferred | 未確認 | CWE-94 | An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function |
| CVE-2026-3642 | Deferred | 未確認 | CWE-862 | The e-shot™ form builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.0.2. The eshot_form_builder_update_field_data() AJAX hand |
| CVE-2026-3643 | Deferred | 未確認 | CWE-79 | The Accessibly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in all versions up to, and including, 3.0.3. The plugin registers REST API endpoin |
| CVE-2026-3646 | Deferred | 未確認 | CWE-862 | The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to Missing Authorization via the plugin's webhook handler in all versions up to, and including, 3.3 |
| CVE-2026-3649 | Deferred | 未確認 | CWE-862 | The Katalogportal PDF Sync plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.0.0. The katalogportal_popup_shortcode() function is re |
| CVE-2026-3659 | Deferred | 未確認 | CWE-79 | The WP Circliful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the [circliful] shortcode and via multiple shortcode attribut |
| CVE-2026-3666 | Deferred | 未確認 | CWE-22 | The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 2.4.16. This is due to a missing file name/path validation agai |
| CVE-2026-3673 | Analyzed | 未確認 | CWE-79 | An authenticated attacker can store a crafted tag value in _user_tags and trigger JavaScript execution when a victim opens the list/report view where tags are rendered. The vulnera |
| CVE-2026-36756 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) in the /plugins/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET reques |
| CVE-2026-36757 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) in the /plugins/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET r |
| CVE-2026-36758 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) in the /themes/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request |
| CVE-2026-36759 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) in the /themes/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET re |
| CVE-2026-36760 | Deferred | 未確認 | CWE-22 | An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and writ |
| CVE-2026-36761 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint of JeeSite v5.15.1 allows attackers to execute arbitrary web scripts or HTML via injecting a cr |
| CVE-2026-36762 | Deferred | 未確認 | CWE-22 | An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and |
| CVE-2026-36763 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the /api/blade-desk/notice/submit endpoint of SpringBlade v4.8.0 allows attackers to execute arbitrary web scripts or HTML via |
| CVE-2026-36764 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) in the /ureport/datasource/testConnection endpoint of SpringBlade v4.8.0 allows authenticated attackers to scan internal resources via a crafte |
| CVE-2026-36765 | Deferred | 未確認 | CWE-611 | An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticated attackers to execute arbitrary code via injecting a craft |
| CVE-2026-36766 | Deferred | 未確認 | CWE-79 | Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer v3.2.5 allows attackers to execute arbitrary web scripts or |
| CVE-2026-36767 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request. |
| CVE-2026-36837 | Deferred | 未確認 | CWE-121 | TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function. |
| CVE-2026-36841 | Deferred | 未確認 | CWE-77 | TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function. |
| CVE-2026-36872 | Analyzed | 未確認 | CWE-89 | Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php. |
| CVE-2026-36873 | Analyzed | 未確認 | CWE-89 | Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php. |
| CVE-2026-36874 | Modified | 未確認 | CWE-89 | Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php. |
| CVE-2026-3689 | Analyzed | 未確認 | CWE-22 | OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenC |
| CVE-2026-3690 | Analyzed | 未確認 | CWE-291 | OpenClaw Canvas Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of OpenClaw. Authentication is no |
| CVE-2026-3691 | Analyzed | 未確認 | CWE-200 | OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw. |
| CVE-2026-36919 | Analyzed | 未確認 | CWE-89 | Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php. |
| CVE-2026-3692 | Analyzed | 未確認 | CWE-78 | In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that resu |
| CVE-2026-36920 | Analyzed | 未確認 | CWE-89 | Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php. |
| CVE-2026-36922 | Analyzed | 未確認 | CWE-89 | Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php. |
| CVE-2026-36923 | Analyzed | 未確認 | CWE-89 | Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php. |
| CVE-2026-36937 | Deferred | 未確認 | CWE-89 | Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_details.php. |
| CVE-2026-36938 | Deferred | 未確認 | CWE-89 | Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php. |
| CVE-2026-36941 | Deferred | 未確認 | CWE-89 | Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_room.php. |
| CVE-2026-36942 | Deferred | 未確認 | CWE-89 | Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php. |
| CVE-2026-36943 | Deferred | 未確認 | CWE-89 | Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/manage_repair.php. |
| CVE-2026-36944 | Deferred | 未確認 | CWE-89 | Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/view_details.php. |
| CVE-2026-36945 | Deferred | 未確認 | CWE-89 | Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manage_client.php |
| CVE-2026-36946 | Modified | 未確認 | CWE-89 | Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php. |
| CVE-2026-36947 | Analyzed | 未確認 | CWE-89 | Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php. |
| CVE-2026-36948 | Deferred | 未確認 | CWE-89 | Sourcecodester Online Thesis Archiving System v1.0 is vulnerale to SQL injection in the file /otas/view_archive.php. |
| CVE-2026-36950 | Deferred | 未確認 | CWE-89 | Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projects_per_department.php. |
| CVE-2026-36952 | Deferred | 未確認 | CWE-89 | Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/manage_curriculum.php. |
| CVE-2026-36956 | Modified | 未確認 | CWE-352 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF p |
| CVE-2026-36957 | Modified | 未確認 | CWE-400 | Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET reques |
| CVE-2026-36958 | Modified | 未確認 | CWE-400 | A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on th |
| CVE-2026-36959 | Modified | 未確認 | CWE-307 | U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlim |
| CVE-2026-36960 | Deferred | 未確認 | CWE-352 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.0.0. The device does not implement CSRF protection mechanism |
| CVE-2026-37100 | Awaiting Analysis | 未確認 | CWE-284 | An issue in the Bluetooth Low Energy (BLE) control interface of the Yamaha SR-B30A sound bar firmware 2.40 (Mobile App: Sound Bar Remote / version: 2.40) allows remote attackers wi |
| CVE-2026-37336 | Deferred | 未確認 | CWE-89 | SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_music.php. |
| CVE-2026-37337 | Deferred | 未確認 | CWE-89 | SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_playlist.php. |
| CVE-2026-37338 | Deferred | 未確認 | CWE-89 | SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_user.php. |
| CVE-2026-37339 | Deferred | 未確認 | CWE-89 | SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_genre.php. |
| CVE-2026-37340 | Deferred | 未確認 | CWE-89 | SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/edit_music.php. |
| CVE-2026-37341 | Deferred | 未確認 | CWE-89 | SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_category.php. |
| CVE-2026-37342 | Deferred | 未確認 | CWE-89 | SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/view_parked_details.php. |
| CVE-2026-37343 | Deferred | 未確認 | CWE-89 | SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_user.php. |
| CVE-2026-37344 | Deferred | 未確認 | CWE-89 | SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_location.php. |
| CVE-2026-37345 | Deferred | 未確認 | CWE-89 | SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_park.php. |
| CVE-2026-37346 | Deferred | 未確認 | CWE-89 | SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_account.php?emp_id=. |
| CVE-2026-37347 | Deferred | 未確認 | CWE-89 | SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_employee.php. |
| CVE-2026-37555 | Modified | 未確認 | CWE-190 | An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 1 |
| CVE-2026-37589 | Deferred | 未確認 | CWE-89 | SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage_storage_unit.php. |
| CVE-2026-37590 | Deferred | 未確認 | CWE-89 | SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage_rent.php. |
| CVE-2026-37591 | Deferred | 未確認 | CWE-89 | Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php. |
| CVE-2026-37592 | Deferred | 未確認 | CWE-89 | Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php. |
| CVE-2026-37593 | Deferred | 未確認 | CWE-89 | SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_att.php. |
| CVE-2026-37594 | Deferred | 未確認 | CWE-89 | SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_employee.php. |
| CVE-2026-37595 | Deferred | 未確認 | CWE-89 | SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php. |
| CVE-2026-37596 | Deferred | 未確認 | CWE-89 | SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_department.php. |
| CVE-2026-37597 | Deferred | 未確認 | CWE-89 | SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/attendance_list.php. |
| CVE-2026-37598 | Deferred | 未確認 | CWE-89 | SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to arbitrary code execution (RCE) via /scheduler/classes/SystemSettings.php?f=update_settings. |
| CVE-2026-37600 | Deferred | 未確認 | CWE-89 | SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/view_details.php. |
| CVE-2026-37601 | Deferred | 未確認 | CWE-89 | SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manage_appointment.php. |
| CVE-2026-37602 | Deferred | 未確認 | CWE-89 | SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/user/manage_user.php. |
| CVE-2026-3773 | Deferred | 未確認 | CWE-89 | The Accessibility Suite by Ability, Inc plugin for WordPress is vulnerable to SQL Injection via the 'scan_id' parameter in all versions up to, and including, 4.20. This is due to i |
| CVE-2026-3774 | Analyzed | 未確認 | CWE-200 | The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) immediately befo |
| CVE-2026-37748 | Analyzed | 未確認 | CWE-434 | Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php and vms/php/update_1.php. The move_uploaded_file() function i |
| CVE-2026-37749 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in i |
| CVE-2026-3775 | Analyzed | 未確認 | CWE-427 | The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not |
| CVE-2026-37750 | Deferred | 未確認 | CWE-79 | A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's b |
| CVE-2026-3776 | Analyzed | 未確認 | CWE-476 | The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP e |
| CVE-2026-3777 | Analyzed | 未確認 | CWE-416 | The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifi |
| CVE-2026-3778 | Analyzed | 未確認 | CWE-674 | The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF. When pages and annotations are crafted that reference each other in |
| CVE-2026-3779 | Analyzed | 未確認 | CWE-416 | The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted documents to trigger a us |
| CVE-2026-3780 | Analyzed | 未確認 | CWE-426 | The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing |
| CVE-2026-3781 | Deferred | 未確認 | CWE-89 | The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgr_off' parameter in all versions up to, and including, 0.6.2. This is due to insufficient e |
| CVE-2026-37977 | Modified | 未確認 | CWE-346 | A flaw was found in Keycloak. A remote attacker can exploit a Cross-Origin Resource Sharing (CORS) header injection vulnerability in Keycloak's User-Managed Access (UMA) token endp |
| CVE-2026-37980 | Modified | 未確認 | CWE-79 | A flaw was found in Keycloak, specifically in the organization selection login page. A remote attacker with `manage-realm` or `manage-organizations` administrative privileges can e |
| CVE-2026-3830 | Deferred | 未確認 | CWE-89 | The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing unauthenticated users |
| CVE-2026-3831 | Deferred | 未確認 | CWE-862 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the entries_shortco |
| CVE-2026-3832 | Modified | 未確認 | CWE-179 | A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS han |
| CVE-2026-3833 | Modified | 未確認 | CWE-178 | A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Nam |
| CVE-2026-3837 | Analyzed | 未確認 | CWE-79 | An authenticated attacker can persist crafted values in multiple field types and trigger client-side script execution when another user opens the affected document in Desk. The vul |
| CVE-2026-3844 | Deferred | 未確認 | CWE-434 | The Breeze Cache plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fetch_gravatar_from_remote' function in all versions up to |
| CVE-2026-38526 | Deferred | 未確認 | CWE-434 | An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x allows attackers to execute arbitrary code via uploading a cr |
| CVE-2026-38527 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) in the /settings/webhooks/create component of Webkul Krayin CRM v2.2.x allows attackers to scan internal resources via supplying a crafted POST |
| CVE-2026-38528 | Deferred | 未確認 | CWE-89 | Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead parameter at /Lead/LeadDataGrid.php. |
| CVE-2026-38529 | Analyzed | 未確認 | CWE-269, CWE-639 | A Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily reset user passwor |
| CVE-2026-38530 | Analyzed | 未確認 | CWE-639 | A Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily read, modi |
| CVE-2026-38532 | Analyzed | 未確認 | CWE-639 | A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily read, mod |
| CVE-2026-38533 | Analyzed | 未確認 | CWE-285 | An improper authorization vulnerability in the /api/v1/users/{id} endpoint of Snipe-IT v8.4.0 allows authenticated attackers with the users.edit permission to modify sensitive auth |
| CVE-2026-3861 | Analyzed | 未確認 | CWE-451 | LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS-level dialogs due to insuffic |
| CVE-2026-38651 | Analyzed | 未確認 | CWE-347 | Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0. The VerifyHostToken function in logic/jwts.go fails to validate the JWT signature when verifying hos |
| CVE-2026-3867 | Awaiting Analysis | 未確認 | CWE-282 | An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access |
| CVE-2026-3868 | Awaiting Analysis | 未確認 | CWE-130 | An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTT |
| CVE-2026-3872 | Modified | 未確認 | CWE-601 | A flaw was found in Keycloak. This issue allows an attacker, who controls another path on the same web server, to bypass the allowed path in redirect Uniform Resource Identifiers ( |
| CVE-2026-38743 | Analyzed | 未確認 | CWE-1220 | The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance records: a logged-in Airflow user with read access |
| CVE-2026-3875 | Deferred | 未確認 | CWE-79 | The BetterDocs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'betterdocs_feedback_form' shortcode in all versions up to, and including, 4.3.8. This is d |
| CVE-2026-3876 | Deferred | 未確認 | CWE-79 | The Prismatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'prismatic_encoded' pseudo-shortcode in all versions up to, and including, 3.7.3. This is du |
| CVE-2026-3877 | Analyzed | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by |
| CVE-2026-3878 | Deferred | 未確認 | CWE-79 | The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocs_options[icon_size]' parameter in all versions up to, and including, 2.2.9 due to insuf |
| CVE-2026-3879 | Analyzed | 未確認 | CWE-79 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Details report. |
| CVE-2026-3880 | Analyzed | 未確認 | CWE-79 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report. |
| CVE-2026-3882 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-38834 | Analyzed | 未確認 | CWE-77 | Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName parameter. This vulnerability allows attackers to |
| CVE-2026-38835 | Analyzed | 未確認 | CWE-77 | Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartitionName parameter. This vulnerability |
| CVE-2026-3885 | Deferred | 未確認 | CWE-79 | The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_box' shortcode in all versions up to, and incl |
| CVE-2026-3893 | Deferred | 未確認 | CWE-306 | The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and operational func |
| CVE-2026-38934 | Deferred | 未確認 | CWE-352 | Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker to escalate privileges and obtain sensitive information via |
| CVE-2026-38935 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/view.php via the doctype parameter |
| CVE-2026-38936 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/selectindices.php via the namecontains parameter |
| CVE-2026-38939 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the product_catalogue. |
| CVE-2026-38940 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in RafyMrX TOKO-ONLINE-ROTI v.1.0 allows a remote attacker to execute arbitrary code via the detail_produk.php component |
| CVE-2026-38948 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality. The application fails to properly sanitize uploaded SVG files, |
| CVE-2026-38949 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint. The application fails to prope |
| CVE-2026-38991 | Deferred | 未確認 | CWE-434 | Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially crafted filename bypasses an extension filter |
| CVE-2026-38992 | Deferred | 未確認 | CWE-94 | Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints. This vulnerability allows an attacker to run system comman |
| CVE-2026-38993 | Deferred | 未確認 | CWE-22 | Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitrary locations w |
| CVE-2026-3902 | Analyzed | 未確認 | CWE-290 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `ASGIRequest` allows a remote attacker to spoof headers by exploiting an ambiguous mapping of |
| CVE-2026-39087 | Awaiting Analysis | 未確認 | CWE-777, CWE-94 | ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs. |
| CVE-2026-39109 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username parameter of the login page (index.php). This allo |
| CVE-2026-39110 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page (forgot-passwor |
| CVE-2026-39111 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the email parameter of the forgot password page (forgot-password.ph |
| CVE-2026-39112 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the visname parameter of visitors-form.php. An authenticated |
| CVE-2026-39304 | Modified | 未確認 | CWE-400, CWE-770 | Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 h |
| CVE-2026-39305 | Analyzed | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, the Action Orchestrator feature contains a Path Traversal vulnerability that allows an attacker (or compromised agent) to |
| CVE-2026-39306 | Analyzed | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry pull flow extracts attacker-controlled .praison tar archives with tar.extractall() and does n |
| CVE-2026-39307 | Analyzed | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading |
| CVE-2026-39308 | Analyzed | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry publish endpoint writes uploaded recipe bundles to a filesystem path derived from the bundle' |
| CVE-2026-39312 | Analyzed | 未確認 | CWE-789 | SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. In 5.2.5188 and earlier, a pre-authentication denial-of-service vulnerability exists in SoftEther VPN De |
| CVE-2026-39313 | Deferred | 未確認 | CWE-770 | mcp-framework is a framework for building Model Context Protocol (MCP) servers. In versions 0.2.21 and below, the readRequestBody() function in the HTTP transport concatenates requ |
| CVE-2026-39314 | Analyzed | 未確認 | CWE-191 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, an integer underflow vulnerability in _ppdCreateF |
| CVE-2026-39315 | Analyzed | 未確認 | CWE-184 | Unhead is a document head and template manager. Prior to 2.1.13, useHeadSafe() is the composable that Nuxt's own documentation explicitly recommends for rendering user-supplied con |
| CVE-2026-39316 | Analyzed | 未確認 | CWE-416 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a use-after-free vulnerability exists in the CUPS |
| CVE-2026-39317 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-39334. Reason: This candidate is a duplicate of CVE-2026-39334. Notes: All CVE users should ref | |
| CVE-2026-39318 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Versions prior to 7.1.0 have an SQL injection vulnerability in the endpoints `/GroupPropsFormRowOps.php`, `/PersonCustomFields |
| CVE-2026-39319 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a second order SQL injection vulnerability was found in the endpoint /FundRaiserEditor.php in ChurchCRM. A use |
| CVE-2026-39320 | Analyzed | 未確認 | CWE-1333, CWE-400 | Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.25.0 are vulnerable to an unauthenticated Regular Expression Denial of Service (Re |
| CVE-2026-39321 | Analyzed | 未確認 | CWE-208 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.8.0-alpha.6 and 8.6.74, he login endpoint response time differs m |
| CVE-2026-39322 | Analyzed | 未確認 | CWE-287 | PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, POST /api/v1/auth/sign-in creates a valid session for banned accounts before verifying the su |
| CVE-2026-39323 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-39326. Reason: This candidate is a duplicate of CVE-2026-39326. Notes: All CVE users should ref | |
| CVE-2026-39324 | Analyzed | 未確認 | CWE-287, CWE-345, CWE-502, CWE-565 | Rack::Session is a session management implementation for Rack. From 2.0.0 to before 2.1.2, Rack::Session::Cookie incorrectly handles decryption failures when configured with secret |
| CVE-2026-39325 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the endpoint /SettingsUser.php in ChurchCRM 7.0.5. Authenticated a |
| CVE-2026-39326 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the endpoint /PropertyTypeEditor.php in ChurchCRM. Authenticated u |
| CVE-2026-39327 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the endpoint /MemberRoleChange.php in ChurchCRM 7.0.5. Authenticat |
| CVE-2026-39328 | Analyzed | 未確認 | CWE-79 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripting vulnerability exists in ChurchCRM's person profile editing functionality. Non-ad |
| CVE-2026-39329 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was identified in /EventNames.php in ChurchCRM. Authenticated users with AddEve |
| CVE-2026-39330 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the endpoint /PropertyAssign.php in ChurchCRM. Authenticated users |
| CVE-2026-39331 | Analyzed | 未確認 | CWE-639, CWE-863 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an authenticated API user can modify any family record's state without proper authorization by simply changing |
| CVE-2026-39332 | Analyzed | 未確認 | CWE-79 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a reflected Cross-Site Scripting (XSS) vulnerability in GeoPage.php allows any authenticated user to inject ar |
| CVE-2026-39333 | Analyzed | 未確認 | CWE-79 | ChurchCRM is an open-source church management system. Prior to 7.1.0, he FindFundRaiser.php endpoint reflects user-supplied input (DateStart and DateEnd) into HTML input field attr |
| CVE-2026-39334 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the endpoint /SettingsIndividual.php in ChurchCRM 7.0.5. Authentic |
| CVE-2026-39335 | Analyzed | 未確認 | CWE-79 | ChurchCRM is an open-source church management system. Prior to 7.1.1, there is Stored XSS in group remove control and family editor state/country. This is primarily an admin-to-adm |
| CVE-2026-39336 | Analyzed | 未確認 | CWE-79 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripting issue affects the Directory Reports form fields set from config, Person editor d |
| CVE-2026-39337 | Analyzed | 未確認 | CWE-94 | ChurchCRM is an open-source church management system. Prior to 7.1.0, critical pre-authentication remote code execution vulnerability in ChurchCRM's setup wizard allows unauthentic |
| CVE-2026-39338 | Analyzed | 未確認 | CWE-1004, CWE-79 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a Blind Reflected Cross-Site Scripting vulnerability exists in the search parameter accepted by the ChurchCRM |
| CVE-2026-39339 | Analyzed | 未確認 | CWE-284 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a critical authentication bypass vulnerability in ChurchCRM's API middleware (ChurchCRM/Slim/Middleware/AuthM |
| CVE-2026-39340 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerability exists in PropertyTypeEditor.php, part of the administration functionality for m |
| CVE-2026-39341 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, the application is vulnerable to time-based SQL injection due to an improper input validation. Endpoint Report |
| CVE-2026-39342 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, the searchwhat parameter via QueryView.php with the QueryID=15 is vulnerable to a SQL injection. The authentic |
| CVE-2026-39343 | Analyzed | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerability exists in the EditEventTypes.php file, which is only accessible to administrator |
| CVE-2026-39344 | Analyzed | 未確認 | CWE-79, CWE-80 | ChurchCRM is an open-source church management system. Prior to 7.1.0, there is a Reflected Cross-Site Scripting (XSS) vulnerability on the login page, which is caused by the lack o |
| CVE-2026-39345 | Analyzed | 未確認 | CWE-22 | OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source fails to restrict email template file resolution to the intended plugins |
| CVE-2026-39346 | Analyzed | 未確認 | CWE-284 | OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source allowed authenticated users to bypass disabled-module access controls vi |
| CVE-2026-39347 | Analyzed | 未確認 | CWE-285 | OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source accepts changes to self-appraisal submissions for administrator users af |
| CVE-2026-39348 | Analyzed | 未確認 | CWE-862 | OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source omits authorization on job specification and vacancy attachment download |
| CVE-2026-39349 | Analyzed | 未確認 | CWE-326 | OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source encrypts certain sensitive fields with AES in ECB mode, which preserves |
| CVE-2026-39350 | Analyzed | 未確認 | CWE-185, CWE-863 | Istio is an open platform to connect, manage, and secure microservices. In versions 1.25.0 through 1.27.8, 1.28.0 through 1.28.5, 1.29.0, and 1.29.1, the serviceAccounts and notSer |
| CVE-2026-39351 | Analyzed | 未確認 | CWE-862 | Frappe is a full-stack web application framework. Prior to 16.14.0 and 15.104.0, Frappe allows unrestricted Doctype access via API exploit. |
| CVE-2026-39354 | Analyzed | 未確認 | CWE-639 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.66.2, an authenticated authorization flaw in Scoold allows any logged-in, low-privilege user to overwrite ano |
| CVE-2026-39355 | Analyzed | 未確認 | CWE-862 | Genealogy is a family tree PHP application. Prior to 5.9.1, a critical broken access control vulnerability in the genealogy application allows any authenticated user to transfer ow |
| CVE-2026-39356 | Analyzed | 未確認 | CWE-89 | Drizzle is a modern TypeScript ORM. Prior to 0.45.2 and 1.0.0-beta.20, Drizzle ORM improperly escaped quoted SQL identifiers in its dialect-specific escapeName() implementations. I |
| CVE-2026-39360 | Analyzed | 未確認 | CWE-862 | RustFS is a distributed object storage system built in Rust. Prior to alpha.90, RustFS contains a missing authorization check in the multipart copy path (UploadPartCopy). A low-pri |
| CVE-2026-39361 | Analyzed | 未確認 | CWE-918 | OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validate_enrichment_url function in src/handler/http/request/enrichment_table/mod.rs fails to block |
| CVE-2026-39362 | Analyzed | 未確認 | CWE-918 | InvenTree is an Open Source Inventory Management System. Prior to 1.2.7 and 1.3.0, when INVENTREE_DOWNLOAD_FROM_URL is enabled (opt-in), authenticated users can supply remote_image |
| CVE-2026-39363 | Modified | 未確認 | CWE-1220, CWE-200, CWE-306 | Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, if it is possible to connect to the Vite dev server’s WebSocket without an Origin |
| CVE-2026-39364 | Modified | 未確認 | CWE-180, CWE-284, CWE-472 | Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite dev server, files that should be blocked by server.fs.deny (e.g., .env, *.crt |
| CVE-2026-39365 | Analyzed | 未確認 | CWE-22 | Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, the dev server’s handling of .map requests for optimized dependencies resolves fi |
| CVE-2026-39366 | Analyzed | 未確認 | CWE-345 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the PayPal IPN v1 handler at plugin/PayPalYPT/ipn.php lacks transaction deduplication, allowing an attacke |
| CVE-2026-39367 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's EPG (Electronic Program Guide) feature parses XML from user-controlled URLs and renders programme |
| CVE-2026-39368 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the Live restream log callback flow accepted an attacker-controlled restreamerURL and later fetched that s |
| CVE-2026-39369 | Analyzed | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, objects/aVideoEncoderReceiveImage.json.php allowed an authenticated uploader to fetch attacker-controlled |
| CVE-2026-39370 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, objects/aVideoEncoder.json.php still allows attacker-controlled downloadURL values with common media or ar |
| CVE-2026-39371 | Analyzed | 未確認 | CWE-352 | RedwoodSDK is a server-first React framework. From 1.0.0-beta.50 to 1.0.5, erver functions exported from "use server" files could be invoked via GET requests, bypassing their inten |
| CVE-2026-39373 | Analyzed | 未確認 | CWE-409 | JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attacker can exhaust server memory by sending crafted JWE tokens |
| CVE-2026-39374 | Analyzed | 未確認 | CWE-639 | Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project member (ADMIN or MEMBER) to modify the start_date and target_da |
| CVE-2026-39376 | Analyzed | 未確認 | CWE-674 | FastFeedParser is a high performance RSS, Atom and RDF parser. Prior to 0.5.10, when parse() fetches a URL that returns an HTML page containing a <meta http-equiv="refresh"> tag, i |
| CVE-2026-39377 | Analyzed | 未確認 | CWE-22, CWE-73 | The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions 6.5 through 7.17.0 allow arbitrary file writes to locations |
| CVE-2026-39378 | Analyzed | 未確認 | CWE-22, CWE-73 | The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when `HTMLExporter.embed_images=True |
| CVE-2026-39380 | Analyzed | 未確認 | CWE-79 | Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Scripting (XSS) vulnerability exi |
| CVE-2026-39381 | Analyzed | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.8.0-alpha.7 and 8.6.75, the GET /sessions/me endpoint returns _Se |
| CVE-2026-39382 | Deferred | 未確認 | CWE-78 | dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. Inside the reusable workflow dbt-labs/ac |
| CVE-2026-39384 | Analyzed | 未確認 | CWE-639 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, FreeScout does not take the limit_user_customer_visibility parameter into accou |
| CVE-2026-39386 | Analyzed | 未確認 | CWE-20, CWE-269, CWE-284, CWE-639, CWE-862 | Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immediately obtain |
| CVE-2026-39387 | Analyzed | 未確認 | CWE-98 | BoidCMS is an open-source, PHP-based flat-file CMS for building simple websites and blogs, using JSON as its database. Versions prior to 2.1.3 are vulnerable to a critical Local Fi |
| CVE-2026-39388 | Analyzed | 未確認 | CWE-295 | OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, OpenBao's Certificate authentication method, when a token renewal is requested and `disa |
| CVE-2026-39389 | Analyzed | 未確認 | CWE-285 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, This vulnerability |
| CVE-2026-39390 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the Google Maps ifr |
| CVE-2026-39391 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the blacklist (ban) |
| CVE-2026-39392 | Analyzed | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the Pages module do |
| CVE-2026-39393 | Analyzed | 未確認 | CWE-306 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the install route g |
| CVE-2026-39394 | Analyzed | 未確認 | CWE-93 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the Install::index( |
| CVE-2026-39395 | Analyzed | 未確認 | CWE-754 | Cosign provides code signing and transparency for containers and binaries. Prior to 3.0.6 and 2.6.3, cosign verify-blob-attestation may erroneously report a "Verified OK" result fo |
| CVE-2026-39396 | Analyzed | 未確認 | CWE-400, CWE-674, CWE-770 | OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, `ExtractPluginFromImage()` in OpenBao's OCI plugin downloader extracts a plugin binary f |
| CVE-2026-39397 | Analyzed | 未確認 | CWE-862 | @delmaredigital/payload-puck is a PayloadCMS plugin for integrating Puck visual page builder. Prior to 0.6.23, all /api/puck/* CRUD endpoint handlers registered by createPuckPlugin |
| CVE-2026-39398 | Rejected | 未確認 | Rejected reason: The affected product and advisory are not public. | |
| CVE-2026-39399 | Awaiting Analysis | 未確認 | CWE-20, CWE-22 | NuGet Gallery is a package repository that powers nuget.org. A security vulnerability exists in the NuGetGallery backend job’s handling of .nuspec files within NuGet packages. An a |
| CVE-2026-39400 | Analyzed | 未確認 | CWE-79 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, a non-admin user with create_events and run_events privileges can inject arbi |
| CVE-2026-39401 | Analyzed | 未確認 | CWE-862 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, jb child processes can include an update_event key in their JSON output. The |
| CVE-2026-39406 | Analyzed | 未確認 | CWE-22 | @hono/node-server allows running the Hono application on Node.js. Prior to 1.19.13, a path handling inconsistency in serveStatic allows protected static files to be accessed by usi |
| CVE-2026-39407 | Analyzed | 未確認 | CWE-22 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a path handling inconsistency in serveStatic allows protected static files t |
| CVE-2026-39408 | Analyzed | 未確認 | CWE-22 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a path traversal issue in toSSG() allows files to be written outside the con |
| CVE-2026-39409 | Analyzed | 未確認 | CWE-180 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, ipRestriction() does not canonicalize IPv4-mapped IPv6 client addresses (e.g |
| CVE-2026-39410 | Analyzed | 未確認 | CWE-20 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a discrepancy between browser cookie parsing and parse() handling allows coo |
| CVE-2026-39411 | Analyzed | 未確認 | CWE-287, CWE-290, CWE-345 | LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.48, the webapi authentication layer trusts a client-cont |
| CVE-2026-39412 | Analyzed | 未確認 | CWE-200 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.4, the sort_natural filter bypasses the ownPropertyOnly security option, allowing |
| CVE-2026-39413 | Modified | 未確認 | CWE-347 | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.4.14, the LightRAG API is vulnerable to a JWT algorithm confusion attack where an attacker can forge to |
| CVE-2026-39414 | Analyzed | 未確認 | CWE-770 | MinIO is a high-performance object storage system. From RELEASE.2018-08-18T03-49-57Z to before RELEASE.2025-12-20T04-58-37Z, MinIO's S3 Select feature is vulnerable to memory exhau |
| CVE-2026-39415 | Analyzed | 未確認 | CWE-602 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.46.0, a vulnerability has been identified in Frappe Learning where |
| CVE-2026-39416 | Analyzed | 未確認 | CWE-79 | AIL framework is an open-source platform to collect, crawl, process and analyse unstructured data. Prior to 6.8, a stored cross-site scripting (XSS) vulnerability was identified in |
| CVE-2026-39417 | Analyzed | 未確認 | CWE-20, CWE-78 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an incomplete fix for CVE-2025-53928, where a Remote Code Execution vulnerability still exists |
| CVE-2026-39418 | Analyzed | 未確認 | CWE-918 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox network protection can be bypassed by using socket.sendto() with the MSG_FASTOPEN flag. Th |
| CVE-2026-39419 | Analyzed | 未確認 | CWE-290, CWE-693, CWE-74 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an authenticated user can bypass sandbox result validation and spoof tool execution results by exp |
| CVE-2026-39420 | Analyzed | 未確認 | CWE-693, CWE-78 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an incomplete sandbox protection mechanism allows an authenticated user with tool execution privil |
| CVE-2026-39421 | Analyzed | 未確認 | CWE-693, CWE-94 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. By leveraging Python's ctypes li |
| CVE-2026-39422 | Analyzed | 未確認 | CWE-79 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability through the application name or icon fields |
| CVE-2026-39423 | Analyzed | 未確認 | CWE-79, CWE-95 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an Eval Injection vulnerability in the Markdown rendering engine that allows any user capable |
| CVE-2026-39424 | Analyzed | 未確認 | CWE-1236 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat export feature is vulnerable to Improper Neutralization of Formula Elements in a CSV File |
| CVE-2026-39425 | Analyzed | 未確認 | CWE-80 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability that allows authenticated users to inject ar |
| CVE-2026-39426 | Analyzed | 未確認 | CWE-79 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability where the frontend's MdRenderer.vue componen |
| CVE-2026-39429 | Analyzed | 未確認 | CWE-302, CWE-862 | kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.30.3 and 0.29.3, the cache server is directly exposed by |
| CVE-2026-39440 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a t |
| CVE-2026-39454 | Analyzed | 未確認 | CWE-276, CWE-863 | SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may man |
| CVE-2026-39457 | Analyzed | 未確認 | CWE-121 | When exchanging data over a socket, libnv uses select(2) to wait for data to arrive. However, it does not verify whether the provided socket descriptor fits in select(2)'s file de |
| CVE-2026-39462 | Analyzed | 未確認 | CWE-522 | A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper handling of credential changes on the backen |
| CVE-2026-39464 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request Forgery.This |
| CVE-2026-39466 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link- |
| CVE-2026-39467 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in MetaSlider Responsive Slider by MetaSlider allows Object Injection.This issue affects Responsive Slider by MetaSlider: from n/a t |
| CVE-2026-39469 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affec |
| CVE-2026-39473 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Pär Thernström Simple History simple-history allows Retrieve Embedded Sensitive Data.This issue affects Simple Hi |
| CVE-2026-39475 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Blind SQL Injection.This is |
| CVE-2026-39476 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User F |
| CVE-2026-39477 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: fr |
| CVE-2026-39479 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue af |
| CVE-2026-39482 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Post Expirator post-expirator allows DOM-Based XSS.This issue aff |
| CVE-2026-39483 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hidekazu Ishikawa VK All in One Expansion Unit vk-all-in-one-expansion-unit al |
| CVE-2026-39484 | Deferred | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through < |
| CVE-2026-39485 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in embedplus Youtube Embed Plus youtube-embed-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yo |
| CVE-2026-39486 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This iss |
| CVE-2026-39487 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ameliabooking Amelia ameliabooking allows Blind SQL Injection.This issue affec |
| CVE-2026-39488 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in SureCart SureCart surecart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureCart: from n/a thro |
| CVE-2026-39495 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Blin |
| CVE-2026-39496 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayM |
| CVE-2026-39497 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This i |
| CVE-2026-39500 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor all |
| CVE-2026-39501 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: |
| CVE-2026-39504 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Co |
| CVE-2026-39505 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels. |
| CVE-2026-39506 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine |
| CVE-2026-39508 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-wo |
| CVE-2026-39509 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/ |
| CVE-2026-39510 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configur |
| CVE-2026-39516 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retrieve Embedded Sensiti |
| CVE-2026-39517 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects Blog |
| CVE-2026-39520 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weDocs: from n/a through <= 2 |
| CVE-2026-39521 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: from n/a through |
| CVE-2026-39526 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe |
| CVE-2026-39528 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Del |
| CVE-2026-39535 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in fullworks Display Eventbrite Events widget-for-eventbrite-api allows Exploiting Incorrectly Configured Access Control Security Levels.This is |
| CVE-2026-39536 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This iss |
| CVE-2026-39538 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Mikado Core mikado-core allows PHP Local File |
| CVE-2026-39541 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydr |
| CVE-2026-39542 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue |
| CVE-2026-39543 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through |
| CVE-2026-39544 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themeStek LabtechCO labtechco allows PHP Local File Inclusi |
| CVE-2026-39561 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a t |
| CVE-2026-39562 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This iss |
| CVE-2026-39563 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This |
| CVE-2026-39564 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affe |
| CVE-2026-39565 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpT |
| CVE-2026-39566 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Designinvento DirectoryPress directorypress allows Retrieve Embedded Sensitive Data.This |
| CVE-2026-39569 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a |
| CVE-2026-39570 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Retrieve Embedded Sensitive Data.This issue affec |
| CVE-2026-39571 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themefic Instantio instantio allows Retrieve Embedded Sensitive Data.This issue affects |
| CVE-2026-39572 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-res |
| CVE-2026-39575 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based |
| CVE-2026-39585 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics Booktics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Booktics: from n/a through 1. |
| CVE-2026-39586 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBu |
| CVE-2026-39588 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security |
| CVE-2026-39592 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Andy Ha DEPART depart-deposit-and-part-payment-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff |
| CVE-2026-3960 | Analyzed | 未確認 | CWE-94 | A critical remote code execution vulnerability exists in the unauthenticated REST API endpoint /99/ImportSQLTable in H2O-3 version 3.46.0.9 and prior. The vulnerability arises due |
| CVE-2026-39602 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Rustaurius Order Tracking order-tracking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Tra |
| CVE-2026-39603 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Photography grandphotography allows Cross Site Request Forgery.This issue affects Grand Photography: from n/a th |
| CVE-2026-39604 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zookatron MyBookTable Bookstore mybooktable allows Stored XSS.This issue affec |
| CVE-2026-39605 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Obadiah Super Custom Login super-custom-login allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Supe |
| CVE-2026-39606 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Foysal Imran BizReview bizreview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BizReview: from n |
| CVE-2026-39607 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Wpbens Filter Plus filter-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filter Plus: from n |
| CVE-2026-39608 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in iPOSPays iPOSpays Gateways WC ipospays-gateways-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-39609 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Wava.co Wava Payment wava-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wava Payment: fr |
| CVE-2026-39610 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Pankaj Kumar WpXmas-Snow wpxmas-snow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpXmas-Snow: |
| CVE-2026-39611 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes KuteShop kuteshop allows PHP Local File Inclusio |
| CVE-2026-39612 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KuteShop: from n/a th |
| CVE-2026-39613 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inc |
| CVE-2026-39614 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ilGhera JW Player for WordPress jw-player-7-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-39615 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Download Manager download-manager allows Stored XSS.This issue affect |
| CVE-2026-39616 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments download-attachments allows Exploiting Incorrectly Configured Access Control Securit |
| CVE-2026-39617 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Bluestreet bluestreet allows Cross Site Request Forgery.This issue affects Bluestreet: from n/a through <= 1.7.3. |
| CVE-2026-39618 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in themearile NewsExo newsexo allows Cross Site Request Forgery.This issue affects NewsExo: from n/a through <= 7.1. |
| CVE-2026-39619 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Busiprof busiprof allows Upload a Web Shell to a Web Server.This issue affects Busiprof: from n/a through <= 2.5. |
| CVE-2026-39620 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Appointment appointment allows Upload a Web Shell to a Web Server.This issue affects Appointment: from n/a throug |
| CVE-2026-39621 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in spicethemes SpicePress spicepress allows Upload a Web Shell to a Web Server.This issue affects SpicePress: from n/a through <= 2. |
| CVE-2026-39622 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in acmethemes Education Base education-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Education |
| CVE-2026-39623 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Biolife biolife allows PHP Local File Inclusion. |
| CVE-2026-39624 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in kutethemes Biolife biolife allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Biolife: from n/a throu |
| CVE-2026-39625 | Deferred | 未確認 | CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes TechOne techone allows Code Injection.This issue affects TechOne: from n/a |
| CVE-2026-39626 | Deferred | 未確認 | CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Armania armania allows Code Injection.This issue affects Armania: from n/a |
| CVE-2026-39627 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe: from n/a through <= 2.266. |
| CVE-2026-39628 | Deferred | 未確認 | CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes DukaMarket dukamarket allows Code Injection.This issue affects DukaMarket: |
| CVE-2026-39629 | Deferred | 未確認 | CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Uminex uminex allows Code Injection.This issue affects Uminex: from n/a th |
| CVE-2026-39630 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Getty Images Getty Images getty-images allows Server Side Request Forgery.This issue affects Getty Images: from n/a through <= 4 |
| CVE-2026-39631 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ronik@UnlimitedWP WPSchoolPress wpschoolpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSc |
| CVE-2026-39632 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Cross Site Request Forgery.This issue affects Grand Blog: from n/a through <= 3.1. |
| CVE-2026-39633 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Car Rental grandcarrental allows Cross Site Request Forgery.This issue affects Grand Car Rental: from n/a throug |
| CVE-2026-39634 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Portfolio grandportfolio allows Cross Site Request Forgery.This issue affects Grand Portfolio: from n/a through |
| CVE-2026-39635 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Magazine grandmagazine allows Cross Site Request Forgery.This issue affects Grand Magazine: from n/a through <= |
| CVE-2026-39636 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in livemesh Livemesh Addons for Elementor addons-for-elementor allows Stored XSS. |
| CVE-2026-39637 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in SpabRice Mogi mogi allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mogi: from n/a through <= 1.2.3 |
| CVE-2026-39638 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Qubely qubely allows Stored XSS.This issue affects Qubely: from n/a th |
| CVE-2026-39639 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in redpixelstudios RPS Include Content rps-include-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af |
| CVE-2026-39640 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in mndpsingh287 Theme Editor theme-editor allows Code Injection.This issue affects Theme Editor: from n/a through <= 3.2. |
| CVE-2026-39641 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Skywarrior Blackfyre blackfyre allows Cross Site Request Forgery.This issue affects Blackfyre: from n/a through <= 2.5.4. |
| CVE-2026-39643 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Payment Plugins Payment Plugins for PayPal WooCommerce pymntpl-paypal-woocommerce allows Exploiting Incorrectly Configured Access Control Sec |
| CVE-2026-39644 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wp Ul |
| CVE-2026-39645 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Global Payments GlobalPayments WooCommerce global-payments-woocommerce allows Server Side Request Forgery.This issue affects Glo |
| CVE-2026-39646 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bozdoz Leaflet Map leaflet-map allows Stored XSS.This issue affects Leaflet Ma |
| CVE-2026-39647 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Server Side Request Forgery.This |
| CVE-2026-39648 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in themebeez Cream Blog cream-blog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cream Blog: from n |
| CVE-2026-39649 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in themebeez Royale News royale-news allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royale News: fro |
| CVE-2026-39650 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Unitech Web UnitechPay unitechpay-paiements-mobile-money allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a |
| CVE-2026-39651 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total Po |
| CVE-2026-39652 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in igms iGMS Direct Booking igms-direct-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iGMS |
| CVE-2026-39653 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Exploiting Incorrectly Configured Access Control Secu |
| CVE-2026-39654 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows DOM-Based XS |
| CVE-2026-39656 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Raz |
| CVE-2026-39657 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in leadlovers leadlovers forms leadlovers-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects leadl |
| CVE-2026-39658 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Coding Panda Panda Pods Repeater Field panda-pods-repeater-field allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-39659 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-39660 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-39662 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ProWCPlugins Product Price by Formula for WooCommerce product-price-by-formula-for-woocommerce allows Exploiting Incorrectly Configured Acces |
| CVE-2026-39663 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a |
| CVE-2026-39664 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in leadrebel Leadrebel leadrebel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leadrebel: from n/a |
| CVE-2026-39665 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vladimir Prelovac SEO Friendly Images seo-image allows DOM-Based XSS.This issu |
| CVE-2026-39666 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in telepathy Hello Bar Popup Builder hellobar allows DOM-Based XSS.This issue aff |
| CVE-2026-39667 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jongmyoung Kim Korea SNS korea-sns allows DOM-Based XSS.This issue affects Kor |
| CVE-2026-39668 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in g5theme Book Previewer for Woocommerce book-previewer-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels |
| CVE-2026-39669 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in NitroPack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NitroPack: from n/a through 1.19.3. |
| CVE-2026-39670 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Brecht Visual Link Preview visual-link-preview allows Server Side Request Forgery.This issue affects Visual Link Preview: from n |
| CVE-2026-39671 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forgery.This issue |
| CVE-2026-39672 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in shiptime ShipTime: Discounted Shipping Rates shiptime-discount-shipping allows Exploiting Incorrectly Configured Access Control Security Leve |
| CVE-2026-39673 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in shrikantkale iZooto izooto-web-push allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iZooto: from n |
| CVE-2026-39674 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Manoj Kumar MK Google Directions google-distance-calculator allows DOM-Based X |
| CVE-2026-39675 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in webmuehle Court Reservation court-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cour |
| CVE-2026-39676 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Downloa |
| CVE-2026-39677 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Emphires emphires allows PHP Local File In |
| CVE-2026-39678 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Pinpoint Booking System Pinpoint Booking System booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-39679 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Freeio freeio allows PHP Local File Inclusion.Thi |
| CVE-2026-39680 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in MWP Development Diet Calorie Calculator diet-calorie-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-39681 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Homeo homeo allows PHP Local File Inclusion.This |
| CVE-2026-39682 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arjan Pronk linkPizza-Manager linkpizza-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects li |
| CVE-2026-39683 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chief Gnome Garden Gnome Package garden-gnome-package allows DOM-Based XSS.Thi |
| CVE-2026-39684 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in UnTheme OrganicFood organicfood allows PHP Local File Inclu |
| CVE-2026-39685 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in lvaudore The Moneytizer the-moneytizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Moneyti |
| CVE-2026-39686 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This i |
| CVE-2026-39687 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Rapid Car Check Rapid Car Check Vehicle Data free-vehicle-data-uk allows Exploiting Incorrectly Configured Access Control Security Levels.Thi |
| CVE-2026-39688 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Glowlogix WP Frontend Profile wp-front-end-profile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-39689 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in eshipper eShipper Commerce eshipper-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eShip |
| CVE-2026-39690 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec |
| CVE-2026-39691 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations cryptocurrency-donation-box allows Exploiting Incorrectly Configured A |
| CVE-2026-39692 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Stored XSS.This issue affects tagDiv |
| CVE-2026-39693 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fesomia FSM Custom Featured Image Caption fsm-custom-featured-image-caption al |
| CVE-2026-39694 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-39695 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in podigee Podigee podigee allows Server Side Request Forgery.This issue affects Podigee: from n/a through <= 1.4.0. |
| CVE-2026-39696 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elfsight Elfsight WhatsApp Chat CC elfsight-whatsapp-chat allows DOM-Based XSS |
| CVE-2026-39697 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in HBSS Technologies MAIO – The new AI GEO / SEO tool maio-the-new-ai-geo-seo-tool allows Exploiting Incorrectly Configured Access Control Secur |
| CVE-2026-39698 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PublisherDesk The Publisher Desk ads.txt the-publisher-desk-ads-txt allows Exploiting Incorrectly Configured Access Control Security Levels.T |
| CVE-2026-39699 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in massiveshift AI Workflow Automation ai-workflow-automation-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-39700 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPXPO WowOptin optin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowOptin: from n/a through <= |
| CVE-2026-39701 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through < |
| CVE-2026-39702 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wealcoder Animation Addons for Elementor animation-addons-for-elementor allows |
| CVE-2026-39703 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor al |
| CVE-2026-39704 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in nfusionsolutions Precious Metals Automated Product Pricing – Pro precious-metals-automated-product-pricing-pro allows Exploiting Incorrectly |
| CVE-2026-39705 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Mulika Team MIPL WC Multisite Sync mipl-wc-multisite-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue |
| CVE-2026-39706 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Netro Systems Make My Trivia trivialy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Make My Triv |
| CVE-2026-39707 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ZealousWeb Accept PayPal Payments using Contact Form 7 contact-form-7-paypal-extension allows Exploiting Incorrectly Configured Access Contro |
| CVE-2026-39708 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UiCore UiCore Elements uicore-elements allows Stored XSS.This issue affects Ui |
| CVE-2026-39709 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in thetechtribe The Tribal the-tech-tribe allows Retrieve Embedded Sensitive Data.This issue affects The Tribal: fro |
| CVE-2026-39710 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Cross Site Request Forgery.This issue affects RT-Theme 18 | Extensions: fr |
| CVE-2026-39711 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Retrieve Embedded Sensitive Data.This issue affects RT-The |
| CVE-2026-39712 | Deferred | 未確認 | CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in tagDiv tagDiv Composer td-composer allows Code Injection.This issue affects tagDiv Co |
| CVE-2026-39713 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in mailercloud Mailercloud – Integrate webforms and synchronize website contacts mailercloud-integrate-webforms-synchronize-contacts allows Expl |
| CVE-2026-39714 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in G5Theme G5Plus April g5plus-april allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects G5Plus April: fr |
| CVE-2026-39715 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Lev |
| CVE-2026-39716 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in CKThemes Flipmart flipmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flipmart: from n/a thro |
| CVE-2026-39808 | Analyzed | 掲載 | CWE-78 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execut |
| CVE-2026-39809 | Analyzed | 未確認 | CWE-89 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7. |
| CVE-2026-39810 | Analyzed | 未確認 | CWE-321 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump. |
| CVE-2026-39811 | Analyzed | 未確認 | CWE-190 | A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWe |
| CVE-2026-39812 | Analyzed | 未確認 | CWE-79 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, |
| CVE-2026-39813 | Modified | 未確認 | CWE-24 | A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specia |
| CVE-2026-39814 | Analyzed | 未確認 | CWE-23 | A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.12, FortiWeb 7.2.7 through 7.2.12, FortiW |
| CVE-2026-39815 | Analyzed | 未確認 | CWE-89 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7.2.2 may allow attacker to execute unaut |
| CVE-2026-39837 | Analyzed | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in WikiWorks Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki |
| CVE-2026-39838 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows XSS Targeting |
| CVE-2026-39839 | Analyzed | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects |
| CVE-2026-39840 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows XSS Targeting Non-Scri |
| CVE-2026-39841 | Analyzed | 未確認 | CWE-79, CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects |
| CVE-2026-39842 | Analyzed | 未確認 | CWE-917, CWE-94 | OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code exe |
| CVE-2026-39843 | Analyzed | 未確認 | CWE-918 | Plane is an an open-source project management tool. From 0.28.0 to before 1.3.0, the remediation of GHSA-jcc6-f9v6-f7jw is incomplete which could lead to the same full read Server- |
| CVE-2026-39844 | Analyzed | 未確認 | CWE-22 | NiceGUI is a Python-based UI framework. Prior to 3.10.0, Since PurePosixPath only recognizes forward slashes (/) as path separators, an attacker can bypass this sanitization on Win |
| CVE-2026-39845 | Analyzed | 未確認 | CWE-918 | Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If dev |
| CVE-2026-39846 | Analyzed | 未確認 | CWE-79, CWE-94 | SiYuan is a personal knowledge management system. Prior to 3.6.4, a malicious note synced to another user can trigger remote code execution in the SiYuan Electron desktop client. T |
| CVE-2026-39847 | Analyzed | 未確認 | CWE-22 | Emmett is a full-stack Python web framework designed with simplicity. From 2.5.0 to before 2.8.1, the RSGI static handler for Emmett's internal assets (/__emmett__ paths) is vulner |
| CVE-2026-39848 | Analyzed | 未確認 | CWE-306, CWE-352 | Dockyard is a Docker container management app. Prior to 1.1.0, Docker container start and stop operations are performed through GET requests without CSRF protection. A remote attac |
| CVE-2026-39851 | Analyzed | 未確認 | CWE-204 | Saleor is an e-commerce platform. From 2.10.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, the requestEmailChange() mutation was revealing the existence of user-provided ema |
| CVE-2026-39853 | Analyzed | 未確認 | CWE-121, CWE-787 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in several signature verif |
| CVE-2026-39855 | Analyzed | 未確認 | CWE-125, CWE-190, CWE-191 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an integer underflow vulnerability exists in osslsigncode version 2.12 and earlier in t |
| CVE-2026-39856 | Analyzed | 未確認 | CWE-125 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an out-of-bounds read vulnerability exists in osslsigncode version 2.12 and earlier in |
| CVE-2026-39857 | Analyzed | 未確認 | CWE-200 | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and prior contain an authorization bypass vulnerability in the choices and counts query parameter |
| CVE-2026-39858 | Modified | 未確認 | CWE-289, CWE-290, CWE-306 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass vulnerability in Traefik's For |
| CVE-2026-39859 | Analyzed | 未確認 | CWE-22 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, liquidjs 10.25.0 documents root as constraining filenames passed to renderFile |
| CVE-2026-39860 | Analyzed | 未確認 | CWE-61 | Nix is a package manager for Linux and other Unix systems. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process orchestrating t |
| CVE-2026-39861 | Analyzed | 未確認 | CWE-22, CWE-61 | Claude Code is an agentic coding tool. Prior to version 2.1.64, Claude Code's sandbox did not prevent sandboxed processes from creating symlinks pointing to locations outside the w |
| CVE-2026-39862 | Analyzed | 未確認 | CWE-78 | Tophat is a mobile applications testing harness. Prior to 2.5.1, Tophat is affected by remote code execution via crafted tophat:// or http://localhost:29070 URLs. The arguments que |
| CVE-2026-39863 | Analyzed | 未確認 | CWE-119 | Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.1.1, 6.0.6, and 5.8.8, an out-of-bounds access in the core of Kamailio (formerly OpenSER and SER) al |
| CVE-2026-39864 | Analyzed | 未確認 | CWE-125 | Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.0.5 and 5.8.7, an out-of-bounds read in the auth module of Kamailio (formerly OpenSER and SER) allow |
| CVE-2026-39865 | Modified | 未確認 | CWE-400, CWE-662 | Axios is a promise based HTTP client for the browser and Node.js. Starting in version 1.13.0 and prior to 1.13.2, Axios HTTP/2 session cleanup logic contains a state corruption bug |
| CVE-2026-39866 | Analyzed | 未確認 | CWE-77 | Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a3921445252849126c6266b2, command injection in release_update.yml workflow dispatch input all |
| CVE-2026-3987 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code in the context |
| CVE-2026-39880 | Analyzed | 未確認 | CWE-362 | Remnawave Backend is the backend for the Remnawave proxy and user management solution. Prior to 2.7.5, a glitch in the HWID device registration logic allows an authenticated user t |
| CVE-2026-39881 | Analyzed | 未確認 | CWE-94 | Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbi |
| CVE-2026-39882 | Analyzed | 未確認 | CWE-789 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes. |
| CVE-2026-39883 | Modified | 未確認 | CWE-426 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin ioreg command to use an absolute path but left the |
| CVE-2026-39884 | Analyzed | 未確認 | CWE-88 | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior contain an argument injection vulnerability in the port_forward |
| CVE-2026-39885 | Analyzed | 未確認 | CWE-918 | FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 2.3.0, the mcp-from-openapi library uses @apidevtools/json-schema-ref-parser to dereference |
| CVE-2026-39886 | Analyzed | 未確認 | CWE-190 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Versions 3.4.0 through 3.4.9 have a |
| CVE-2026-39888 | Analyzed | 未確認 | CWE-657, CWE-693 | PraisonAI is a multi-agent teams system. Prior to 1.5.115, execute_code() in praisonaiagents.tools.python_tools defaults to sandbox_mode="sandbox", which runs user code in a subpro |
| CVE-2026-39889 | Analyzed | 未確認 | CWE-200 | PraisonAI is a multi-agent teams system. Prior to 4.5.115, the A2U (Agent-to-User) event stream server in PraisonAI exposes all agent activity without authentication. The create_a2 |
| CVE-2026-39890 | Analyzed | 未確認 | CWE-502 | PraisonAI is a multi-agent teams system. Prior to 4.5.115, the AgentService.loadAgentFromFile method uses the js-yaml library to parse YAML files without disabling dangerous tags ( |
| CVE-2026-39891 | Analyzed | 未確認 | CWE-94 | PraisonAI is a multi-agent teams system. Prior to 4.5.115, the create_agent_centric_tools() function returns tools (like acp_create_file) that process file content using template r |
| CVE-2026-39892 | Modified | 未確認 | CWE-119, CWE-131 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs |
| CVE-2026-39901 | Deferred | 未確認 | CWE-285 | monetr is a budgeting application focused on planning for recurring expenses. Prior to 1.12.3, a transaction integrity flaw allows an authenticated tenant user to soft-delete synce |
| CVE-2026-39906 | Analyzed | 未確認 | CWE-441 | Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose a deprecated .NET Remoting TCP channel that allows remote unauthenticated attackers to leak NTLMv2 m |
| CVE-2026-39907 | Analyzed | 未確認 | CWE-73 | Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the Rea |
| CVE-2026-39911 | Modified | 未確認 | CWE-668 | Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an unsandboxed JavaScript execution vulnerability in the Custom Logic policy block worker that allows au |
| CVE-2026-39912 | Deferred | 未確認 | CWE-201 | V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP response bodies of the loginWithMailLink endpoint when the login_with_mail_link_enable fea |
| CVE-2026-39918 | Deferred | 未確認 | CWE-94 | Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoint where the subdir POST parameter is written unsanitized into the env.php configuration fi |
| CVE-2026-39920 | Deferred | 未確認 | CWE-1188, CWE-1391 | BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis2 administration module on network-accessible endpoints with default credentials that allo |
| CVE-2026-39921 | Modified | 未確認 | CWE-918 | GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigg |
| CVE-2026-39922 | Modified | 未確認 | CWE-918 | GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint that allows a |
| CVE-2026-39933 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension allows Cross-Si |
| CVE-2026-39934 | Awaiting Analysis | 未確認 | CWE-835 | Loop with unreachable exit condition ('infinite loop') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Leveraging Time-of-Check and Time-of |
| CVE-2026-39935 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CampaignEvents Extension allows Cross-Sit |
| CVE-2026-39936 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Score Extension allows Cross-Site Scripti |
| CVE-2026-39937 | Awaiting Analysis | 未確認 | CWE-212 | Improper removal of sensitive information before storage or transfer vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure. The |
| CVE-2026-39940 | Deferred | 未確認 | CWE-601 | ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in many places across the ChurchCRM application to create a link that, when visited by an auth |
| CVE-2026-39941 | Analyzed | 未確認 | CWE-79, CWE-80 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability allows attacker-supplied input sent via a the EName and EDesc parameters in EditEventAtte |
| CVE-2026-39942 | Analyzed | 未確認 | CWE-284, CWE-639 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, the PATCH /files/{id} endpoint accepts a user-controlled filename_disk parameter. |
| CVE-2026-39943 | Analyzed | 未確認 | CWE-200, CWE-312 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus stores revision records (in directus_revisions) whenever items are creat |
| CVE-2026-39946 | Analyzed | 未確認 | CWE-89 | OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, when OpenBao revoked privileges on a role in the PostgreSQL database secrets engine, Ope |
| CVE-2026-3995 | Deferred | 未確認 | CWE-79 | The OPEN-BRAIN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'API Key' settings field in all versions up to, and including, 0.5.0. This is due to insuff |
| CVE-2026-39956 | Modified | 未確認 | CWE-125, CWE-476, CWE-843 | jq is a command-line JSON processor. Prior to version 1.8.2, the _strindices builtin in jq's src/builtin.c passes its arguments directly to jv_string_indexes() without verifying th |
| CVE-2026-39957 | Analyzed | 未確認 | CWE-863 | Lychee is a free, open-source photo-management tool. Prior to 7.5.4, a SQL operator-precedence bug in SharingController::listAll() causes the orWhereNotNull('user_group_id') clause |
| CVE-2026-39958 | Deferred | 未確認 | CWE-93 | oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories (topics) named "Topic Manifests" ({mirror}/debs/mani |
| CVE-2026-39959 | Awaiting Analysis | 未確認 | CWE-290, CWE-770 | Tmds.DBus provides .NET libraries for working with D-Bus from .NET. Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signa |
| CVE-2026-39961 | Analyzed | 未確認 | CWE-269, CWE-441 | Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster. From 0.31.0 to before 0.37.0, a developer with create permission on ClickhouseUser CR |
| CVE-2026-39962 | Analyzed | 未確認 | CWE-90 | MISP is an open source threat intelligence and sharing platform. Prior to 2.5.36, improper neutralization of special elements in an LDAP query in ApacheAuthenticate.php allows LDAP |
| CVE-2026-39963 | Analyzed | 未確認 | CWE-565 | Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the serendipity_setCookie() function in include/functions_config.inc.php uses $_SERVER['HTTP_HOST'] wi |
| CVE-2026-39971 | Analyzed | 未確認 | CWE-113 | Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the email sending functionality in include/functions.inc.php inserts $_SERVER['HTTP_HOST'] directly int |
| CVE-2026-39972 | Deferred | 未確認 | CWE-1289 | Mercure is a protocol for pushing data updates to web browsers and other HTTP clients in a battery-efficient way. Prior to 0.22.0, a cache key collision vulnerability in TopicSelec |
| CVE-2026-39973 | Analyzed | 未確認 | CWE-22 | Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in `brut/androlib/res/decoder/ResFileDecoder.java` allows a |
| CVE-2026-39974 | Analyzed | 未確認 | CWE-918 | n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations. Prior to 2.47.4, an au |
| CVE-2026-39976 | Analyzed | 未確認 | CWE-287 | Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for client_credentials tokens. the league/oauth2-server |
| CVE-2026-39977 | Analyzed | 未確認 | CWE-22 | flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the license-files manifest key takes an array of paths to user defined licence files relative t |
| CVE-2026-39979 | Modified | 未確認 | CWE-125 | jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() API in libjq accepts a counted buffer with an explicit length |
| CVE-2026-3998 | Deferred | 未確認 | CWE-79 | The WM JqMath plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' shortcode attribute of the [jqmath] shortcode in all versions up to and including 1. |
| CVE-2026-39980 | Analyzed | 未確認 | CWE-1336 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. U |
| CVE-2026-39981 | Analyzed | 未確認 | CWE-22 | AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function in the essential_abilities extension fails to validate that resolved file paths remain wit |
| CVE-2026-39983 | Modified | 未確認 | CWE-93 | basic-ftp is an FTP client for Node.js. Prior to 5.2.1, basic-ftp allows FTP command injection via CRLF sequences (\r\n) in file path parameters passed to high-level path APIs such |
| CVE-2026-39984 | Analyzed | 未確認 | CWE-295 | Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse fun |
| CVE-2026-39985 | Analyzed | 未確認 | CWE-601 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. Prior to 27.0.3 and 2 |
| CVE-2026-39987 | Analyzed | 掲載 | CWE-306 | marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowi |
| CVE-2026-40002 | Analyzed | 未確認 | CWE-269 | Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for |
| CVE-2026-4002 | Deferred | 未確認 | CWE-352 | The Petje.af plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 2.1.8. This is due to missing nonce validation in the ajax_revoke_ |
| CVE-2026-40021 | Analyzed | 未確認 | CWE-116 | Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list and XmlLayoutSchemaLog4J https://logging.apache.org/log4net/manual/co |
| CVE-2026-40022 | Modified | 未確認 | CWE-288, CWE-551 | When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /api or /admin |
| CVE-2026-40023 | Analyzed | 未確認 | CWE-116 | Apache Log4cxx's XMLLayout https://logging.apache.org/log4cxx/1.7.0/classlog4cxx_1_1xml_1_1XMLLayout.html , in versions before 1.7.0, fails to sanitize characters forbidden by the |
| CVE-2026-40024 | Analyzed | 未確認 | CWE-22 | The Sleuth Kit through 4.14.0 contains a path traversal vulnerability in tsk_recover that allows an attacker to write files to arbitrary locations outside the intended recovery dir |
| CVE-2026-40025 | Analyzed | 未確認 | CWE-125 | The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the APFS filesystem keybag parser where the wrapped_key_parser class follows attacker-controlled lengt |
| CVE-2026-40026 | Analyzed | 未確認 | CWE-125 | The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the ISO9660 filesystem parser where the parse_susp() function trusts len_id, len_des, and len_src fiel |
| CVE-2026-40027 | Awaiting Analysis | 未確認 | CWE-22 | ALEAPP (Android Logs Events And Protobuf Parser) through 3.4.0 contains a path traversal vulnerability in the NQ_Vault.py artifact parser that uses attacker-controlled file_name_fr |
| CVE-2026-40028 | Analyzed | 未確認 | CWE-79 | Hayabusa versions prior to 3.8.0 contain a cross-site scripting (XSS) vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user sc |
| CVE-2026-40029 | Analyzed | 未確認 | CWE-78 | parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsanitized into an os.popen() shell command, allowing arbitrary |
| CVE-2026-4003 | Deferred | 未確認 | CWE-862 | The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15. This is due to a flawed |
| CVE-2026-40030 | Analyzed | 未確認 | CWE-78 | parseusbs before 1.9 contains an OS command injection vulnerability where the volume listing path argument (-v flag) is passed unsanitized into an os.popen() shell command with ls, |
| CVE-2026-40031 | Analyzed | 未確認 | CWE-427 | MemProcFS before 5.17 contains multiple unsafe library-loading patterns that enable DLL and shared-library hijacking across six attack surfaces, including bare-name LoadLibraryU an |
| CVE-2026-40032 | Awaiting Analysis | 未確認 | CWE-78 | UAC (Unix-like Artifacts Collector) before 3.3.0-rc1 contains a command injection vulnerability in the placeholder substitution and command execution pipeline where the _run_comman |
| CVE-2026-40035 | Analyzed | 未確認 | CWE-489 | Unfurl through 2025.08 contains an improper input validation vulnerability in config parsing that enables Flask debug mode by default. The debug configuration value is read as a st |
| CVE-2026-40036 | Analyzed | 未確認 | CWE-409, CWE-770 | Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause denial of service. Attackers can submit hi |
| CVE-2026-40037 | Analyzed | 未確認 | CWE-601 | OpenClaw before 2026.3.31 (patched in 2026.4.8) contains a request body replay vulnerability in fetchWithSsrFGuard that allows unsafe request bodies to be resent across cross-origi |
| CVE-2026-40038 | Deferred | 未確認 | CWE-79 | Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST paramete |
| CVE-2026-40039 | Deferred | 未確認 | CWE-305 | Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect users to arbitrary external websites by manipulating the return_to parameter. Attackers ca |
| CVE-2026-40040 | Deferred | 未確認 | CWE-434 | Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file types by bypassing ineffective extension filtering to the / |
| CVE-2026-40041 | Deferred | 未確認 | CWE-352 | Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing CSRF protect |
| CVE-2026-40042 | Deferred | 未確認 | CWE-403 | Pachno 1.0.6 contains an XML external entity injection vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting unsafe XML parsing in the TextParse |
| CVE-2026-40043 | Deferred | 未確認 | CWE-639 | Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by manipulating the |
| CVE-2026-40044 | Deferred | 未確認 | CWE-502 | Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting malicious serialized objects into cache files. At |
| CVE-2026-40045 | Analyzed | 未確認 | CWE-319 | OpenClaw before 2026.4.2 accepts non-loopback cleartext ws:// gateway endpoints and transmits stored gateway credentials over unencrypted connections. Attackers can forge discovery |
| CVE-2026-40046 | Awaiting Analysis | 未確認 | CWE-190 | Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT. The fix for "CVE-2025-66168: MQTT control packet remaining length field |
| CVE-2026-40048 | Modified | 未確認 | CWE-502 | The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of `<keyId>.key` files in the configured key directory using java.io.ObjectInputStream without applying a |
| CVE-2026-4005 | Deferred | 未確認 | CWE-79 | The Coachific Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userhash' shortcode attribute in all versions up to and including 1.0. This is du |
| CVE-2026-40050 | Awaiting Analysis | 未確認 | CWE-22, CWE-306 | CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale. This vulnerability only requires mitigati |
| CVE-2026-40062 | Analyzed | 未確認 | CWE-22 | A path Traversal vulnerability exists in Ziostation2 v2.9.8.7 and earlier. A remote unauthenticated attacker may get sensitive information on the operating system. |
| CVE-2026-40066 | Modified | 未確認 | CWE-494 | Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and executes a script resulting in unauthenticated remote code executio |
| CVE-2026-40069 | Analyzed | 未確認 | CWE-754 | BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.1.0 to before 0.8.2, BSV::Network::ARC's failure detection only recognises REJECTED and DOUBLE_SPEND_ATTEMPTED. ARC resp |
| CVE-2026-40070 | Analyzed | 未確認 | CWE-347 | BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.3.1 to before 0.8.2, BSV::Wallet::WalletClient#acquire_certificate persists certificate records to storage without verif |
| CVE-2026-40071 | Analyzed | 未確認 | CWE-863 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the /json/package_order, /json/link_order, and /json/abort_link WebUI JSON endpoints en |
| CVE-2026-40072 | Analyzed | 未確認 | CWE-918 | web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.15.0 and 8.0.0b2, web3.py implements CCIP Read / OffchainLookup (EIP-3668) by per |
| CVE-2026-40073 | Analyzed | 未確認 | CWE-770 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.57.1, under certain circumstances, requests could bypass the BODY_SIZE_ |
| CVE-2026-40074 | Analyzed | 未確認 | CWE-755 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.57.1, redirect, when called from inside the handle server hook with a l |
| CVE-2026-40077 | Analyzed | 未確認 | CWE-184 | Beszel is a server monitoring platform. Prior to 0.18.7, some API endpoints in the Beszel hub accept a user-supplied system ID and proceed without further checks that the user shou |
| CVE-2026-40086 | Analyzed | 未確認 | CWE-22, CWE-73 | Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the rembg HTTP server allows unauthenticated remote attackers to read arbitrary file |
| CVE-2026-40087 | Analyzed | 未確認 | CWE-1336 | LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.84 and 1.2.28, LangChain's f-string prompt-template validation was incomplete in two respect |
| CVE-2026-40088 | Analyzed | 未確認 | CWE-78 | PraisonAI is a multi-agent teams system. Prior to 4.5.121, the execute_command function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML |
| CVE-2026-40089 | Analyzed | 未確認 | CWE-918 | Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. The Sonicverse Radio Audio Streaming Stack dashboard contains a Server-Side Request Forgery (SSRF) vulner |
| CVE-2026-40090 | Analyzed | 未確認 | CWE-22 | Zarf is an Airgap Native Packager Manager for Kubernetes. Versions 0.23.0 through 0.74.1 contain an arbitrary file write vulnerability in the zarf package inspect sbom and zarf pac |
| CVE-2026-40091 | Analyzed | 未確認 | CWE-532 | SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions 1.49.0 through 1.51.0, when SpiceDB starts with log level |
| CVE-2026-40093 | Analyzed | 未確認 | CWE-1284 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp >= parent.timestamp for |
| CVE-2026-40096 | Analyzed | 未確認 | CWE-601, CWE-79 | immich is a high performance self-hosted photo and video management solution. Versions prior to 2.7.3 contain an open redirect vulnerability in the shared album functionality, wher |
| CVE-2026-40097 | Analyzed | 未確認 | CWE-129 | Step CA is an online certificate authority for secure, automated certificate management for DevOps. From 0.24.0 to before 0.30.0-rc3, an attacker can trigger an index out-of-bounds |
| CVE-2026-40098 | Analyzed | 未確認 | CWE-862 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backwar |
| CVE-2026-40099 | Analyzed | 未確認 | CWE-863 | Kirby is an open-source content management system. Kirby's user permissions control which user role is allowed to perform specific actions to content models in the CMS. These permi |
| CVE-2026-40100 | Analyzed | 未確認 | CWE-918 | FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool endpoint accepts arbitrary URLs without authentication. The internal IP check in is |
| CVE-2026-40103 | Analyzed | 未確認 | CWE-836 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's scoped API token enforcement for custom project background routes is method-confused. A to |
| CVE-2026-40104 | Analyzed | 未確認 | CWE-770 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 1.8-rc-1, 17.0.0-rc-1 and 17.5.0-rc-1 and prior include a resource |
| CVE-2026-40105 | Analyzed | 未確認 | CWE-80 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 10.4-rc-1, through 16.10.15, 17.0.0-rc-1, through 17.4.7 and 17.5 |
| CVE-2026-40107 | Analyzed | 未確認 | CWE-918 | SiYuan is a personal knowledge management system. Prior to 3.6.4, SiYuan configures Mermaid.js with securityLevel: "loose" and htmlLabels: true. In this mode, <img> tags with src a |
| CVE-2026-40109 | Deferred | 未確認 | CWE-287, CWE-345 | Flux notification-controller is the event forwarder and notification dispatcher for the GitOps Toolkit controllers. Prior to 1.8.3, the gcr Receiver type in Flux notification-contr |
| CVE-2026-4011 | Deferred | 未確認 | CWE-79 | The Power Charts Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the [pc] shortcode in all versions up to, and including, 0.1.0. Th |
| CVE-2026-40111 | Analyzed | 未確認 | CWE-78 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he memory hooks executor in praisonaiagents passes a user-controlled command string directly to subprocess.run() wi |
| CVE-2026-40112 | Analyzed | 未確認 | CWE-79 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The _sanitize |
| CVE-2026-40113 | Analyzed | 未確認 | CWE-88 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, deploy.py constructs a single comma-delimited string for the gcloud run deploy --set-env-vars argument by directly interp |
| CVE-2026-40114 | Analyzed | 未確認 | CWE-918 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the /api/v1/runs endpoint accepts an arbitrary webhook_url in the request body with no URL validation. When a submitted j |
| CVE-2026-40115 | Analyzed | 未確認 | CWE-770 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the WSGI-based recipe registry server (server.py) reads the entire HTTP request body into memory based on the client-supp |
| CVE-2026-40116 | Analyzed | 未確認 | CWE-770 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the /media-stream WebSocket endpoint in PraisonAI's call module accepts connections from any client without authenticatio |
| CVE-2026-40117 | Analyzed | 未確認 | CWE-862 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, read_skill_file() in skill_tools.py allows reading arbitrary files from the filesystem by accepting an unrestricted |
| CVE-2026-40118 | Awaiting Analysis | 未確認 | CWE-941 | UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the |
| CVE-2026-40148 | Analyzed | 未確認 | CWE-409 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the _safe_extractall() function in PraisonAI's recipe registry validates archive members against path traversal attacks b |
| CVE-2026-40149 | Analyzed | 未確認 | CWE-396 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool approval allowlist when |
| CVE-2026-40150 | Analyzed | 未確認 | CWE-918 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the web_crawl() function in praisonaiagents/tools/web_crawl_tools.py accepts arbitrary URLs from AI agents with zer |
| CVE-2026-40151 | Analyzed | 未確認 | CWE-200 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the AgentOS deployment platform exposes a GET /api/agents endpoint that returns agent names, roles, and the first 100 cha |
| CVE-2026-40152 | Analyzed | 未確認 | CWE-22 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he list_files() tool in FileTools validates the directory parameter against workspace boundaries via _validate_path |
| CVE-2026-40153 | Analyzed | 未確認 | CWE-526 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the execute_command function in shell_tools.py calls os.path.expandvars() on every command argument at line 64, man |
| CVE-2026-40154 | Analyzed | 未確認 | CWE-829 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI treats remotely fetched template files as trusted executable code without integrity verification, origin valida |
| CVE-2026-40155 | Analyzed | 未確認 | CWE-362, CWE-863 | The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In versions 4.12.0 through 4.17.1, simultaneous requests that trigger a nonce retry |
| CVE-2026-40156 | Analyzed | 未確認 | CWE-426, CWE-829, CWE-94 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI automatically loads a file named tools.py from the current working directory to discover and register custom ag |
| CVE-2026-40157 | Analyzed | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, cmd_unpack in the recipe CLI extracts .praison tar archives using raw tar.extract() without validating archive member pat |
| CVE-2026-40158 | Analyzed | 未確認 | CWE-693, CWE-94 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI's AST-based Python sandbox can be bypassed using type.__getattribute__ trampoline, allowing arbitrary code exec |
| CVE-2026-40159 | Analyzed | 未確認 | CWE-200, CWE-214 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI’s MCP (Model Context Protocol) integration allows spawning background servers via stdio using user-supplied com |
| CVE-2026-40160 | Analyzed | 未確認 | CWE-918 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, web_crawl's httpx fallback path passes user-supplied URLs directly to httpx.AsyncClient.get() with follow_redirects |
| CVE-2026-40161 | Modified | 未確認 | CWE-201 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, t |
| CVE-2026-40162 | Analyzed | 未確認 | CWE-20 | Bugsink is a self-hosted error tracking tool. In 2.1.0, an authenticated file write vulnerability was identified in Bugsink 2.1.0 in the artifact bundle assembly flow. A user with |
| CVE-2026-40163 | Analyzed | 未確認 | CWE-22 | Saltcorn is an extensible, open source, no-code database application builder. Prior to 1.4.5, 1.5.5, and 1.6.0-beta.4, the POST /sync/offline_changes endpoint allows an unauthentic |
| CVE-2026-40164 | Deferred | 未確認 | CWE-328, CWE-341, CWE-407 | jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed (0x432A9843) for all JSON o |
| CVE-2026-40168 | Analyzed | 未確認 | CWE-918 | Postiz is an AI social media scheduling tool. Prior to 2.21.5, the /api/public/stream endpoint is vulnerable to SSRF. Although the application validates the initially supplied URL |
| CVE-2026-40169 | Analyzed | 未確認 | CWE-122, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an out of bounds heap wri |
| CVE-2026-40170 | Modified | 未確認 | CWE-120, CWE-121 | ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed |
| CVE-2026-40173 | Analyzed | 未確認 | CWE-200, CWE-215, CWE-522 | Dgraph is an open source distributed GraphQL database. Versions 25.3.1 and prior contain an unauthenticated credential disclosure vulnerability where the /debug/pprof/cmdline endpo |
| CVE-2026-40175 | Modified | 未確認 | CWE-113, CWE-444, CWE-915, CWE-918 | Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollu |
| CVE-2026-40176 | Modified | 未確認 | CWE-20, CWE-78 | Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::generateP4Command() method, w |
| CVE-2026-40177 | Analyzed | 未確認 | CWE-287 | ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible to bypass the password authenticat |
| CVE-2026-40178 | Analyzed | 未確認 | CWE-287, CWE-362 | ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible during a short moment after the au |
| CVE-2026-40179 | Analyzed | 未確認 | CWE-79 | Prometheus is an open-source monitoring system and time series database. Versions 3.0 through 3.5.1 and 3.6.0 through 3.11.1 have stored cross-site scripting vulnerabilities in mul |
| CVE-2026-40180 | Analyzed | 未確認 | CWE-22 | Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to 2.16.0 and 2.15.0-lts, the unzip() method in ApicurioCodegenWr |
| CVE-2026-40182 | Analyzed | 未確認 | CWE-789 | OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collector over gRPC or HTTP using OpenTelemetry Protocol |
| CVE-2026-40183 | Analyzed | 未確認 | CWE-122 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, the JXL encoder has an heap write overflow when a user sp |
| CVE-2026-40184 | Analyzed | 未確認 | CWE-306 | TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos without requiring authentication. This vulnerability is fixed in 2.7.2. |
| CVE-2026-40185 | Analyzed | 未確認 | CWE-862 | TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2. |
| CVE-2026-40186 | Analyzed | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system. A regression introduced in commit 49d0bb7, included in versions 2.17.1 of the ApostropheCMS-maintained sanitize-h |
| CVE-2026-40188 | Analyzed | 未確認 | CWE-1314 | goshs is a SimpleHTTPServer written in Go. From 1.0.7 to before 2.0.0-beta.4, the SFTP command rename sanitizes only the source path and not the destination, so it is possible to w |
| CVE-2026-40189 | Analyzed | 未確認 | CWE-862 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.4, goshs enforces the documented per-folder .goshs ACL/basic-auth mechanism for directory listings and file reads, bu |
| CVE-2026-4019 | Deferred | 未確認 | CWE-862 | The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data access in all versions up to, and including, 7.4.5 This is due to the REST API endp |
| CVE-2026-40190 | Analyzed | 未確認 | CWE-1321 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.5.18, the LangSmith JavaScript/TypeScript SDK (langsmith) contains an incomplete prototy |
| CVE-2026-40191 | Deferred | 未確認 | CWE-863 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.4-beta-1f46165, ClearanceKit's Endpoint Security event handler on |
| CVE-2026-40192 | Modified | 未確認 | CWE-400, CWE-409, CWE-770 | Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decom |
| CVE-2026-40193 | Analyzed | 未確認 | CWE-90 | maddy is a composable, all-in-one mail server. Versions prior to 0.9.3 contain an LDAP injection vulnerability in the auth.ldap module where user-supplied usernames are interpolate |
| CVE-2026-40194 | Modified | 未確認 | CWE-208 | phpseclib is a PHP secure communications library. Starting in 0.1.1 and prior to 3.0.51, 2.0.53, and 1.0.28, phpseclib\Net\SSH2::get_binary_packet() uses PHP's != operator to compa |
| CVE-2026-40196 | Analyzed | 未確認 | CWE-708 | HomeBox is a home inventory and organization system. Versions prior to 0.25.0 contain a vulnerability where the defaultGroup ID remained permanently assigned to a user after being |
| CVE-2026-40198 | Analyzed | 未確認 | CWE-1286 | Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass. _pack_ipv6() does not check that uncompressed IPv6 addresses (with |
| CVE-2026-40199 | Analyzed | 未確認 | CWE-130 | Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass. _pack_ipv6() includes the sentinel byte from _pack_ipv4() when |
| CVE-2026-40200 | Deferred | 未確認 | CWE-670 | An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word pri |
| CVE-2026-40212 | Awaiting Analysis | 未確認 | CWE-79 | OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which is relevant |
| CVE-2026-40217 | Modified | 未確認 | CWE-420, CWE-94 | LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI. |
| CVE-2026-40223 | Analyzed | 未確認 | CWE-696 | In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running. |
| CVE-2026-40224 | Analyzed | 未確認 | CWE-863 | In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace. |
| CVE-2026-40225 | Analyzed | 未確認 | CWE-669 | In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output. |
| CVE-2026-40226 | Analyzed | 未確認 | CWE-348 | In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file. |
| CVE-2026-40227 | Analyzed | 未確認 | CWE-1025 | In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element. |
| CVE-2026-40228 | Modified | 未確認 | CWE-669 | In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set. |
| CVE-2026-40229 | Analyzed | 未確認 | CWE-79 | Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it |
| CVE-2026-40230 | Analyzed | 未確認 | CWE-79 | Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist ar |
| CVE-2026-40242 | Analyzed | 未確認 | CWE-918 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.17.3, the /api/templates/fetch endpoint accepts a caller-supplied url parameter and |
| CVE-2026-40244 | Modified | 未確認 | CWE-190 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3. |
| CVE-2026-40245 | Analyzed | 未確認 | CWE-200, CWE-202, CWE-209 | Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions 4.2.1 and below contain an information disclosure vulnerability in the UDR |
| CVE-2026-40246 | Analyzed | 未確認 | CWE-285 | free5GC is an open-source implementation of the 5G core network. In versions 1.4.2 and below of the UDR service, the handler for deleting Traffic Influence Subscriptions checks whe |
| CVE-2026-40247 | Analyzed | 未確認 | CWE-285, CWE-636 | free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the handler for reading Traffic Influence Subscriptions checks whet |
| CVE-2026-40248 | Analyzed | 未確認 | CWE-285, CWE-636 | free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the handler for creating or updating Traffic Influence Subscription |
| CVE-2026-40249 | Analyzed | 未確認 | CWE-636, CWE-754 | free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the PUT handler for updating Policy Data notification subscriptions |
| CVE-2026-4025 | Deferred | 未確認 | CWE-79 | The PrivateContent Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' shortcode attribute in the [pc-login-form] shortcode in all versions up to |
| CVE-2026-40250 | Analyzed | 未確認 | CWE-190 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3. |
| CVE-2026-40252 | Analyzed | 未確認 | CWE-284, CWE-639 | FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulnerability (IDOR/BOLA) allows any authenticated team to access and execute applications belon |
| CVE-2026-40253 | Analyzed | 未確認 | CWE-125 | openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. In versions 3.26.0 and below, the BER/DER decoding functions in the shared common library (asn1.c) accept |
| CVE-2026-40254 | Analyzed | 未確認 | CWE-193 | FreeRDP is a free implementation of the Remote Desktop Protocol. Versions prior to 3.25.0 have an off-by-one in the path traversal filter in `channels/drive/client/drive_file.c`. T |
| CVE-2026-40255 | Analyzed | 未確認 | CWE-601 | AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In @adonisjs/http-server versions prior to 7.8.1 and 8.0.0-next.0 through 8.1.3, and @adonis |
| CVE-2026-40256 | Analyzed | 未確認 | CWE-22 | Weblate is a web based localization tool. In versions prior to 5.17, repository-boundary validation relies on string prefix checks on resolved absolute paths. In multiple code path |
| CVE-2026-40258 | Deferred | 未確認 | CWE-22 | The Gramps Web API is a Python REST API for the genealogical research software Gramps. Versions 1.6.0 through 3.11.0 have a path traversal vulnerability (Zip Slip) in the media arc |
| CVE-2026-40259 | Analyzed | 未確認 | CWE-285 | SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, the /api/av/removeUnusedAttributeView endpoint is protected only by generic authenticati |
| CVE-2026-40260 | Analyzed | 未確認 | CWE-776 | pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vu |
| CVE-2026-40261 | Modified | 未確認 | CWE-20, CWE-78 | Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase() method, which |
| CVE-2026-40262 | Deferred | 未確認 | CWE-434, CWE-79 | Note Mark is an open-source note-taking application. In versions 0.19.1 and prior, the asset delivery handler serves uploaded files inline and relies on magic-byte detection for co |
| CVE-2026-40263 | Deferred | 未確認 | CWE-208 | Note Mark is an open-source note-taking application. In versions 0.19.1 and prior, the login endpoint performs bcrypt password verification only when the supplied username exists, |
| CVE-2026-40264 | Analyzed | 未確認 | CWE-1259 | OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors |
| CVE-2026-40265 | Deferred | 未確認 | CWE-862 | Note Mark is an open-source note-taking application. In versions 0.19.1 and prior, the asset download endpoint at /api/notes/{noteID}/assets/{assetID} is registered without authent |
| CVE-2026-40279 | Analyzed | 未確認 | CWE-758 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, decode_signed32() in src/bacnet/bacint.c reconstructs a 32-bit signed integer fr |
| CVE-2026-40282 | Deferred | 未確認 | CWE-79 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious |
| CVE-2026-40283 | Analyzed | 未確認 | CWE-79 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious |
| CVE-2026-40284 | Deferred | 未確認 | CWE-79 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious |
| CVE-2026-40285 | Deferred | 未確認 | CWE-302, CWE-473, CWE-89 | WeGIA is a web manager for charitable institutions. Versions prior to 3.6.10 contain a SQL injection vulnerability in dao/memorando/UsuarioDAO.php. The cpf_usuario POST parameter o |
| CVE-2026-40286 | Deferred | 未確認 | CWE-79 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the 'Member Registration' (Cada |
| CVE-2026-40287 | Analyzed | 未確認 | CWE-426, CWE-94 | PraisonAI is a multi-agent teams system. Versions 4.5.138 and below are vulnerable to arbitrary code execution through automatic, unsanitized import of a tools.py file from the cur |
| CVE-2026-40288 | Analyzed | 未確認 | CWE-78, CWE-94 | PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the workflow engine is vulnerable to arbitrary command and code exec |
| CVE-2026-40289 | Analyzed | 未確認 | CWE-306 | PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the browser bridge (praisonai browser start) is vulnerable to unauth |
| CVE-2026-40291 | Analyzed | 未確認 | CWE-269, CWE-863 | Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an insecure direct object modification vulnerability in the PUT /api/users/{id} endpoint |
| CVE-2026-40293 | Modified | 未確認 | CWE-200, CWE-201 | OpenFGA is an authorization/permission engine built for developers. In versions 0.1.4 through 1.13.1, when OpenFGA is configured to use preshared-key authentication with the built- |
| CVE-2026-40299 | Deferred | 未確認 | CWE-601 | next-intl provides internationalization for Next.js. Applications using the `next-intl` middleware prior to version 4.9.1with `localePrefix: 'as-needed'` could construct URLs where |
| CVE-2026-40301 | Deferred | 未確認 | CWE-79 | DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.10, DOMSanitizer::sanitize() allows <style> elements in SVG content but never inspects their text cont |
| CVE-2026-40302 | Analyzed | 未確認 | CWE-116, CWE-79 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the proxyUi template engine uses Go's text/template (which performs no HTML escapin |
| CVE-2026-40303 | Analyzed | 未確認 | CWE-400, CWE-789 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, endpoints.GetSessionCookie parses an attacker-supplied cookie chunk count and calls |
| CVE-2026-40304 | Analyzed | 未確認 | CWE-284, CWE-863 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the unaccess handler (controller/unaccess.go) contains a logical error in its owner |
| CVE-2026-40305 | Analyzed | 未確認 | CWE-285 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and prior to version 10.2.2, in the friends |
| CVE-2026-40306 | Analyzed | 未確認 | CWE-330 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. |
| CVE-2026-40308 | Deferred | 未確認 | CWE-639 | My Calendar is a WordPress plugin for managing calendar events. In versions 3.7.6 and below, the mc_ajax_mcjs_action AJAX endpoint, registered for unauthenticated users, passes use |
| CVE-2026-40310 | Analyzed | 未確認 | CWE-122, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2-19 and 6.9.13-44, contain a heap out-of-bounds write in the |
| CVE-2026-40311 | Analyzed | 未確認 | CWE-416, CWE-693 | ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability tha |
| CVE-2026-40312 | Analyzed | 未確認 | CWE-193 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a |
| CVE-2026-40313 | Analyzed | 未確認 | CWE-829 | PraisonAI is a multi-agent teams system. In versions 4.5.139 and below, the GitHub Actions workflows are vulnerable to ArtiPACKED attack, a known credential leakage vector caused b |
| CVE-2026-40315 | Analyzed | 未確認 | CWE-89 | PraisonAI is a multi-agent teams system. Prior to 4.5.133, there is an SQL identifier injection vulnerability in SQLiteConversationStore where the table_prefix configuration value |
| CVE-2026-40316 | Analyzed | 未確認 | CWE-94, CWE-95 | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. Versions prior to 2.1.1 contain an RCE vulnerability in |
| CVE-2026-40317 | Analyzed | 未確認 | CWE-20, CWE-269 | NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 12 (JumpToUser) accepts an arbitrary entry point address from user-s |
| CVE-2026-40318 | Analyzed | 未確認 | CWE-24 | SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and prior, the /api/av/removeUnusedAttributeView endpoint constructs a filesystem path using the us |
| CVE-2026-40319 | Analyzed | 未確認 | CWE-1333 | Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the RegexMatching check passes a user-supplied regular expression pattern directly to Pytho |
| CVE-2026-4032 | Deferred | 未確認 | CWE-79 | The CodeColorer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter in 'cc' comment shortcode in versions up to, and including, 0.10.1 due t |
| CVE-2026-40320 | Analyzed | 未確認 | CWE-1336 | Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the ConformityCheck class rendered the rule parameter through Jinja2's default Template() c |
| CVE-2026-40321 | Analyzed | 未確認 | CWE-87 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG f |
| CVE-2026-40322 | Analyzed | 未確認 | CWE-79, CWE-94 | SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, Mermaid diagrams are rendered with securityLevel set to "loose", and the resulting SVG i |
| CVE-2026-40323 | Analyzed | 未確認 | CWE-345, CWE-354 | SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture. In versions 6.0.0 through 6.0.2, a soundness vulnerabili |
| CVE-2026-40324 | Deferred | 未確認 | CWE-674 | Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14, Hot Chocolate's recursive descent parser `Utf8GraphQLParser` has no recursi |
| CVE-2026-40333 | Deferred | 未確認 | CWE-125 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, p |
| CVE-2026-40334 | Deferred | 未確認 | CWE-170 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, a missing null terminator exists in ptp_unpack_Canon_FE() in camlibs/ptp2/ptp-pack.c (lin |
| CVE-2026-40335 | Deferred | 未確認 | CWE-125 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read in `ptp_unpack_DPV()` in `camlibs/ptp2/ptp-pack.c` (lines 622–629) |
| CVE-2026-40336 | Deferred | 未確認 | CWE-401 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have a memory leak in `ptp_unpack_Sony_DPD()` in `camlibs/ptp2/ptp-pack.c` (lines 884–885). W |
| CVE-2026-40337 | Deferred | 未確認 | CWE-283 | The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given task with one of the DEV or IO capability is able to interac |
| CVE-2026-40338 | Deferred | 未確認 | CWE-125 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read in the PTP_DPFF_Enumeration case of `ptp_unpack_Sony_DPD()` in `ca |
| CVE-2026-40339 | Deferred | 未確認 | CWE-125 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read in `ptp_unpack_Sony_DPD()` in `camlibs/ptp2/ptp-pack.c` (line 842) |
| CVE-2026-40340 | Deferred | 未確認 | CWE-125 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read vulnerability in `ptp_unpack_OI()` in `camlibs/ptp2/ptp-pack.c` (l |
| CVE-2026-40341 | Deferred | 未確認 | CWE-126 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, an out of bound read in ptp_unpack_EOS_FocusInfoEx could be used to crash libgphoto2 when |
| CVE-2026-40342 | Analyzed | 未確認 | CWE-22, CWE-427, CWE-73, CWE-94 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the external engine plugin loader concatenates a user-supplied engin |
| CVE-2026-40343 | Analyzed | 未確認 | CWE-754 | free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.2, a fail-ope |
| CVE-2026-40344 | Analyzed | 未確認 | CWE-287, CWE-306 | MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in Min |
| CVE-2026-40346 | Analyzed | 未確認 | CWE-918 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.37, NocoBase's workflow HTTP request plugin an |
| CVE-2026-40347 | Analyzed | 未確認 | CWE-400, CWE-834 | Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial of service vulnerability when parsing crafted `multipart/form-data` requests wit |
| CVE-2026-40348 | Analyzed | 未確認 | CWE-918 | Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can trigger server-side requests to arbitrary int |
| CVE-2026-40349 | Analyzed | 未確認 | CWE-862 | Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can escalate their own account to administrator b |
| CVE-2026-40350 | Analyzed | 未確認 | CWE-863 | Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can access the user-management endpoints `/settin |
| CVE-2026-40351 | Analyzed | 未確認 | CWE-943 | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript type assertion without runtime validation, allowing an un |
| CVE-2026-40352 | Analyzed | 未確認 | CWE-943 | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL injection. An authenticated attacker can bypass the "ol |
| CVE-2026-40353 | Analyzed | 未確認 | CWE-79 | wger is a free, open-source workout and fitness manager. In versions 2.5 and below, the attribution_link property in AbstractLicenseModel constructs HTML by directly interpolating |
| CVE-2026-40354 | Analyzed | 未確認 | CWE-61 | Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash. |
| CVE-2026-40355 | Modified | 未確認 | CWE-476 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in / |
| CVE-2026-40356 | Analyzed | 未確認 | CWE-191 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoE |
| CVE-2026-40372 | Modified | 未確認 | CWE-347 | Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-40385 | Analyzed | 未確認 | CWE-190 | In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects |
| CVE-2026-40386 | Analyzed | 未確認 | CWE-191 | In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-usin |
| CVE-2026-40393 | Modified | 未確認 | CWE-787 | In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then us |
| CVE-2026-40394 | Analyzed | 未確認 | CWE-670 | Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data. The setu |
| CVE-2026-40395 | Analyzed | 未確認 | CWE-770 | Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL. The headerplus.write_req0() function from vmod_headerplus updates |
| CVE-2026-40396 | Analyzed | 未確認 | CWE-670 | Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger. A malicious client could send an HTTP/1 request, wait long enough |
| CVE-2026-40431 | Analyzed | 未確認 | CWE-319 | A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, inclu |
| CVE-2026-40434 | Analyzed | 未確認 | CWE-940 | Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application |
| CVE-2026-40436 | Analyzed | 未確認 | The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user list acquisit | |
| CVE-2026-40446 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc |
| CVE-2026-40447 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. |
| CVE-2026-40448 | Analyzed | 未確認 | CWE-190 | Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prio |
| CVE-2026-40449 | Analyzed | 未確認 | CWE-190 | Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE. Affected version is prior to commit |
| CVE-2026-40450 | Analyzed | 未確認 | CWE-190 | Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors. Affected version i |
| CVE-2026-40451 | Deferred | 未確認 | CWE-79 | DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scripting vulnerability, which allows an attacker to execute arbitrary script in a user's brow |
| CVE-2026-40453 | Modified | 未確認 | CWE-178 | The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'C |
| CVE-2026-40458 | Analyzed | 未確認 | CWE-352 | PAC4J is vulnerable to Cross-Site Request Forgery (CSRF). A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a for |
| CVE-2026-40459 | Analyzed | 未確認 | CWE-90 | PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in |
| CVE-2026-40461 | Analyzed | 未確認 | CWE-306 | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enabling SSH), allowing unauthorized state changes that can facilitate la |
| CVE-2026-40466 | Modified | 未確認 | CWE-20, CWE-94 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authentica |
| CVE-2026-40470 | Awaiting Analysis | 未確認 | CWE-79 | A critical XSS vulnerability affected hackage-server and hackage.haskell.org. HTML and JavaScript files provided in source packages or via the documentation upload facility were s |
| CVE-2026-40471 | Awaiting Analysis | 未確認 | CWE-352 | hackage-server lacked Cross-Site Request Forgery (CSRF) protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent |
| CVE-2026-40472 | Awaiting Analysis | 未確認 | CWE-79 | In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitization, enabling stored Cross-Site Scripting (XSS) attacks |
| CVE-2026-40473 | Modified | 未確認 | CWE-502 | The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in a java.io.ObjectInputStream without applying any ObjectInputFilter or class-loa |
| CVE-2026-40474 | Analyzed | 未確認 | CWE-284, CWE-862 | wger is a free, open-source workout and fitness manager. In versions 2.5 and below, the GymConfigUpdateView declares permission_required = 'config.change_gymconfig' but inherits Wg |
| CVE-2026-40476 | Modified | 未確認 | CWE-407 | graphql-go is a Go implementation of GraphQL. In versions 15.31.4 and below, the OverlappingFieldsCanBeMerged validation rule performs O(n²) pairwise comparisons of fields sharing |
| CVE-2026-40477 | Modified | 未確認 | CWE-1336, CWE-917 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE and prior contain a security bypass vulnerability in the expression exec |
| CVE-2026-40478 | Modified | 未確認 | CWE-1336, CWE-917 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE and prior contain a security bypass vulnerability in the the expression |
| CVE-2026-40479 | Analyzed | 未確認 | CWE-79 | Kimai is an open-source time tracking application. In versions 1.16.3 through 2.52.0, the escapeForHtml() function in KimaiEscape.js does not escape double quote or single quote ch |
| CVE-2026-4048 | Analyzed | 未確認 | CWE-77 | OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the |
| CVE-2026-40480 | Deferred | 未確認 | CWE-639, CWE-862 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the GET /api/person/{personId} endpoint loads and returns person records without performing object |
| CVE-2026-40481 | Analyzed | 未確認 | CWE-400 | monetr is a budgeting application for recurring expenses. In versions 1.12.3 and below, the public Stripe webhook endpoint buffers the entire request body into memory before valida |
| CVE-2026-40482 | Deferred | 未確認 | CWE-89 | ChurchCRM is an open-source church management system. Versions prior to 7.2.0 have SQL injection in FinancialService::getMemberByScanString() via unsanitized $routeAndAccount conca |
| CVE-2026-40483 | Deferred | 未確認 | CWE-116, CWE-79 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the Pledge Editor renders donation comment values directly into HTML input value attributes withou |
| CVE-2026-40484 | Deferred | 未確認 | CWE-269, CWE-434, CWE-552 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the database backup restore functionality extracts uploaded archive contents and copies files from |
| CVE-2026-40485 | Deferred | 未確認 | CWE-204, CWE-307 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the public API login endpoint (/api/public/user/login) returns distinguishable HTTP response codes |
| CVE-2026-40486 | Analyzed | 未確認 | CWE-915 | Kimai is an open-source time tracking application. In versions 2.52.0 and below, the User Preferences API endpoint (PATCH /api/users/{id}/preferences) applies submitted preference |
| CVE-2026-40487 | Analyzed | 未確認 | CWE-345, CWE-434, CWE-79 | Postiz is an AI social media scheduling tool. Prior to version 2.21.6, a file upload validation bypass allows any authenticated user to upload arbitrary HTML, SVG, or other executa |
| CVE-2026-40488 | Analyzed | 未確認 | CWE-434 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backwar |
| CVE-2026-40489 | Deferred | 未確認 | CWE-121, CWE-787 | editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have a stack-based buffer overflow in |
| CVE-2026-4049 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-40490 | Deferred | 未確認 | CWE-200 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When redirect following is enabled (followRedi |
| CVE-2026-40491 | Analyzed | 未確認 | CWE-22 | gdown is a Google Drive public file/folder downloader. Versions prior to 5.2.2 are vulnerable to a Path Traversal attack within the extractall functionality. When extracting a mali |
| CVE-2026-40492 | Deferred | 未確認 | CWE-787 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 36aa5c7ec8a2bb35f6fb867a1177a6f141156b02, the |
| CVE-2026-40493 | Deferred | 未確認 | CWE-787 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the |
| CVE-2026-40494 | Deferred | 未確認 | CWE-787 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 45d48d1f2e8e0d73e80bc1fd5310cb57f4547302, the |
| CVE-2026-40496 | Analyzed | 未確認 | CWE-330, CWE-340 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are generated using a weak and predictable formula: `md5(APP_KEY |
| CVE-2026-40497 | Analyzed | 未確認 | CWE-79 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's `Helper::stripDangerousTags()` removes `<script>`, `<form>`, `<iframe>`, `<objec |
| CVE-2026-40498 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-770 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker can access diagnostic and system tools that should be restricted |
| CVE-2026-40499 | Analyzed | 未確認 | CWE-78 | radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by embeddin |
| CVE-2026-40500 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The "Add Module from URL" feature requires superuser privileges (root-equivalent in Proc | |
| CVE-2026-40502 | Analyzed | 未確認 | CWE-862 | OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access to invoke sensitive administrative commands by expl |
| CVE-2026-40503 | Analyzed | 未確認 | CWE-22 | OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to read arbitrary files by supplying path traversal se |
| CVE-2026-40504 | Deferred | 未確認 | CWE-122 | Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by crafting scripts |
| CVE-2026-40505 | Analyzed | 未確認 | CWE-150 | MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers |
| CVE-2026-40514 | Analyzed | 未確認 | CWE-338 | SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initialization vect |
| CVE-2026-40515 | Analyzed | 未確認 | CWE-863 | OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive files by exploiting incomplete path normalization in the permis |
| CVE-2026-40516 | Analyzed | 未確認 | CWE-918 | OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the web_fetch and web_search tools that allows attackers to access private and localhost H |
| CVE-2026-40517 | Analyzed | 未確認 | CWE-78 | radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malic |
| CVE-2026-40518 | Analyzed | 未確認 | CWE-22 | ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the agent name validation is |
| CVE-2026-40520 | Analyzed | 未確認 | CWE-78 | FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation input fields are passed directl |
| CVE-2026-40525 | Analyzed | 未確認 | CWE-636 | OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open when the api |
| CVE-2026-40527 | Analyzed | 未確認 | CWE-78 | radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWA |
| CVE-2026-40529 | Deferred | 未確認 | CWE-89 | CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the admini |
| CVE-2026-40542 | Modified | 未確認 | CWE-304, CWE-325 | Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication |
| CVE-2026-40550 | Deferred | 未確認 | CWE-250 | Multiple BinSoft products are vulnerable to Privilege Escalation due to excessive database privileges assigned to the user used by the application. An attacker with access to any r |
| CVE-2026-40551 | Deferred | 未確認 | CWE-603 | Multiple BinSoft products perform client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification |
| CVE-2026-40552 | Deferred | 未確認 | CWE-669 | Multiple BinSoft products are vulnerable to Remote Command Execution. An authorized user with access to the application and direct access to the backend database can achieve system |
| CVE-2026-40556 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-40557 | Analyzed | 未確認 | CWE-295 | Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deploym |
| CVE-2026-40560 | Analyzed | 未確認 | CWE-444 | Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chu |
| CVE-2026-40565 | Analyzed | 未確認 | CWE-79 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's linkify() function in app/Misc/Helper.php converts plain-text URLs in email bodi |
| CVE-2026-40566 | Deferred | 未確認 | CWE-918 | FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a Server-Side Request Forgery (SSRF) vulnerability in the IMAP/SMTP connection test fun |
| CVE-2026-40567 | Deferred | 未確認 | CWE-116 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker can inject arbitrary HTML into outgoing emails generated by Free |
| CVE-2026-40568 | Deferred | 未確認 | CWE-116, CWE-79 | FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a stored cross-site scripting (XSS) vulnerability in the mailbox signature feature. The |
| CVE-2026-40569 | Deferred | 未確認 | CWE-284, CWE-915 | FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a mass assignment vulnerability in the mailbox connection settings endpoints of FreeSco |
| CVE-2026-4057 | Deferred | 未確認 | CWE-862 | The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `makeMediaPublic()` and `makeMediaPrivate()` f |
| CVE-2026-40570 | Deferred | 未確認 | CWE-639, CWE-862 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, the `load_customer_info` action in `POST /conversation/ajax` returns complete customer profi |
| CVE-2026-40572 | Analyzed | 未確認 | CWE-269 | NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 (MemoryMapRange) allows Ring 3 user-mode processes to map arbitra |
| CVE-2026-40574 | Analyzed | 未確認 | CWE-863 | OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Prior to 7.15.2, an authorization bypass exists in OAuth2 Proxy as part of the email_domain enf |
| CVE-2026-40575 | Modified | 未確認 | CWE-290 | OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 may trust a client-supplied `X-Forwarded-Uri` header when `--reve |
| CVE-2026-40576 | Deferred | 未確認 | CWE-22 | excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path traversal vulnerability exists in excel-mcp-server versions up to and including 0.1.7. When |
| CVE-2026-40581 | Deferred | 未確認 | CWE-352, CWE-862 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the family record deletion endpoint (SelectDelete.php) performs permanent, irreversible deletion o |
| CVE-2026-40582 | Deferred | 未確認 | CWE-288, CWE-305 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the /api/public/user/login endpoint validates only the username and password before returning the |
| CVE-2026-40583 | Analyzed | 未確認 | CWE-460, CWE-696 | UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance pre |
| CVE-2026-40584 | Analyzed | 未確認 | CWE-200 | RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location ent |
| CVE-2026-40585 | Deferred | 未確認 | CWE-640 | blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, when a password reset is initiated, a 128-character CSPRNG token is generated and stored alongside a passwor |
| CVE-2026-40586 | Deferred | 未確認 | CWE-307 | blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, the login form handler performs no throttling of any kind. Failed authentication attempts are processed at f |
| CVE-2026-40587 | Deferred | 未確認 | CWE-613 | blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, when a user changes their password via the profile edit page, or when a password reset is completed via the |
| CVE-2026-40588 | Deferred | 未確認 | CWE-620 | blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, the password change form at /profile/{slug}/edit/ does not include a current_password field and does not ver |
| CVE-2026-40589 | Deferred | 未確認 | CWE-639 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, a low-privileged agent can edit a visible customer and add an email address already owned by |
| CVE-2026-4059 | Deferred | 未確認 | CWE-79 | The ShopLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the woolentor_quickview_button shortcode's button_text attribute in all versions up to, and inc |
| CVE-2026-40590 | Deferred | 未確認 | CWE-639 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, the Change Customer modal exposes a “Create a new customer” flow via POST /customers/ajax wi |
| CVE-2026-40591 | Deferred | 未確認 | CWE-639 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, the phone-conversation creation flow accepts attacker-controlled `customer_id`, `name`, `to_ |
| CVE-2026-40592 | Deferred | 未確認 | CWE-862 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, the undo-send route `GET /conversation/undo-reply/{thread_id}` checks only whether the curre |
| CVE-2026-40593 | Deferred | 未確認 | CWE-116, CWE-79 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the User Editor (UserEditor.php) renders stored usernames directly into an HTML input value attrib |
| CVE-2026-40594 | Analyzed | 未確認 | CWE-346 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev98, the set_session_cookie_secure before_request handler in src/pyload/webui/app/__init__.p |
| CVE-2026-40595 | Deferred | 未確認 | CWE-284 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes public chart retr |
| CVE-2026-40599 | Analyzed | 未確認 | CWE-863 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.5, ClearanceKit incorrectly treats a process with an empty Team ID |
| CVE-2026-40600 | Deferred | 未確認 | CWE-639 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew allows authenticated user |
| CVE-2026-40601 | Deferred | 未確認 | CWE-862 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes POST /api/chart/: |
| CVE-2026-40602 | Analyzed | 未確認 | CWE-1336, CWE-94 | The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used to handle Jnin |
| CVE-2026-40603 | Deferred | 未確認 | CWE-284 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes a legacy dashboar |
| CVE-2026-40604 | Analyzed | 未確認 | CWE-693 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.6, the opfilter Endpoint Security system extension (bundle ID uk.c |
| CVE-2026-40606 | Analyzed | 未確認 | CWE-90 | mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmproxy 12.2 |
| CVE-2026-40608 | Analyzed | 未確認 | CWE-770 | Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers (/api/st |
| CVE-2026-40609 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-40611 | Deferred | 未確認 | CWE-22 | Let's Encrypt client and ACME library written in Go (Lego). Prior to 4.34.0, the webroot HTTP-01 challenge provider in lego is vulnerable to arbitrary file write and deletion via p |
| CVE-2026-40613 | Analyzed | 未確認 | CWE-704 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.10.0, the STUN/TURN attribute parsing functions in coturn perform unsafe pointer casts from uint8_t |
| CVE-2026-40614 | Analyzed | 未確認 | CWE-122 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is a buffer overflow when decoding Opus audio frames due to insufficient b |
| CVE-2026-40620 | Analyzed | 未確認 | CWE-306 | A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the Sen |
| CVE-2026-40623 | Analyzed | 未確認 | CWE-862 | A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety co |
| CVE-2026-40630 | Analyzed | 未確認 | CWE-288 | A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attack |
| CVE-2026-4065 | Deferred | 未確認 | CWE-862 | The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp_ajax_smart-slider3 controller |
| CVE-2026-40683 | Awaiting Analysis | 未確認 | CWE-843 | In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a boolean when the user_enabled_invert configuration option is False ( |
| CVE-2026-40684 | Modified | 未確認 | CWE-684 | In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a |
| CVE-2026-40685 | Analyzed | 未確認 | CWE-684, CWE-787 | In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incor |
| CVE-2026-40686 | Analyzed | 未確認 | CWE-125 | In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data). Information mig |
| CVE-2026-40687 | Analyzed | 未確認 | CWE-909 | In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or err |
| CVE-2026-40688 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remot |
| CVE-2026-40690 | Analyzed | 未確認 | CWE-1220 | The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for any other asset |
| CVE-2026-40706 | Awaiting Analysis | 未確認 | CWE-122 | In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker to corrupt heap memory in the SUID-root ntf |
| CVE-2026-40719 | Awaiting Analysis | 未確認 | CWE-670 | Deadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone whose authoritative nameserver address cannot be resolved. |
| CVE-2026-40728 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in BlockArt Magazine Blocks magazine-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Magazine |
| CVE-2026-40729 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in bPlugins 3D viewer – Embed 3D Models 3d-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D |
| CVE-2026-4073 | Deferred | 未確認 | CWE-79 | The pdfl.io plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pdflio' shortcode in all versions up to, and including, 1.0.5. This is due to insufficient in |
| CVE-2026-40730 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeGrill ThemeGrill Demo Importer themegrill-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This iss |
| CVE-2026-40734 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zahlan Categories Images categories-images allows DOM-Based XSS.This issue aff |
| CVE-2026-40737 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme COMPE compe-woo-compare-products allows Exploiting Incorrectly Configured Access Control Security Level |
| CVE-2026-4074 | Deferred | 未確認 | CWE-79 | The Quran Live Multilanguage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cheikh' and 'lang' shortcode attributes in all versions up to, and including |
| CVE-2026-40740 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a throug |
| CVE-2026-40742 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects N |
| CVE-2026-40744 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Blind SQL Inj |
| CVE-2026-40745 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind |
| CVE-2026-4076 | Deferred | 未確認 | CWE-79 | The Slider Bootstrap Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'category' and 'template' shortcode attributes in all versions up to and inc |
| CVE-2026-40763 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff |
| CVE-2026-40764 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Cross Site Request Forgery.This issue affects Contact Form by WPForms: fr |
| CVE-2026-40778 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-4078 | Deferred | 未確認 | CWE-79 | The ITERAS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes (iteras-ordering, iteras-signup, iteras-paywall-login, iteras-selfservice) in a |
| CVE-2026-40784 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Le |
| CVE-2026-40786 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Long Watch Studio MyRewards woorewards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyRewards: |
| CVE-2026-4079 | Analyzed | 未確認 | CWE-89 | The SQL Chart Builder WordPress plugin before 2.3.8 does not properly escape user input as it is concatened to SQL queries, making it possible for attackers to conduct SQL Injectio |
| CVE-2026-4082 | Deferred | 未確認 | CWE-79 | The ER Swiffy Insert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [swiffy] shortcode in all versions up to and including 1.0.0. This is due to insuffic |
| CVE-2026-4085 | Deferred | 未確認 | CWE-79 | The Easy Social Photos Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wrapper_class' shortcode attribute of the 'my-instagram-feed' shortcode in |
| CVE-2026-40858 | Modified | 未確認 | CWE-502 | The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without apply |
| CVE-2026-40860 | Modified | 未確認 | CWE-502 | JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the payload of incoming JMS ObjectMessage values via javax.jms.ObjectM |
| CVE-2026-40865 | Deferred | 未確認 | CWE-284, CWE-639 | Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in the employee document viewer allows any authenticated us |
| CVE-2026-40866 | Deferred | 未確認 | CWE-284, CWE-639 | Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in the employee document upload endpoint allows any authent |
| CVE-2026-40867 | Deferred | 未確認 | CWE-284, CWE-639 | Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, a broken access control vulnerability in the helpdesk attachment viewer allows any authenticate |
| CVE-2026-40868 | Analyzed | 未確認 | CWE-922 | Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 1.16.4, kyverno’s apiCall servicecall helper implicitly injects Authorization: Bearer ... |
| CVE-2026-40869 | Analyzed | 未確認 | CWE-266 | Decidim is a participatory democracy framework. Starting in version 0.19.0 and prior to versions 0.30.5 and 0.31.1, a vulnerability allows any registered and authenticated user to |
| CVE-2026-40870 | Deferred | 未確認 | CWE-862 | Decidim is a participatory democracy framework. Starting in version 0.0.1 and prior to versions 0.30.5 and 0.31.1, the root level `commentable` field in the API allows access to al |
| CVE-2026-40871 | Deferred | 未確認 | CWE-116, CWE-20, CWE-564, CWE-89 | mailcow: dockerized is an open source groupware/email suite based on docker. Versions prior to 2026-03b have a second-order SQL injection vulnerability in the quarantine_category f |
| CVE-2026-40872 | Deferred | 未確認 | CWE-79, CWE-80 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the admin dashboard's Autodiscover logs render the EMailAddress value (l |
| CVE-2026-40873 | Deferred | 未確認 | CWE-79, CWE-80 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the Quarantine details modal injects attachment filenames into HTML with |
| CVE-2026-40874 | Deferred | 未確認 | CWE-284 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, no administrator verification takes place when deleting Forwarding Hosts |
| CVE-2026-40875 | Deferred | 未確認 | CWE-79, CWE-80 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the user dashboard's "Seen successful connections" (login history) rende |
| CVE-2026-40876 | Analyzed | 未確認 | CWE-22 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs contains an SFTP root escape caused by prefix-based path validation. An authenticated SFTP user can read fro |
| CVE-2026-40878 | Deferred | 未確認 | CWE-79 | mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the mailcow web interface passes the raw `$_SERVER['REQUEST_URI']` to Tw |
| CVE-2026-40879 | Analyzed | 未確認 | CWE-674 | Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.19, when an attacker sends many small, valid JSON messages in one TCP frame, handleData() |
| CVE-2026-4088 | Deferred | 未確認 | CWE-79 | The Switch CTA Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wppw_cta_box' shortcode in all versions up to, and including, 1.1. This is due to insu |
| CVE-2026-40880 | Analyzed | 未確認 | CWE-1025 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and zebra-consensus version 5.0.2, a logic error in Zebra's transaction verification cache could allow |
| CVE-2026-40881 | Analyzed | 未確認 | CWE-770 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-network version 5.0.1, when deserializing addr or addrv2 messages, which contain vectors of |
| CVE-2026-40882 | Analyzed | 未確認 | CWE-611 | OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.0, the Velbus asset import path parses attacker-controlled XML without explicit XXE hardening. An au |
| CVE-2026-40883 | Analyzed | 未確認 | CWE-352 | goshs is a SimpleHTTPServer written in Go. From 2.0.0-beta.4 to 2.0.0-beta.5, goshs contains a cross-site request forgery issue in its state-changing HTTP GET routes. An external a |
| CVE-2026-40884 | Analyzed | 未確認 | CWE-306 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs contains an SFTP authentication bypass when the documented empty-username basic-auth syntax is used. If the |
| CVE-2026-40885 | Analyzed | 未確認 | CWE-200 | goshs is a SimpleHTTPServer written in Go. From 2.0.0-beta.4 to 2.0.0-beta.5, goshs leaks file-based ACL credentials through its public collaborator feed when the server is deploye |
| CVE-2026-40886 | Modified | 未確認 | CWE-1285, CWE-129 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From 3.6.5 to 4.0.4, an unchecked array index in the pod informer's |
| CVE-2026-40887 | Deferred | 未確認 | CWE-89 | Vendure is an open-source headless commerce platform. Starting in version 1.7.4 and prior to versions 2.3.4, 3.5.7, and 3.6.2, an unauthenticated SQL injection vulnerability exists |
| CVE-2026-40888 | Analyzed | 未確認 | CWE-284 | Frappe HR is an open-source human resources management solution (HRMS). Prior to versions 15.58.1 and 16.4.1, an authenticated user with default role can access unauthorized inform |
| CVE-2026-40889 | Analyzed | 未確認 | CWE-284 | Frappe HR is an open-source human resources management solution (HRMS). Prior to versions 15.58.2 and 16.4.2, authenticated users can access unauthorized files by exploiting certai |
| CVE-2026-4089 | Deferred | 未確認 | CWE-79 | The Twittee Text Tweet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute in all versions up to and including 1.0.8. This is due to |
| CVE-2026-40890 | Analyzed | 未確認 | CWE-125 | The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a < character that is not foll |
| CVE-2026-40891 | Analyzed | 未確認 | CWE-789 | OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol (OTLP), the exporter may par |
| CVE-2026-40892 | Analyzed | 未確認 | CWE-121 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsip_auth_create_digest2() in PJSIP when usin |
| CVE-2026-40894 | Analyzed | 未確認 | CWE-789 | OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation detai |
| CVE-2026-40895 | Modified | 未確認 | CWE-200, CWE-212 | follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. Prior to 1.16.0, when an HTTP request follows a |
| CVE-2026-40896 | Analyzed | 未確認 | CWE-367, CWE-639 | OpenProject is open-source, web-based project management software. Prior to version 17.3.0, a user with `manage_agendas` permission in any project can inject agenda items into meet |
| CVE-2026-40897 | Modified | 未確認 | CWE-915, CWE-917 | Math.js is an extensive math library for JavaScript and Node.js. From 13.1.1 to before 15.2.0, a vulnerability allowed executing arbitrary JavaScript via the expression parser of m |
| CVE-2026-40899 | Analyzed | 未確認 | CWE-183 | DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a JDBC parameter blocklist bypass vulnerability in the MySQL datasource con |
| CVE-2026-4090 | Deferred | 未確認 | CWE-352 | The Inquiry Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.2. This is due to missing nonce verification in the rd_i |
| CVE-2026-40900 | Analyzed | 未確認 | CWE-89 | DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the /de2api/datasetData/previewSql endpoin |
| CVE-2026-40901 | Analyzed | 未確認 | CWE-502 | DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below ship the legacy velocity-1.7.jar, which pulls in commons-collections-3.2.1.jar cont |
| CVE-2026-40903 | Analyzed | 未確認 | CWE-829 | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs has an ArtiPACKED vulnerability. ArtiPACKED can lead to leakage of the GITHUB_TOKEN through workflow artifac |
| CVE-2026-40904 | Deferred | 未確認 | CWE-284 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes multiple dataset |
| CVE-2026-40905 | Deferred | 未確認 | CWE-601 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, a password reset poisoning vulnerability was identified in the application due to improper trust of user- |
| CVE-2026-40906 | Modified | 未確認 | CWE-89 | Electric is a Postgres sync engine. From 1.1.12 to before 1.5.0, the order_by parameter in the ElectricSQL /v1/shape API is vulnerable to error-based SQL injection, allowing any au |
| CVE-2026-40907 | Analyzed | 未確認 | CWE-639 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, the endpoint `plugin/Live/view/Live_restreams/list.json.php` contains an Insecure Direct Object Reference |
| CVE-2026-40908 | Analyzed | 未確認 | CWE-200 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, the file `git.json.php` at the web root executes `git log -1` and returns the full output as JSON to any u |
| CVE-2026-40909 | Analyzed | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, the locale save endpoint (`locale/save.php`) constructs a file path by directly concatenating `$_POST['fla |
| CVE-2026-4091 | Deferred | 未確認 | CWE-352 | The OPEN-BRAIN plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.0. This is due to missing nonce verification on the settin |
| CVE-2026-40910 | Analyzed | 未確認 | CWE-287 | frp is a fast reverse proxy. From 0.43.0 to 0.68.0, frp contains an authentication bypass in the HTTP vhost routing path when routeByHTTPUser is used as part of access control. In |
| CVE-2026-40911 | Analyzed | 未確認 | CWE-94 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, the YPTSocket plugin's WebSocket server relays attacker-supplied JSON message bodies to every connected cl |
| CVE-2026-40912 | Modified | 未確認 | CWE-22, CWE-706 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass vulnerability in Traefik's Str |
| CVE-2026-40915 | Analyzed | 未確認 | CWE-190 | A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overfl |
| CVE-2026-40916 | Analyzed | 未確認 | CWE-787 | A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service (DoS). By opening a sp |
| CVE-2026-40917 | Analyzed | 未確認 | CWE-125 | A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function, occurs when processing specially crafted ICNS image files. An attacker could p |
| CVE-2026-40918 | Analyzed | 未確認 | CWE-131 | A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflo |
| CVE-2026-40919 | Analyzed | 未確認 | CWE-787 | A flaw was found in GIMP. This vulnerability, a buffer overflow in the `file-seattle-filmworks` plugin, can be exploited when a user opens a specially crafted Seattle Filmworks fil |
| CVE-2026-40922 | Modified | 未確認 | CWE-79 | SiYuan is an open-source personal knowledge management system. In versions 3.6.1 through 3.6.3, a prior fix for XSS in bazaar README rendering (incomplete fix for CVE-2026-33066) e |
| CVE-2026-40923 | Modified | 未確認 | CWE-22 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, a |
| CVE-2026-40924 | Modified | 未確認 | CWE-400 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, t |
| CVE-2026-40925 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/configurationUpdate.json.php` (also routed via `/updateConfig`) persists dozens of global site se |
| CVE-2026-40926 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, three admin-only JSON endpoints — `objects/categoryAddNew.json.php`, `objects/categoryDelete.json.php`, an |
| CVE-2026-40927 | Analyzed | 未確認 | CWE-79 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.0, when leaving a comment on a page, it is possible to include a JavaScript URI as the link. Whe |
| CVE-2026-40928 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, multiple AVideo JSON endpoints under `objects/` accept state-changing requests via `$_REQUEST`/`$_GET` and |
| CVE-2026-40929 | Analyzed | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/commentDelete.json.php` is a state-mutating JSON endpoint that deletes comments but performs no C |
| CVE-2026-40931 | Analyzed | 未確認 | CWE-59 | Compressing is a compressing and uncompressing lib for node. Prior to 2.1.1 and 1.10.5, the patch for CVE-2026-24884 relies on a purely logical string validation within the isPathW |
| CVE-2026-40933 | Analyzed | 未確認 | CWE-78 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, due to unsafe serialization of stdio commands in the MCP adapter, an authen |
| CVE-2026-40935 | Analyzed | 未確認 | CWE-804 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/getCaptcha.php` accepts the CAPTCHA length (`ql`) directly from the query string with no clamping |
| CVE-2026-40937 | Analyzed | 未確認 | CWE-862 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-alpha.94, all four notification target admin API endpoints in `rustfs/src/admin/handlers/event.rs` use a |
| CVE-2026-40938 | Modified | 未確認 | CWE-88 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, t |
| CVE-2026-40939 | Deferred | 未確認 | CWE-613 | The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards. Prior to 2.1.0, OIDC-authenticated sessions had no configured |
| CVE-2026-40942 | Deferred | 未確認 | CWE-670 | The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards. Prior to 2.1.0, The OIDC JWKS and Metadata Document caches use |
| CVE-2026-40943 | Deferred | 未確認 | CWE-362 | Oxia is a metadata store and coordination system. Prior to 0.16.2, a race condition between session heartbeat processing and session closure can cause the server to panic with send |
| CVE-2026-40944 | Deferred | 未確認 | CWE-295 | Oxia is a metadata store and coordination system. Prior to 0.16.2, the trustedCertPool() function in the TLS configuration only parses the first PEM block from CA certificate files |
| CVE-2026-40945 | Deferred | 未確認 | CWE-532 | Oxia is a metadata store and coordination system. Prior to 0.16.2, when OIDC authentication fails, the full bearer token is logged at DEBUG level in plaintext. If debug logging is |
| CVE-2026-40946 | Deferred | 未確認 | CWE-287 | Oxia is a metadata store and coordination system. Prior to 0.16.2, the OIDC authentication provider unconditionally sets SkipClientIDCheck: true in the go-oidc verifier configurati |
| CVE-2026-40947 | Awaiting Analysis | 未確認 | CWE-426 | Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path. |
| CVE-2026-40948 | Analyzed | 未確認 | CWE-352 | The Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or validate the OAuth 2.0 `state` parameter on the login / login-callback flow, and did |
| CVE-2026-40949 | Analyzed | 未確認 | CWE-121 | CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to trigger a d |
| CVE-2026-40950 | Analyzed | 未確認 | CWE-121 | CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially crafted message to |
| CVE-2026-40951 | Analyzed | 未確認 | CWE-400 | CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can send malformed data to |
| CVE-2026-40959 | Deferred | 未確認 | CWE-829 | Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod. |
| CVE-2026-40960 | Awaiting Analysis | 未確認 | CWE-670 | Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least one mod is listed as secure.trusted_mods or secure.http_mods, then a crafted mod c |
| CVE-2026-40962 | Analyzed | 未確認 | CWE-190 | FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c. |
| CVE-2026-40966 | Analyzed | 未確認 | CWE-284 | In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter |
| CVE-2026-40967 | Analyzed | 未確認 | CWE-94 | In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, key |
| CVE-2026-40968 | Analyzed | 未確認 | CWE-653 | When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent unauthentica |
| CVE-2026-40969 | Analyzed | 未確認 | CWE-209 | The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain info |
| CVE-2026-40970 | Analyzed | 未確認 | CWE-295 | When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server. Affected: |
| CVE-2026-40971 | Analyzed | 未確認 | CWE-295 | When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker. Affected: Spring Boo |
| CVE-2026-40972 | Analyzed | 未確認 | CWE-208 | An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme circumstances this coul |
| CVE-2026-40973 | Analyzed | 未確認 | CWE-377 | A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`. When `server.servlet.session.persistent` is set to `tru |
| CVE-2026-40974 | Analyzed | 未確認 | CWE-295 | Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), |
| CVE-2026-40975 | Modified | 未確認 | CWE-330, CWE-338 | Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} and ${random.long} should never be used for secrets as they ar |
| CVE-2026-40976 | Modified | 未確認 | CWE-305, CWE-862 | In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servle |
| CVE-2026-40977 | Analyzed | 未確認 | CWE-59 | When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the host each time the ap |
| CVE-2026-40978 | Analyzed | 未確認 | CWE-89 | SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions: Spring AI: 1.0.0 - |
| CVE-2026-40979 | Analyzed | 未確認 | CWE-377 | In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 |
| CVE-2026-40980 | Analyzed | 未確認 | CWE-400 | In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`. Affected versions: Sp |
| CVE-2026-4101 | Analyzed | 未確認 | CWE-287 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S |
| CVE-2026-41015 | Awaiting Analysis | 未確認 | CWE-78 | radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from |
| CVE-2026-41016 | Analyzed | 未確認 | CWE-295 | Apache Airflow's SMTP provider `SmtpHook` called Python's `smtplib.SMTP.starttls()` without an SSL context, so no certificate validation was performed on the TLS upgrade. A man-in- |
| CVE-2026-41030 | Awaiting Analysis | 未確認 | CWE-669 | In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges. |
| CVE-2026-41034 | Awaiting Analysis | 未確認 | CWE-125 | ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion (via pictFmla.cbBufInCtlStm and other vectors), leading to an information l |
| CVE-2026-41035 | Modified | 未確認 | CWE-130, CWE-805 | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka -- |
| CVE-2026-41036 | Analyzed | 未確認 | CWE-78 | This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could e |
| CVE-2026-41037 | Analyzed | 未確認 | CWE-307 | This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacke |
| CVE-2026-41038 | Analyzed | 未確認 | CWE-521 | This vulnerability exists in Quantum Networks router due to lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network c |
| CVE-2026-41039 | Analyzed | 未確認 | CWE-306 | This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated att |
| CVE-2026-41040 | Deferred | 未確認 | CWE-1333 | GROWI provided by GROWI, Inc. is vulnerable to a regular expression denial of service (ReDoS) via a crafted input string. |
| CVE-2026-41043 | Analyzed | 未確認 | CWE-79, CWE-915 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. An authenticated attacker can show malicious c |
| CVE-2026-41044 | Modified | 未確認 | CWE-20, CWE-94 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All. An authenticate |
| CVE-2026-41055 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete SSRF fix in AVideo's LiveLinks proxy adds `isSSRFSafeURL()` validation but leaves DNS TOCTOU |
| CVE-2026-41056 | Analyzed | 未確認 | CWE-942 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `allowOrigin($allowAll=true)` function in `objects/functions.php` reflects any arbitrary `Origin` head |
| CVE-2026-41057 | Analyzed | 未確認 | CWE-346 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the CORS origin validation fix in commit `986e64aad` is incomplete. Two separate code paths still reflect |
| CVE-2026-41058 | Analyzed | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the incomplete fix for AVideo's CloneSite `deleteDump` parameter does not apply path traversal filtering, |
| CVE-2026-41059 | Analyzed | 未確認 | CWE-288 | OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configuration-dependent authentication bypass. Deployments |
| CVE-2026-4106 | Deferred | 未確認 | CWE-200 | The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some PII (such as full name, city, state and country) of customers |
| CVE-2026-41060 | Analyzed | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isSSRFSafeURL()` function in `objects/functions.php` contains a same-domain shortcircuit (lines 4290- |
| CVE-2026-41061 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isValidDuration()` regex at `objects/video.php:918` uses `/^[0-9]{1,2}:[0-9]{1,2}:[0-9]{1,2}/` withou |
| CVE-2026-41062 | Analyzed | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the directory traversal fix introduced in commit 2375eb5e0 for `objects/aVideoEncoderReceiveImage.json.php |
| CVE-2026-41063 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete XSS fix in AVideo's `ParsedownSafeWithLinks` class overrides `inlineMarkup` for raw HTML but |
| CVE-2026-41064 | Analyzed | 未確認 | CWE-78 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, an incomplete fix for AVideo's `test.php` adds `escapeshellarg` for wget but leaves the `file_ge |
| CVE-2026-41066 | Analyzed | 未確認 | CWE-611 | lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allo |
| CVE-2026-41067 | Analyzed | 未確認 | CWE-79 | Astro is a web framework. Prior to 6.1.6, the defineScriptVars function in Astro's server-side rendering pipeline uses a case-sensitive regex /<\/script>/g to sanitize values injec |
| CVE-2026-41068 | Analyzed | 未確認 | CWE-863 | Kyverno is a policy engine designed for cloud native platform engineering teams. The patch for CVE-2026-22039 fixed cross-namespace privilege escalation in Kyverno's `apiCall` cont |
| CVE-2026-4107 | Analyzed | 未確認 | CWE-79 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report. |
| CVE-2026-41078 | Analyzed | 未確認 | CWE-770 | OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure when the internal pooled-list siz |
| CVE-2026-41079 | Analyzed | 未確認 | CWE-125, CWE-200 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent attacker can send a crafted SNMP response t |
| CVE-2026-4108 | Analyzed | 未確認 | CWE-79 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report. |
| CVE-2026-41080 | Modified | 未確認 | CWE-331 | libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document. |
| CVE-2026-41081 | Analyzed | 未確認 | CWE-287 | Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS transport is |
| CVE-2026-41082 | Analyzed | 未確認 | CWE-22, CWE-24 | In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory. |
| CVE-2026-4109 | Deferred | 未確認 | CWE-862 | The Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability chec |
| CVE-2026-41113 | Deferred | 未確認 | CWE-78 | sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c. |
| CVE-2026-4112 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only ad |
| CVE-2026-41126 | Deferred | 未確認 | CWE-601 | BigBlueButton is an open-source virtual classroom. Versions prior to 3.0.24 have an Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL." Version 3.0.24 has a |
| CVE-2026-41127 | Deferred | 未確認 | CWE-639 | BigBlueButton is an open-source virtual classroom. Versions prior to 3.0.24 have a missing authorization that allows viewers to inject/overwrite captions Version 3.0.24 tightened t |
| CVE-2026-41128 | Deferred | 未確認 | CWE-862 | Craft CMS is a content management system (CMS). In versions 5.6.0 through 5.9.14, the `actionSavePermissions()` endpoint allows a user with only `viewUsers` permission to remove ar |
| CVE-2026-41129 | Deferred | 未確認 | CWE-918 | Craft CMS is a content management system (CMS). Versions on the 4.x branch through 4.17.8 and the 5.x branch through 5.9.14 are vulnerable to Server-Side Request Forgery. The explo |
| CVE-2026-4113 | Analyzed | 未確認 | CWE-204 | An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials. |
| CVE-2026-41130 | Deferred | 未確認 | CWE-918 | Craft CMS is a content management system (CMS). In versions on the 4.x branch through 4.17.8 and the 5.x branch through 5.9.14, the `resource-js` endpoint in Craft CMS allows unaut |
| CVE-2026-41131 | Analyzed | 未確認 | CWE-706, CWE-863 | OpenFGA is an authorization/permission engine built for developers. Prior to version 1.14.1, in specific scenarios, models using conditions with caching enabled can result in two d |
| CVE-2026-41133 | Analyzed | 未確認 | CWE-613 | pyLoad is a free and open-source download manager written in Python. Versions up to and including 0.5.0b3.dev97 cache `role` and `permission` in the session at login and continues |
| CVE-2026-41134 | Modified | 未確認 | CWE-94 | Kiota is an OpenAPI based HTTP Client code generator. Versions prior to 1.29.1 and 1.31.1 are affected by a code-generation literal injection vulnerability in multiple writer sinks |
| CVE-2026-41135 | Analyzed | 未確認 | CWE-400 | free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. A memory leak vulnerability in versions prior |
| CVE-2026-41136 | Analyzed | 未確認 | CWE-440 | free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to version 1.4.3, the `H |
| CVE-2026-41137 | Analyzed | 未確認 | CWE-94 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, The CSVAgent allows providing a custom Pandas CSV read code. Due to lack of |
| CVE-2026-41138 | Modified | 未確認 | CWE-94 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, there is a remote code execution vulnerability in AirtableAgent.ts caused b |
| CVE-2026-4114 | Analyzed | 未確認 | CWE-176 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication. |
| CVE-2026-41140 | Deferred | 未確認 | CWE-22 | Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall() function in src/poetry/utils/helpers.py:410-426 extracts sdist tarballs without path traversal protectio |
| CVE-2026-41144 | Analyzed | 未確認 | CWE-190, CWE-787 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to version 4.2.0, the bounds check byteOffset + d |
| CVE-2026-41145 | Analyzed | 未確認 | CWE-287 | MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in Min |
| CVE-2026-41146 | Deferred | 未確認 | CWE-400, CWE-835 | facil.io is a C micro-framework for web applications. Prior to commit 5128747363055201d3ecf0e29bf0a961703c9fa0, `fio_json_parse` can enter an infinite loop when it encounters a nes |
| CVE-2026-41153 | Analyzed | 未確認 | CWE-77 | In JetBrains Junie before 252.549.29 command execution was possible via malicious project file |
| CVE-2026-4116 | Analyzed | 未確認 | CWE-176 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication. |
| CVE-2026-41166 | Analyzed | 未確認 | CWE-284 | OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.1, a user who has `write:admin` in one Keycloak realm can call the Manager API to update Keycloak re |
| CVE-2026-41167 | Deferred | 未確認 | CWE-89 | Jellystat is a free and open source Statistics App for Jellyfin. Prior to version 1.1.10, multiple API endpoints in Jellystat build SQL queries by interpolating unsanitized request |
| CVE-2026-41168 | Analyzed | 未確認 | CWE-834 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This |
| CVE-2026-4117 | Deferred | 未確認 | CWE-862 | The CalJ plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5. This is due to a missing capability check in the CalJSettingsPage cl |
| CVE-2026-41170 | Deferred | 未確認 | CWE-918 | Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the `RestoreController.PostRestoreJob` endpoint allows an administ |
| CVE-2026-41171 | Deferred | 未確認 | CWE-918 | Squidex is an open source headless content management system and content management hub. Versions prior to 7.23.0 have a Server-Side Request Forgery (SSRF) vulnerability due to mis |
| CVE-2026-41172 | Deferred | 未確認 | CWE-918 | Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, an SSRF vulnerability allows a user with asset upload permission t |
| CVE-2026-41173 | Awaiting Analysis | 未確認 | CWE-770 | The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP |
| CVE-2026-41174 | Analyzed | 未確認 | CWE-653, CWE-863 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a potential vulnerability in Traefik's Kubernetes CRD provider cross |
| CVE-2026-41175 | Analyzed | 未確認 | CWE-470 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.20 and 6.13.0, manipulating query parameters on Control Panel and REST API endpoints, |
| CVE-2026-41176 | Modified | 未確認 | CWE-15, CWE-306 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. The RC endpoint `options/set` is exposed without `AuthRequired: true`, |
| CVE-2026-41177 | Deferred | 未確認 | CWE-73, CWE-918 | Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Squidex Restore API is vulnerable to Blind Server-Side Request |
| CVE-2026-41179 | Modified | 未確認 | CWE-306, CWE-78, CWE-94 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Starting in version 1.48.0 and prior to version 1.73.5, the RC endpoin |
| CVE-2026-4118 | Deferred | 未確認 | CWE-352 | The Call To Action Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.3. This is due to missing nonce validation in t |
| CVE-2026-41180 | Deferred | 未確認 | CWE-22 | PsiTransfer is an open source, self-hosted file sharing solution. Prior to version 2.4.3, the upload PATCH flow under `/files/:uploadId` validates the mounted request path using th |
| CVE-2026-41182 | Awaiting Analysis | 未確認 | CWE-200, CWE-359, CWE-532 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to version 0.5.19 of the JavaScript SDK and version 0.7.31 of the Python SDK, the LangSmith S |
| CVE-2026-41183 | Deferred | 未確認 | CWE-200 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, the assigned-only restriction is applied to direct conversation view and folder queries, but |
| CVE-2026-41189 | Deferred | 未確認 | CWE-863 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, customer-thread editing is authorized through `ThreadPolicy::edit()`, which checks mailbox a |
| CVE-2026-4119 | Deferred | 未確認 | CWE-862 | The Create DB Tables plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.1. The plugin registers admin_post action hooks for creating |
| CVE-2026-41190 | Deferred | 未確認 | CWE-863 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, when `APP_SHOW_ONLY_ASSIGNED_CONVERSATIONS` is enabled, direct conversation view correctly b |
| CVE-2026-41191 | Deferred | 未確認 | CWE-863 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, `MailboxesController::updateSave()` persists `chat_start_new` outside the allowed-field filt |
| CVE-2026-41192 | Deferred | 未確認 | CWE-862 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, the reply and draft flows trust client-supplied encrypted attachment IDs. Any IDs present in |
| CVE-2026-41193 | Deferred | 未確認 | CWE-22 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, FreeScout's module installation feature extracts ZIP archives without validating file paths, |
| CVE-2026-41194 | Deferred | 未確認 | CWE-352 | FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, the mailbox OAuth disconnect action is implemented as `GET /mailbox/oauth-disconnect/{id}/{i |
| CVE-2026-41196 | Analyzed | 未確認 | CWE-94 | Luanti (formerly Minetest) is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed |
| CVE-2026-41197 | Deferred | 未確認 | CWE-131 | Noir is a Domain Specific Language for SNARK proving systems that is designed to use any ACIR compatible proving system, and Brillig is the bytecode ACIR uses for non-determinism. |
| CVE-2026-41200 | Deferred | 未確認 | CWE-79 | STIG Manager is an API and web client for managing Security Technical Implementation Guides (STIG) assessments of Information Systems. Versions 1.5.10 through 1.6.7 have a reflect |
| CVE-2026-41205 | Modified | 未確認 | CWE-22 | Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., //../../../secret.txt) |
| CVE-2026-41206 | Analyzed | 未確認 | CWE-184 | PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. The plugin security validator in PySpector uses AST-based stati |
| CVE-2026-41208 | Analyzed | 未確認 | CWE-78 | Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Versions of @paperclipai/server prior to 2026.416.0 contain a privilege escalati |
| CVE-2026-4121 | Deferred | 未確認 | CWE-352 | The Kcaptcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.1. This is due to missing nonce validation in the plugin's set |
| CVE-2026-41211 | Analyzed | 未確認 | CWE-22 | Vite+ is a unified toolchain and entry point for web development. Prior to version 0.1.17, `downloadPackageManager()` accepts an untrusted `version` string and uses it directly in |
| CVE-2026-41213 | Analyzed | 未確認 | CWE-1289, CWE-307 | @node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid code_verifier values (including one-character st |
| CVE-2026-41220 | Deferred | 未確認 | CWE-787 | Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Clo |
| CVE-2026-41226 | Awaiting Analysis | 未確認 | CWE-601 | Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected t |
| CVE-2026-41228 | Analyzed | 未確認 | CWE-98 | Froxlor is open source server administration software. Prior to version 2.3.6, the Froxlor API endpoint `Customers.update` (and `Admins.update`) does not validate the `def_language |
| CVE-2026-41229 | Analyzed | 未確認 | CWE-94 | Froxlor is open source server administration software. Prior to version 2.3.6, `PhpHelper::parseArrayToString()` writes string values into single-quoted PHP string literals without |
| CVE-2026-41230 | Analyzed | 未確認 | CWE-93 | Froxlor is open source server administration software. Prior to version 2.3.6, `DomainZones::add()` accepts arbitrary DNS record types without a whitelist and does not sanitize new |
| CVE-2026-41231 | Analyzed | 未確認 | CWE-59 | Froxlor is open source server administration software. Prior to version 2.3.6, `DataDump.add()` constructs the export destination path from user-supplied input without passing the |
| CVE-2026-41232 | Analyzed | 未確認 | CWE-863 | Froxlor is open source server administration software. Prior to version 2.3.6, in `EmailSender::add()`, the domain ownership validation for full email sender aliases uses the wrong |
| CVE-2026-41233 | Analyzed | 未確認 | CWE-863 | Froxlor is open source server administration software. Prior to version 2.3.6, in `Domains.add()`, the `adminid` parameter is accepted from user input and used without validation w |
| CVE-2026-41238 | Deferred | 未確認 | CWE-1321, CWE-79 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions 3.0.1 through 3.3.3 are vulnerable to a prototype pollution-based XSS bypass. When an app |
| CVE-2026-41239 | Deferred | 未確認 | CWE-1289, CWE-79 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Starting in version 1.0.10 and prior to version 3.4.0, `SAFE_FOR_TEMPLATES` strips `{{...}}` expre |
| CVE-2026-4124 | Deferred | 未確認 | CWE-862 | The Ziggeo plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1. The wp_ajax_ziggeo_ajax handler only verifies a nonce (check_aj |
| CVE-2026-41240 | Analyzed | 未確認 | CWE-183, CWE-79 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions prior to 3.4.0 have an inconsistency between FORBID_TAGS and FORBID_ATTR handling when fu |
| CVE-2026-41241 | Analyzed | 未確認 | CWE-79 | pretalx is a conference planning tool. Prior to 2026.1.0, The organiser search in the pretalx backend rendered submission titles, speaker display names, and user names/emails into |
| CVE-2026-41242 | Modified | 未確認 | CWE-94 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code in the "type" fields of protobuf |
| CVE-2026-41243 | Analyzed | 未確認 | CWE-284 | OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580fe501923f0b391313ab, when `safeMode` is enabled, unapproved forum posts are hidden from th |
| CVE-2026-41244 | Deferred | 未確認 | CWE-208 | Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of emojis. Prior to 2.1.4, the CipherEngine uses a standard equality operator (!==) to verify |
| CVE-2026-41245 | Modified | 未確認 | CWE-22 | Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files wit |
| CVE-2026-41246 | Modified | 未確認 | CWE-94 | Contour is a Kubernetes ingress controller using Envoy proxy. From v1.19.0 to before v1.33.4, v1.32.5, and v1.31.6, Contour's Cookie Rewriting feature is vulnerable to Lua code inj |
| CVE-2026-41247 | Analyzed | 未確認 | CWE-78 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injection vulnerability in the resize command. |
| CVE-2026-41248 | Deferred | 未確認 | CWE-436, CWE-863 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. createRouteMatcher in @clerk/nextjs, @clerk/nuxt, and @clerk/astro can be bypassed by certain craft |
| CVE-2026-4125 | Deferred | 未確認 | CWE-79 | The WPMK Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' shortcode attribute in all versions up to and including 1.0.1. This is due to insuf |
| CVE-2026-41253 | Analyzed | 未確認 | CWE-829 | In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 data, if the working directory contains a malicious file whose name is valid outp |
| CVE-2026-41254 | Modified | 未確認 | CWE-190, CWE-696 | Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication. |
| CVE-2026-41259 | Analyzed | 未確認 | CWE-841 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail doma |
| CVE-2026-4126 | Deferred | 未確認 | CWE-200 | The Table Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.0 via the 'table_manager' shortcode. The shortcode |
| CVE-2026-41263 | Analyzed | 未確認 | CWE-208 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a timing side-channel vulnerability in Traefik's BasicAuth middlewar |
| CVE-2026-41264 | Analyzed | 未確認 | CWE-184 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the CSV_Agents class. The |
| CVE-2026-41265 | Analyzed | 未確認 | CWE-77 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the Airtable_Agents class |
| CVE-2026-41266 | Modified | 未確認 | CWE-200, CWE-522, CWE-862 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, /api/v1/public-chatbotConfig/:id ep exposes sensitive data including API ke |
| CVE-2026-41267 | Analyzed | 未確認 | CWE-639, CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, an improper mass assignment (JSON injection) vulnerability in the account r |
| CVE-2026-41268 | Analyzed | 未確認 | CWE-20 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise is vulnerable to a critical unauthenticated remote command executio |
| CVE-2026-41269 | Modified | 未確認 | CWE-434 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the Chatflow configuration file upload settings can be modified to allow th |
| CVE-2026-41270 | Modified | 未確認 | CWE-284, CWE-918 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery (SSRF) protection bypass vulnerability exists |
| CVE-2026-41271 | Analyzed | 未確認 | CWE-918 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery (SSRF) vulnerability exists in FlowiseAI's PO |
| CVE-2026-41272 | Analyzed | 未確認 | CWE-918 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the core security wrappers (secureAxiosRequest and secureFetch) intended to |
| CVE-2026-41273 | Modified | 未確認 | CWE-306 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise contains an authentication bypass vulnerability that allows an unau |
| CVE-2026-41274 | Analyzed | 未確認 | CWE-943 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypherQAChain node forwards user-provided input directly into the |
| CVE-2026-41275 | Modified | 未確認 | CWE-319 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the password reset functionality on cloud.flowiseai.com sends a reset passw |
| CVE-2026-41276 | Modified | 未確認 | CWE-287 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, this vulnerability allows remote attackers to bypass authentication on affe |
| CVE-2026-41277 | Modified | 未確認 | CWE-284, CWE-639, CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vulnerability in the DocumentStore creation endpoint allo |
| CVE-2026-41278 | Analyzed | 未確認 | CWE-200 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GET /api/v1/public-chatflows/:id endpoint returns the full chatflow obj |
| CVE-2026-41279 | Analyzed | 未確認 | CWE-639 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the text-to-speech generation endpoint (POST /api/v1/text-to-speech/generat |
| CVE-2026-4128 | Deferred | 未確認 | CWE-862 | The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. The delete_term() function, which |
| CVE-2026-41282 | Analyzed | 未確認 | CWE-94 | ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not the default configurat |
| CVE-2026-41285 | Analyzed | 未確認 | CWE-1284, CWE-835 | In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, |
| CVE-2026-41294 | Analyzed | 未確認 | CWE-15 | OpenClaw before 2026.3.28 loads the current working directory .env file before trusted state-dir configuration, allowing environment variable injection. Attackers can place a malic |
| CVE-2026-41295 | Analyzed | 未確認 | CWE-829 | OpenClaw before 2026.4.2 contains an improper trust boundary vulnerability allowing untrusted workspace channel shadows to execute during built-in channel setup and login. Attacker |
| CVE-2026-41296 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.3.31 contains a time-of-check-time-of-use race condition in the remote filesystem bridge readFile function that allows sandbox escape. Attackers can exploit th |
| CVE-2026-41297 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows attackers to access internal resources b |
| CVE-2026-41298 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.4.2 fails to enforce write scopes on the POST /sessions/:sessionKey/kill endpoint in identity-bearing HTTP modes. Read-scoped callers can terminate running sub |
| CVE-2026-41299 | Analyzed | 未確認 | CWE-807 | OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields are gated by self-declared client metadata |
| CVE-2026-41300 | Analyzed | 未確認 | CWE-372 | OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows. Attackers can route gateway credentials to |
| CVE-2026-41301 | Analyzed | 未確認 | CWE-347 | OpenClaw versions 2026.3.22 before 2026.3.31 contain a signature verification bypass vulnerability in the Nostr DM ingress path that allows pairing challenges to be issued before e |
| CVE-2026-41302 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows remote attackers to make arbitrary netwo |
| CVE-2026-41303 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals. Attackers ca |
| CVE-2026-41304 | Analyzed | 未確認 | CWE-77 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `cloneServer.json.php` endpoint in the CloneSite plugin constructs shell commands using user-controlle |
| CVE-2026-41305 | Deferred | 未確認 | CWE-79 | PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `</style |
| CVE-2026-41309 | Deferred | 未確認 | CWE-400, CWE-770 | Open Source Social Network (OSSN) is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a |
| CVE-2026-4131 | Deferred | 未確認 | CWE-352 | The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the ad |
| CVE-2026-41312 | Analyzed | 未確認 | CWE-789 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhau |
| CVE-2026-41313 | Analyzed | 未確認 | CWE-834 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This |
| CVE-2026-41314 | Analyzed | 未確認 | CWE-789 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhau |
| CVE-2026-41316 | Deferred | 未確認 | CWE-502, CWE-693 | ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` and `ERB#run` to pre |
| CVE-2026-41317 | Analyzed | 未確認 | CWE-352 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS).`press.api.account.create_api_secret` is pron |
| CVE-2026-41318 | Analyzed | 未確認 | CWE-116, CWE-1336, CWE-79 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, AnythingLLM's in-chat markdown |
| CVE-2026-41319 | Analyzed | 未確認 | CWE-74 | MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Response Injection vulnerability in versions prior to 4.16.0 allows a Man-in-the-Middle attacker |
| CVE-2026-4132 | Deferred | 未確認 | CWE-73 | The HTTP Headers plugin for WordPress is vulnerable to External Control of File Name or Path leading to Remote Code Execution in all versions up to and including 1.19.2. This is du |
| CVE-2026-41320 | Analyzed | 未確認 | CWE-89 | Frappe HR is an open-source human resources management solution (HRMS). Prior to versions 15.54.0 and 14.38.1, a specially crafted request made to a certain endpoint could result i |
| CVE-2026-41321 | Deferred | 未確認 | CWE-918 | @astrojs/cloudflare is an SSR adapter for use with Cloudflare Workers targets. Prior to 13.1.10, the fetch() call for remote images in packages/integrations/cloudflare/src/utils/im |
| CVE-2026-41322 | Deferred | 未確認 | CWE-525 | @astrojs/node allows Astro to deploy your SSR site to Node targets. Prior to 10.0.5, requesting a static js/css resources from _astro path with an incorrect/malformed if-match head |
| CVE-2026-41323 | Analyzed | 未確認 | CWE-200, CWE-918 | Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4, Kyverno's apiCall feature in ClusterPolicy au |
| CVE-2026-41324 | Analyzed | 未確認 | CWE-400, CWE-770 | basic-ftp is an FTP client for Node.js. Versions prior to 5.3.0 are vulnerable to denial of service through unbounded memory growth while processing directory listings from a remot |
| CVE-2026-41325 | Analyzed | 未確認 | CWE-863 | Kirby is an open-source content management system. Kirby's user permissions control which user role is allowed to perform specific actions to content models in the CMS. These permi |
| CVE-2026-41326 | Modified | 未確認 | CWE-1220, CWE-61 | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an overs |
| CVE-2026-41327 | Analyzed | 未確認 | CWE-943 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full read access to every pi |
| CVE-2026-41328 | Analyzed | 未確認 | CWE-943 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full read access to every pi |
| CVE-2026-41329 | Analyzed | 未確認 | CWE-648 | OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to escalate privileges via heartbeat context inheritance and senderIsOwner parameter manipulati |
| CVE-2026-4133 | Deferred | 未確認 | CWE-352 | The TextP2P Texting Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.7. This is due to missing nonce validation in the |
| CVE-2026-41330 | Analyzed | 未確認 | CWE-453 | OpenClaw before 2026.3.31 contains an environment variable override vulnerability in host exec policy that fails to properly enforce proxy, TLS, Docker, and Git TLS controls. Attac |
| CVE-2026-41331 | Analyzed | 未確認 | CWE-408 | OpenClaw before 2026.3.31 contains a resource consumption vulnerability in Telegram audio preflight transcription that allows unauthorized group senders to trigger transcription pr |
| CVE-2026-41332 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CONFIG_FILE are not blocked in the host-env blocklist. Attacker |
| CVE-2026-41333 | Analyzed | 未確認 | CWE-799 | OpenClaw before 2026.3.31 contains an authentication rate limiting bypass vulnerability that allows attackers to circumvent shared authentication protections using fake device toke |
| CVE-2026-41334 | Analyzed | 未確認 | CWE-636 | OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips. Attackers can exploit this by u |
| CVE-2026-41335 | Analyzed | 未確認 | CWE-497 | OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that exposes version and assistant agent identifiers. Attackers c |
| CVE-2026-41336 | Analyzed | 未確認 | CWE-829 | OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabling loading of attacker-controlled hook code. Attackers |
| CVE-2026-41337 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.3.31 contains a callback origin mutation vulnerability in Plivo voice-call replay that allows attackers to mutate in-process callback origin before replay reje |
| CVE-2026-41338 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses. Attackers can exploit che |
| CVE-2026-41339 | Analyzed | 未確認 | CWE-497 | OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients. Non-admin clients can recover host-specif |
| CVE-2026-4134 | Analyzed | 未確認 | CWE-427 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute |
| CVE-2026-41340 | Analyzed | 未確認 | CWE-372 | OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust into all named accounts |
| CVE-2026-41341 | Analyzed | 未確認 | CWE-351 | OpenClaw before 2026.3.31 contains a logic error in Discord component interaction routing that misclassifies group direct messages as direct messages in extensions/discord/src/moni |
| CVE-2026-41342 | Analyzed | 未確認 | CWE-346 | OpenClaw before 2026.3.28 contains an authentication bypass vulnerability in the remote onboarding component that persists unauthenticated discovery endpoints without explicit trus |
| CVE-2026-41343 | Analyzed | 未確認 | CWE-799 | OpenClaw before 2026.3.31 lacks a shared pre-auth concurrency budget on the public LINE webhook path, allowing attackers to cause transient availability loss. Remote attackers can |
| CVE-2026-41344 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the chat.send endpoint that allows write-scoped gateway callers to persist admin-only verboseLevel sessio |
| CVE-2026-41345 | Analyzed | 未確認 | CWE-522 | OpenClaw before 2026.3.31 contains a credential exposure vulnerability in media download functionality that forwards Authorization headers across cross-origin redirects. Attackers |
| CVE-2026-41346 | Analyzed | 未確認 | CWE-799 | OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead of per account, allowing attackers to exhaust the shared pending window. Remote a |
| CVE-2026-41347 | Analyzed | 未確認 | CWE-352 | OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks. Attackers ca |
| CVE-2026-41348 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord slash command and autocomplete paths that fail to enforce group DM channel allowlist restriction |
| CVE-2026-41349 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.3.28 contains an agentic consent bypass vulnerability allowing LLM agents to silently disable execution approval via config.patch parameter. Remote attackers c |
| CVE-2026-4135 | Analyzed | 未確認 | CWE-59 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform |
| CVE-2026-41350 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.31 contains a session visibility bypass vulnerability where the session_status function fails to enforce configured tools.sessions.visibility restrictions fo |
| CVE-2026-41351 | Analyzed | 未確認 | CWE-294 | OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature handling that treats Base64 and Base64URL encoded signatures as distinct requests. A |
| CVE-2026-41352 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.3.31 contains a remote code execution vulnerability where a device-paired node can bypass the node scope gate authentication mechanism. Attackers with device p |
| CVE-2026-41353 | Analyzed | 未確認 | CWE-472 | OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent p |
| CVE-2026-41354 | Analyzed | 未確認 | CWE-706 | OpenClaw before 2026.4.2 contains an insufficient scope vulnerability in Zalo webhook replay dedupe keys that allows legitimate events from different conversations or senders to co |
| CVE-2026-41355 | Modified | 未確認 | CWE-829 | OpenClaw before 2026.3.28 contains an arbitrary code execution vulnerability in mirror mode that converts untrusted sandbox files into workspace hooks. Attackers with mirror mode a |
| CVE-2026-41356 | Analyzed | 未確認 | CWE-613 | OpenClaw before 2026.3.31 fails to terminate active WebSocket sessions when rotating device tokens. Attackers with previously compromised credentials can maintain unauthorized acce |
| CVE-2026-41357 | Analyzed | 未確認 | CWE-214 | OpenClaw before 2026.3.31 contains an environment variable leakage vulnerability in SSH-based sandbox backends that pass unsanitized process.env to child processes. Attackers can e |
| CVE-2026-41358 | Analyzed | 未確認 | CWE-346 | OpenClaw before 2026.4.2 fails to filter Slack thread context by sender allowlist, allowing non-allowlisted messages to enter agent context. Attackers can inject unauthorized threa |
| CVE-2026-41359 | Analyzed | 未確認 | CWE-269 | OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cro |
| CVE-2026-41360 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bind local script operands consistently with pnpm exec flows. Attackers can replace |
| CVE-2026-41361 | Analyzed | 未確認 | CWE-184, CWE-918 | OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting intern |
| CVE-2026-41362 | Analyzed | 未確認 | CWE-668 | OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook replay-dedupe mechanism that is shared across authenticated webho |
| CVE-2026-41363 | Analyzed | 未確認 | CWE-22 | OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu extension resolveUploadInput function that bypasses file-system sandbox restrictio |
| CVE-2026-41364 | Analyzed | 未確認 | CWE-59 | OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attackers to write arbitrary files. Attackers can exploit this by |
| CVE-2026-41365 | Analyzed | 未確認 | CWE-441 | OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread history fetched via Graph API. Attackers can retrieve thread messages that should be f |
| CVE-2026-41366 | Analyzed | 未確認 | CWE-732 | OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that allows model-initiated arbitrary host file read. Attackers can |
| CVE-2026-41367 | Analyzed | 未確認 | CWE-863 | OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileg |
| CVE-2026-41368 | Analyzed | 未確認 | CWE-668 | OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter. Attackers can bypass safe-bin res |
| CVE-2026-41369 | Analyzed | 未確認 | CWE-668 | OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and TLS override v |
| CVE-2026-41370 | Analyzed | 未確認 | CWE-22 | OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows attackers to read arbitrary files by manipulating inbound channel attachment paths. Re |
| CVE-2026-41371 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations. Attack |
| CVE-2026-41372 | Analyzed | 未確認 | CWE-639 | OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery responses, allowing bypass of loopback protections. Attackers can craft hostile dis |
| CVE-2026-41373 | Analyzed | 未確認 | CWE-427 | OpenClaw before 2026.3.31 contains an incomplete host-env-security-policy.json that fails to restrict compiler binary environment variables, allowing untrusted models to substitute |
| CVE-2026-41374 | Analyzed | 未確認 | CWE-408 | OpenClaw before 2026.3.31 performs Discord audio preflight transcription before validating member authorization, allowing unauthenticated attackers to consume resources. Remote att |
| CVE-2026-41375 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the /phone arm and /phone disarm endpoints that fails to properly enforce operator.admin scope checks fo |
| CVE-2026-41376 | Analyzed | 未確認 | CWE-346 | OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders. Attackers can |
| CVE-2026-41377 | Analyzed | 未確認 | CWE-636 | OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation. Attackers can exploit scan fail |
| CVE-2026-41378 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.3.31 contains a privilege escalation vulnerability allowing paired nodes with role=node to dispatch node.event agent requests with unrestricted gateway-side to |
| CVE-2026-41379 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Talk Voice configuration persi |
| CVE-2026-4138 | Deferred | 未確認 | CWE-352 | The DX Unanswered Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7. This is due to missing nonce validation on th |
| CVE-2026-41380 | Analyzed | 未確認 | CWE-807 | OpenClaw before 2026.3.28 contains an execution approval vulnerability in exec-approvals-allowlist.ts that allows allow-always persistence to trust wrapper carrier executables inst |
| CVE-2026-41381 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restric |
| CVE-2026-41382 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord voice ingress that allows attackers to bypass channel and member allowlist restrictions. Attacke |
| CVE-2026-41383 | Analyzed | 未確認 | CWE-22 | OpenClaw before 2026.4.2 contains an arbitrary directory deletion vulnerability in mirror mode that allows attackers to delete remote directories by influencing remoteWorkspaceDir |
| CVE-2026-41384 | Analyzed | 未確認 | CWE-15 | OpenClaw before 2026.3.24 contains an environment variable injection vulnerability in the CLI backend runner that allows attackers to inject malicious environment variables through |
| CVE-2026-41385 | Analyzed | 未確認 | CWE-312 | OpenClaw before 2026.3.31 stores Nostr privateKey as plaintext in configuration, allowing exposure through config.get method calls that bypass redaction mechanisms. Attackers can r |
| CVE-2026-41386 | Analyzed | 未確認 | CWE-648 | OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap setup codes are not bound to intended device roles and scopes during pairing. Attackers can |
| CVE-2026-41387 | Analyzed | 未確認 | CWE-183 | OpenClaw before 2026.3.22 contains an incomplete host environment variable sanitization vulnerability in host-env-security-policy.json and host-env-security.ts that allows package- |
| CVE-2026-41388 | Analyzed | 未確認 | CWE-372 | OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values. Attackers can restart the applica |
| CVE-2026-41389 | Analyzed | 未確認 | CWE-73 | OpenClaw versions 2026.4.7 before 2026.4.15 fail to enforce local-root containment on tool-result media paths, allowing arbitrary local and UNC file access. Attackers can craft mal |
| CVE-2026-4139 | Deferred | 未確認 | CWE-352 | The mCatFilter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.5.2. This is due to the complete absence of nonce verification |
| CVE-2026-41390 | Analyzed | 未確認 | CWE-807 | OpenClaw before 2026.3.28 contains an exec allowlist bypass vulnerability where allow-always persistence fails to unwrap /usr/bin/script and similar wrappers before storing trust d |
| CVE-2026-41391 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.3.31 fails to properly sanitize PIP_INDEX_URL and UV_INDEX_URL environment variables in host execution contexts, allowing attackers to redirect Python package- |
| CVE-2026-41392 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.3.31 contains an exec allowlist bypass vulnerability allowing attackers to inherit allowlist trust via shell init-file wrapper invocations. Attackers can explo |
| CVE-2026-41393 | Analyzed | 未確認 | CWE-346 | OpenClaw before 2026.3.31 contains a wide-area discovery vulnerability allowing arbitrary tailnet peers to be accepted as DNS authorities. Attackers with same-tailnet position and |
| CVE-2026-41394 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.3.31 contains an authentication bypass vulnerability where unauthenticated plugin-auth HTTP routes receive operator runtime write scopes. Attackers can access |
| CVE-2026-41395 | Analyzed | 未確認 | CWE-325 | OpenClaw before 2026.3.28 contains a webhook replay vulnerability in Plivo V3 signature verification that canonicalizes query ordering for signatures but hashes raw URLs for replay |
| CVE-2026-41396 | Analyzed | 未確認 | CWE-829 | OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_PLUGINS_DIR environment variable, compromising plugin trust verification. Attackers with cont |
| CVE-2026-41397 | Analyzed | 未確認 | CWE-59 | OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchronization opera |
| CVE-2026-41398 | Analyzed | 未確認 | CWE-346 | OpenClaw before 2026.4.2 contains an improper access control vulnerability in the iOS A2UI bridge that treats generic local-network pages as trusted origins. Attackers can inject u |
| CVE-2026-41399 | Analyzed | 未確認 | CWE-770 | OpenClaw before 2026.3.28 accepts unbounded concurrent unauthenticated WebSocket upgrades without pre-authentication budget allocation. Unauthenticated network attackers can exhaus |
| CVE-2026-4140 | Deferred | 未確認 | CWE-352 | The Ni WooCommerce Order Export plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.1.6. This is due to missing nonce validation |
| CVE-2026-41400 | Analyzed | 未確認 | CWE-770 | OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation. Remote attackers can s |
| CVE-2026-41402 | Analyzed | 未確認 | CWE-706 | OpenClaw before 2026.3.31 contains a scope bypass vulnerability in webhook replay cache deduplication that allows authenticated attackers to replay messages across sibling targets |
| CVE-2026-41403 | Analyzed | 未確認 | CWE-807 | OpenClaw before 2026.3.31 misclassifies proxied remote requests as loopback connections in the diffs viewer when allowRemoteViewer is disabled, allowing unauthorized access. Attack |
| CVE-2026-41404 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.3.31 contains an incomplete scope-clearing vulnerability in trusted-proxy authentication mode that allows operator.admin privilege escalation. Attackers can ex |
| CVE-2026-41405 | Analyzed | 未確認 | CWE-408 | OpenClaw before 2026.3.31 parses MS Teams webhook request bodies before performing JWT validation, allowing unauthenticated attackers to trigger resource exhaustion. Remote attacke |
| CVE-2026-41406 | Analyzed | 未確認 | CWE-639 | OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages. Attackers can exploit fetched quoted, root, a |
| CVE-2026-41407 | Analyzed | 未確認 | CWE-208 | OpenClaw before 2026.4.2 contains a timing side channel vulnerability in shared-secret comparison call sites that use early length-mismatch checks instead of fixed-length compariso |
| CVE-2026-41408 | Analyzed | 未確認 | CWE-770 | OpenClaw before 2026.3.31 contains a resource exhaustion vulnerability in media downloads that bypasses core safety limits for file size, count, and cleanup operations. Attackers c |
| CVE-2026-41409 | Analyzed | 未確認 | CWE-502 | The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a st |
| CVE-2026-4141 | Deferred | 未確認 | CWE-352 | The Quran Translations plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7. This is due to missing nonce validation in the qu |
| CVE-2026-41411 | Analyzed | 未確認 | CWE-78 | Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field |
| CVE-2026-41414 | Analyzed | 未確認 | CWE-94 | Skim is a fuzzy finder designed to through files, lines, and commands. The generate-files job in .github/workflows/pr.yml checks out attacker-controlled fork code and executes it v |
| CVE-2026-41415 | Analyzed | 未確認 | CWE-125 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an out-of-bounds read when parsing a malformed Content-ID URI in SIP mu |
| CVE-2026-41416 | Analyzed | 未確認 | CWE-190 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an integer overflow in media stream buffer size calculation when proces |
| CVE-2026-41418 | Deferred | 未確認 | CWE-208 | 4ga Boards is a boards system for realtime project management. Prior to 3.3.5, 4ga Boards is vulnerable to user enumeration via a timing side-channel in the login endpoint (POST /a |
| CVE-2026-41419 | Deferred | 未確認 | CWE-22 | 4ga Boards is a boards system for realtime project management. Prior to 3.3.5, a path traversal vulnerability allows an authenticated user with board import privileges to make the |
| CVE-2026-4142 | Deferred | 未確認 | CWE-79 | The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Permanent keywords' field in all versions up to and |
| CVE-2026-41421 | Deferred | 未確認 | CWE-78, CWE-79 | SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, SiYuan desktop renders notification messages as raw HTML inside an Electron renderer. The notificatio |
| CVE-2026-41425 | Analyzed | 未確認 | CWE-352 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_clien |
| CVE-2026-41426 | Analyzed | 未確認 | CWE-116, CWE-79 | pretalx is a conference planning tool. Prior to 2026.1.0, an unauthenticated attacker can send arbitrary HTML-rendered emails from a pretalx instance's configured sender address by |
| CVE-2026-41427 | Analyzed | 未確認 | CWE-863 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.5, the clientPrivileges option documents a create action, but the OAuth client creation endp |
| CVE-2026-41428 | Analyzed | 未確認 | CWE-287 | Budibase is an open-source low-code platform. Prior to 3.35.4, the authenticated middleware uses unanchored regular expressions to match public (no-auth) endpoint patterns against |
| CVE-2026-41429 | Analyzed | 未確認 | CWE-121 | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruptio |
| CVE-2026-41430 | Analyzed | 未確認 | CWE-79 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Redirect parameter on login page is vulnerab |
| CVE-2026-41433 | Analyzed | 未確認 | CWE-22, CWE-59 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From 0.4.0 to before 0.8.0, a flaw in the Java agent injection path allows a l |
| CVE-2026-41445 | Awaiting Analysis | 未確認 | CWE-122, CWE-190 | KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation size calculation dimOther*(dimRea |
| CVE-2026-41446 | Awaiting Analysis | 未確認 | CWE-798, CWE-912 | Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag for a |
| CVE-2026-4145 | Analyzed | 未確認 | CWE-88 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execut |
| CVE-2026-41454 | Deferred | 未確認 | CWE-862 | WeKan before 8.35 contains a missing authorization vulnerability in the Integration REST API endpoints that allows authenticated board members to perform administrative actions wit |
| CVE-2026-41455 | Deferred | 未確認 | CWE-918 | WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the URL scheme field accepts any string without protocol restrictio |
| CVE-2026-41456 | Deferred | 未確認 | CWE-79 | Bludit CMS prior to commit 6732dde contains a reflected cross-site scripting vulnerability in the search plugin that allows unauthenticated attackers to inject arbitrary JavaScript |
| CVE-2026-41457 | Deferred | 未確認 | CWE-89 | OwnTone Server versions 28.4 through 29.0 contain a SQL injection vulnerability in DAAP query and filter handling that allows attackers to inject arbitrary SQL expressions by suppl |
| CVE-2026-41458 | Deferred | 未確認 | CWE-362 | OwnTone Server versions 28.4 through 29.0 contain a race condition vulnerability in the DAAP login handler that allows unauthenticated attackers to crash the server by exploiting u |
| CVE-2026-41459 | Deferred | 未確認 | CWE-497 | Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side filesystem pa |
| CVE-2026-41460 | Modified | 未確認 | CWE-89 | SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text parameter is |
| CVE-2026-41461 | Modified | 未確認 | CWE-918 | SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplied input passed via the uri requ |
| CVE-2026-41462 | Deferred | 未確認 | CWE-89 | ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenated into a SQL |
| CVE-2026-41463 | Deferred | 未確認 | CWE-22 | ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality that allows authenticated attackers with upload permissions |
| CVE-2026-41464 | Deferred | 未確認 | CWE-862 | ProjeQtor versions 7.0 through 12.4.3 contain a missing authorization vulnerability in the objectDetail.php endpoint that allows authenticated users with guest-level privileges to |
| CVE-2026-41465 | Deferred | 未確認 | CWE-22 | ProjeQtor versions 7.0 through 12.4.3 contain a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against direct |
| CVE-2026-41466 | Deferred | 未確認 | CWE-79 | ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the checkValidHtmlText() function within Security.php that fails to properly sanitize u |
| CVE-2026-41467 | Deferred | 未確認 | CWE-79 | ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the file upload functionality where the checkValidFileName() function fails to restrict |
| CVE-2026-41468 | Deferred | 未確認 | CWE-1104 | Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known sandbox escape primitives. When combined with template injection present in the same a |
| CVE-2026-41469 | Deferred | 未確認 | CWE-693 | Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loading of external JavaScript resources from attacker-controlled origins. When chaine |
| CVE-2026-41472 | Modified | 未確認 | CWE-79 | CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentica |
| CVE-2026-41473 | Modified | 未確認 | CWE-306 | CyberPanel versions prior to 2.4.5 contain an authentication bypass vulnerability in the AI Scanner worker API endpoints that allows unauthenticated remote attackers to write arbit |
| CVE-2026-41475 | Analyzed | 未確認 | CWE-125 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's WritePropertyMultiple serv |
| CVE-2026-41476 | Analyzed | 未確認 | CWE-120 | Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.138, a remote memory-safety vulnerability in Deskflow's clipboard deserialization allows a connected peer to trigger |
| CVE-2026-41477 | Analyzed | 未確認 | CWE-306, CWE-862 | Deskflow is a keyboard and mouse sharing app. In 1.20.0, 1.26.0.134, and earlier, Deskflow daemon runs as SYSTEM and exposes an IPC named pipe with WorldAccessOption enabled. The |
| CVE-2026-41478 | Analyzed | 未確認 | CWE-89 | Saltcorn is an extensible, open source, no-code database application builder. Prior to 1.4.6, 1.5.6, and 1.6.0-beta.5, a SQL injection vulnerability in Saltcorn’s mobile-sync route |
| CVE-2026-41481 | Modified | 未確認 | CWE-918 | LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.split_text_from_url() validated the init |
| CVE-2026-41485 | Analyzed | 未確認 | CWE-617 | Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the `forEach` mutation handler |
| CVE-2026-41488 | Analyzed | 未確認 | CWE-918 | LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's _url_to_size() helper (used by get_num_tokens_from_messages for image |
| CVE-2026-4149 | Analyzed | 未確認 | CWE-119 | Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-41492 | Analyzed | 未確認 | CWE-200 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, Dgraphl exposes the process command line through the unauthenticated /debug/vars endpoint on Alpha. Because |
| CVE-2026-41499 | Analyzed | 未確認 | CWE-124, CWE-191 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, multiple heap-based out-of-bounds WRITE v |
| CVE-2026-4150 | Modified | 未確認 | CWE-190 | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. |
| CVE-2026-41502 | Analyzed | 未確認 | CWE-125, CWE-193 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an off-by-one out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMul |
| CVE-2026-41503 | Analyzed | 未確認 | CWE-125 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple servi |
| CVE-2026-4151 | Modified | 未確認 | CWE-190 | GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. |
| CVE-2026-4152 | Modified | 未確認 | CWE-122, CWE-131, CWE-787 | GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-41525 | Awaiting Analysis | 未確認 | CWE-669 | KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandbox without additional scrutiny. Dolphin's |
| CVE-2026-41526 | Analyzed | 未確認 | CWE-150 | In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This parsing does not adequately handle metac |
| CVE-2026-41527 | Awaiting Analysis | 未確認 | CWE-670 | KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a Kleopatra user, because there is an error in the mechanism (KUniqueService) for ensuring th |
| CVE-2026-4153 | Modified | 未確認 | CWE-120, CWE-122, CWE-787 | GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-4154 | Modified | 未確認 | CWE-190 | GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. |
| CVE-2026-4155 | Analyzed | 未確認 | CWE-540 | ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor |
| CVE-2026-4156 | Analyzed | 未確認 | CWE-121 | ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code o |
| CVE-2026-41564 | Analyzed | 未確認 | CWE-335, CWE-338 | CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking. The Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 a |
| CVE-2026-4157 | Analyzed | 未確認 | CWE-78 | ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affect |
| CVE-2026-4158 | Awaiting Analysis | 未確認 | CWE-427 | KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affec |
| CVE-2026-4160 | Deferred | 未確認 | CWE-639 | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference via the 'submissio |
| CVE-2026-41602 | Modified | 未確認 | CWE-190 | Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended t |
| CVE-2026-41603 | Rejected | 未確認 | Rejected reason: This CVE ID is Rejected and will not be used. The record incorrectly described the affected language binding and fixed version. Use CVE-2026-66053, which was assig | |
| CVE-2026-41604 | Modified | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. |
| CVE-2026-41605 | Modified | 未確認 | CWE-190 | Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes th |
| CVE-2026-41606 | Modified | 未確認 | CWE-606, CWE-674 | Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. |
| CVE-2026-41607 | Modified | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. |
| CVE-2026-4162 | Deferred | 未確認 | CWE-862 | The Gravity SMTP plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.4. This is due to the plugin not properly verifying that a user i |
| CVE-2026-41635 | Analyzed | 未確認 | CWE-502 | Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types) does not check the class at all, bypassing the classname al |
| CVE-2026-41636 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which |
| CVE-2026-41649 | Analyzed | 未確認 | CWE-639 | Outline is a service that allows for collaborative documentation. The `shares.create` API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct obje |
| CVE-2026-41651 | Modified | 未確認 | CWE-367 | PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including ver |
| CVE-2026-41664 | Analyzed | 未確認 | CWE-190 | Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes. Affected version is prior to commit 1 |
| CVE-2026-41665 | Analyzed | 未確認 | CWE-190 | Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version |
| CVE-2026-41666 | Analyzed | 未確認 | CWE-190 | Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation. Affected version is prior to commit 1 |
| CVE-2026-41667 | Analyzed | 未確認 | CWE-190 | Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes. Affected version is prior to comm |
| CVE-2026-41676 | Analyzed | 未確認 | CWE-131, CWE-787 | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) sets len = buf.len() and passes i |
| CVE-2026-41677 | Analyzed | 未確認 | CWE-125, CWE-1284 | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the us |
| CVE-2026-41678 | Analyzed | 未確認 | CWE-787 | rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() contains an incorrect assertion: it checks that out.len() + 8 |
| CVE-2026-41679 | Analyzed | 未確認 | CWE-1188, CWE-287, CWE-862 | Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote |
| CVE-2026-41680 | Analyzed | 未確認 | CWE-400, CWE-674, CWE-835 | Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) vulnerability exists in marked. By providing a specific 3-byte input sequence a |
| CVE-2026-41681 | Analyzed | 未確認 | CWE-121 | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx) to the out buffer. I |
| CVE-2026-4178 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-41873 | Modified | 未確認 | CWE-444 | ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover. This |
| CVE-2026-41882 | Analyzed | 未確認 | CWE-59 | In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server |
| CVE-2026-41894 | Deferred | 未確認 | CWE-22 | SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check (IsSensitivePath) but did not address the root |
| CVE-2026-41898 | Analyzed | 未確認 | CWE-126, CWE-130 | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set |
| CVE-2026-41907 | Analyzed | 未確認 | CWE-787, CWE-823 | uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or lar |
| CVE-2026-41908 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.20 contains a scope enforcement bypass vulnerability in the assistant-media route that allows trusted-proxy callers without operator.read scope to access pro |
| CVE-2026-41909 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.20 contains an improper authorization vulnerability in paired-device pairing management that allows limited-scope sessions to enumerate and act on pairing re |
| CVE-2026-41910 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.8 omits owner-only enforcement for cross-channel allowlist writes in the /allowlist endpoint. An authorized non-owner sender can bypass access controls to pe |
| CVE-2026-41911 | Analyzed | 未確認 | CWE-22 | OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploi |
| CVE-2026-41912 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.4.8 contains a server-side request forgery policy bypass vulnerability allowing attackers to trigger navigations bypassing normal SSRF checks. Attackers can ex |
| CVE-2026-41913 | Analyzed | 未確認 | CWE-362 | OpenClaw before 2026.4.4 contains a race condition vulnerability in shared-secret authentication that allows concurrent asynchronous requests to bypass the per-key rate-limit budge |
| CVE-2026-41914 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in QQ Bot media download paths that bypass SSRF protection. Attackers can exploit unprotected media fe |
| CVE-2026-41915 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.4.8 fails to remove git plumbing environment variables from the execution environment before host exec operations. Attackers can exploit this by setting GIT_DI |
| CVE-2026-41916 | Analyzed | 未確認 | CWE-613 | OpenClaw before 2026.4.8 contains an authentication state management vulnerability where the resolvedAuth closure becomes stale after configuration reload. Newly accepted gateway c |
| CVE-2026-41940 | Analyzed | 掲載 | CWE-306 | cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the |
| CVE-2026-41952 | Deferred | 未確認 | CWE-123 | Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Clo |
| CVE-2026-41988 | Analyzed | 未確認 | CWE-670 | uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, |
| CVE-2026-41989 | Modified | 未確認 | CWE-787 | Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt. |
| CVE-2026-41990 | Analyzed | 未確認 | CWE-787 | Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data. |
| CVE-2026-42033 | Modified | 未確認 | CWE-1321, CWE-915 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios read |
| CVE-2026-42034 | Analyzed | 未確認 | CWE-770 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, for stream request bodies, maxBodyLength is bypassed when maxRedirects is set to 0 (na |
| CVE-2026-42035 | Analyzed | 未確認 | CWE-113, CWE-1321 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, a prototype pollution gadget exists in the Axios HTTP adapter (lib/adapters/http.js) t |
| CVE-2026-42036 | Analyzed | 未確認 | CWE-770 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when responseType: 'stream' is used, Axios returns the response stream without enforci |
| CVE-2026-42037 | Analyzed | 未確認 | CWE-93 | Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.1, the FormDataPart constructor in lib/helpers/formDataToStream.js interpolates value.ty |
| CVE-2026-42038 | Analyzed | 未確認 | CWE-918 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, he fix for no_proxy hostname normalization bypass is incomplete. When no_proxy=localho |
| CVE-2026-42039 | Modified | 未確認 | CWE-674, CWE-770 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested va |
| CVE-2026-42040 | Analyzed | 未確認 | CWE-116, CWE-626 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode() function in lib/helpers/AxiosURLSearchParams.js contains a character mapp |
| CVE-2026-42041 | Modified | 未確認 | CWE-1321, CWE-287, CWE-915 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows a |
| CVE-2026-42042 | Analyzed | 未確認 | CWE-183, CWE-201 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library's XSRF token protection logic uses JavaScript truthy/falsy semantics |
| CVE-2026-42043 | Modified | 未確認 | CWE-183, CWE-441, CWE-918 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address i |
| CVE-2026-42044 | Modified | 未確認 | CWE-1321, CWE-915 | Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows a |
| CVE-2026-42095 | Deferred | 未確認 | CWE-306 | bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL. |
| CVE-2026-42167 | Analyzed | 未確認 | CWE-89 | mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U |
| CVE-2026-42171 | Analyzed | 未確認 | CWE-427 | NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they |
| CVE-2026-42198 | Modified | 未確認 | CWE-770 | pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 authent |
| CVE-2026-42248 | Analyzed | 未確認 | CWE-494 | Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike other platforms, the Windows implementation of the update verifi |
| CVE-2026-42249 | Analyzed | 未確認 | CWE-22, CWE-494 | Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers. When downloading up |
| CVE-2026-42254 | Awaiting Analysis | 未確認 | CWE-706 | Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response. |
| CVE-2026-42255 | Analyzed | 未確認 | CWE-684 | Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation. |
| CVE-2026-42363 | Deferred | 未確認 | CWE-656 | An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to crede |
| CVE-2026-42371 | Analyzed | 未確認 | CWE-197 | uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes. |
| CVE-2026-42377 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms Pro: fr |
| CVE-2026-42379 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3. |
| CVE-2026-42410 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows DOM-Based XSS.This is |
| CVE-2026-42412 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP User Frontend: from n |
| CVE-2026-42420 | Analyzed | 未確認 | CWE-770 | OpenClaw before 2026.4.8 contains improper input validation in base64 decode paths that allocate memory before enforcing decoded-size limits. Attackers can exploit multiple code pa |
| CVE-2026-42421 | Analyzed | 未確認 | CWE-613 | OpenClaw before 2026.4.8 contains a session management vulnerability where existing WebSocket sessions survive shared gateway token rotation. Attackers can maintain unauthorized ac |
| CVE-2026-42422 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.8 contains a role bypass vulnerability in the device.token.rotate function that allows minting tokens for unapproved roles. Attackers can bypass device role- |
| CVE-2026-42423 | Analyzed | 未確認 | CWE-636 | OpenClaw before 2026.4.8 contains an approval-timeout fallback mechanism that bypasses strictInlineEval explicit-approval requirements on gateway and node exec hosts. Attackers can |
| CVE-2026-42424 | Analyzed | 未確認 | CWE-73 | OpenClaw before 2026.4.8 treats shared reply MEDIA paths as trusted, allowing crafted references to trigger cross-channel local file exfiltration. Attackers can exploit this by cra |
| CVE-2026-42426 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.8 contains an improper authorization vulnerability where the node.pair.approve method accepts operator.write scope instead of the narrower operator.pairing s |
| CVE-2026-42427 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.4.8 contains a remote code execution vulnerability caused by missing environment variable denylist entries for HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPP |
| CVE-2026-42428 | Analyzed | 未確認 | CWE-353 | OpenClaw versions before 2026.4.8 fail to enforce integrity verification on downloaded plugin archives. Attackers can install malicious or tampered plugin packages without detectio |
| CVE-2026-42429 | Modified | 未確認 | CWE-863 | OpenClaw before 2026.4.8 contains a privilege escalation vulnerability in the gateway plugin HTTP authentication mechanism that escalates identity-bearing operator.read requests to |
| CVE-2026-42430 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in Playwright redirect handling that allows attackers to bypass strict SSRF checks. Attackers can expl |
| CVE-2026-42431 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invoke(browser.proxy) that allows mutation of persistent browser profiles. Attackers can exploit this path |
| CVE-2026-42432 | Modified | 未確認 | CWE-863 | OpenClaw before 2026.4.8 contains a privilege escalation vulnerability allowing previously paired nodes to reconnect with exec-capable commands without the operator.admin scope req |
| CVE-2026-42510 | Modified | 未確認 | CWE-829 | OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface. |
| CVE-2026-42511 | Modified | 未確認 | CWE-149 | The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequ |
| CVE-2026-42512 | Modified | 未確認 | CWE-122 | As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers. The code which expands the array incorrectly calculates its |
| CVE-2026-42513 | Deferred | 未確認 | This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status. A remote attacker cou | |
| CVE-2026-42514 | Deferred | 未確認 | CWE-319 | This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses. A remote attacker could exploit this vulnerability by intercepting API responses c |
| CVE-2026-42515 | Deferred | 未確認 | CWE-639 | This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability by manipulating para |
| CVE-2026-42516 | Deferred | 未確認 | CWE-639 | This vulnerability exists in e-Sushrut due to improper authorization checks during resource access. An authenticated attacker could exploit this vulnerability by manipulating encod |
| CVE-2026-42517 | Deferred | 未確認 | CWE-639 | This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this vulnerability by dec |
| CVE-2026-42518 | Deferred | 未確認 | CWE-321 | This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript. An unauthenticated remote attacker co |
| CVE-2026-42519 | Analyzed | 未確認 | CWE-862 | A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission to enumerate pending and approved Script |
| CVE-2026-42520 | Analyzed | 未確認 | CWE-22 | Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to |
| CVE-2026-42521 | Analyzed | 未確認 | CWE-502 | Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless constructors of classes specified in configuration when deserializing i |
| CVE-2026-42522 | Analyzed | 未確認 | CWE-862 | A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an attacker-specifi |
| CVE-2026-42523 | Analyzed | 未確認 | CWE-79 | Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for GITScm polli |
| CVE-2026-42524 | Analyzed | 未確認 | CWE-79 | Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the legacy wrapper file, resulting in a stored cross-site scripting (XSS) vulnerability exploitabl |
| CVE-2026-42525 | Analyzed | 未確認 | CWE-601 | Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks |
| CVE-2026-42615 | Awaiting Analysis | 未確認 | CWE-79 | GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring. |
| CVE-2026-42641 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image allows Server Side Request Forgery.This issue affects Share This Image: from n/a through |
| CVE-2026-42642 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through <= |
| CVE-2026-42643 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widget image-widget allows Stored XSS.This issue affects Image |
| CVE-2026-42644 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue aff |
| CVE-2026-42645 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inve |
| CVE-2026-42646 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPress simple-tags allows Blind SQL Injection.This issue affect |
| CVE-2026-42648 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff |
| CVE-2026-42652 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows Reflected XSS.This issue |
| CVE-2026-4272 | Awaiting Analysis | 未確認 | CWE-306 | Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Base(Ingenic x10 |
| CVE-2026-4277 | Analyzed | 未確認 | CWE-862 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged `POST` |
| CVE-2026-4279 | Deferred | 未確認 | CWE-79 | The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-button' shortcode in all versions up to, and including, 8.2.0. |
| CVE-2026-42798 | Deferred | 未確認 | CWE-190 | Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c. |
| CVE-2026-42799 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. |
| CVE-2026-4280 | Deferred | 未確認 | CWE-22 | The Breaking News WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3. This is due to the brnwp_ajax_form AJAX endpoint lacking |
| CVE-2026-42800 | Analyzed | 未確認 | CWE-476 | NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated with program fi |
| CVE-2026-4282 | Modified | 未確認 | CWE-653 | A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacke |
| CVE-2026-4292 | Analyzed | 未確認 | CWE-862 | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using `ModelAdmin.list_editable` incorrectly allowed new instances to |
| CVE-2026-4296 | Analyzed | 未確認 | CWE-185 | An incorrect regular expression vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI validation. An attacker with knowledg |
| CVE-2026-4299 | Deferred | 未確認 | CWE-862 | The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.2.6. This is due to a missing capability check in the hea |
| CVE-2026-4300 | Deferred | 未確認 | CWE-79 | The Robo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Loading Label' setting in all versions up to, and including, 5.1.3. The plugin uses a cu |
| CVE-2026-4303 | Deferred | 未確認 | CWE-79 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wsm_showDayStatsGraph' shortcode in all versions u |
| CVE-2026-4305 | Deferred | 未確認 | CWE-79 | The Royal WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpr_pending_template' parameter in all versions up to, and |
| CVE-2026-4313 | Deferred | 未確認 | CWE-79 | AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms. Authenticated attacker can replace the value of the text field in the HTTP POST request. Improper par |
| CVE-2026-4325 | Analyzed | 未確認 | CWE-653 | A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an attacker to delete arbi |
| CVE-2026-4326 | Deferred | 未確認 | CWE-862 | The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforce |
| CVE-2026-4330 | Deferred | 未確認 | CWE-639 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to authorization bypass through user-controlled key in all versions up to, and including, 8.8 |
| CVE-2026-4332 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, |
| CVE-2026-4333 | Deferred | 未確認 | CWE-79 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'skin' attribute of the learn_press_courses shortcode in all version |
| CVE-2026-4336 | Deferred | 未確認 | CWE-79 | The Ultimate FAQ Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via FAQ content in all versions up to, and including, 2.4.7. This is due to the plugin |
| CVE-2026-4338 | Analyzed | 未確認 | The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to be displayed, allowed unauthenticated users to access drafts/scheduled/pending posts | |
| CVE-2026-4341 | Deferred | 未確認 | CWE-79 | The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'follow_us_text' setting of the Mount widget in all versions up to |
| CVE-2026-4344 | Analyzed | 未確認 | CWE-79 | A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) |
| CVE-2026-4345 | Analyzed | 未確認 | CWE-79 | A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop applic |
| CVE-2026-4347 | Deferred | 未確認 | CWE-22 | The MW WP Form plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation via the 'generate_user_filepath' function and the 'move_temp_fil |
| CVE-2026-4350 | Deferred | 未確認 | CWE-22 | The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the `PMCS::action_han |
| CVE-2026-4351 | Deferred | 未確認 | CWE-22 | The Perfmatters plugin for WordPress is vulnerable to arbitrary file overwrite via path traversal in all versions up to, and including, 2.5.9. This is due to the `PMCS::action_hand |
| CVE-2026-4352 | Deferred | 未確認 | CWE-89 | The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT) REST API search endpoint in all versions up to, and including, 3.8.6.1. This is |
| CVE-2026-4353 | Deferred | 未確認 | CWE-79 | The CI HUB Connector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the `cihub_metadata` shortcode in all versions up to, and including |
| CVE-2026-4364 | Analyzed | 未確認 | CWE-79 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S |
| CVE-2026-4365 | Deferred | 未確認 | CWE-862 | The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the `delete_question_answer()` function in all versions up to, |
| CVE-2026-4369 | Analyzed | 未確認 | CWE-79 | A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scriptin |
| CVE-2026-4370 | Analyzed | 未確認 | CWE-295, CWE-306 | A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the internal Dqlite database cluster fails to perform proper TLS clie |
| CVE-2026-4374 | Modified | 未確認 | CWE-611 | Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observab |
| CVE-2026-4379 | Deferred | 未確認 | CWE-79 | The LightPress Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `group` attribute in the `[gallery]` shortcode in all versions up to, and includin |
| CVE-2026-4388 | Deferred | 未確認 | CWE-79 | The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Matrix field (Text Box input type) in form submissions in all versions up to, and |
| CVE-2026-4394 | Deferred | 未確認 | CWE-79 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Credit Card field's 'Card Type' sub-field (`input_<id>.4`) in all versions up to, and in |
| CVE-2026-4398 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authentica |
| CVE-2026-4401 | Deferred | 未確認 | CWE-352 | The Download Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in the `actions_handler()` and `bulk_actions_handler()` methods in `class-dlm-downloads-path.p |
| CVE-2026-4402 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-4406 | Deferred | 未確認 | CWE-79 | The Gravity Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `form_ids` parameter in the `gform_get_config` AJAX action in all versions up to, and |
| CVE-2026-4420 | Analyzed | 未確認 | CWE-79 | Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its page creating functionality. An authenticated attacker with page creation privileges (such as Author, Editor, or Ad |
| CVE-2026-4429 | Deferred | 未確認 | CWE-79 | The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_name' and 'file_color_list' shortcode attribute of the [osm_map_v3] shortc |
| CVE-2026-4432 | Deferred | 未確認 | The YITH WooCommerce Wishlist WordPress plugin before 4.13.0 does not properly validate wishlist ownership in the save_title() AJAX handler before allowing wishlist renaming operat | |
| CVE-2026-4436 | Awaiting Analysis | 未確認 | CWE-306 | A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little odorant is |
| CVE-2026-4479 | Deferred | 未確認 | CWE-79 | The WholeSale Products Dynamic Pricing Management WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and includ |
| CVE-2026-4482 | Analyzed | 未確認 | CWE-732 | The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users have read and execute access). For the cli |
| CVE-2026-4483 | Awaiting Analysis | 未確認 | CWE-782 | An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers. The affected utility, MxGe |
| CVE-2026-4498 | Analyzed | 未確認 | CWE-250 | Execution with Unnecessary Privileges (CWE-250) in Kibana’s Fleet plugin debug route handlers can lead reading index data beyond their direct Elasticsearch RBAC scope via Privilege |
| CVE-2026-4502 | Analyzed | 未確認 | CWE-22 | IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL reques |
| CVE-2026-4503 | Analyzed | 未確認 | CWE-639 | IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key. |
| CVE-2026-4512 | Deferred | 未確認 | CWE-79 | The reCaptcha by WebDesignBy WordPress plugin before 2.0 does not sanitize or escape the Site Key setting before outputting it in a JavaScript string context via the grecaptcha_js( |
| CVE-2026-4525 | Modified | 未確認 | CWE-201 | If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to |
| CVE-2026-4631 | Awaiting Analysis | 未確認 | CWE-78 | Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network ac |
| CVE-2026-4634 | Modified | 未確認 | CWE-1050 | A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the |
| CVE-2026-4636 | Modified | 未確認 | CWE-551 | A flaw was found in Keycloak. An authenticated user with the uma_protection role can bypass User-Managed Access (UMA) policy validation. This allows the attacker to include resourc |
| CVE-2026-4654 | Deferred | 未確認 | CWE-639 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 6.3.7. This is du |
| CVE-2026-4655 | Deferred | 未確認 | CWE-79 | The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SVG Image Widget in versions up to and including 8.4.2. This is due |
| CVE-2026-4656 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-4659 | Deferred | 未確認 | CWE-22 | The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via the Repeater JSON/CSV URL parameter in versions up to, and including, 2.0.6. This |
| CVE-2026-4660 | Awaiting Analysis | 未確認 | CWE-200, CWE-22 | HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CV |
| CVE-2026-4664 | Deferred | 未確認 | CWE-287 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.103.0. This is due to the `create_review_pe |
| CVE-2026-4666 | Deferred | 未確認 | CWE-862 | The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the use of `extract($args, EXTR_OVERWRITE)` on user-controlled input in the `edit()` |
| CVE-2026-4667 | Awaiting Analysis | 未確認 | CWE-250 | HP System Optimizer might potentially be vulnerable to escalation of privilege. HP is releasing an update to mitigate this potential vulnerability. |
| CVE-2026-4668 | Deferred | 未確認 | CWE-89 | The Booking for Appointments and Events Calendar - Amelia plugin for WordPress is vulnerable to SQL Injection via the `sort` parameter in the payments listing endpoint in all versi |
| CVE-2026-4670 | Analyzed | 未確認 | CWE-305 | Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 be |
| CVE-2026-4682 | Awaiting Analysis | 未確認 | CWE-121 | Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests are |
| CVE-2026-4740 | Modified | 未確認 | CWE-295 | A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal |
| CVE-2026-4748 | Analyzed | 未確認 | CWE-1023, CWE-480, CWE-754 | A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved to be silently |
| CVE-2026-4759 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-4785 | Deferred | 未確認 | CWE-79 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button_caption' parameter in the [lat |
| CVE-2026-4786 | Awaiting Analysis | 未確認 | CWE-77, CWE-88 | Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands |
| CVE-2026-4788 | Analyzed | 未確認 | CWE-532 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.37 stores sensitive information in log files that could be read by a local user. |
| CVE-2026-4801 | Deferred | 未確認 | CWE-79 | The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via external iCal feed data in all versions up to, and including, 3.1 |
| CVE-2026-4805 | Deferred | 未確認 | CWE-79 | The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.0 This is due to insufficient input sanitization and output esc |
| CVE-2026-4808 | Deferred | 未確認 | CWE-434 | The Gerador de Certificados – DevApps plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the moveUploadedFile() function in all ver |
| CVE-2026-4810 | Awaiting Analysis | 未確認 | CWE-306 | A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) versions 1.7.0 (and 2.0.0a1) through 1.28.1 (and 2.0.0a2) on Python (OSS), Cloud Run |
| CVE-2026-4812 | Deferred | 未確認 | CWE-862 | The Advanced Custom Fields (ACF) plugin for WordPress is vulnerable to Missing Authorization to Arbitrary Post/Page Disclosure in versions up to and including 6.7.0. This is due to |
| CVE-2026-4817 | Deferred | 未確認 | CWE-89 | The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to Time-based Blind SQL Injection via the 'order' and 'orderby' parameters |
| CVE-2026-4820 | Analyzed | 未確認 | CWE-319, CWE-614 | IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values b |
| CVE-2026-4821 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it was published in error. | |
| CVE-2026-4828 | Analyzed | 未確認 | CWE-1390 | Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass multi-factor authenti |
| CVE-2026-4829 | Analyzed | 未確認 | CWE-287 | Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other users, including |
| CVE-2026-4832 | Undergoing Analysis | 未確認 | CWE-798 | CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrog |
| CVE-2026-4837 | Analyzed | 未確認 | CWE-95 | An eval() injection vulnerability in the Rapid7 Insight Agent beaconing logic for Linux versions could theoretically allow an attacker to achieve remote code execution as root via |
| CVE-2026-4852 | Deferred | 未確認 | CWE-79 | The Image Source Control Lite – Show Image Credits and Captions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Image Source' attachment field in all ver |
| CVE-2026-4853 | Deferred | 未確認 | CWE-22 | The JetBackup – Backup, Restore & Migrate plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary Directory Deletion in versions up to and including 3.1.19.8. Thi |
| CVE-2026-4857 | Awaiting Analysis | 未確認 | CWE-863 | IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Page |
| CVE-2026-4871 | Deferred | 未確認 | CWE-79 | The Sports Club Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' attributes of the `scm_member_data` shortcode in all versi |
| CVE-2026-4872 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-4878 | Modified | 未確認 | CWE-367 | A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker w |
| CVE-2026-4880 | Deferred | 未確認 | CWE-269 | The Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) plugin for WordPress is vulnerable to privilege escalation via insecure token-b |
| CVE-2026-4895 | Deferred | 未確認 | CWE-79 | The GreenShift - Animation and Page Builder Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 12.8.9 This is due to insuffi |
| CVE-2026-4896 | Deferred | 未確認 | CWE-639 | The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versi |
| CVE-2026-4901 | Modified | 未確認 | CWE-532 | AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combin |
| CVE-2026-4911 | Deferred | 未確認 | CWE-472 | The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to, and including, 1.7.06 This is due to the intentForStripe() function passing user-con |
| CVE-2026-4913 | Awaiting Analysis | 未確認 | CWE-424 | Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled. |
| CVE-2026-4914 | Awaiting Analysis | 未確認 | CWE-79 | Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required. |
| CVE-2026-4916 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated |
| CVE-2026-4917 | Analyzed | 未確認 | CWE-22 | IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot d |
| CVE-2026-4918 | Analyzed | 未確認 | CWE-79 | IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI th |
| CVE-2026-4919 | Analyzed | 未確認 | CWE-79 | IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus alte |
| CVE-2026-4922 | Analyzed | 未確認 | CWE-352 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an unauthentic |
| CVE-2026-4924 | Analyzed | 未確認 | CWE-1390 | Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass mult |
| CVE-2026-4925 | Analyzed | 未確認 | CWE-862 | Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove their own multi-factor |
| CVE-2026-4927 | Analyzed | 未確認 | CWE-201 | Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privileges to obtain other users OTP keys via an authenticated AP |
| CVE-2026-4931 | Analyzed | 未確認 | CWE-681 | Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost. |
| CVE-2026-4947 | Analyzed | 未確認 | CWE-284 | Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process. Under certain conditions, this issue could have allowed an |
| CVE-2026-4949 | Deferred | 未確認 | CWE-862 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Missing Authorizatio |
| CVE-2026-4977 | Deferred | 未確認 | CWE-862 | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to Improper Access Control in all versions up to, and inc |
| CVE-2026-4979 | Deferred | 未確認 | CWE-918 | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to blind Server-Side Request Forgery in all |
| CVE-2026-4989 | Analyzed | 未確認 | CWE-918 | Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform server-side request forgery (SSRF), potent |
| CVE-2026-5032 | Deferred | 未確認 | CWE-200 | The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3. This is due to the plugin bypassing its entire output buf |
| CVE-2026-5039 | Analyzed | 未確認 | CWE-1394 | TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the key predictable if d |
| CVE-2026-5050 | Deferred | 未確認 | CWE-347 | The Payment Gateway for Redsys & WooCommerce Lite plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 7.0.0 due |
| CVE-2026-5052 | Analyzed | 未確認 | CWE-918 | Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targe |
| CVE-2026-5053 | Analyzed | 未確認 | CWE-73 | NoMachine External Control of File Path Arbitrary File Deletion Vulnerability. This vulnerability allows local attackers to delete arbitrary files on affected installations of NoMa |
| CVE-2026-5054 | Analyzed | 未確認 | CWE-73 | NoMachine External Control of File Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMa |
| CVE-2026-5055 | Analyzed | 未確認 | CWE-427 | NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of N |
| CVE-2026-5058 | Awaiting Analysis | 未確認 | CWE-78 | aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-serv |
| CVE-2026-5059 | Awaiting Analysis | 未確認 | CWE-78 | aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws- |
| CVE-2026-5070 | Deferred | 未確認 | CWE-79 | The Vantage theme for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery block text content in versions up to, and including, 1.20.32 due to insufficient output esc |
| CVE-2026-5080 | Analyzed | 未確認 | CWE-338, CWE-340 | Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The session id is generated from summing the character codepoints of the absolute path |
| CVE-2026-5082 | Analyzed | 未確認 | CWE-338, CWE-340 | Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id. The generate_session_id function will attempt to read bytes from the /de |
| CVE-2026-5083 | Analyzed | 未確認 | CWE-338, CWE-340 | Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, |
| CVE-2026-5085 | Analyzed | 未確認 | CWE-338, CWE-340 | Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSessionID method returns an MD5 digest seeded by the epoch time, a random hash refe |
| CVE-2026-5086 | Analyzed | 未確認 | CWE-208 | Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then d |
| CVE-2026-5088 | Analyzed | 未確認 | CWE-338 | Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The _make_salt and _make_salt_bcrypt methods will attept to load Crypt::URando |
| CVE-2026-5131 | Awaiting Analysis | 未確認 | CWE-918 | GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This a |
| CVE-2026-5140 | Deferred | 未確認 | CWE-93 | Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. T |
| CVE-2026-5141 | Deferred | 未確認 | CWE-266, CWE-269, CWE-284 | Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Cent |
| CVE-2026-5144 | Deferred | 未確認 | CWE-269 | The BuddyPress Groupblog plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.3. This is due to the group blog settings handler acce |
| CVE-2026-5160 | Analyzed | 未確認 | CWE-79 | Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation and normalizati |
| CVE-2026-5161 | Deferred | 未確認 | CWE-59 | Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This is |
| CVE-2026-5162 | Deferred | 未確認 | CWE-79 | The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagram_follow_text' setting in all versions up |
| CVE-2026-5166 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allow |
| CVE-2026-5167 | Deferred | 未確認 | CWE-639 | The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in versions up to an |
| CVE-2026-5169 | Deferred | 未確認 | CWE-79 | The Inquiry Form to Posts or Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Form Header' field in versions up to and including 1.0. This is due to |
| CVE-2026-5173 | Analyzed | 未確認 | CWE-749 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticat |
| CVE-2026-5174 | Analyzed | 未確認 | CWE-20 | Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, fr |
| CVE-2026-5175 | Analyzed | 未確認 | CWE-862 | Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenticated attacker to delete their own configured MFA factors an |
| CVE-2026-5187 | Analyzed | 未確認 | CWE-122, CWE-787 | Two potential heap out-of-bounds write locations existed in DecodeObjectId() in wolfcrypt/src/asn.c. First, a bounds check only validates one available slot before writing two OID |
| CVE-2026-5188 | Analyzed | 未確認 | CWE-191 | An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN) extension of X.509 certificates. A malformed certificate can specify an entry length la |
| CVE-2026-5189 | Analyzed | 未確認 | CWE-798 | CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorize |
| CVE-2026-5194 | Modified | 未確認 | CWE-295 | Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accept |
| CVE-2026-5199 | Awaiting Analysis | 未確認 | CWE-639 | A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the |
| CVE-2026-5207 | Deferred | 未確認 | CWE-89 | The LifterLMS plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 9.2.1. This is due to insufficient escaping on the |
| CVE-2026-5208 | Analyzed | 未確認 | CWE-78 | Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names |
| CVE-2026-5217 | Deferred | 未確認 | CWE-79 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, |
| CVE-2026-5226 | Deferred | 未確認 | CWE-79 | The Optimole – Optimize Images in Real Time plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL paths in versions up to, and including, 4.2.3 This is due t |
| CVE-2026-5231 | Deferred | 未確認 | CWE-79 | The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_source' parameter in all versions up to, and including, 14.16.4. This is due to ins |
| CVE-2026-5234 | Deferred | 未確認 | CWE-639 | The LatePoint plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.3.2. The vulnerability exists because the OsStripeConne |
| CVE-2026-5238 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Payroll Management System 1.0. Affected by this issue is some unknown functionality of the file /view_employee.php of the component P |
| CVE-2026-5240 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /admin_state.php. The manipulation of the argume |
| CVE-2026-5244 | Analyzed | 未確認 | CWE-119, CWE-122 | A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoose.c of the component TLS 1.3 Handler. Such manipulation |
| CVE-2026-5245 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c of the component mDNS Record Handler. Performing a man |
| CVE-2026-5246 | Analyzed | 未確認 | CWE-285, CWE-639 | A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of the file mongoose.c of the component P-384 Public Key Handle |
| CVE-2026-5248 | Deferred | 未確認 | CWE-913, CWE-915 | A vulnerability has been found in gougucms 4.08.18. This affects the function reg_submit of the file gougucms-master\app\home\controller\Login.php of the component User Registratio |
| CVE-2026-5249 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in gougucms 4.08.18. This impacts an unknown function of the file \gougucms-master\app\admin\view\user\record.html of the component Record Endpoint. Perfo |
| CVE-2026-5250 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-5251 | Deferred | 未確認 | CWE-913, CWE-915 | A vulnerability was identified in z-9527 admin 1.0/2.0. This impacts an unknown function of the file /server/routes/user.js of the component User Update Endpoint. Such manipulation |
| CVE-2026-5252 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in z-9527 admin 1.0/2.0. Affected is an unknown function of the file /server/routes/message.js of the component Message Create Endpoint. Perform |
| CVE-2026-5253 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in bufanyun HotGo 1.0/2.0. Affected by this vulnerability is an unknown functionality of the file /web/src/layout/components/Header/MessageList.vue o |
| CVE-2026-5254 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. Affected by this issue is some unknown functionality of the file /ui/app/components/AppJsonTreeView.v |
| CVE-2026-5255 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipula |
| CVE-2026-5256 | Analyzed | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulat |
| CVE-2026-5257 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handl |
| CVE-2026-5258 | Deferred | 未確認 | CWE-22 | A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function _get_file of the file iopaint/file_manager/file_manager.py of the component File Manager. Performing a |
| CVE-2026-5259 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affected element is an unknown function of the file frostmourne-monitor/src/main/java/com/autohome/frostmo |
| CVE-2026-5261 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8. The impacted element is the function uploadFileToIIS of the file /Base/BaseHandler.ashx. The manipula |
| CVE-2026-5262 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.1.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could |
| CVE-2026-5263 | Modified | 未確認 | CWE-295 | URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA co |
| CVE-2026-5264 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overflow. |
| CVE-2026-5265 | Awaiting Analysis | 未確認 | CWE-130 | When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self- |
| CVE-2026-5271 | Analyzed | 未確認 | CWE-427 | pymanager included the current working directory in sys.path meaning modules could be shadowed by modules in the current working directory. As a result, if a user executes a pymana |
| CVE-2026-5272 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-5273 | Analyzed | 未確認 | CWE-416 | Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-5274 | Analyzed | 未確認 | CWE-472 | Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: |
| CVE-2026-5275 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severi |
| CVE-2026-5276 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a c |
| CVE-2026-5277 | Analyzed | 未確認 | CWE-472 | Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory |
| CVE-2026-5278 | Analyzed | 未確認 | CWE-416 | Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security sever |
| CVE-2026-5279 | Modified | 未確認 | CWE-120 | Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-5280 | Modified | 未確認 | CWE-416 | Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-5281 | Analyzed | 掲載 | CWE-416 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page |
| CVE-2026-5282 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium securi |
| CVE-2026-5283 | Analyzed | 未確認 | CWE-285, CWE-346, CWE-352 | Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-5284 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page |
| CVE-2026-5285 | Modified | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-5286 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-5287 | Modified | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security sever |
| CVE-2026-5288 | Analyzed | 未確認 | CWE-416 | Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-5289 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-5290 | Analyzed | 未確認 | CWE-416 | Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi |
| CVE-2026-5291 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a craft |
| CVE-2026-5292 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium securi |
| CVE-2026-5295 | Analyzed | 未確認 | CWE-121 | A stack buffer overflow exists in wolfSSL's PKCS7 implementation in the wc_PKCS7_DecryptOri() function in wolfcrypt/src/pkcs7.c. When processing a CMS EnvelopedData message contain |
| CVE-2026-5299 | Analyzed | 未確認 | CWE-674 | ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5300 | Analyzed | 未確認 | CWE-306 | Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests |
| CVE-2026-5301 | Analyzed | 未確認 | CWE-79 | Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entries |
| CVE-2026-5302 | Analyzed | 未確認 | CWE-942 | CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites |
| CVE-2026-5306 | Deferred | 未確認 | The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks when the ema | |
| CVE-2026-5307 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-5310 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was identified in Enter Software Iperius Backup up to 8.7.2. This impacts an unknown function of the file IperiusAccounts.ini. Such manipulation leads to use of har |
| CVE-2026-5311 | Analyzed | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, |
| CVE-2026-5312 | Analyzed | 未確認 | CWE-266, CWE-284 | A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3 |
| CVE-2026-5313 | Deferred | 未確認 | CWE-404 | A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function stbi__gif_load_next in the library stb_image.h of the component GIF Decoder. Such manipul |
| CVE-2026-5314 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a |
| CVE-2026-5315 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in Nothings stb up to 1.26. The affected element is the function stbtt__buf_get8 in the library stb_truetype.h of the component TTF File Handler. Exe |
| CVE-2026-5316 | Analyzed | 未確認 | CWE-400, CWE-770 | A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setup_free of the file stb_vorbis.c. The manipulation leads to allocation of resourc |
| CVE-2026-5317 | Analyzed | 未確認 | CWE-119, CWE-787 | A security flaw has been discovered in Nothings stb up to 1.22. This affects the function start_decoder of the file stb_vorbis.c. The manipulation results in out-of-bounds write. T |
| CVE-2026-5318 | Analyzed | 未確認 | CWE-119, CWE-787 | A weakness has been identified in LibRaw up to 0.22.0. This impacts the function HuffTable::initval of the file src/decompressors/losslessjpeg.cpp of the component JPEG DHT Parser. |
| CVE-2026-5319 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file /navbar.php. Such manipulation of the ar |
| CVE-2026-5320 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is an unknown functionality of the file /api/vanna/v2/ of the component Chat API Endpoint |
| CVE-2026-5321 | Deferred | 未確認 | CWE-346, CWE-942 | A flaw has been found in vanna-ai vanna up to 2.0.2. Affected by this issue is some unknown functionality of the component FastAPI/Flask Server. Executing a manipulation can lead t |
| CVE-2026-5322 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d. This affects the function Requ |
| CVE-2026-5323 | Deferred | 未確認 | CWE-918 | A vulnerability was found in priyankark a11y-mcp up to 1.0.5. This vulnerability affects the function A11yServer of the file src/index.js. The manipulation results in server-side r |
| CVE-2026-5325 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects some unknown processing of the file /create-ticket.php of th |
| CVE-2026-5326 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in SourceCodester Leave Application System 1.0. Impacted is an unknown function of the file /index.php?page=manage_user of the component User Informa |
| CVE-2026-5327 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1. The affected element is the function handleGetDiskUsage of the file src/index.ts. Performing a man |
| CVE-2026-5328 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/co |
| CVE-2026-5329 | Analyzed | 未確認 | CWE-20 | Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server (primarily Linux |
| CVE-2026-5330 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_us |
| CVE-2026-5331 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in OpenCart 4.1.0.3. This affects an unknown part of the file installer.php of the component Extension Installer Page. Executing a manipulation can l |
| CVE-2026-5332 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Xiaopi Panel 1.0.0. This vulnerability affects unknown code of the file /demo.php of the component WAF Firewall. The manipulation of the argument |
| CVE-2026-5333 | Analyzed | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in DefaultFuction Content-Management-System 1.0. This issue affects some unknown processing of the file /admin/tools.php. The manipulation of th |
| CVE-2026-5334 | Analyzed | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit&id=3 of the component Param |
| CVE-2026-5338 | Analyzed | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in Tenda G103 1.0.0.5. The affected element is the function action_set_system_settings of the file system.lua of the component Setting Ha |
| CVE-2026-5339 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function action_set_net_settings of the file gpon.lua of the component Setting Handler. Performing a |
| CVE-2026-5342 | Analyzed | 未確認 | CWE-119, CWE-125 | A flaw has been found in LibRaw up to 0.22.0. This affects the function LibRaw::nikon_load_padded_packed_raw of the file src/decoders/decoders_libraw.cpp of the component TIFF/NEF. |
| CVE-2026-5344 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in Textpattern up to 4.9.1. Affected by this vulnerability is the function mt_uploadImage of the file rpc/TXP_RPCServer.php of the compon |
| CVE-2026-5346 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in huimeicloud hm_editor up to 2.2.3. Impacted is the function client.get of the file src/mcp-server.js of the component image-to-base64 Endpoint. Ex |
| CVE-2026-5347 | Deferred | 未確認 | CWE-862 | The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0. This is due to the absence of capability checks and nonce ve |
| CVE-2026-5349 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Trendnet TEW-657BRM 1.00.1. The affected element is the function add_apcdb of the file /setup.cgi. The manipulation of the argument mac_pc_dba lea |
| CVE-2026-5350 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Trendnet TEW-657BRM 1.00.1. The impacted element is the function update_pcdb of the file /setup.cgi. The manipulation of the argument mac_pc_ |
| CVE-2026-5351 | Analyzed | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Trendnet TEW-657BRM 1.00.1. This affects the function add_wps_client of the file /setup.cgi. This manipulation of the argument wl_enrolee_pin caus |
| CVE-2026-5352 | Analyzed | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Trendnet TEW-657BRM 1.00.1. This impacts the function Edit of the file /setup.cgi. Such manipulation of the argument pcdb_list leads t |
| CVE-2026-5353 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Trendnet TEW-657BRM 1.00.1. Affected is the function ping_test of the file /setup.cgi. Performing a manipulation of the argument c4_IPAddr results i |
| CVE-2026-5354 | Analyzed | 未確認 | CWE-77, CWE-78 | A flaw has been found in Trendnet TEW-657BRM 1.00.1. Affected by this vulnerability is the function vpn_connect of the file /setup.cgi. Executing a manipulation of the argument pol |
| CVE-2026-5355 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Trendnet TEW-657BRM 1.00.1. Affected by this issue is the function vpn_drop of the file /setup.cgi. The manipulation of the argument policy_name l |
| CVE-2026-5357 | Deferred | 未確認 | CWE-79 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sid' parameter of the 'wpdm_members' shortcode in versions up to and including 3.3.5 |
| CVE-2026-5358 | Rejected | 未確認 | Rejected reason: REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distribu | |
| CVE-2026-5359 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-5360 | Analyzed | 未確認 | CWE-843 | A vulnerability has been found in Free5GC 4.2.0. The affected element is an unknown function of the component aper. Such manipulation leads to type confusion. The attack may be lau |
| CVE-2026-5362 | Analyzed | 未確認 | CWE-79 | An authenticated attacker with permission to edit document content can store crafted HTML/JavaScript in a Document embed editable and cause script execution when the published page |
| CVE-2026-5363 | Analyzed | 未確認 | CWE-326 | Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation. The web interface encrypts the admin password |
| CVE-2026-5364 | Deferred | 未確認 | CWE-434 | The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.1.3. This is due to the plugin extr |
| CVE-2026-5367 | Awaiting Analysis | 未確認 | CWE-130 | A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client |
| CVE-2026-5368 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This |
| CVE-2026-5370 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in krayin laravel-crm up to 2.2. Impacted is the function composeMail of the file packages/Webkul/Admin/tests/e2e-pw/tests/mail/inbox.spec.ts of the |
| CVE-2026-5372 | Analyzed | 未確認 | CWE-89 | An issue that allowed a SQL injection attack vector related to saved queries (introduced in version 4.0.260123.0). This is an instance of CWE-89: Improper Neutralization of Special |
| CVE-2026-5373 | Analyzed | 未確認 | CWE-269 | An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved. This is an instance of CWE-269: Improper Privilege Management, and |
| CVE-2026-5374 | Analyzed | 未確認 | CWE-863 | An issue that allowed MCP agents to access remediation and asset information from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: In |
| CVE-2026-5375 | Analyzed | 未確認 | CWE-200 | An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved. This is an instance of CWE-200: Exposure of Sensiti |
| CVE-2026-5376 | Analyzed | 未確認 | CWE-613 | An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of R |
| CVE-2026-5377 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or pr |
| CVE-2026-5378 | Analyzed | 未確認 | CWE-863 | An issue that allowed administrators to create and update users outside of their authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authoriz |
| CVE-2026-5379 | Analyzed | 未確認 | CWE-863 | An issue that allowed MCP agents to access certificate information from outside of their authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect |
| CVE-2026-5380 | Analyzed | 未確認 | CWE-863 | An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insuffici |
| CVE-2026-5381 | Analyzed | 未確認 | CWE-863 | An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an esti |
| CVE-2026-5382 | Analyzed | 未確認 | CWE-863 | An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved. This is an instance of CWE-863: Incorrect Authorization |
| CVE-2026-5383 | Analyzed | 未確認 | CWE-863 | An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, an |
| CVE-2026-5384 | Analyzed | 未確認 | CWE-863 | An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorr |
| CVE-2026-5387 | Awaiting Analysis | 未確認 | CWE-862 | The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer (Administrator) roles, |
| CVE-2026-5392 | Analyzed | 未確認 | CWE-125 | Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length end-of-content verificat |
| CVE-2026-5393 | Analyzed | 未確認 | CWE-125 | Dual-Algorithm CertificateVerify out-of-bounds read. When processing a dual-algorithm CertificateVerify message, an out-of-bounds read can occur on crafted input. This can only occ |
| CVE-2026-5394 | Deferred | 未確認 | CWE-89 | An authenticated administrative user who can import or save DataObject class definitions can inject attacker-controlled composite index metadata and trigger unintended SQL executio |
| CVE-2026-5397 | Awaiting Analysis | 未確認 | CWE-427 | It has been identified that a vulnerability (CWE-427) exists in the UPS (Uninterruptible Power Supply) management application, whereby improper permissions on the installation dire |
| CVE-2026-5398 | Analyzed | 未確認 | CWE-416 | The implementation of TIOCNOTTY failed to clear a back-pointer from the structure representing the controlling terminal to the calling process' session. If the invoking process th |
| CVE-2026-5401 | Analyzed | 未確認 | CWE-674 | AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5402 | Modified | 未確認 | CWE-122 | TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution |
| CVE-2026-5406 | Analyzed | 未確認 | CWE-674 | FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5407 | Analyzed | 未確認 | CWE-835 | SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5408 | Analyzed | 未確認 | CWE-674 | BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5409 | Analyzed | 未確認 | CWE-674 | Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5412 | Analyzed | 未確認 | CWE-285 | In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade. An authenticated user can call the CloudSpec API method to extract the cloud cr |
| CVE-2026-5413 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in Newgen OmniDocs up to 12.0.00. Affected by this vulnerability is an unknown functionality of the file /omnidocs/GetWebApiConfiguration. The manipu |
| CVE-2026-5414 | Deferred | 未確認 | CWE-99 | A security flaw has been discovered in Newgen OmniDocs up to 12.0.00. Affected by this issue is some unknown functionality of the file /omnidocs/WebApiRequestRedirection. The manip |
| CVE-2026-5417 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in Dataease SQLbot up to 1.6.0. This issue affects the function get_es_data_by_http of the file backend/apps/db/es_engine.py of the component Elastic |
| CVE-2026-5418 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in appsmithorg appsmith up to 1.97. Impacted is the function computeDisallowedHosts of the file app/server/appsmith-interfaces/src/main/java/com/apps |
| CVE-2026-5420 | Deferred | 未確認 | CWE-320, CWE-321 | A security flaw has been discovered in Shinrays Games Goods Triple App up to 1.200. The affected element is an unknown function of the file jRwTX.java of the component cats.goods.s |
| CVE-2026-5425 | Deferred | 未確認 | CWE-79 | The Widgets for Social Photo Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'feed_data' parameter keys in all versions up to, and including, 1.7.9 d |
| CVE-2026-5426 | Awaiting Analysis | 未確認 | CWE-321, CWE-502 | Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanism |
| CVE-2026-5427 | Deferred | 未確認 | CWE-862 | The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 2.7.2. This is due to insufficient capability checks in the kubio_rest_pre_ins |
| CVE-2026-5428 | Deferred | 未確認 | CWE-79 | The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image captions in the Image Grid/Slider/Carousel widget in versions up to and inclu |
| CVE-2026-5429 | Awaiting Analysis | 未確認 | CWE-79 | Unsanitized input during web page generation in the Kiro Agent webview in Kiro IDE before version 0.8.140 allows a remote unauthenticated threat actor to execute arbitrary code via |
| CVE-2026-5435 | Modified | 未確認 | CWE-787 | The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an ou |
| CVE-2026-5436 | Deferred | 未確認 | CWE-22 | The MW WP Form plugin for WordPress is vulnerable to Arbitrary File Move/Read in all versions up to and including 5.1.1. This is due to insufficient validation of the $name paramet |
| CVE-2026-5437 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM meta-header parsing. When processing malformed metadata structures, the parser may read beyond the bo |
| CVE-2026-5438 | Analyzed | 未確認 | CWE-770 | A gzip decompression bomb vulnerability exists when Orthanc processes HTTP request with `Content-Encoding: gzip`. The server does not enforce limits on decompressed size and alloca |
| CVE-2026-5439 | Analyzed | 未確認 | CWE-770 | A memory exhaustion vulnerability exists in ZIP archive processing. Orthanc automatically extracts ZIP archives uploaded to certain endpoints and trusts metadata fields describing |
| CVE-2026-5440 | Analyzed | 未確認 | CWE-770 | A memory exhaustion vulnerability exists in the HTTP server due to unbounded use of the `Content-Length` header. The server allocates memory directly based on the attacker supplie |
| CVE-2026-5441 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the `DecodePsmctRle1` function of `DicomImageDecoder.cpp`. The `PMSCT_RLE1` decompression routine, which decodes the proprietary Phili |
| CVE-2026-5442 | Analyzed | 未確認 | CWE-787 | A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields are encoded using Value Representation (VR) Unsigned Long (UL), instead of the expected VR |
| CVE-2026-5443 | Analyzed | 未確認 | CWE-787 | A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculation |
| CVE-2026-5444 | Analyzed | 未確認 | CWE-787 | A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc processes a crafted PAM image embedded in a DICOM file, image dimensions are multiplied usi |
| CVE-2026-5445 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the `DecodeLookupTable` function within `DicomImageDecoder.cpp`. The lookup-table decoding logic used for `PALETTE COLOR` images does |
| CVE-2026-5446 | Analyzed | 未確認 | CWE-323 | In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wc_AriaEncrypt is stateless and pass |
| CVE-2026-5447 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion. A heap buffer overflow occurs when converting an X.509 certificate internally due to incorrect size |
| CVE-2026-5448 | Analyzed | 未確認 | CWE-122 | X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatib |
| CVE-2026-5450 | Modified | 未確認 | CWE-122, CWE-787 | Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width gr |
| CVE-2026-5451 | Deferred | 未確認 | CWE-79 | The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'elevation-track' shortcode in all versions up to, and including, 4.14. Thi |
| CVE-2026-5452 | Deferred | 未確認 | CWE-320, CWE-321 | A flaw has been found in UCC CampusConnect App up to 14.3.5 on Android. This vulnerability affects unknown code of the file campusconnect/BuildConfig.java of the component campusco |
| CVE-2026-5453 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android. This issue affects some unknown processing of the file br/com/rico/mobile/di/Seg |
| CVE-2026-5454 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was found in GRID Organiser App up to 1.0.5 on Android. Impacted is an unknown function of the file file res/raw/app.json of the component co.gridapp.organiser. Per |
| CVE-2026-5455 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was determined in Dialogue App up to 4.3.2 on Android. The affected element is an unknown function of the file file res/raw/config.json of the component ca.diagram. |
| CVE-2026-5456 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was identified in Align Technology My Invisalign App 3.12.4 on Android. The impacted element is an unknown function of the file com/aligntech/myinvisalign/BuildConf |
| CVE-2026-5457 | Deferred | 未確認 | CWE-320, CWE-321 | A security flaw has been discovered in PropertyGuru AgentNet Singapore App up to 23.7.10 on Android. This affects an unknown function of the file com/allproperty/android/agentnet/B |
| CVE-2026-5458 | Deferred | 未確認 | CWE-320, CWE-321 | A weakness has been identified in Noelse Individuals & Pro App up to 2.1.7 on Android. This impacts an unknown function of the file com/reactnative/antelop/BuildConfig.java of the |
| CVE-2026-5460 | Analyzed | 未確認 | CWE-416 | A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare processing. In the error handling path of TLSX_KeyShare_ProcessPqcHybridClient() i |
| CVE-2026-5462 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was identified in Wahoo Fitness SYSTM App up to 7.2.1 on Android. Impacted is an unknown function of the file com/WahooFitness/SYSTM/BuildConfig.java of the compone |
| CVE-2026-5463 | Analyzed | 未確認 | CWE-77 | Command injection vulnerability in console.run_module_with_output() in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as |
| CVE-2026-5464 | Deferred | 未確認 | CWE-862 | The ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation and activation i |
| CVE-2026-5465 | Deferred | 未確認 | CWE-639 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.3. This i |
| CVE-2026-5466 | Analyzed | 未確認 | CWE-347 | wolfSSL's ECCSI signature verifier `wc_VerifyEccsiHash` decodes the `r` and `s` scalars from the signature blob via `mp_read_unsigned_bin` with no check that they lie in `[1, q-1]` |
| CVE-2026-5467 | Analyzed | 未確認 | CWE-601 | A vulnerability was identified in Casdoor 2.356.0. Affected by this issue is some unknown functionality of the component OAuth Authorization Request Handler. Such manipulation of t |
| CVE-2026-5468 | Analyzed | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Casdoor 2.356.0. This affects the function dangerouslySetInnerHTML. Performing a manipulation of the argument formCss/formCssMobile/formSideH |
| CVE-2026-5469 | Analyzed | 未確認 | CWE-918 | A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side re |
| CVE-2026-5470 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in mixelpixx Google-Research-MCP 1e062d7bd887bfe5f6e582b6cc288bb897b35cf2/ca613b736ab787bc926932f59cddc69457185a83. This issue affects th |
| CVE-2026-5471 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android. Impacted is an unknown function of the file assets/google-services-desktop.json of the comp |
| CVE-2026-5472 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The affected element is an unknown function of the file /admin |
| CVE-2026-5473 | Analyzed | 未確認 | CWE-20, CWE-502 | A vulnerability has been found in NASA cFS up to 7.0.0. The impacted element is the function pickle.load of the component Pickle Module. Such manipulation leads to deserialization. |
| CVE-2026-5474 | Analyzed | 未確認 | CWE-119, CWE-122 | A vulnerability was found in NASA cFS up to 7.0.0. This affects the function CFE_MSG_GetSize of the file apps/to_lab/fsw/src/to_lab_passthru_encode.c of the component CCSDS Packet |
| CVE-2026-5475 | Analyzed | 未確認 | CWE-119 | A vulnerability was determined in NASA cFS up to 7.0.0. This impacts the function CFE_SB_TransmitMsg of the file cfe_sb_priv.c of the component CCSDS Header Size Handler. Executing |
| CVE-2026-5476 | Analyzed | 未確認 | CWE-189, CWE-190 | A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit. Affected is the function CFE_TBL_ValidateCodecLoadSize of the file cfe/modules/tbl/fsw/src/cfe_tbl_passthru_codec. |
| CVE-2026-5477 | Analyzed | 未確認 | CWE-190 | An integer overflow existed in the wolfCrypt CMAC implementation, that could be exploited to forge CMAC tags. The function wc_CmacUpdate used the guard `if (cmac->totalSz != 0)` to |
| CVE-2026-5478 | Deferred | 未確認 | CWE-22 | The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read and Deletion in all versions up to, and including, 3.4.4. This is due to the plugin trusting attacker-co |
| CVE-2026-5479 | Analyzed | 未確認 | CWE-354 | In wolfSSL's EVP layer, the ChaCha20-Poly1305 AEAD decryption path in wolfSSL_EVP_CipherFinal (and related EVP cipher finalization functions) fails to verify the authentication tag |
| CVE-2026-5483 | Modified | 未確認 | CWE-201 | A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernet |
| CVE-2026-5484 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in BookStackApp BookStack up to 26.03. Affected is the function chapterToMarkdown of the file app/Exports/ExportFormatter.php of the component Chapte |
| CVE-2026-5485 | Modified | 未確認 | CWE-78 | OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by usin |
| CVE-2026-5488 | Deferred | 未確認 | CWE-862 | The ExactMetrics – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 9.1.2. This is due to missin |
| CVE-2026-5493 | Analyzed | 未確認 | CWE-787 | Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a |
| CVE-2026-5494 | Analyzed | 未確認 | CWE-787 | Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a |
| CVE-2026-5495 | Analyzed | 未確認 | CWE-787 | Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a |
| CVE-2026-5496 | Analyzed | 未確認 | CWE-843 | Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect |
| CVE-2026-5500 | Analyzed | 未確認 | CWE-20 | wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check. A man-in-the-middle can theref |
| CVE-2026-5501 | Analyzed | 未確認 | CWE-295 | wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermed |
| CVE-2026-5502 | Deferred | 未確認 | CWE-862 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized course content manipulation in versions up to and including 3.9.8. This is d |
| CVE-2026-5503 | Analyzed | 未確認 | CWE-787 | In TLSX_EchChangeSNI, the ctx->extensions branch set extensions unconditionally even when TLSX_Find returned NULL. This caused TLSX_UseSNI to attach the attacker-controlled publicN |
| CVE-2026-5504 | Analyzed | 未確認 | CWE-354 | A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previou |
| CVE-2026-5506 | Deferred | 未確認 | CWE-79 | The Wavr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wave` shortcode in all versions up to, and including, 0.2.6. This is due to insufficien |
| CVE-2026-5507 | Analyzed | 未確認 | CWE-502 | When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could t |
| CVE-2026-5508 | Deferred | 未確認 | CWE-79 | The WowPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wowpress` shortcode in all versions up to, and including, 1.0.0. This is due to ins |
| CVE-2026-5512 | Analyzed | 未確認 | CWE-201 | An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories by their nu |
| CVE-2026-5525 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component. When a user drags and drops a directory path of exactly 259 charac |
| CVE-2026-5526 | Analyzed | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in Tenda 4G03 Pro up to 1.0/1.1/04.03.01.53/192.168.0.1. Affected by this vulnerability is an unknown functionality of the file /bin/httpd. The |
| CVE-2026-5527 | Analyzed | 未確認 | CWE-320, CWE-321 | A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/01.bin/04.03.01.53. Affected by this issue is some unknown functionality of the file /etc/www/pem/server.key of the compo |
| CVE-2026-5528 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in MoussaabBadla code-screenshot-mcp up to 0.1.0. This affects an unknown part of the component HTTP Interface. Such manipulation leads t |
| CVE-2026-5529 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in Dromara lamp-cloud up to 5.8.1. This vulnerability affects the function pageUser of the file /defUser/pageUser of the component DefUserController. P |
| CVE-2026-5530 | Deferred | 未確認 | CWE-918 | A flaw has been found in Ollama up to 0.18.1. This issue affects some unknown processing of the file server/download.go of the component Model Pull API. Executing a manipulation ca |
| CVE-2026-5531 | Deferred | 未確認 | CWE-312, CWE-313 | A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login_credentials.txt of the component HTTP GET |
| CVE-2026-5532 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in ScrapeGraphAI scrapegraph-ai up to 1.74.0. The affected element is the function create_sandbox_and_execute of the file scrapegraphai/nodes/generate_cod |
| CVE-2026-5533 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in badlogic pi-mono 0.58.4. The impacted element is an unknown function of the file packages/web-ui/src/tools/artifacts/SvgArtifact.ts of the compone |
| CVE-2026-5534 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Online Enrollment System 1.0. This affects an unknown function of the file /sms/user/index.php?view=edit&id=10 of the component Param |
| CVE-2026-5535 | Analyzed | 未確認 | CWE-22 | A security flaw has been discovered in FedML-AI FedML up to 0.8.9. This impacts an unknown function of the file FileUtils.java of the component MQTT Message Handler. Performing a m |
| CVE-2026-5536 | Analyzed | 未確認 | CWE-20, CWE-502 | A weakness has been identified in FedML-AI FedML up to 0.8.9. Affected is the function sendMessage of the file grpc_server.py of the component gRPC server. Executing a manipulation |
| CVE-2026-5537 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in halex CourseSEL up to 1.1.0. Affected by this vulnerability is the function check_sel of the file Apps/Index/Controller/IndexControlle |
| CVE-2026-5538 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in QingdaoU OnlineJudge up to 1.6.1. Affected by this issue is the function service_url of the file JudgeServer.service_url of the component judge_serv |
| CVE-2026-5539 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /modifymember.php of the component Parameter Handler. This manipulation o |
| CVE-2026-5540 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modifymember.php of the component Parameter Handler. |
| CVE-2026-5541 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /modmemberinfo.php of the component Parameter Handler. |
| CVE-2026-5542 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in code-projects Simple Laundry System 1.0. Impacted is an unknown function of the file /modstaffinfo.php of the component Parameter Handler. Executi |
| CVE-2026-5543 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in PHPGurukul User Registration & Login and User Management System 3.3. The affected element is an unknown function of the file /admin/yesterday-reg- |
| CVE-2026-5544 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. The impacted element is an unknown function of the file /goform/formRemoteControl. The manipulati |
| CVE-2026-5546 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in Campcodes Complete Online Learning Management System 1.0. This impacts the function add_lesson of the file /application/models/Crud_model.php. This manipul |
| CVE-2026-5547 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01. Affected is the function formAddMacfilterRule of the file /bin/httpd. Such manipulation leads to os command in |
| CVE-2026-5548 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulati |
| CVE-2026-5549 | Analyzed | 未確認 | CWE-320, CWE-321 | A vulnerability was determined in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this issue is some unknown functionality of the file /webroot_ro/pem/privkeySrv.pem of the compone |
| CVE-2026-5550 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based b |
| CVE-2026-5551 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/login.php of the component P |
| CVE-2026-5552 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter |
| CVE-2026-5553 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the componen |
| CVE-2026-5554 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservati |
| CVE-2026-5555 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of |
| CVE-2026-5556 | Deferred | 未確認 | CWE-74, CWE-94 | A security vulnerability has been detected in badlogic pi-mono up to 0.58.4. This vulnerability affects the function discoverAndLoadExtensions of the file packages/coding-agent/src |
| CVE-2026-5557 | Deferred | 未確認 | CWE-287, CWE-288 | A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. T |
| CVE-2026-5558 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in PHPGurukul PHPGurukul Online Shopping Portal Project up to 2.1. Impacted is an unknown function of the file /pending-orders.php of the component Parameter |
| CVE-2026-5559 | Deferred | 未確認 | CWE-1336, CWE-791 | A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function _is_safe_ast of the file sandbox.py of the component AST Vali |
| CVE-2026-5560 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /payment-method.php of the component Parameter H |
| CVE-2026-5561 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was determined in Campcodes Complete POS Management and Inventory System up to 4.0.6. This affects an unknown function of the file app/Http/Controllers/SettingsCont |
| CVE-2026-5562 | Analyzed | 未確認 | CWE-74, CWE-94 | A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. T |
| CVE-2026-5563 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in AutohomeCorp frostmourne up to 1.0. Affected is the function httpTest of the file /api/monitor-api/alarm/previewData of the component Alarm P |
| CVE-2026-5564 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown functionality of the file /searchguest.php of the component |
| CVE-2026-5565 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Simple Laundry System 1.0. Affected by this issue is some unknown functionality of the file /delmemberinfo.php of the co |
| CVE-2026-5566 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the |
| CVE-2026-5567 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Exec |
| CVE-2026-5568 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in Akaunting up to 3.1.21. This issue affects some unknown processing of the component Invoice/Billing. The manipulation of the argument notes leads |
| CVE-2026-5569 | Analyzed | 未確認 | CWE-266, CWE-284 | A vulnerability was found in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. Impacted is an unknown function of the file /Technostrobe/ of the component Endpoint. The manipulation re |
| CVE-2026-5570 | Analyzed | 未確認 | CWE-287 | A vulnerability was determined in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. The affected element is the function index_config of the file /LoginCB. This manipulation causes imp |
| CVE-2026-5571 | Analyzed | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. The impacted element is an unknown function of the file /fs of the component Configuration Data Hand |
| CVE-2026-5572 | Analyzed | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. This affects an unknown function. Performing a manipulation results in cross-site request forge |
| CVE-2026-5573 | Analyzed | 未確認 | CWE-284, CWE-434 | A weakness has been identified in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. This impacts an unknown function of the file /fs. Executing a manipulation of the argument cwd can l |
| CVE-2026-5574 | Analyzed | 未確認 | CWE-862, CWE-863 | A security vulnerability has been detected in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. Affected is the function deletefile of the component FsBrowseClean. The manipulation of |
| CVE-2026-5575 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component |
| CVE-2026-5576 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file save_emp.php of the component Add Employ |
| CVE-2026-5577 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Song-Li cross_browser up to ca690f0fe6954fd9bcda36d071b68ed8682a786a. This affects an unknown part of the file flask/uniquemachine_app.py of the c |
| CVE-2026-5578 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /OnlineClassroom/addassessment.php of the component Parameter Handl |
| CVE-2026-5579 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of |
| CVE-2026-5580 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/addvideos.php of the component Parameter Handler. The |
| CVE-2026-5583 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Han |
| CVE-2026-5584 | Analyzed | 未確認 | CWE-74, CWE-94 | A vulnerability has been found in Fosowl agenticSeek 0.1.0. Impacted is the function PyInterpreter.execute of the file sources/tools/PyInterpreter.py of the component query Endpoin |
| CVE-2026-5585 | Analyzed | 未確認 | CWE-200, CWE-284 | A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/task_manager.go of the component Task Detail Endpo |
| CVE-2026-5586 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in zhongyu09 openchatbi up to 0.2.1. The impacted element is an unknown function of the component Multi-stage Text2SQL Workflow. Executing a manipula |
| CVE-2026-5587 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in wbbeyourself MAC-SQL up to 31a9df5e0d520be4769be57a4b9022e5e34a14f4. This affects the function _execute_sql of the file core/agents.py of the comp |
| CVE-2026-5588 | Awaiting Analysis | 未確認 | CWE-327, CWE-347 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIP |
| CVE-2026-5590 | Analyzed | 未確認 | CWE-476 | A race condition during TCP connection teardown can cause tcp_recv() to operate on a connection that has already been released. If tcp_conn_search() returns NULL while processing a |
| CVE-2026-5594 | Deferred | 未確認 | CWE-74, CWE-94 | A weakness has been identified in premAI-io premsql up to 0.2.1. Affected is the function eval of the file premsql/agents/baseline/workers/followup.py. This manipulation of the arg |
| CVE-2026-5595 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in griptape-ai griptape 0.19.4. Affected by this vulnerability is the function load_files_from_disk/list_files_from_disk/save_content_to_ |
| CVE-2026-5596 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in griptape-ai griptape 0.19.4. Affected by this issue is some unknown functionality of the file griptape/tools/sql/tool.py of the component SqlTool. P |
| CVE-2026-5597 | Deferred | 未確認 | CWE-22 | A flaw has been found in griptape-ai griptape 0.19.4. This affects an unknown part of the file griptape\tools\computer\tool.py of the component ComputerTool. Executing a manipulati |
| CVE-2026-5598 | Awaiting Analysis | 未確認 | CWE-385 | Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. |
| CVE-2026-5599 | Awaiting Analysis | 未確認 | CWE-653 | A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds. |
| CVE-2026-5600 | Analyzed | 未確認 | CWE-653 | A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-in events belonging to the respective or |
| CVE-2026-5601 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0. This issue affects some unknown processing of the file /bin.rar of the component Backup File Handler. The |
| CVE-2026-5602 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Nor2-io heim-mcp up to 0.1.3. Impacted is the function registerTools of the file src/tools.ts of the component new_heim_application/deploy_heim_ap |
| CVE-2026-5603 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2. The affected element is the function executeMagerun2Command of the file src/index.ts. Such manipulation lea |
| CVE-2026-5604 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Param |
| CVE-2026-5605 | Analyzed | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lea |
| CVE-2026-5606 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /order-details.php of the component Pa |
| CVE-2026-5607 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0. This impacts the function CallToolRequestSchema of the file src/handlers.ts of the component U |
| CVE-2026-5608 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Belkin F9K1122 1.00.33. Affected is the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument webpage results i |
| CVE-2026-5609 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda i12 1.0.0.11(3862). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component Parameter Handler. |
| CVE-2026-5610 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Belkin F9K1015 1.00.10. Affected by this issue is the function formWISP5G of the file /goform/formWISP5G. Such manipulation of the argument webpag |
| CVE-2026-5611 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Belkin F9K1015 1.00.10. This affects the function formCrossBandSwitch of the file /goform/formCrossBandSwitch. Performing a manipulation of the argumen |
| CVE-2026-5612 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability affects the function formWlEncrypt of the file /goform/formWlEncrypt. Executing a manipulation of the a |
| CVE-2026-5613 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Belkin F9K1015 1.00.10. This issue affects the function formReboot of the file /goform/formReboot. The manipulation of the argument webpage leads |
| CVE-2026-5614 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Belkin F9K1015 1.00.10. Impacted is the function formSetPassword of the file /goform/formSetPassword. The manipulation of the argument webpag |
| CVE-2026-5615 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in givanz Vvvebjs up to 2.0.5. The affected element is an unknown function of the file upload.php of the component File Upload Endpoint. This manipul |
| CVE-2026-5616 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/mai |
| CVE-2026-5617 | Deferred | 未確認 | CWE-639 | The Login as User plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the handle_return_to_admin() function trust |
| CVE-2026-5618 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in kalcaddle kodbox up to 1.64. This affects an unknown function of the component shareMake/shareCheck. Performing a manipulation of the argument siteF |
| CVE-2026-5619 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Braffolk mcp-summarization-functions up to 0.1.5. This impacts an unknown function of the file src/server/mcp-server.ts of the component summarize_command. |
| CVE-2026-5620 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Construction Management System 1.0. Affected is an unknown function of the file /borrowed_equip_report.php of the component Parameter |
| CVE-2026-5621 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in ChrisChinchilla Vale-MCP up to 0.1.0. Affected by this vulnerability is an unknown functionality of the file src/index.ts of the component HTTP Interfa |
| CVE-2026-5622 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was determined in hcengineering Huly Platform 0.7.382. Affected by this issue is some unknown functionality of the file foundations/core/packages/token/src/token.ts |
| CVE-2026-5623 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in hcengineering Huly Platform 0.7.382. This affects an unknown part of the file server/front/src/index.ts of the component Import Endpoint. Such man |
| CVE-2026-5624 | Deferred | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in ProjectSend r2002. This vulnerability affects unknown code of the file upload.php. Performing a manipulation results in cross-site request fo |
| CVE-2026-5625 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in assafelovic gpt-researcher up to 3.4.3. This issue affects some unknown processing of the file gpt_researcher/skills/researcher.py of the componen |
| CVE-2026-5627 | Analyzed | 未確認 | CWE-29 | A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component. The vulnerability arises from improper ha |
| CVE-2026-5628 | Analyzed | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Belkin F9K1015 1.00.10. Impacted is the function formSetSystemSettings of the file /goform/formSetSystemSettings of the component Sett |
| CVE-2026-5629 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Belkin F9K1015 1.00.10. The affected element is the function formSetFirewall of the file /goform/formSetFirewall. The manipulation of the argument w |
| CVE-2026-5630 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in assafelovic gpt-researcher up to 3.4.3. The impacted element is an unknown function of the file backend/server/app.py of the component Report API. This man |
| CVE-2026-5631 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability has been found in assafelovic gpt-researcher up to 3.4.3. This affects the function extract_command_data of the file backend/server/server_utils.py of the component |
| CVE-2026-5632 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in assafelovic gpt-researcher up to 3.4.3. This impacts an unknown function of the component HTTP REST API Endpoint. Performing a manipulation results in |
| CVE-2026-5633 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in assafelovic gpt-researcher up to 3.4.3. Affected is an unknown function of the component ws Endpoint. Executing a manipulation of the argument sou |
| CVE-2026-5634 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /book_car.php of the component Parame |
| CVE-2026-5635 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of |
| CVE-2026-5636 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /cancelorder.php of the component Parameter Handler. This |
| CVE-2026-5637 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vulnerability affects unknown code of the file /message_admin.php of the component Parameter |
| CVE-2026-5638 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in HerikLyma CPPWebFramework up to 3.1. This issue affects some unknown processing. Performing a manipulation results in path traversal. Remote exploit |
| CVE-2026-5639 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Exe |
| CVE-2026-5640 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component P |
| CVE-2026-5641 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parame |
| CVE-2026-5642 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown function of the file /viva/update.php |
| CVE-2026-5643 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This impacts an unknown function of the file /admin/Add%20noti |
| CVE-2026-5644 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. Affected is an unknown function of the file /admin/Add%20 |
| CVE-2026-5645 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /pay.php of the component Parameter Ha |
| CVE-2026-5646 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the |
| CVE-2026-5647 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/admin_feature.php of the component Add Product Page. The manipu |
| CVE-2026-5648 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /userfinishregister.php of the component Parameter Handler. Th |
| CVE-2026-5649 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Online Application System for Admission 1.0. This issue affects some unknown processing of the file /enrollment/admsnform.php of the |
| CVE-2026-5650 | Deferred | 未確認 | CWE-200, CWE-922 | A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manip |
| CVE-2026-5652 | Analyzed | 未確認 | CWE-639 | An insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticated attacker to perform user modification actions via i |
| CVE-2026-5653 | Analyzed | 未確認 | CWE-122 | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5654 | Analyzed | 未確認 | CWE-121 | AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5655 | Analyzed | 未確認 | CWE-416 | SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service |
| CVE-2026-5657 | Analyzed | 未確認 | CWE-415 | iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5659 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.__setstate__ of the file src/datrie.pyx of the component trie |
| CVE-2026-5660 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /borrowed_equip.php of the component Para |
| CVE-2026-5661 | Deferred | 未確認 | CWE-404 | A vulnerability was identified in Free5GC 4.2.0. This affects an unknown function of the component NGSetupRequest Handler. Such manipulation leads to denial of service. The attack |
| CVE-2026-5663 | Analyzed | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the file dcmnet/apps/storescp.cc of the componen |
| CVE-2026-5664 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-30078. Reason: This candidate is a reservation duplicate of CVE-2026-30078. Notes: All CVE user | |
| CVE-2026-5665 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/checklogin.php of t |
| CVE-2026-5666 | Deferred | 未確認 | CWE-200, CWE-922 | A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionality of the file /complaints.sql of the component SQL Database |
| CVE-2026-5668 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown part of the file /admin/Add%20notice/add%20noti |
| CVE-2026-5669 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This vulnerability affects unknown code of the file /login.php |
| CVE-2026-5670 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This issue affects the function move_uploaded_file of the file /Ass |
| CVE-2026-5671 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. Impacted is an unknown function of the file /admin/class%20sch |
| CVE-2026-5672 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /edit-category.php of the component |
| CVE-2026-5673 | Analyzed | 未確認 | CWE-125 | A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() fu |
| CVE-2026-5675 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /borrowed_tool.php of the component Parameter Handler. The ma |
| CVE-2026-5676 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in Totolink A8000R 5.9c.681_B20180413. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argu |
| CVE-2026-5677 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the |
| CVE-2026-5678 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulat |
| CVE-2026-5679 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_B20221024. The impacted element is the function vsetTr069Cfg of the file /cgi-bin/cstecgi.cgi. The manipu |
| CVE-2026-5681 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode sanitize or validate this input 1.0. This impacts an unknown function of the file /borrowedequip.php of the component Parameter Handler. This |
| CVE-2026-5682 | Deferred | 未確認 | CWE-310, CWE-327 | A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android. Affected is an unknown function of the file /api/endpoint of the component com.meesho.supply. Su |
| CVE-2026-5683 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda CX12L 16.03.53.12. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. Performing a manipulation |
| CVE-2026-5684 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda CX12L 16.03.53.12. Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a man |
| CVE-2026-5685 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda CX12L 16.03.53.12. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to s |
| CVE-2026-5686 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Tenda CX12L 16.03.53.12. This vulnerability affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the arg |
| CVE-2026-5687 | Analyzed | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda CX12L 16.03.53.12. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. This manipulation of the argum |
| CVE-2026-5688 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the |
| CVE-2026-5689 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of |
| CVE-2026-5690 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setRemoteCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the |
| CVE-2026-5691 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setFirewallType of the file /cgi-bin/cstecgi.cgi. The manipulation of the argumen |
| CVE-2026-5692 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ena |
| CVE-2026-5694 | Deferred | 未確認 | CWE-79 | The Quick Interest Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'loan-amount' and 'loan-period' parameters in all versions up to, and including, |
| CVE-2026-5704 | Modified | 未確認 | CWE-434 | A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content |
| CVE-2026-5705 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in code-projects Online Hotel Booking 1.0. Affected by this vulnerability is an unknown functionality of the file /booknow.php of the component Booki |
| CVE-2026-5707 | Analyzed | 未確認 | CWE-78 | Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote |
| CVE-2026-5708 | Analyzed | 未確認 | CWE-915 | Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticat |
| CVE-2026-5709 | Analyzed | 未確認 | CWE-78 | Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitra |
| CVE-2026-5710 | Deferred | 未確認 | CWE-22 | The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary File Read in versions up to and including 1.3.9. |
| CVE-2026-5711 | Deferred | 未確認 | CWE-79 | The Post Blocks & Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliderStyle' block attribute in the Posts Slider block in all versions up to, and |
| CVE-2026-5712 | Analyzed | 未確認 | CWE-863 | This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without |
| CVE-2026-5713 | Awaiting Analysis | 未確認 | CWE-121, CWE-125 | The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "python -m asyncio ps" and "python -m asyncio pstree") features could be used to rea |
| CVE-2026-5717 | Deferred | 未確認 | CWE-79 | The VI: Include Post By plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class_container' attribute of the 'include-post-by-cat' shortcode in all versions |
| CVE-2026-5718 | Deferred | 未確認 | CWE-434 | The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.7. This is due to insu |
| CVE-2026-5719 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /borrowedtool.php. Executing a manipulation of the argument c |
| CVE-2026-5720 | Analyzed | 未確認 | CWE-125, CWE-191 | miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service or information disclosure by sending a |
| CVE-2026-5721 | Deferred | 未確認 | CWE-79 | The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including |
| CVE-2026-5724 | Awaiting Analysis | 未確認 | CWE-306 | The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentic |
| CVE-2026-5726 | Analyzed | 未確認 | CWE-121, CWE-787 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
| CVE-2026-5731 | Modified | 未確認 | CWE-119, CWE-787 | Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of mem |
| CVE-2026-5732 | Modified | 未確認 | CWE-190 | Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thun |
| CVE-2026-5733 | Modified | 未確認 | CWE-119, CWE-787 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2. |
| CVE-2026-5734 | Modified | 未確認 | CWE-120, CWE-787 | Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we |
| CVE-2026-5735 | Modified | 未確認 | CWE-125, CWE-787 | Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these |
| CVE-2026-5736 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server |
| CVE-2026-5739 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in PowerJob 5.1.0/5.1.1/5.1.2. The affected element is the function GroovyEvaluator.evaluate of the file /openApi/addWorkflowNode of the compone |
| CVE-2026-5741 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in suvarchal docker-mcp-server up to 0.1.0. The impacted element is the function stop_container/remove_container/pull_image of the file src/index.ts |
| CVE-2026-5742 | Deferred | 未確認 | CWE-79 | The UsersWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.2.60. This is due to insufficient input sanitization of user-supplie |
| CVE-2026-5745 | Modified | 未確認 | CWE-476 | A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When processi |
| CVE-2026-5747 | Analyzed | 未確認 | CWE-369, CWE-787 | An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 might allow a local guest user with root privileges t |
| CVE-2026-5748 | Deferred | 未確認 | CWE-79 | The Text Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ts` shortcode in all versions up to, and including, 0.0.1 due to insufficient |
| CVE-2026-5749 | Deferred | 未確認 | CWE-306 | Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with authenticated |
| CVE-2026-5750 | Awaiting Analysis | 未確認 | CWE-639 | An insecure direct object reference (IDOR) vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registered users throu |
| CVE-2026-5752 | Awaiting Analysis | 未確認 | Sandbox Escape Vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal. | |
| CVE-2026-5754 | Awaiting Analysis | 未確認 | Reflected Cross-Site Scripting (XSS) Vulnerability in Radware Alteon 34.5.4.0 vADC load-balancer allows an attacker to inject malicious scripts into the website, potentially leadin | |
| CVE-2026-5756 | Awaiting Analysis | 未確認 | Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS) allows an attacker to modify the server's configuration file, potentially leading | |
| CVE-2026-5758 | Awaiting Analysis | 未確認 | JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cau | |
| CVE-2026-5760 | Analyzed | 未確認 | CWE-94 | SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat template |
| CVE-2026-5762 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Wikimedia Foundation MediaWiki - ReportIncident Extension allows HTTP DoS. This issue was remediated only on t |
| CVE-2026-5767 | Deferred | 未確認 | CWE-79 | The SlideShowPro SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `slideShowProSC` shortcode in all versions up to, and including, 1.0.2 due to |
| CVE-2026-5772 | Analyzed | 未確認 | CWE-126 | A 1-byte stack buffer over-read was identified in the MatchDomainName function (src/internal.c) during wildcard hostname validation when the LEFT_MOST_WILDCARD_ONLY flag is active. |
| CVE-2026-5774 | Analyzed | 未確認 | CWE-362 | Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial of service o |
| CVE-2026-5777 | Deferred | 未確認 | CWE-306 | This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access contro |
| CVE-2026-5778 | Analyzed | 未確認 | CWE-191 | Integer underflow in wolfSSL packet sniffer <= 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV |
| CVE-2026-5779 | Analyzed | 未確認 | CWE-284 | An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint. This allows an authenticated use |
| CVE-2026-5780 | Analyzed | 未確認 | CWE-284 | An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'. If this vulnerability is successfully expl |
| CVE-2026-5781 | Analyzed | 未確認 | CWE-285 | An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges |
| CVE-2026-5785 | Awaiting Analysis | 未確認 | CWE-89 | Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query repor |
| CVE-2026-5789 | Analyzed | 未確認 | CWE-428 | Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileges by placing a malic |
| CVE-2026-5794 | Awaiting Analysis | 未確認 | CWE-694 | A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted r |
| CVE-2026-5795 | Modified | 未確認 | CWE-226, CWE-287 | In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditio |
| CVE-2026-5797 | Deferred | 未確認 | CWE-74 | The Quiz And Survey Master plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to and including 11.1.0. This is due to insufficient input sanitizatio |
| CVE-2026-5802 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in idachev mcp-javadc up to 1.2.4. Impacted is an unknown function of the component HTTP Interface. Such manipulation of the argument jarFilePath lea |
| CVE-2026-5803 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in bigsk1 openai-realtime-ui up to 188ccde27fdf3d8fab8da81f3893468f53b2797c. The affected element is an unknown function of the file server.js o |
| CVE-2026-5805 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contact_us.php. Executing a manipulation of |
| CVE-2026-5806 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument pos |
| CVE-2026-5807 | Modified | 未確認 | CWE-770 | Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occupying the si |
| CVE-2026-5808 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in openstatusHQ openstatus up to 1b678e71a85961ae319cbb214a8eae634059330c. This impacts an unknown function of the file apps/dashboard/src/app/(dashboa |
| CVE-2026-5809 | Deferred | 未確認 | CWE-73 | The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.2. This is due to a two-step logic flaw: the topic_add() and topi |
| CVE-2026-5810 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipul |
| CVE-2026-5811 | Deferred | 未確認 | CWE-840 | A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function save_product of the file /Actions.php of the component POST |
| CVE-2026-5812 | Deferred | 未確認 | CWE-840 | A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter |
| CVE-2026-5813 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /check_availability.php. Executing a manipulation o |
| CVE-2026-5814 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1. This issue affects some unknown processing of the file /admin/check_availability.php. The m |
| CVE-2026-5815 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03. Impacted is the function hedwigcgi_main of the file /cgi-bin/hedwig.cgi. The manipulation results in stack-based buff |
| CVE-2026-5816 | Analyzed | 未確認 | CWE-41 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.4 and 18.11 before 18.11.1 that could have allowed an unauthenticated user to execute |
| CVE-2026-5820 | Deferred | 未確認 | CWE-79 | The Zypento Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all versions up to, and including, 1.0.6. This is due to the |
| CVE-2026-5822 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-5823 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Construction Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowed_tool_report.php. This |
| CVE-2026-5824 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /userchecklogin.php. Such manipulation of the argume |
| CVE-2026-5825 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /delmemberinfo.php. Performing a manipulation of the ar |
| CVE-2026-5826 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in code-projects Simple IT Discussion Forum 1.0. This issue affects some unknown processing of the file /edit-category.php. Executing a manipulation of the ar |
| CVE-2026-5827 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /question-function.php. The manipulation of the argument |
| CVE-2026-5828 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Simple IT Discussion Forum 1.0. The affected element is an unknown function of the file /functions/addcomment.php. The manipulation of th |
| CVE-2026-5829 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Simple IT Discussion Forum 1.0. The impacted element is an unknown function of the file /pages/content.php. This manipulation of the |
| CVE-2026-5830 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda AC15 15.03.05.18. This affects the function websGetVar of the file /goform/SysToolChangePwd. Such manipulation of the argument oldPwd/newPwd |
| CVE-2026-5831 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Agions taskflow-ai up to 2.1.8. This impacts an unknown function of the file src/mcp/server/handlers.ts of the component terminal_execute. Pe |
| CVE-2026-5832 | Deferred | 未確認 | CWE-918 | A weakness has been identified in atototo api-lab-mcp up to 0.2.1. This affects the function analyze_api_spec/generate_test_scenarios/test_http_endpoint of the file src/mcp/http-se |
| CVE-2026-5833 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1. This impacts the function server.setRequestHandler of the file index.ts. Such manipulation |
| CVE-2026-5834 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/admin_running.php. Performing a manipulation of the argument |
| CVE-2026-5835 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in code-projects Online Shoe Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_football.php. Executing a manipula |
| CVE-2026-5836 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_product.php. The manipulation o |
| CVE-2026-5837 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in PHPGurukul News Portal Project 4.1. This affects an unknown part of the file /news-details.php. The manipulation of the argument Comment results in sql |
| CVE-2026-5838 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in PHPGurukul News Portal Project 4.1. This vulnerability affects unknown code of the file /admin/add-subadmins.php. This manipulation of the argumen |
| CVE-2026-5839 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the ar |
| CVE-2026-5840 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/check_availability.php. Performing a manipulation of t |
| CVE-2026-5841 | Analyzed | 未確認 | CWE-22 | A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lea |
| CVE-2026-5842 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted element is an unknown function of the file /api of the component Administrative API Endpoin |
| CVE-2026-5844 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of th |
| CVE-2026-5845 | Analyzed | 未確認 | CWE-639 | An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access private repositor |
| CVE-2026-5847 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability has been found in code-projects Movie Ticketing System 1.0. Impacted is an unknown function of the file /db/moviedb.sql of the component SQL Database Backup File Ha |
| CVE-2026-5848 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in jeecgboot JimuReport up to 2.3.0. The affected element is the function DriverManager.getConnection of the file /drag/onlDragDataSource/testConnection o |
| CVE-2026-5849 | Analyzed | 未確認 | CWE-22 | A vulnerability was determined in Tenda i12 1.0.0.11(3862). The impacted element is an unknown function of the component HTTP Handler. Executing a manipulation can lead to path tra |
| CVE-2026-5850 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The |
| CVE-2026-5851 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Th |
| CVE-2026-5852 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This man |
| CVE-2026-5853 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setIpv6LanCfg of the file /cgi-bin/cstecgi.cgi o |
| CVE-2026-5854 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi of the component CGI H |
| CVE-2026-5858 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Crit |
| CVE-2026-5859 | Analyzed | 未確認 | CWE-472 | Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sever |
| CVE-2026-5860 | Modified | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-5861 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-5862 | Analyzed | 未確認 | Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s | |
| CVE-2026-5863 | Modified | 未確認 | CWE-284 | Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-5864 | Modified | 未確認 | CWE-122 | Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTM |
| CVE-2026-5865 | Modified | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-5866 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-5867 | Modified | 未確認 | CWE-122 | Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML p |
| CVE-2026-5868 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-5869 | Modified | 未確認 | CWE-122 | Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML p |
| CVE-2026-5870 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-5871 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-5872 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-5873 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-5874 | Analyzed | 未確認 | CWE-416 | Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbo |
| CVE-2026-5875 | Analyzed | 未確認 | CWE-639 | Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-5876 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securi |
| CVE-2026-5877 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-5878 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium |
| CVE-2026-5879 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafte |
| CVE-2026-5880 | Analyzed | 未確認 | CWE-451 | Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to spoof the contents of th |
| CVE-2026-5881 | Analyzed | 未確認 | CWE-284 | Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security |
| CVE-2026-5882 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: M |
| CVE-2026-5883 | Modified | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-5884 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to execute arbitrary |
| CVE-2026-5885 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from pr |
| CVE-2026-5886 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-5887 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypass download restrictions via a crafted H |
| CVE-2026-5888 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML |
| CVE-2026-5889 | Analyzed | 未確認 | CWE-326 | Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs via a brute-force attack. (Ch |
| CVE-2026-5890 | Modified | 未確認 | CWE-362 | Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromi |
| CVE-2026-5891 | Analyzed | 未確認 | CWE-451 | Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via |
| CVE-2026-5892 | Analyzed | 未確認 | CWE-1268 | Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to install a PWA without user con |
| CVE-2026-5893 | Analyzed | 未確認 | CWE-362 | Race in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-5894 | Analyzed | 未確認 | CWE-358 | Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security |
| CVE-2026-5895 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. |
| CVE-2026-5896 | Analyzed | 未確認 | CWE-693 | Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass sandbox download restricti |
| CVE-2026-5897 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing v |
| CVE-2026-5898 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severit |
| CVE-2026-5899 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in History Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to in |
| CVE-2026-5900 | Analyzed | 未確認 | CWE-693 | Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass of multi-download protections via a crafted HTML page. (Chromium security sev |
| CVE-2026-5901 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to bypass enterprise h |
| CVE-2026-5902 | Analyzed | 未確認 | CWE-362 | Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted H |
| CVE-2026-5903 | Analyzed | 未確認 | CWE-693 | Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restric |
| CVE-2026-5904 | Rejected | 未確認 | Rejected reason: Determined a bug and not a vulnerability | |
| CVE-2026-5905 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium secu |
| CVE-2026-5906 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Omnibox in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page |
| CVE-2026-5907 | Analyzed | 未確認 | CWE-125 | Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. (Chromium |
| CVE-2026-5908 | Modified | 未確認 | CWE-472 | Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security seve |
| CVE-2026-5909 | Modified | 未確認 | CWE-472 | Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security seve |
| CVE-2026-5910 | Modified | 未確認 | CWE-472 | Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security seve |
| CVE-2026-5911 | Modified | 未確認 | CWE-693 | Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security seve |
| CVE-2026-5912 | Modified | 未確認 | CWE-472 | Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security se |
| CVE-2026-5913 | Modified | 未確認 | CWE-125 | Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security se |
| CVE-2026-5914 | Modified | 未確認 | CWE-843 | Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a |
| CVE-2026-5915 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML pa |
| CVE-2026-5918 | Analyzed | 未確認 | CWE-346, CWE-352 | Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via |
| CVE-2026-5919 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to bypass same o |
| CVE-2026-5921 | Analyzed | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to extract sensitive environment variables from the instance |
| CVE-2026-5926 | Analyzed | 未確認 | CWE-327 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S |
| CVE-2026-5928 | Modified | 未確認 | CWE-127 | Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the G |
| CVE-2026-5935 | Analyzed | 未確認 | CWE-78 | IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal user privileges |
| CVE-2026-5936 | Analyzed | 未確認 | CWE-918 | An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to |
| CVE-2026-5937 | Analyzed | 未確認 | CWE-248 | Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately causing the pro |
| CVE-2026-5938 | Analyzed | 未確認 | CWE-691 | Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service. |
| CVE-2026-5939 | Analyzed | 未確認 | CWE-416 | A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution. |
| CVE-2026-5940 | Analyzed | 未確認 | CWE-416 | Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes. |
| CVE-2026-5941 | Analyzed | 未確認 | CWE-20 | Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program |
| CVE-2026-5942 | Analyzed | 未確認 | CWE-416 | Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and cras |
| CVE-2026-5943 | Analyzed | 未確認 | CWE-416 | Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document modifications, object reference v |
| CVE-2026-5944 | Analyzed | 未確認 | CWE-306, CWE-862 | An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 |
| CVE-2026-5958 | Deferred | 未確認 | CWE-367 | When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1. |
| CVE-2026-5959 | Deferred | 未確認 | CWE-287 | A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1. Affected by this issue is some unknown functionality of the component Factory Reset Ha |
| CVE-2026-5960 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /db/hcpms.sql of the component SQL Database Backup Fi |
| CVE-2026-5961 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This vulnerability affects unknown code of the file /topic-details.php. The manipulation |
| CVE-2026-5962 | Analyzed | 未確認 | CWE-22 | A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecurityHandlerfunction of the component httpd. The manipulation results in path trav |
| CVE-2026-5963 | Analyzed | 未確認 | CWE-89 | EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete databas |
| CVE-2026-5964 | Analyzed | 未確認 | CWE-89 | EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete databas |
| CVE-2026-5965 | Deferred | 未確認 | CWE-78 | NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server. |
| CVE-2026-5966 | Analyzed | 未確認 | CWE-22, CWE-23 | ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete ar |
| CVE-2026-5967 | Analyzed | 未確認 | CWE-78 | ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenticated remote attackers with shell access can inject OS commands and execute them |
| CVE-2026-5968 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-5970 | Analyzed | 未確認 | CWE-74, CWE-94 | A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the component HumanEvalBenchmark/MBPPBenchmark. Performing a manip |
| CVE-2026-5971 | Analyzed | 未確認 | CWE-94, CWE-95 | A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fill of the file metagpt/actions/action_node.py of the compone |
| CVE-2026-5972 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.run_command in the library metagpt/tools/libs/terminal.py. The mani |
| CVE-2026-5973 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The manipulation results in os comman |
| CVE-2026-5974 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulati |
| CVE-2026-5975 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handle |
| CVE-2026-5976 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. |
| CVE-2026-5977 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Ex |
| CVE-2026-5978 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI |
| CVE-2026-5979 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ of the component POST Re |
| CVE-2026-5980 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in D-Link DIR-605L 2.13B01. Affected by this issue is the function formSetMACFilter of the file /goform/formSetMACFilter of the component POST Request Handler |
| CVE-2026-5981 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall of the file /goform/formAdvFirewall of the component POST Request Handler. Such |
| CVE-2026-5982 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in D-Link DIR-605L 2.13B01. This vulnerability affects the function formAdvNetwork of the file /goform/formAdvNetwork of the component POST Request Handle |
| CVE-2026-5983 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in D-Link DIR-605L 2.13B01. This issue affects the function formSetDDNS of the file /goform/formSetDDNS of the component POST Request Handler. Execut |
| CVE-2026-5984 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in D-Link DIR-605L 2.13B01. Impacted is the function formSetLog of the file /goform/formSetLog of the component POST Request Handler. The manipulatio |
| CVE-2026-5985 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Simple IT Discussion Forum 1.0. The affected element is an unknown function of the file /crud.php. The manipulation of the argu |
| CVE-2026-5986 | Deferred | 未確認 | CWE-1333, CWE-400 | A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1. The impacted element is the function getTime in the library lib/util.js. This manipulation of the argument times |
| CVE-2026-5987 | Deferred | 未確認 | CWE-1336, CWE-791 | A security vulnerability has been detected in Sanluan PublicCMS up to 6.202506.d. This affects the function AbstractFreemarkerView.doRender of the file publiccms-parent/publiccms-c |
| CVE-2026-5988 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda F451 1.0.0.7. This impacts the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Performing a manipulation of the argument mit_ssi |
| CVE-2026-5989 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda F451 1.0.0.7. Affected is the function fromRouteStatic of the file /goform/RouteStatic. Executing a manipulation of the argument page can lead to sta |
| CVE-2026-5990 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function fromSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of th |
| CVE-2026-5991 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda F451 1.0.0.7. Affected by this issue is the function formWrlExtraSet of the file /goform/WrlExtraSet. The manipulation of the argument GO results |
| CVE-2026-5992 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda F451 1.0.0.7. This affects the function fromP2pListFilter of the file /goform/P2pListFilter. This manipulation of the argument page causes s |
| CVE-2026-5993 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi of the component C |
| CVE-2026-5994 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Han |
| CVE-2026-5995 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handle |
| CVE-2026-5996 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setAdvancedInfoShow of the file /cgi-bin/cstecgi.cgi of th |
| CVE-2026-5997 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setLoginPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CG |
| CVE-2026-5998 | Deferred | 未確認 | CWE-22 | A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects the function dispatch of the file agent/memory/service.py of the component API Memory Content |
| CVE-2026-5999 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in JeecgBoot up to 3.9.1. This impacts an unknown function of the component SysAnnouncementController. Such manipulation leads to improper authorizat |
| CVE-2026-6000 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in code-projects Online Library Management System 1.0. Affected is an unknown function of the file /sql/library.sql of the component SQL Database Backup F |
| CVE-2026-6003 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This issue affects some unknown processing of the file /admin/user.php. Such manipulatio |
| CVE-2026-6004 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /delete-category.php. Performing a manipulation of the arg |
| CVE-2026-6005 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is an unknown function of the file /hematology_print.php. Executing a manipulation |
| CVE-2026-6006 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Patient Record Management System 1.0. The impacted element is an unknown function of the file /edit_hpatient.php. The manipulation o |
| CVE-2026-6007 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /del.php. The manipulation of the argument equipname resu |
| CVE-2026-6010 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknown functionality of the file /OnlineClassroom/takeassessment2 |
| CVE-2026-6011 | Analyzed | 未確認 | CWE-918 | A weakness has been identified in OpenClaw up to 2026.1.26. Affected by this issue is some unknown functionality of the file src/agents/tools/web-fetch.ts of the component assertPu |
| CVE-2026-6012 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSetPassword of the file /goform/formSetPassword of the component POST Request Handl |
| CVE-2026-6013 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in D-Link DIR-513 1.10. This vulnerability affects the function formSetRoute of the file /goform/formSetRoute of the component POST Request Handler. Th |
| CVE-2026-6014 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in D-Link DIR-513 1.10. This issue affects the function formAdvanceSetup of the file /goform/formAdvanceSetup of the component POST Request Handler. This mani |
| CVE-2026-6015 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. Such manipula |
| CVE-2026-6016 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performin |
| CVE-2026-6019 | Analyzed | 未確認 | CWE-116, CWE-150 | http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </scr |
| CVE-2026-6022 | Analyzed | 未確認 | CWE-400 | In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed the configured |
| CVE-2026-6023 | Analyzed | 未確認 | CWE-502 | In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state |
| CVE-2026-6024 | Analyzed | 未確認 | CWE-22 | A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7WebsSecurityHandlerfunction of the component HTTP Handler. This manipulation caus |
| CVE-2026-6025 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such |
| CVE-2026-6026 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setPortalConfWeChat of the file /cgi-bin/cstecgi.cgi of the co |
| CVE-2026-6027 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI Han |
| CVE-2026-6028 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setPptpServerCfg of the file /cgi-bin/cstecgi.cgi of the component CGI |
| CVE-2026-6029 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setVpnAccountCfg of the file /cgi-bin/cstecgi.cgi of the component CGI H |
| CVE-2026-6030 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /del1.php. This manipulation of the argument tooln |
| CVE-2026-6031 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. This affects an unknown function of the file /add-category-function.php. Such manipulation of the ar |
| CVE-2026-6032 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /checkcheckout.php. Performing a manipulation of the argument ser |
| CVE-2026-6033 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /updatedetailsfromstudent.php?eno=146891650. Executing a manipulation |
| CVE-2026-6034 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknown function of the file /BranchManagement/ProfitAndLossReport.php. Executing a ma |
| CVE-2026-6035 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0. The affected element is an unknown function of the file /BranchManagement/ServiceAndSalesRep |
| CVE-2026-6036 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. The impacted element is an unknown function of the file /util/VehicleDetailsFunction.php. The man |
| CVE-2026-6037 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0. This affects an unknown function of the file /util/AddVehicleFunction.php. This manipulation |
| CVE-2026-6038 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0. This impacts an unknown function of the file /util/RegisterCustomerFunction.php. Such manipu |
| CVE-2026-6041 | Deferred | 未確認 | CWE-79 | The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' (buzz_comments_avatar_image) setting in all versions up to, and inc |
| CVE-2026-6042 | Deferred | 未確認 | CWE-404, CWE-407 | A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a ma |
| CVE-2026-6043 | Awaiting Analysis | 未確認 | CWE-1188 | P4 Server versions prior to 2026.1 are configured with insecure default settings that, when exposed to untrusted networks, allow unauthenticated attackers to create arbitrary user |
| CVE-2026-6048 | Deferred | 未確認 | CWE-79 | The Flipbox Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flipbox widget's button URL `custom_attributes` field in all versions up t |
| CVE-2026-6056 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6057 | Deferred | 未確認 | CWE-22 | FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achieve remote code |
| CVE-2026-6058 | Analyzed | 未確認 | CWE-116 | ** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attac |
| CVE-2026-6060 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis |
| CVE-2026-6066 | Analyzed | 未確認 | CWE-319 | ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center where certain client-to-server communicat |
| CVE-2026-6067 | Analyzed | 未確認 | CWE-787 | A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be exploited by |
| CVE-2026-6068 | Analyzed | 未確認 | CWE-416 | NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenc |
| CVE-2026-6069 | Analyzed | 未確認 | CWE-787 | NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when `slen` exceeds the buffe |
| CVE-2026-6074 | Awaiting Analysis | 未確認 | CWE-35 | Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs downloads. An unauthenti |
| CVE-2026-6080 | Deferred | 未確認 | CWE-89 | The Tutor LMS plugin for WordPress is vulnerable to SQL Injection in versions up to and including 3.9.8. This is due to insufficient escaping on the 'date' parameter combined with |
| CVE-2026-6100 | Awaiting Analysis | 未確認 | CWE-416, CWE-787, CWE-825 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompressi |
| CVE-2026-6105 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This affects an unknown part of the file src/main/java/com/perfree/controller/InstallController.ja |
| CVE-2026-6106 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in 1Panel-dev MaxKB up to 2.2.1. This vulnerability affects the function StaticHeadersMiddleware of the file apps/common/middleware/static_headers_midd |
| CVE-2026-6107 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in 1Panel-dev MaxKB up to 2.6.1. This issue affects some unknown processing of the file apps/common/middleware/chat_headers_middleware.py of the component Cha |
| CVE-2026-6108 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in 1Panel-dev MaxKB up to 2.6.1. The affected element is the function execute of the file apps/application/flow/step_node/mcp_node/impl/base_mcp_node.py o |
| CVE-2026-6109 | Analyzed | 未確認 | CWE-352, CWE-862 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted element is the function evaluateCode of the file metagpt/environment/minecraft/mineflayer/index |
| CVE-2026-6110 | Analyzed | 未確認 | CWE-74, CWE-94 | A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function generate_thoughts of the file metagpt/strategy/tot.py of the component Tree-of-Tho |
| CVE-2026-6111 | Analyzed | 未確認 | CWE-918 | A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the function decode_image of the file metagpt/utils/common.py. The manipulation of the arg |
| CVE-2026-6112 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This ma |
| CVE-2026-6113 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setTtyServiceCfg of the file /cgi-bin/cstecgi.cg |
| CVE-2026-6114 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setNetworkCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Ha |
| CVE-2026-6115 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setAppCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manip |
| CVE-2026-6116 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component C |
| CVE-2026-6117 | Deferred | 未確認 | CWE-264, CWE-265 | A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugin.py of the component |
| CVE-2026-6118 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1. Impacted is the function add_mcp_server of the file astrbot/dashboard/routes/tools.py of the component MCP Endpo |
| CVE-2026-6119 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function post_data.get of the component API Endpoint. Such manipulation leads to ser |
| CVE-2026-6120 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda F451 1.0.0.7. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. The manipulation of the a |
| CVE-2026-6121 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function WrlclientSet of the file /goform/WrlclientSet of the component httpd. This manipulation |
| CVE-2026-6122 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Such manipulation of t |
| CVE-2026-6123 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Performing a manipulation of the ar |
| CVE-2026-6124 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the file /goform/SafeMacFilter of the component httpd. Executing |
| CVE-2026-6125 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow |
| CVE-2026-6126 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4. The affected element is an unknown function of the component Administrative HTTP Endpoint. This manipul |
| CVE-2026-6129 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects an unknown function of the component Agent Mode Service. Performing a manipulation res |
| CVE-2026-6130 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/main/mcp/ipc-stdio-transport.ts of the component Model Conte |
| CVE-2026-6131 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the componen |
| CVE-2026-6132 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setLedCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Hand |
| CVE-2026-6133 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. This affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Such manipulation of the argument pa |
| CVE-2026-6134 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Tenda F451 1.0.0.7_cn_svn7958. This vulnerability affects the function fromqossetting of the file /goform/qossetting. Performing a manipulati |
| CVE-2026-6135 | Analyzed | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromSetIpBind of the file /goform/SetIpBind. Executing a manipulation of the argume |
| CVE-2026-6136 | Analyzed | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page le |
| CVE-2026-6137 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromAdvSetWan of the file /goform/AdvSetWan. The manipulation of the argument wa |
| CVE-2026-6138 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handle |
| CVE-2026-6139 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. |
| CVE-2026-6140 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Perf |
| CVE-2026-6141 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in danielmiessler Personal_AI_Infrastructure up to 2.3.0. Affected is an unknown function of the file Skills/Parser/Tools/parse_url.ts. Executing a m |
| CVE-2026-6142 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in tushar-2223 Hotel Management System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. Affected by this vulnerability is an unknown functionality of |
| CVE-2026-6143 | Deferred | 未確認 | CWE-346, CWE-942 | A security flaw has been discovered in farion1231 cc-switch up to 3.12.3. Affected by this issue is some unknown functionality of the file src-tauri/src/proxy/server.rs of the comp |
| CVE-2026-6148 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Vehicle Showroom Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /util/MonthTotalReportU |
| CVE-2026-6149 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Affected by this issue is some unknown functionality of the file /util/BookVehicleFunction.php. Execu |
| CVE-2026-6150 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /checkupdatestatus.php. The manipulation of the argument service |
| CVE-2026-6151 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/PaymentStatusFunction.php. The manipula |
| CVE-2026-6152 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0. This issue affects some unknown processing of the file /util/StaffAddingFunction.php. This m |
| CVE-2026-6153 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknown function of the file /util/StaffDetailsFunction.php. Such manipulatio |
| CVE-2026-6154 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CG |
| CVE-2026-6155 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A7100RU 7.4cu.2313. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executi |
| CVE-2026-6156 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component CGI H |
| CVE-2026-6157 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730. This impacts the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. The manipulation of |
| CVE-2026-6158 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgrade.so. This manipulation of the argument FileName causes os |
| CVE-2026-6159 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerability is an unknown functionality of the file /chatbox/insert.php of the componen |
| CVE-2026-6160 | Deferred | 未確認 | CWE-200, CWE-538 | A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatbox_PHP of the file chatbox.sql of the component Endpoint. Performin |
| CVE-2026-6161 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chatbox/insert.php of the component Endpoint. Executing a manipu |
| CVE-2026-6162 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of t |
| CVE-2026-6163 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Lost and Found Thing Management 1.0. Affected by this issue is some unknown functionality of the file /catageory.php. Such manipulat |
| CVE-2026-6164 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part of the file /addcat.php. Performing a manipulation of the arg |
| CVE-2026-6165 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/Login_check.php. Executing a manip |
| CVE-2026-6166 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0. This issue affects some unknown processing of the file /util/UpdateVehicleFuncti |
| CVE-2026-6167 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is an unknown function of the file /subject-print.php. The manipulation of the argument ID res |
| CVE-2026-6168 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115. The affected element is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argu |
| CVE-2026-6175 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6179 | Analyzed | 未確認 | CWE-79 | Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser |
| CVE-2026-6182 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /web/admin/login.php. S |
| CVE-2026-6183 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performi |
| CVE-2026-6184 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in code-projects Simple Content Management System 1.0. This affects an unknown part of the file /web/admin/welcome.php. Executing a manipulation of t |
| CVE-2026-6186 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vulnerability affects the function strcpy of the file /goform/formNatStaticMap. The manipula |
| CVE-2026-6187 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=chk_prod_availabilit |
| CVE-2026-6188 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=delete_sales. This manipulation of the |
| CVE-2026-6189 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Such manip |
| CVE-2026-6190 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /employees.php. Performing a manipulation of t |
| CVE-2026-6191 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /equipments.php. Executing a manipulation of the arg |
| CVE-2026-6192 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to |
| CVE-2026-6193 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affected is an unknown function of the file /register.php. The manipulation of the argument ema |
| CVE-2026-6194 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub_410188 of the file /boafrm/formWlanSetup of the component HTTP |
| CVE-2026-6195 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the c |
| CVE-2026-6196 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput resu |
| CVE-2026-6197 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Executing a manipulation of the argument m |
| CVE-2026-6198 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument pa |
| CVE-2026-6199 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page results in stack-base |
| CVE-2026-6200 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda F456 1.0.0.5. The affected element is the function formwebtypelibrary of the file /goform/webtypelibrary. This manipulation of the argument |
| CVE-2026-6201 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting |
| CVE-2026-6202 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file post.php. Performing a manipulation of the argument tags resul |
| CVE-2026-6203 | Deferred | 未確認 | CWE-601 | The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4. This is due to insufficient validation of user-supplie |
| CVE-2026-6204 | Analyzed | 未確認 | CWE-78 | LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature. Successful e |
| CVE-2026-6215 | Deferred | 未確認 | CWE-918 | A weakness has been identified in DbGate up to 7.1.4. The impacted element is the function apiServerUrl1 of the file packages/rest/src/openApiDriver.ts of the component REST/GraphQ |
| CVE-2026-6216 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in DbGate up to 7.1.4. This affects an unknown function of the file packages/web/src/icons/FontIcon.svelte of the component SVG Icon Stri |
| CVE-2026-6218 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue is the function createTextNode of the component Error Details Panel. The manipulation resu |
| CVE-2026-6219 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the function child_process.exec of the file src/compressor.js of the component Compressor Featu |
| CVE-2026-6220 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in HummerRisk up to 1.5.0. This vulnerability affects the function ServerService.addServer of the file ServerService.java of the component Video File |
| CVE-2026-6221 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6224 | Deferred | 未確認 | CWE-264, CWE-265 | A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. This issue affects the function createSafeConsole of the file packages/plugins/@nocobase/pl |
| CVE-2026-6227 | Deferred | 未確認 | CWE-22 | The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the `block_name` parameter of the `/wp-json/backwpup/v1/getblock` REST endpoint in all versions up to, a |
| CVE-2026-6231 | Analyzed | 未確認 | CWE-20 | The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed o |
| CVE-2026-6235 | Deferred | 未確認 | CWE-862 | The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'manage_admin_requests' function in all versions up to, and including, 1.0.20. This |
| CVE-2026-6236 | Deferred | 未確認 | CWE-79 | The Posts map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' shortcode attribute in all versions up to, and including, 0.1.3 due to insufficient i |
| CVE-2026-6238 | Modified | 未確認 | CWE-126 | The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a D |
| CVE-2026-6245 | Analyzed | 未確認 | CWE-805 | A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes recei |
| CVE-2026-6246 | Deferred | 未確認 | CWE-79 | The Simple Random Posts Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'container_right_width' attribute of the 'simple_random_posts' shortcode |
| CVE-2026-6248 | Deferred | 未確認 | CWE-22 | The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.5. This is due to two compounding flaws: the Members::update() me |
| CVE-2026-6249 | Deferred | 未確認 | CWE-434 | Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system commands by u |
| CVE-2026-6257 | Deferred | 未確認 | CWE-434 | Vvveb CMS v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authentic |
| CVE-2026-6264 | Awaiting Analysis | 未確認 | A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote code execution via the JMX monitoring port. The attack vector is the JMX monitorin | |
| CVE-2026-6265 | Analyzed | 未確認 | CWE-278 | Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1 |
| CVE-2026-6270 | Analyzed | 未確認 | CWE-436 | @fastify/middie versions 9.3.1 and earlier do not register inherited middleware directly on child plugin engine instances. When a Fastify application registers authentication middl |
| CVE-2026-6272 | Awaiting Analysis | 未確認 | CWE-306 | A client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStream API by sending ProvideSignalRequest. 1 |
| CVE-2026-6284 | Awaiting Analysis | 未確認 | CWE-521 | An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no pas |
| CVE-2026-6290 | Analyzed | 未確認 | CWE-863 | Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token. This allows an authenticated |
| CVE-2026-6293 | Deferred | 未確認 | CWE-352 | The Inquiry Form to Posts or Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in version 1.0. This is due to missing no |
| CVE-2026-6294 | Deferred | 未確認 | CWE-352 | The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4. This is due to missing nonce validation in the gpd |
| CVE-2026-6296 | Modified | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security |
| CVE-2026-6297 | Modified | 未確認 | CWE-416 | Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to potentially perform a sandbox escape via a crafted HTML pag |
| CVE-2026-6298 | Modified | 未確認 | CWE-122 | Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML p |
| CVE-2026-6299 | Modified | 未確認 | CWE-416 | Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Criti |
| CVE-2026-6300 | Modified | 未確認 | CWE-416 | Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-6301 | Modified | 未確認 | CWE-843 | Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-6302 | Modified | 未確認 | CWE-416 | Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-6303 | Modified | 未確認 | CWE-416 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-6304 | Modified | 未確認 | CWE-416 | Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-6305 | Modified | 未確認 | CWE-122, CWE-787 | Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium secur |
| CVE-2026-6306 | Modified | 未確認 | CWE-122 | Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium secur |
| CVE-2026-6307 | Analyzed | 未確認 | CWE-843 | Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-6308 | Modified | 未確認 | CWE-125 | Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via |
| CVE-2026-6309 | Modified | 未確認 | CWE-416 | Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-6310 | Modified | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-6311 | Modified | 未確認 | CWE-457 | Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a s |
| CVE-2026-6312 | Modified | 未確認 | CWE-284 | Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data v |
| CVE-2026-6313 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a |
| CVE-2026-6314 | Modified | 未確認 | CWE-787 | Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via a craf |
| CVE-2026-6315 | Modified | 未確認 | CWE-416 | Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitr |
| CVE-2026-6316 | Modified | 未確認 | CWE-416 | Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-6317 | Modified | 未確認 | CWE-416 | Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-6318 | Modified | 未確認 | CWE-416 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-6319 | Modified | 未確認 | CWE-416 | Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary |
| CVE-2026-6328 | Deferred | 未確認 | CWE-20, CWE-347 | Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux (QUIC protocol implementation, packet processing mod |
| CVE-2026-6337 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-6348 | Deferred | 未確認 | CWE-306 | WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges |
| CVE-2026-6349 | Deferred | 未確認 | CWE-78 | The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the serve |
| CVE-2026-6350 | Deferred | 未確認 | CWE-121 | MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and exe |
| CVE-2026-6351 | Deferred | 未確認 | CWE-93 | MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files. |
| CVE-2026-6355 | Analyzed | 未確認 | CWE-639 | A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. T |
| CVE-2026-6356 | Analyzed | 未確認 | CWE-1220 | A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling them to access |
| CVE-2026-6357 | Awaiting Analysis | 未確認 | CWE-829 | pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were |
| CVE-2026-6358 | Modified | 未確認 | CWE-416 | Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium securi |
| CVE-2026-6359 | Analyzed | 未確認 | CWE-416 | Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory acces |
| CVE-2026-6360 | Modified | 未確認 | CWE-416 | Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security |
| CVE-2026-6361 | Modified | 未確認 | CWE-122 | Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbit |
| CVE-2026-6362 | Modified | 未確認 | CWE-416 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium s |
| CVE-2026-6363 | Modified | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium securi |
| CVE-2026-6364 | Modified | 未確認 | CWE-125 | Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. (C |
| CVE-2026-6369 | Analyzed | 未確認 | CWE-306, CWE-732 | An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-level authenti |
| CVE-2026-6370 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HashThemes Mini Ajax Cart for WooCommerce allows Stored XSS.This issue affects |
| CVE-2026-6372 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Plisio Accept Cryptocurrencies with Plisio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accept |
| CVE-2026-6375 | Deferred | 未確認 | CWE-639 | A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records (PNRs) without any access controls. Because PNR identifiers follow a predicta |
| CVE-2026-6376 | Deferred | 未確認 | CWE-306 | A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or verification |
| CVE-2026-6383 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic. The authorization mechanism improperly truncates subresource names, leading to incorrect permissio |
| CVE-2026-6384 | Modified | 未確認 | CWE-120 | A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attacker to write beyond an allocated buffer b |
| CVE-2026-6385 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. T |
| CVE-2026-6386 | Analyzed | 未確認 | CWE-269, CWE-732 | In order to apply a particular protection key to an address range, the kernel must update the corresponding page table entries. The subroutine which handled this failed to take in |
| CVE-2026-6388 | Awaiting Analysis | 未確認 | CWE-1220 | A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to byp |
| CVE-2026-6389 | Analyzed | 未確認 | CWE-269 | IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access t |
| CVE-2026-6392 | Analyzed | 未確認 | CWE-200 | Tanium addressed an information disclosure vulnerability in Threat Response. |
| CVE-2026-6393 | Deferred | 未確認 | CWE-862 | The BetterDocs plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.3.11. This is due to a missing capability check in the generate_openai_ |
| CVE-2026-6396 | Deferred | 未確認 | CWE-352 | The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2. This is due to missing nonce verification in th |
| CVE-2026-6398 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-6408 | Analyzed | 未確認 | CWE-522 | Tanium addressed an information disclosure vulnerability in Tanium Server. |
| CVE-2026-6409 | Awaiting Analysis | 未確認 | CWE-20 | A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input. Maliciously structured messages—specifically those containing nega |
| CVE-2026-6410 | Analyzed | 未確認 | CWE-22 | @fastify/static versions 8.0.0 through 9.1.0 allow path traversal when directory listing is enabled via the list option. The dirList.path() function resolves directories outside th |
| CVE-2026-6414 | Analyzed | 未確認 | CWE-177 | @fastify/static versions 8.0.0 through 9.1.0 decode percent-encoded path separators (%2F) before filesystem resolution, while Fastify's router treats them as literal characters. Th |
| CVE-2026-6416 | Analyzed | 未確認 | CWE-400 | Tanium addressed an uncontrolled resource consumption vulnerability in Interact. |
| CVE-2026-6421 | Deferred | 未確認 | CWE-426, CWE-427 | A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library msimg32.dll. The manipulation leads to uncontrolled search |
| CVE-2026-6437 | Modified | 未確認 | CWE-88 | Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) before v3.0.1 allows remote authenticated users with Pers |
| CVE-2026-6439 | Deferred | 未確認 | CWE-79 | The VideoZen plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.0.1. This is due to insufficient input sanitization and output esca |
| CVE-2026-6441 | Deferred | 未確認 | CWE-862 | The Canto plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 3.1.1. This is due to the absence of any capability check or nonce verificatio |
| CVE-2026-6442 | Awaiting Analysis | 未確認 | CWE-1286 | Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit thi |
| CVE-2026-6443 | Deferred | 未確認 | CWE-506 | All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embed |
| CVE-2026-6451 | Deferred | 未確認 | CWE-352 | The cms-fuer-motorrad-werkstaetten plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.0.0. This is due to missing nonce validation o |
| CVE-2026-6482 | Analyzed | 未確認 | CWE-829 | The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host. Upon startup th |
| CVE-2026-6483 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os |
| CVE-2026-6486 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in classroombookings up to 2.17.0. This impacts the function read of the file crbs-core/application/views/layout.php of the component User Display Name |
| CVE-2026-6487 | Deferred | 未確認 | CWE-22 | A flaw has been found in Qihui jtbc5 CMS 5.0.3.6. Affected is an unknown function of the file /dev/code/common/diplomat/manage.php of the component Code Endpoint. This manipulation |
| CVE-2026-6488 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. This vulnerability affects unknown code of the file admin/editcourse.php of the comp |
| CVE-2026-6489 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. This issue affects some unknown processing of the file admin/addteacher.php of |
| CVE-2026-6490 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. Impacted is an unknown function of the file admin/deletecourse.php of the component |
| CVE-2026-6491 | Deferred | 未確認 | CWE-119, CWE-122 | A security vulnerability has been detected in libvips up to 8.18.2. The affected element is the function im_minpos_vec of the file libvips/deprecated/vips7compat.c of the component |
| CVE-2026-6492 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The impacted element is an unknown function of the file /ap |
| CVE-2026-6493 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in lukevella rallly up to 4.7.4. This affects an unknown function of the file apps/web/src/app/[locale]/(auth)/reset-password/components/reset-password-form.t |
| CVE-2026-6494 | Awaiting Analysis | 未確認 | CWE-117 | A flaw was found in the AAP MCP server. An unauthenticated remote attacker can exploit a log injection vulnerability by sending specially crafted input to the `toolsetroute` parame |
| CVE-2026-6496 | Deferred | 未確認 | CWE-22 | A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler. The manipu |
| CVE-2026-6497 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerability is an unknown functionality of the file /filemanager.php?p= ajax=true&type=u |
| CVE-2026-6498 | Deferred | 未確認 | CWE-345 | The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the valid |
| CVE-2026-6507 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dn |
| CVE-2026-6515 | Analyzed | 未確認 | CWE-613 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed a user to use |
| CVE-2026-6518 | Deferred | 未確認 | CWE-434 | The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to arbitrary file upload and remote code execution in all versions up to, and including |
| CVE-2026-6519 | Analyzed | 未確認 | CWE-835 | MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6520 | Analyzed | 未確認 | CWE-835 | OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6521 | Analyzed | 未確認 | CWE-835 | OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6522 | Analyzed | 未確認 | CWE-835 | RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6523 | Analyzed | 未確認 | CWE-835 | GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6524 | Analyzed | 未確認 | CWE-824 | MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6526 | Analyzed | 未確認 | CWE-476 | RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 |
| CVE-2026-6527 | Analyzed | 未確認 | CWE-674 | ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6528 | Analyzed | 未確認 | CWE-835 | TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service |
| CVE-2026-6529 | Analyzed | 未確認 | CWE-122 | iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6530 | Analyzed | 未確認 | CWE-122 | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6531 | Analyzed | 未確認 | CWE-835 | SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6532 | Analyzed | 未確認 | CWE-126 | Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6533 | Analyzed | 未確認 | CWE-1325 | Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6534 | Analyzed | 未確認 | CWE-835 | USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6535 | Analyzed | 未確認 | CWE-1325 | Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6536 | Analyzed | 未確認 | CWE-835 | DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 |
| CVE-2026-6537 | Analyzed | 未確認 | CWE-121 | ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6538 | Analyzed | 未確認 | CWE-121 | BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6539 | Analyzed | 未確認 | CWE-134 | Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by cr |
| CVE-2026-6542 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted verte |
| CVE-2026-6543 | Analyzed | 未確認 | CWE-94 | IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitiv |
| CVE-2026-6550 | Awaiting Analysis | 未確認 | CWE-757 | Cryptographic algorithm downgrade in the caching layer of Amazon AWS Encryption SDK for Python before version 3.3.1 and before version 4.0.5 might allow an authenticated local thr |
| CVE-2026-6551 | Deferred | 未確認 | CWE-79 | The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blocks block in |
| CVE-2026-6553 | Analyzed | 未確認 | CWE-312 | Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table. This iss |
| CVE-2026-6559 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes |
| CVE-2026-6560 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affects the function Edit_BasicSSID of the file /goform/aspForm. Such manipulation of t |
| CVE-2026-6561 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in EyouCMS up to 1.7.1. This issue affects the function edit_adminlogo of the file application/admin/controller/Index.php. Performing a manipulation of |
| CVE-2026-6562 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is the function getListByPage of the file /index/Search/index.html. Executing a manipulation of the argument keyw |
| CVE-2026-6563 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in H3C Magic B1 up to 100R004. The affected element is the function SetAPWifiorLedInfoById of the file /goform/aspForm. The manipulation of the argum |
| CVE-2026-6564 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in EMQ EMQX Enterprise up to 6.1.0. The impacted element is an unknown function of the component Session Handling. The manipulation results in improper au |
| CVE-2026-6568 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the compon |
| CVE-2026-6569 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. |
| CVE-2026-6570 | Deferred | 未確認 | CWE-285, CWE-639 | A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipu |
| CVE-2026-6571 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGroupAction of the file /app/controller/systemRole.class.php. |
| CVE-2026-6572 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in Collabora KodExplorer up to 4.52. Affected by this issue is some unknown functionality of the file /app/controller/share.class.php of |
| CVE-2026-6573 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.master.php of the component Instant Exam Creation Handler. Th |
| CVE-2026-6574 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability has been found in osuuu LightPicture up to 1.2.2. This issue affects some unknown processing of the file /public/install/lp.sql of the component API Upload Endpoint |
| CVE-2026-6576 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in liangliangyy DjangoBlog up to 2.1.0.0. The affected element is the function CommandHandler of the file servermanager/api/commonapi.py of the compo |
| CVE-2026-6577 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpo |
| CVE-2026-6578 | Deferred | 未確認 | CWE-259, CWE-798 | A security flaw has been discovered in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settings.py of the component Setting Handler. |
| CVE-2026-6579 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown function of the file blog/views.py of the component Clean Endpoint. This manipulati |
| CVE-2026-6580 | Deferred | 未確認 | CWE-320, CWE-321 | A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call H |
| CVE-2026-6581 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function SetMobileAPInfoById of the file /goform/aspForm. Performing a manipulatio |
| CVE-2026-6582 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function get_vector_db_details of the file superagi/controllers/vector_dbs.py of th |
| CVE-2026-6583 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in TransformerOptimus SuperAGI up to 0.0.14. This affects the function delete_api_key/edit_api_key of the file superagi/controllers/api_key.py of the |
| CVE-2026-6584 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was found in TransformerOptimus SuperAGI up to 0.0.14. This vulnerability affects the function update_user of the file superagi/controllers/user.py of the component |
| CVE-2026-6585 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This issue affects the function update_organisation of the file superagi/controllers/organisation.py of |
| CVE-2026-6586 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Impacted is the function get_budget/update_budget of the file superagi/controllers/budget.py of the comp |
| CVE-2026-6587 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function _try_process_local_file/_try_process_url of the file src/ragas/metrics/ |
| CVE-2026-6588 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in serge-chat serge up to 1.4TB. The impacted element is the function download_model/delete_model of the file api/src/serge/routers/model.py of the c |
| CVE-2026-6589 | Deferred | 未確認 | CWE-352, CWE-862 | A security vulnerability has been detected in ComfyUI up to 0.13.0. This affects the function create_origin_only_middleware of the file server.py. The manipulation leads to cross-s |
| CVE-2026-6590 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in ComfyUI up to 0.13.0. This impacts the function get_model_preview of the file app/model_manager.py of the component Model Preview Endpoint. The mani |
| CVE-2026-6591 | Deferred | 未確認 | CWE-22 | A flaw has been found in ComfyUI up to 0.13.0. Affected is the function folder_paths.get_annotated_filepath of the file folder_paths.py of the component LoadImage Node. This manipu |
| CVE-2026-6592 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in ComfyUI up to 0.13.0. Affected by this vulnerability is the function getuserdata of the file app/user_manager.py of the component userdata Endpoin |
| CVE-2026-6593 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in ComfyUI up to 0.13.0. Affected by this issue is some unknown functionality of the file server.py of the component View Endpoint. Performing a manipulat |
| CVE-2026-6594 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability was determined in brikcss merge up to 1.3.0. This affects an unknown part. Executing a manipulation of the argument __proto__/constructor.prototype/prototype can le |
| CVE-2026-6595 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This vulnerability affects unknown code of the file b |
| CVE-2026-6596 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in langflow-ai langflow up to 1.1.0. This issue affects the function create_upload_file of the file src/backend/base/Langflow/api/v1/endpoints.p |
| CVE-2026-6597 | Deferred | 未確認 | CWE-255, CWE-256 | A weakness has been identified in langflow-ai langflow up to 1.8.3. Impacted is the function remove_api_keys/has_api_terms of the file src/backend/base/langflow/api/utils/core.py o |
| CVE-2026-6598 | Deferred | 未確認 | CWE-312, CWE-313 | A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. The affected element is the function create_project/encrypt_auth_settings of the file src/backend/ba |
| CVE-2026-6599 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function get_client_ip/install_mcp_config of the file src/backend/base/langflow/api/v1 |
| CVE-2026-6600 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in langflow-ai langflow up to 1.8.3. This affects an unknown function of the file src/frontend/src/modals/IOModal/components/chatView/chatMessage/components/e |
| CVE-2026-6601 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability has been found in Lagom WHMCS Template up to 2.4.2. This impacts an unknown function of the component Datatables. The manipulation leads to resource consumption. Re |
| CVE-2026-6602 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in rickxy Hospital Management System up to 88a4290d957dc5bdde8a56e5ad451ad14f7f90f4. Affected is an unknown function of the file /backend/admin/his_admin_ |
| CVE-2026-6603 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/Agent |
| CVE-2026-6604 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscop |
| CVE-2026-6605 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the com |
| CVE-2026-6606 | Deferred | 未確認 | CWE-918 | A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. |
| CVE-2026-6607 | Deferred | 未確認 | CWE-400, CWE-404 | A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function api_generate of the component Worker API Endpoint. The manipulation lead |
| CVE-2026-6608 | Deferred | 未確認 | CWE-670 | A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena Side-by-Side View Handler. The manipulation results in incorr |
| CVE-2026-6609 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in liangliangyy DjangoBlog up to 2.1.0.0. The affected element is the function form_valid of the file oauth/views.py. This manipulation of the argument oauthi |
| CVE-2026-6610 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability has been found in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file djangoblog/settings.py of the component Setting Han |
| CVE-2026-6611 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settings.py of the component File Upload Endpoint. Perfo |
| CVE-2026-6612 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This impacts the function get_agent_execution/update_agent_execution of the file superagi/controllers/ag |
| CVE-2026-6613 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function delete_agent/stop_schedule/get_schedule_data of the file superagi/controllers/a |
| CVE-2026-6614 | Deferred | 未確認 | CWE-285, CWE-639 | A security flaw has been discovered in TransformerOptimus SuperAGI up to 0.0.14. Affected by this vulnerability is the function get_project/update_project/get_projects_organisation |
| CVE-2026-6615 | Deferred | 未確認 | CWE-22 | A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function Upload of the file superagi/controllers/resources.py of the compo |
| CVE-2026-6616 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extract_with_bs4/extract_with_3k/extract_with_lxml of the file sup |
| CVE-2026-6617 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function get_api_tool_provider_remote_schema of the file api/services/tools/api_tools_ma |
| CVE-2026-6618 | Deferred | 未確認 | CWE-918 | A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_plugin_json_to_tool_bundle of the file api/core/tools/utils/parser.py of the com |
| CVE-2026-6619 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewTab of the file web/app/components/base/image-uploader/image-preview.tsx of the co |
| CVE-2026-6620 | Deferred | 未確認 | CWE-22 | A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the file FileTool.java of the component File Upload Endpoint. Th |
| CVE-2026-6621 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unknown function of the file index.js. This manipulation of the argument __proto__ cau |
| CVE-2026-6622 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20. This affects an unknown function of the file /?\_route=customers/edit/ of the component Customer Handl |
| CVE-2026-6623 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an unknown function of the file /?_route=settings/users-view/ of the component Profi |
| CVE-2026-6624 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknown function of the file /?\_route=pool/add of the component Pool List Interface. E |
| CVE-2026-6625 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vulnerability is the function LocalFileServiceImpl.uploadPictureByUrl of the file mog |
| CVE-2026-6626 | Deferred | 未確認 | CWE-20, CWE-943 | A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset Handler/Aggregate Handler. The manipula |
| CVE-2026-6628 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput of the file /v2/query/view/ of the component Query Viewer Component. This manipul |
| CVE-2026-6629 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability affects the function Statement.executeUpdate of the file sql.jsp of the component Interface. |
| CVE-2026-6630 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a |
| CVE-2026-6631 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. |
| CVE-2026-6632 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromSafeClientFilter of the file /goform/SafeClientFilter of the component htt |
| CVE-2026-6633 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function store of the file plugins/yifang_backend_account/logic/admin/L_rbac_admin.php of |
| CVE-2026-6634 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file src/App.tsx of the component UpdateInstanceSetting. This man |
| CVE-2026-6635 | Deferred | 未確認 | CWE-287 | A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the function tool_call of the file apps/experimental/tools_webhook/app.py of the compon |
| CVE-2026-6636 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75b. Affected is the function Bun.serve of the file buildCache.js of the component API. Perf |
| CVE-2026-6643 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf() and passing user-controlled data directly to |
| CVE-2026-6644 | Modified | 未確認 | CWE-78 | A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break out of the restricted web environment and e |
| CVE-2026-6648 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in |
| CVE-2026-6649 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some unknown functionality of the file /index/image/headers. Executing a manipulation of the argument star |
| CVE-2026-6650 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in Z-BlogPHP 1.7.5. This affects the function App::UnPack of the file /zb_users/plugin/AppCentre/app_upload.php of the component ZBA File Handler. Th |
| CVE-2026-6651 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerability affects unknown code of the component Inventory Edit Item Page. The manipulation of |
| CVE-2026-6652 | Deferred | 未確認 | CWE-94, CWE-95 | A weakness has been identified in Pagekit CMS up to 1.0.18. This issue affects the function evaluate of the file app/modules/view/src/PhpEngine.php of the component StringStorage T |
| CVE-2026-6654 | Modified | 未確認 | CWE-1341, CWE-415, CWE-416 | Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero. |
| CVE-2026-6662 | Deferred | 未確認 | CWE-346, CWE-942 | A vulnerability was found in ericc-ch copilot-api up to 0.7.0. The impacted element is the function cors of the file src/server.ts of the component Token Endpoint. Performing a man |
| CVE-2026-6674 | Deferred | 未確認 | CWE-89 | The Plugin: CMS für Motorrad Werkstätten plugin for WordPress is vulnerable to SQL Injection via the 'arttype' parameter in all versions up to, and including, 1.0.0 due to insuffic |
| CVE-2026-6675 | Deferred | 未確認 | CWE-20 | The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to Unauthenticated Open Email Relay in all versions up to, and including, 2.2.0. This |
| CVE-2026-6703 | Deferred | 未確認 | CWE-862 | The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.2.1. This is due to the |
| CVE-2026-6706 | Analyzed | 未確認 | CWE-862 | Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to read documentation content from unauthorized vaults via a cr |
| CVE-2026-6711 | Deferred | 未確認 | CWE-79 | The Website LLMs.txt plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.6. This is due to the us |
| CVE-2026-6712 | Deferred | 未確認 | CWE-79 | The Website LLMs.txt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.2.6 due to insufficient input sani |
| CVE-2026-6725 | Deferred | 未確認 | CWE-79 | The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the `wpcsm_text_rotator` shortcode in all versi |
| CVE-2026-6729 | Analyzed | 未確認 | CWE-287 | HKUDS OpenHarness prior to PR #159 remediation contains a session key derivation vulnerability that allows authenticated participants in shared chats or threads to hijack other use |
| CVE-2026-6732 | Analyzed | 未確認 | CWE-843 | A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entit |
| CVE-2026-6741 | Deferred | 未確認 | CWE-269 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 5.4.1. This is due to |
| CVE-2026-6743 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in WebSystems WebTOTUM 2026. This impacts an unknown function of the component Calendar. The manipulation leads to cross site scripting. The attack m |
| CVE-2026-6744 | Deferred | 未確認 | CWE-918 | A vulnerability was found in Bagisto up to 2.3.15. Affected is the function copy of the component Downloadable Link Handler. The manipulation results in server-side request forgery |
| CVE-2026-6745 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in Bagisto up to 2.3.15. Affected by this vulnerability is an unknown functionality of the component Custom Scripts Handler. This manipulation causes |
| CVE-2026-6746 | Modified | 未確認 | CWE-416, CWE-825 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6747 | Modified | 未確認 | CWE-416, CWE-825 | Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6748 | Modified | 未確認 | CWE-457, CWE-824 | Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6749 | Modified | 未確認 | CWE-824, CWE-908 | Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunder |
| CVE-2026-6750 | Modified | 未確認 | CWE-266, CWE-269 | Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140 |
| CVE-2026-6751 | Modified | 未確認 | CWE-457, CWE-824 | Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6752 | Modified | 未確認 | CWE-119, CWE-131 | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6753 | Modified | 未確認 | CWE-119, CWE-787 | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6754 | Modified | 未確認 | CWE-416, CWE-825 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6755 | Analyzed | 未確認 | CWE-352 | Mitigation bypass in the DOM: postMessage component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6756 | Analyzed | 未確認 | CWE-200 | Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150. |
| CVE-2026-6757 | Analyzed | 未確認 | CWE-824 | Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6758 | Analyzed | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6759 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6760 | Analyzed | 未確認 | CWE-288 | Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6761 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6762 | Analyzed | 未確認 | CWE-290 | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6763 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6764 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6765 | Analyzed | 未確認 | CWE-359 | Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6766 | Analyzed | 未確認 | CWE-754 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6767 | Analyzed | 未確認 | CWE-119 | Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6768 | Analyzed | 未確認 | CWE-288 | Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6769 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6770 | Analyzed | 未確認 | CWE-200 | Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6771 | Analyzed | 未確認 | CWE-288 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6772 | Analyzed | 未確認 | CWE-754 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbi |
| CVE-2026-6773 | Analyzed | 未確認 | CWE-190 | Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6774 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6775 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6776 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. |
| CVE-2026-6777 | Analyzed | 未確認 | CWE-20, CWE-352, CWE-400 | Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6778 | Analyzed | 未確認 | CWE-476, CWE-824 | Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6779 | Analyzed | 未確認 | CWE-119, CWE-20, CWE-79 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6780 | Analyzed | 未確認 | CWE-400 | Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6781 | Analyzed | 未確認 | CWE-400 | Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6782 | Analyzed | 未確認 | CWE-200 | Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6783 | Analyzed | 未確認 | CWE-190 | Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. |
| CVE-2026-6784 | Modified | 未確認 | CWE-125, CWE-416, CWE-787 | Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could ha |
| CVE-2026-6785 | Modified | 未確認 | CWE-125, CWE-416, CWE-787 | Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption |
| CVE-2026-6786 | Modified | 未確認 | CWE-125, CWE-416, CWE-787 | Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that |
| CVE-2026-6796 | Deferred | 未確認 | CWE-312, CWE-313 | A vulnerability was determined in Sanluan PublicCMS up to 6.202506.d. Affected is the function log_login of the file core/src/main/java/com/publiccms/controller/admin/LoginAdminCon |
| CVE-2026-6797 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d. Affected by this vulnerability is the function ZipSecureFile.setMinflateRatio of the file common/src/main/java |
| CVE-2026-6799 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is some unknown functionality of the file /cgi-bin/mbox-config?method=SET§ion=ping_config |
| CVE-2026-6807 | Awaiting Analysis | 未確認 | CWE-611 | A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper handling of XML input, which may result in unintended exposure of sensitive information. The |
| CVE-2026-6809 | Deferred | 未確認 | CWE-79 | The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1. This is due to in |
| CVE-2026-6810 | Deferred | 未確認 | CWE-639 | The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.63 via the dex_bccf_admin_int_cal |
| CVE-2026-6819 | Analyzed | 未確認 | CWE-276 | HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including /plugin install, /plugin enable, /plugin disable, and /reload-plugins to remote senders b |
| CVE-2026-6823 | Analyzed | 未確認 | CWE-276 | HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inherit allow_from = ["*"] permitting arbitrary remote |
| CVE-2026-6829 | Deferred | 未確認 | CWE-22 | nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenticated attackers to set or change a session workspace to an arbitrary existing directory on |
| CVE-2026-6830 | Deferred | 未確認 | CWE-459, CWE-668 | nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before |
| CVE-2026-6832 | Analyzed | 未確認 | CWE-22 | Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete endpoint that allows authenticated attackers to delete files outside the session directory |
| CVE-2026-6833 | Deferred | 未確認 | CWE-89 | The a+HRD developed by aEnrich has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents. |
| CVE-2026-6834 | Deferred | 未確認 | CWE-862 | The a+HRD developed by aEnrich has a Missing Authorization vulnerability, allowing authenticated remote attackers to arbitrarily read database contents through a specific API metho |
| CVE-2026-6835 | Deferred | 未確認 | CWE-434 | The a+HCM developed by aEnrich has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload arbitrary files to any path, including HTML documents |
| CVE-2026-6839 | Analyzed | 未確認 | CWE-1284 | Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affecte |
| CVE-2026-6840 | Analyzed | 未確認 | CWE-129 | Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0. |
| CVE-2026-6842 | Awaiting Analysis | 未確認 | CWE-732 | A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` dir |
| CVE-2026-6843 | Analyzed | 未確認 | CWE-134 | A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifier |
| CVE-2026-6844 | Analyzed | 未確認 | CWE-400 | A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Execu |
| CVE-2026-6845 | Modified | 未確認 | CWE-476 | A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into proce |
| CVE-2026-6846 | Modified | 未確認 | CWE-122 | A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. |
| CVE-2026-6848 | Analyzed | 未確認 | CWE-613 | A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or robot account creation, the re-authentic |
| CVE-2026-6849 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Com |
| CVE-2026-6855 | Analyzed | 未確認 | CWE-22 | A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the |
| CVE-2026-6857 | Awaiting Analysis | 未確認 | CWE-502 | A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges cou |
| CVE-2026-6859 | Modified | 未確認 | CWE-829 | A flaw was found in InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models from HuggingFace. This allows a remote attacker to achieve arbit |
| CVE-2026-6861 | Analyzed | 未確認 | CWE-193 | A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Shee |
| CVE-2026-6862 | Modified | 未確認 | CWE-674 | A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field is at least 4 bytes, which is the m |
| CVE-2026-6867 | Analyzed | 未確認 | CWE-1325 | SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6868 | Analyzed | 未確認 | CWE-121 | HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6869 | Analyzed | 未確認 | CWE-1325 | WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6870 | Analyzed | 未確認 | CWE-824 | GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6874 | Deferred | 未確認 | CWE-350 | A vulnerability was determined in ericc-ch copilot-api up to 0.7.0. This impacts an unknown function of the file /token of the component Header Handler. Executing a manipulation of |
| CVE-2026-6878 | Deferred | 未確認 | CWE-264, CWE-265 | A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function math_equal of the file prime_math/grader.py. The manipulation leads to sandbox issue. It is p |
| CVE-2026-6885 | Deferred | 未確認 | CWE-434 | Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and exe |
| CVE-2026-6886 | Deferred | 未確認 | CWE-1390 | Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a Authentication Bypass vulnerability, allowing unauthenticated remote attackers to log into the sy |
| CVE-2026-6887 | Deferred | 未確認 | CWE-89 | Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL co |
| CVE-2026-6903 | Deferred | 未確認 | CWE-22, CWE-346 | The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality. An unauthenticated attacker could exploit this vu |
| CVE-2026-6911 | Awaiting Analysis | 未確認 | CWE-347 | Missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to forge JWT tokens and gain unintended administrative access to the application, including the |
| CVE-2026-6912 | Awaiting Analysis | 未確認 | CWE-915 | Improperly controlled modification of dynamically-determined object attributes in the Cognito User Pool configuration in AWS Ops Wheel before PR #165 allows remote authenticated us |
| CVE-2026-6914 | Analyzed | 未確認 | CWE-191 | Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 version |
| CVE-2026-6915 | Analyzed | 未確認 | CWE-1284 | An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. |
| CVE-2026-6919 | Modified | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-6920 | Modified | 未確認 | CWE-125 | Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-6921 | Modified | 未確認 | CWE-362 | Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security sever |
| CVE-2026-6940 | Analyzed | 未確認 | CWE-22 | radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute pat |
| CVE-2026-6941 | Analyzed | 未確認 | CWE-22, CWE-59 | radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory b |
| CVE-2026-6942 | Analyzed | 未確認 | CWE-78 | radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter thro |
| CVE-2026-6947 | Deferred | 未確認 | CWE-307 | DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits |
| CVE-2026-6951 | Modified | 未確認 | CWE-88, CWE-94 | Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-S |
| CVE-2026-6966 | Modified | 未確認 | CWE-347 | Improper verification of cryptographic signature uniqueness in delegated role validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users to bypass the TUF s |
| CVE-2026-6967 | Modified | 未確認 | CWE-345 | Missing expiration, hash, and length enforcement in delegated metadata validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users with delegated signing aut |
| CVE-2026-6968 | Modified | 未確認 | CWE-22 | Incomplete path traversal fixes in awslabs/tough before tough-v0.22.0 allow remote authenticated users with delegated signing authority to write files outside intended output direc |
| CVE-2026-6970 | Deferred | 未確認 | CWE-842 | authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from th |
| CVE-2026-6977 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in vanna-ai vanna up to 2.0.2. The affected element is an unknown function of the component Legacy Flask API. The manipulation leads to i |
| CVE-2026-6978 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in JiZhiCMS up to 2.5.6. The impacted element is the function htmlspecialchars_decode of the file /index.php/admins/Sys/addcache.html. The manipulation |
| CVE-2026-6979 | Deferred | 未確認 | CWE-918 | A flaw has been found in devlikeapro WAHA up to 2026.3.4. This affects an unknown function of the file src/api/media.controller.ts of the component API Request Handler. This manipu |
| CVE-2026-6980 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repo_path of the file main.py. Such manipula |
| CVE-2026-6981 | Deferred | 未確認 | CWE-918 | A vulnerability was found in IhateCreatingUserNames2 AiraHub2 up to 3e4b77fd7d48ed811ffe5b8d222068c17c76495e. Affected is the function connect_stream_endpoint/sync_agents of the fi |
| CVE-2026-6982 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controlle |
| CVE-2026-6983 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in pagekit up to 1.0.18. Affected by this issue is some unknown functionality of the file /index.php/admin/system/update/download. The manipulation o |
| CVE-2026-6984 | Deferred | 未確認 | CWE-1336, CWE-791 | A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1. This affects the function create_template of the file astrbot/dashboard/routes/t2i.py of the component Dash |
| CVE-2026-6985 | Analyzed | 未確認 | CWE-404, CWE-835 | A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of the file /src/net_builtin.c of the component TCP Option Handler |
| CVE-2026-6986 | Analyzed | 未確認 | CWE-345, CWE-347 | A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_decrypt of the file /src/tls_aes128.c of the component GCM Aut |
| CVE-2026-6987 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management Plane. Performing a |
| CVE-2026-6988 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This |
| CVE-2026-6989 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service. Such manipulation leads |
| CVE-2026-6990 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in projeto-siga siga 11.0.3.18. The affected element is an unknown function of the file /sigawf/app/responsavel/novo. Performing a manipulation of the arg |
| CVE-2026-6991 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the component CUID Data |
| CVE-2026-6992 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNA |
| CVE-2026-6993 | Deferred | 未確認 | CWE-441 | A security flaw has been discovered in go-kratos kratos up to 2.9.2. This impacts the function NewServer of the file transport/http/server.go of the component http.DefaultServeMux |
| CVE-2026-6994 | Deferred | 未確認 | CWE-707, CWE-74 | A weakness has been identified in Envoy up to 1.33.0. Affected is the function params.add of the file source/extensions/filters/http/header_mutation/header_mutation.cc of the compo |
| CVE-2026-6995 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element is an unknown function of the file /index.asp of the component New User Page. Pe |
| CVE-2026-6996 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an unknown function of the component rmon event Tab. Executing a manipulation of the argument |
| CVE-2026-6997 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This impacts an unknown function of the component New RMON History Page. The manipulation of t |
| CVE-2026-6998 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. Affected is an unknown function of the component New RMON Statistics Page. The manipulation of the argument |
| CVE-2026-6999 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in BIVOCOM TR321 21.1.1.50. Affected by this vulnerability is an unknown functionality of the component Wireless Setting. This manipulation of the argument Ne |
| CVE-2026-7000 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in Datacom DM4100 1.3.6.1.4.1.3709. Affected by this issue is some unknown functionality of the component VLAN Page. Such manipulation of the argumen |
| CVE-2026-7001 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the component Ethernet Configuration Page. Performing a manipulation of the argument N |
| CVE-2026-7002 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/get_message_ajax.php of the component Private M |
| CVE-2026-7011 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in MaxSite CMS up to 109.3. Affected by this vulnerability is an unknown functionality of the file /admin/plugin_antispam of the component Antispam P |
| CVE-2026-7012 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in MaxSite CMS up to 109.3. This affects an unknown part of the component Redirect Plugin. The manipulation of the argument f_all/f_all404 results in c |
| CVE-2026-7013 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functionality of the component mail_send Plugin. The manipulation of t |
| CVE-2026-7014 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in MaxSite CMS up to 109.3. This vulnerability affects unknown code of the component down_count Plugin. This manipulation of the argument f_file/f_prefix caus |
| CVE-2026-7015 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in MaxSite CMS up to 109.3. This issue affects some unknown processing of the component Guestbook Plugin. Such manipulation of the argument f_text/f_ |
| CVE-2026-7016 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in MaxSite CMS up to 109.3. Impacted is an unknown function of the component ushki Plugin. Performing a manipulation of the argument f_ushka_new/f_ushk re |
| CVE-2026-7018 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main |
| CVE-2026-7019 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument men |
| CVE-2026-7020 | Modified | 未確認 | CWE-22 | A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfe |
| CVE-2026-7021 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of the component Connector Service. This mani |
| CVE-2026-7022 | Deferred | 未確認 | CWE-287 | A security vulnerability has been detected in SmythOS sre up to 0.0.15. Affected is the function AgentRuntime of the file packages/core/src/subsystems/AgentManager/AgentRuntime.cla |
| CVE-2026-7023 | Analyzed | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in ByteDance coze-studio up to 0.5.1. Affected by this vulnerability is the function ExecuteSQL of the file backend/domain/memory/database/service/data |
| CVE-2026-7024 | Deferred | 未確認 | CWE-22 | A flaw has been found in rawchen sims up to 004f783b1db5ecdfad81c8fdc3b34171211112de. Affected by this issue is some unknown functionality of the file sims-master/src/web/servlet/f |
| CVE-2026-7025 | Deferred | 未確認 | CWE-918 | A vulnerability was found in Typecho up to 1.3.0. This vulnerability affects the function Service::sendPingHandle of the file var/Widget/Service.php of the component Ping Back Serv |
| CVE-2026-7026 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the a |
| CVE-2026-7027 | Analyzed | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in D-Link DSL-2740R EU_01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Net |
| CVE-2026-7028 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component |
| CVE-2026-7029 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Tenda F456 1.0.0.5. The impacted element is the function fromaddressNat of the file /goform/addressNat. Executing a manipulation of the argument m |
| CVE-2026-7030 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page l |
| CVE-2026-7031 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Tenda F456 1.0.0.5. This impacts the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page results in |
| CVE-2026-7032 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in Tenda F456 1.0.0.5. Affected is the function SafeEmailFilter of the file /goform/SafeEmailFilter. This manipulation of the argument page causes buffer over |
| CVE-2026-7033 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Such manipulation of |
| CVE-2026-7034 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function WrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Performing a man |
| CVE-2026-7035 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda FH1202 1.2.0.14. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. Executing a manipulatio |
| CVE-2026-7036 | Analyzed | 未確認 | CWE-22 | A vulnerability was identified in Tenda i9 1.0.0.5(2204). This vulnerability affects the function R7WebsSecurityHandlerfunction of the component HTTP Handler. The manipulation lead |
| CVE-2026-7037 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Han |
| CVE-2026-7038 | Deferred | 未確認 | CWE-522 | A weakness has been identified in tufantunc ssh-mcp up to 1.5.0. Impacted is an unknown function of the file src/index.ts of the component Command Line Handler. This manipulation c |
| CVE-2026-7039 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in tufantunc ssh-mcp up to 1.5.0. The affected element is the function shell.write of the file src/index.ts. Such manipulation of the arg |
| CVE-2026-7040 | Analyzed | 未確認 | CWE-122, CWE-176 | Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF |
| CVE-2026-7041 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was detected in 666ghj MiroFish up to 0.1.2. The impacted element is an unknown function of the file /console of the component Werkzeug Debugger PIN Handler. Perfor |
| CVE-2026-7042 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in 666ghj MiroFish up to 0.1.2. This affects the function create_app of the file backend/app/__init__.py of the component REST API Endpoint. Executing a manip |
| CVE-2026-7043 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in GreenCMS up to 2.3. This impacts the function pluginAddLocal of the file /index.php?m=admin&c=custom&a=pluginadd. The manipulation leads to unrest |
| CVE-2026-7044 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in GreenCMS up to 2.3. Affected is the function themeadd of the file /index.php?m=admin&c=custom&a=themeadd. The manipulation results in unrestricted uplo |
| CVE-2026-7045 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was determined in baomidou dynamic-datasource 2.5.0. Affected by this vulnerability is the function DsSpelExpressionProcessor#doDetermineDatasource of the file dyna |
| CVE-2026-7053 | Analyzed | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Tenda F456 1.0.0.5. This affects the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Performing a manipulation of t |
| CVE-2026-7054 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Tenda F456 1.0.0.5. This vulnerability affects the function fromPptpUserAdd of the file /goform/PPTPDClient of the component httpd. Executing a ma |
| CVE-2026-7055 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Tenda F456 1.0.0.5. This issue affects the function fromVirtualSer of the file /goform/VirtualSer of the component httpd. The manipula |
| CVE-2026-7056 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the component httpd. The manipulation of the arg |
| CVE-2026-7057 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in Tenda F456 1.0.0.5. The affected element is an unknown function of the file /goform/setcfm of the component httpd. This manipulation of the argument funcna |
| CVE-2026-7058 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in 666ghj MiroFish up to 0.1.2. The impacted element is the function SimulationIPCClient.send_command of the file backend/app/services/simulation_ipc |
| CVE-2026-7059 | Deferred | 未確認 | CWE-22 | A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function get_simulation_posts of the file backend/app/api/simulation.py of the component Query Parameter |
| CVE-2026-7060 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/ja |
| CVE-2026-7061 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Toowiredd chatgpt-mcp-server up to 0.1.0. Affected by this issue is some unknown functionality of the file src/services/docker.service.ts of the c |
| CVE-2026-7062 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Intina47 context-sync up to 2.0.0. This affects an unknown part of the file src/git-integration.ts of the component Git Integration. S |
| CVE-2026-7063 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file /370project/process/eprocess.php of the component |
| CVE-2026-7064 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in AgentDeskAI browser-tools-mcp up to 1.2.0. This issue affects some unknown processing of the file browser-tools-server/browser-connector.ts. Executing a ma |
| CVE-2026-7065 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in BidingCC BuildingAI up to 26.0.1. Impacted is the function uploadRemoteFile of the file packages/core/src/modules/upload/services/file-storage.ser |
| CVE-2026-7066 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in choieastsea simple-openstack-mcp up to 767b2f4a8154cca344344b9725537a58399e6036. The affected element is the function exec_openstack of the file server |
| CVE-2026-7067 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in D-Link DIR-822 A_101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipula |
| CVE-2026-7068 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in D-Link DIR-825 3.00b32. This affects the function NMBD_process of the file sserver.c of the component nmbd. Such manipulation leads to buffer over |
| CVE-2026-7069 | Analyzed | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component miniupnpd. Performing a manipu |
| CVE-2026-7070 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Us |
| CVE-2026-7071 | Deferred | 未確認 | CWE-200, CWE-538 | A security vulnerability has been detected in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/user-cvs/. The manipula |
| CVE-2026-7072 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in CodePanda Source canteen_management_system 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of |
| CVE-2026-7073 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /execute.php. This manipulation of the argument code causes sql i |
| CVE-2026-7074 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Construction Management System 1.0. This vulnerability affects unknown code of the file /execute1.php. Such manipulation of the argum |
| CVE-2026-7075 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Construction Management System 1.0. This issue affects some unknown processing of the file /locations.php. Performing a manipulation of th |
| CVE-2026-7076 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the file /edit_branch.php. Executing a manipulation of the argument |
| CVE-2026-7077 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Courier Management System 1.0. The affected element is an unknown function of the file /edit_parcel.php. The manipulation of the argu |
| CVE-2026-7078 | Analyzed | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Tenda F456 1.0.0.5. The impacted element is the function fromSetIpBind of the file /goform/SetIpBind of the component httpd. The manipulation |
| CVE-2026-7079 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipulation of the argumen |
| CVE-2026-7080 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component httpd. Such man |
| CVE-2026-7081 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Tenda F456 1.0.0.5. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a manipulation o |
| CVE-2026-7082 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Executing a mani |
| CVE-2026-7083 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in likeadmin-likeshop likeadmin_php up to 1.9.6. Affected by this issue is the function queryResult of the file server\app\adminapi\lists\tools\DataT |
| CVE-2026-7084 | Deferred | 未確認 | CWE-918 | A vulnerability was found in HBAI-Ltd Toonflow-app up to 1.1.1. This affects the function fetch of the file src/routes/setting/vendorConfig/getCodeByLink.ts of the component getCod |
| CVE-2026-7085 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in HBAI-Ltd Toonflow-app up to 1.1.1. This vulnerability affects the function z.url of the file src/routes/setting/about/downloadApp.ts of the compon |
| CVE-2026-7086 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in HBAI-Ltd Toonflow-app up to 1.1.1. This issue affects the function updateStoryboardUrl of the file replaceUrl.ts of the component Storyboard Expor |
| CVE-2026-7087 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_sales. Performing a |
| CVE-2026-7088 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=save_receiving. E |
| CVE-2026-7089 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointme |
| CVE-2026-7090 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/send_message.php of the component Chat Interface. The manipulatio |
| CVE-2026-7091 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /user of the component User Management Handler. This manipulation |
| CVE-2026-7092 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipula |
| CVE-2026-7093 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in code-projects Invoice System in Laravel 1.0. Affected by this vulnerability is an unknown functionality of the file /invoice/ of the component Invoice |
| CVE-2026-7094 | Analyzed | 未確認 | CWE-918 | A vulnerability was determined in ShadowCloneLabs GlutamateMCPServers up to e2de73280b01e5d943593dd1aa2c01c5b9112f78. Affected by this issue is some unknown functionality of the fi |
| CVE-2026-7095 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. The manipulation of the argument ID le |
| CVE-2026-7096 | Analyzed | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipulation of th |
| CVE-2026-7097 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Tenda F456 1.0.0.5. This issue affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. This |
| CVE-2026-7098 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Tenda F456 1.0.0.5. Impacted is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. Such manipu |
| CVE-2026-7099 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Tenda F456 1.0.0.5. The affected element is the function formQuickIndex of the file /goform/QuickIndex of the component httpd. Performing a manipula |
| CVE-2026-7100 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in Tenda F456 1.0.0.5. The impacted element is the function fromNatlimitof of the file /goform/Natlimit of the component httpd. Executing a manipulation can l |
| CVE-2026-7101 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. The manipulation leads to |
| CVE-2026-7102 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Tenda F456 1.0.0.5. This impacts the function FromWriteFacMac of the file /goform/WriteFacMac of the component httpd. The manipulation of the argument |
| CVE-2026-7103 | Deferred | 未確認 | CWE-327, CWE-328 | A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function of the file update_user.php of the component MD5 Hash Handler. This manipulation of |
| CVE-2026-7106 | Deferred | 未確認 | CWE-269 | The Highland Software Custom Role Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 1.0.0. This is due to insufficient authorizatio |
| CVE-2026-7107 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in code-projects Invoice System in Laravel 1.0. The impacted element is an unknown function of the file /company. This manipulation of the argument l |
| CVE-2026-7108 | Deferred | 未確認 | CWE-352, CWE-862 | A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. |
| CVE-2026-7109 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /item of the component API Endpoint. Performing a manipula |
| CVE-2026-7110 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/descript |
| CVE-2026-7111 | Modified | 未確認 | CWE-416, CWE-825 | Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. Th |
| CVE-2026-7112 | Deferred | 未確認 | CWE-287 | A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function _check_auth of the file gateway/platforms/api_server.py of the com |
| CVE-2026-7113 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webhook |
| CVE-2026-7114 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. This manipulation of the argument ID c |
| CVE-2026-7115 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file 370project/delete.php. Such manipulation of the |
| CVE-2026-7116 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in code-projects Employee Management System 1.0. This issue affects some unknown processing of the file 370project/mark.php. Performing a manipu |
| CVE-2026-7117 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Employee Management System 1.0. Impacted is an unknown function of the file 370project/approve.php. Executing a manipulation of the |
| CVE-2026-7118 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Employee Management System 1.0. The affected element is an unknown function of the file 370project/cancel.php. The manip |
| CVE-2026-7119 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Tenda HG3 2.0. The impacted element is an unknown function of the file /boaform/formCountrystr. The manipulation of the argument countrystr results |
| CVE-2026-7121 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulati |
| CVE-2026-7122 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such man |
| CVE-2026-7123 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a m |
| CVE-2026-7124 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Affected by this vulnerability is the function setIpv6LanCfg of the file /cgi-bin/cstecgi.cgi of the compone |
| CVE-2026-7125 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi of the component CGI |
| CVE-2026-7126 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=save_category. The manipula |
| CVE-2026-7127 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete_receiving. Thi |
| CVE-2026-7128 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=save_t |
| CVE-2026-7129 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /index.php?page=categories. Performing a manipul |
| CVE-2026-7130 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=delete_category. Executing |
| CVE-2026-7131 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0. The impacted element is an unknown function of the file /loginuser.php. The manipulation of |
| CVE-2026-7132 | Deferred | 未確認 | CWE-22 | A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. This affects the function readfile of the file /download.php. The manipulation of the argument F |
| CVE-2026-7133 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an unknown function of the file /activity.php. This manipulation of the argument dir |
| CVE-2026-7134 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in code-projects Online Lot Reservation System 1.0. Affected is an unknown function of the file /edithousepic.php. Such manipulation of the argument |
| CVE-2026-7135 | Deferred | 未確認 | CWE-119, CWE-125 | A security flaw has been discovered in GPAC up to 26.03-DEV-rev105-g8f39a1eb3-master. Affected by this vulnerability is the function elng_box_read of the file src/isomedia/box_code |
| CVE-2026-7136 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handl |
| CVE-2026-7137 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Ha |
| CVE-2026-7138 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handle |
| CVE-2026-7139 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This m |
| CVE-2026-7140 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such mani |
| CVE-2026-7141 | Modified | 未確認 | CWE-908 | A vulnerability was found in vLLM up to 0.19.0. The affected element is the function has_mamba_layers of the file vllm/v1/kv_cache_interface.py of the component KV Block Handler. P |
| CVE-2026-7142 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in Wooey up to 0.13.2. The impacted element is the function add_or_update_script of the file wooey/api/scripts.py of the component API Endpoint. Exec |
| CVE-2026-7143 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block_status.php. The manipulation of |
| CVE-2026-7144 | Deferred | 未確認 | CWE-285, CWE-639 | A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update_passwd_process.php. The manipulation o |
| CVE-2026-7145 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of the file app/Http/Controllers/Workspaces/WorkspaceInvitationsController.php of |
| CVE-2026-7146 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d. Affected by this vulnerability is the function axios |
| CVE-2026-7147 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in JoeCastrom mcp-chat-studio up to 1.5.0. Affected by this issue is some unknown functionality of the file server/routes/llm.js of the component LLM M |
| CVE-2026-7148 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql inj |
| CVE-2026-7149 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d. This vulnerability affects the function prepare_kaggle_dataset of the file sr |
| CVE-2026-7150 | Deferred | 未確認 | CWE-918 | A vulnerability was found in dh1011 auto-favicon up to f189116a9259950c2393f114dbcb94dde0ad864b. This issue affects the function generate_favicon_from_url of the file src/auto_favi |
| CVE-2026-7151 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda HG3 2.0. Impacted is the function formUploadConfig of the file /boaform/formIPv6Routing. This manipulation of the argument destNet causes st |
| CVE-2026-7152 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Hand |
| CVE-2026-7153 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of the comp |
| CVE-2026-7154 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setAdvancedInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. |
| CVE-2026-7155 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setLoginPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component |
| CVE-2026-7156 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function CsteSystem of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipul |
| CVE-2026-7157 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946db9efc. Affected by this vulnerability is an unknown functionality of the file src/aider_mc |
| CVE-2026-7158 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77d108e8a94a5b8e4394c6. Affected by this issue is the function _validate_url_safe of the fil |
| CVE-2026-7159 | Deferred | 未確認 | CWE-22 | A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function read_document/list_documents of the file server.py. Performing a manipulation of the ar |
| CVE-2026-7160 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boaform/formTracert. Executing a manipulation of the argument data |
| CVE-2026-7163 | Modified | 未確認 | CWE-312 | A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated user with mi |
| CVE-2026-7164 | Analyzed | 未確認 | CWE-674, CWE-791 | Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic. Remote attackers can craft packet |
| CVE-2026-7177 | Analyzed | 未確認 | CWE-918 | A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1. Affected by this issue is the function proxyHandler of the file app/api/[provider]/[...path]/route.ts. |
| CVE-2026-7178 | Analyzed | 未確認 | CWE-918 | A weakness has been identified in ChatGPTNextWeb NextChat up to 2.16.1. This affects the function storeUrl of the file app/api/artifacts/route.ts of the component Artifacts Endpoin |
| CVE-2026-7179 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function read_null_terminated_string of the file src/binwalk/plugins/winceext |
| CVE-2026-7183 | Deferred | 未確認 | CWE-248 | A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the component |
| CVE-2026-7191 | Awaiting Analysis | 未確認 | CWE-94 | Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code |
| CVE-2026-7194 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=save_product. This manipulat |
| CVE-2026-7196 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /guestdetails. Such manipulation of the argument deleteid |
| CVE-2026-7199 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=dele |
| CVE-2026-7200 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=types. Executing a |
| CVE-2026-7202 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setWiFiWpsStart of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The |
| CVE-2026-7203 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI H |
| CVE-2026-7204 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setPptpServerCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handl |
| CVE-2026-7205 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598. Impacted is the function search_papers of the file src/main.py. Such manipula |
| CVE-2026-7206 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extract_to_json of the file src/entry.py. Performing a manipulation of th |
| CVE-2026-7211 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcp_server.py of the component Git Search API. Exec |
| CVE-2026-7212 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects an unknown function of the file notes_mcp.py. The manipulation of the argument root |
| CVE-2026-7213 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in ef10007 MLOps_MCP 1.0.0. This impacts an unknown function of the file fastmcp_server.py of the component save_file Tool. The manipulation of the arg |
| CVE-2026-7214 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3. This vulnerability affects the function read_file/write_file/list_files/file_inf of the file src/server.p |
| CVE-2026-7215 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0. This issue affects the function launch_vmd_gui_tool of the file mcp_server.py of the component VMD Launch Hand |
| CVE-2026-7216 | Deferred | 未確認 | CWE-22 | A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd. Impacted is an unknown function of the file processing_serve |
| CVE-2026-7217 | Deferred | 未確認 | CWE-22, CWE-36 | A security vulnerability has been detected in Deepractice PromptX up to 2.4.0. The affected element is the function read_docx/read_xlsx/read_pptx/list_xlsx_sheets/read_pdf of the f |
| CVE-2026-7218 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is_cmd_string_valid of the file /boafrm/formWsc of the component libapmib.so. |
| CVE-2026-7219 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entry_name can le |
| CVE-2026-7220 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620. This impacts an unknown function of the file fastly-mcp.mjs of the compone |
| CVE-2026-7221 | Deferred | 未確認 | CWE-918 | A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API E |
| CVE-2026-7222 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/complai |
| CVE-2026-7223 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63. Affected by this issue is the function fetch of the file packages/core/src/http/aiProxyMiddle |
| CVE-2026-7224 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_cart of the file /admin/ajax.php?action=delete_cart. Performing |
| CVE-2026-7225 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function delete_menu of the file /admin/ajax.php?action=delete_menu. E |
| CVE-2026-7226 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects the function login2 of the file /admin/ajax.php?action=login2. The man |
| CVE-2026-7227 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of the argume |
| CVE-2026-7228 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_count of the file /admin/ajax.php?action=get_cart_count. This ma |
| CVE-2026-7229 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. |
| CVE-2026-7230 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is an unknown function. The manipulation of the argument angerDisplay results in cross site s |
| CVE-2026-7233 | Modified | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the function fz_subset_cff_for_gids of the file subset-cff.c of the component CFF Index Handle |
| CVE-2026-7234 | Deferred | 未確認 | CWE-22 | A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/component_server/server.js. Executing a |
| CVE-2026-7235 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185aa7ff0d864581257008077b4010fca1747bf. Affected by this vulnerability is an unknown functio |
| CVE-2026-7237 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue is some unknown functionality of the file packages/scaffold-mcp/src/server/index.ts of the |
| CVE-2026-7238 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminUpdateAlbum.php. This manipulation of the argument tx |
| CVE-2026-7240 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setVpnAccountCfg of the file /cgi-bin/cstecgi.cgi of the component C |
| CVE-2026-7241 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Pe |
| CVE-2026-7242 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setOpenVpnClientCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. |
| CVE-2026-7243 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handl |
| CVE-2026-7244 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi of the compon |
| CVE-2026-7246 | Modified | 未確認 | CWE-77, CWE-78 | This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved |
| CVE-2026-7247 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function file_exten_asp of the file file_exten.asp of the component File Extension Handle |
| CVE-2026-7248 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument |
| CVE-2026-7264 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function get_cart_items of the file /admin/ajax.php?action=get_cart_items. Executing |
| CVE-2026-7265 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function Category of the file pizza/index.php?page=category. |
| CVE-2026-7266 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function save_order of the file /admin/ajax.php?action=save_order. The mani |
| CVE-2026-7267 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects an unknown function of the file /view_prod.php. This manipulation of the argument ID causes sql i |
| CVE-2026-7268 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save_category of the file /admin/ajax.php?action=save_category. Such manipu |
| CVE-2026-7269 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation |
| CVE-2026-7270 | Modified | 未確認 | CWE-783 | An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug ma |
| CVE-2026-7271 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcbdad6212f8a3. Impacted is an unknown function of the file server/sdk-server.ts of the compo |
| CVE-2026-7272 | Deferred | 未確認 | CWE-22 | A flaw has been found in WilliamCloudQi matlab-mcp-server up to ab88f6b9bf5f36f725e8628029f7f6dd0d9913ca. The affected element is the function generate_matlab_code/execute_matlab_c |
| CVE-2026-7279 | Deferred | 未確認 | CWE-427 | AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resulting in arbi |
| CVE-2026-7280 | Deferred | 未確認 | CWE-428 | AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific directory, r |
| CVE-2026-7281 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Execut |
| CVE-2026-7282 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function delete_expired of the file /ajax.php?action=delete_expired. The |
| CVE-2026-7283 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function save_expired of the file /ajax.php?action=save_expired. The |
| CVE-2026-7288 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argumen |
| CVE-2026-7289 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url |
| CVE-2026-7290 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in JeecgBoot up to 3.9.1. Impacted is the function SqlInjectionUtil of the file jeecg-boot/jeecg-boot-base-core/src/main/java/org/jeecg/common/util/S |
| CVE-2026-7291 | Deferred | 未確認 | CWE-918 | A weakness has been identified in o2oa up to 10.0. This affects the function FileAction of the file FileAction.java of the component URL Fetching. Executing a manipulation of the a |
| CVE-2026-7292 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in o2oa up to 10.0. This impacts the function syncFile of the file NodeAgent.java of the component NodeAgent. The manipulation leads to i |
| CVE-2026-7293 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function delete_category of the file /admin/ajax.php?action=delete_category. The manipu |
| CVE-2026-7294 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function save_settings of the file /admin/index.php?page=save_settings. |
| CVE-2026-7295 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function save_menu of the file /admin/ajax.php?action=save_menu. Such m |
| CVE-2026-7296 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_order of the file /admin/ajax.php?action=save_order. Performing a manipulat |
| CVE-2026-7297 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function save_user of the file /admin/ajax.php?action=save_user. Execu |
| CVE-2026-7303 | Deferred | 未確認 | CWE-99 | A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2. Impacted is the function logDetailCat of the file xxl-job-admin/src/main/java/com/xxl/job/admin/controller/biz/J |
| CVE-2026-7305 | Deferred | 未確認 | CWE-918 | A weakness has been identified in Xuxueli xxl-job up to 3.3.2. The affected element is the function triggerJob of the file xxl-job-admin/src/main/java/com/xxl/job/admin/service/imp |
| CVE-2026-7306 | Deferred | 未確認 | CWE-320, CWE-321 | A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/sch |
| CVE-2026-7309 | Analyzed | 未確認 | CWE-426 | A flaw was found in the OpenShift Container Platform build system. A user with the `edit` ClusterRole can inject arbitrary environment variables, such as `LD_PRELOAD` or `http_prox |
| CVE-2026-7314 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in eiceblue spire-doc-mcp-server 1.0.0. This affects the function get_doc_path of the file src/spire_doc_mcp/api/base.py. Performing a manipulation of |
| CVE-2026-7315 | Deferred | 未確認 | CWE-22 | A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function get_pdf_path of the file src/spire_pdf_mcp/server.py of the component PDF File Handler. Exec |
| CVE-2026-7316 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in eiliyaabedini aider-mcp up to 667b914301aada695aab0e46d1fb3a7d5e32c8af. Affected is an unknown function of the file aider_mcp.py of the component |
| CVE-2026-7317 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was found in Grav CMS up to 1.7.49.5/2.0.0-beta.1. Affected by this vulnerability is the function FileCache::doGet of the file system/src/Grav/Framework/Cache/Adapt |
| CVE-2026-7318 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function search_papers of the file research_server.py. The manipulation of the argument topic re |
| CVE-2026-7319 | Deferred | 未確認 | CWE-22 | A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function _get_context_file_path of the file src/execution_system_mcp/server.py of the compo |
| CVE-2026-7320 | Modified | 未確認 | CWE-119, CWE-125 | Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35. |
| CVE-2026-7321 | Analyzed | 未確認 | CWE-120 | Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thu |
| CVE-2026-7322 | Modified | 未確認 | CWE-119, CWE-416, CWE-787 | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some |
| CVE-2026-7323 | Modified | 未確認 | CWE-119, CWE-787 | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some |
| CVE-2026-7324 | Modified | 未確認 | CWE-119 | Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl |
| CVE-2026-7333 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severit |
| CVE-2026-7334 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Mac prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-7335 | Analyzed | 未確認 | CWE-416 | Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-7336 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-7337 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-7338 | Analyzed | 未確認 | CWE-416 | Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffi |
| CVE-2026-7339 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-7340 | Analyzed | 未確認 | CWE-472 | Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium s |
| CVE-2026-7341 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-7342 | Analyzed | 未確認 | CWE-416 | Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-7343 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-7344 | Analyzed | 未確認 | CWE-416 | Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sand |
| CVE-2026-7345 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially pe |
| CVE-2026-7346 | Analyzed | 未確認 | CWE-119 | Inappropriate implementation in Tint in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium se |
| CVE-2026-7347 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity |
| CVE-2026-7348 | Analyzed | 未確認 | CWE-416 | Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-7349 | Analyzed | 未確認 | CWE-416 | Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to execute arbitrary code inside a sandbox via malicious network tr |
| CVE-2026-7350 | Analyzed | 未確認 | CWE-416 | Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-7351 | Analyzed | 未確認 | CWE-362 | Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Exte |
| CVE-2026-7352 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-7353 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-7354 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium |
| CVE-2026-7355 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-7356 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High |
| CVE-2026-7357 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a craft |
| CVE-2026-7358 | Analyzed | 未確認 | CWE-416 | Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-7359 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-7360 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass sit |
| CVE-2026-7361 | Analyzed | 未確認 | CWE-416 | Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity |
| CVE-2026-7363 | Analyzed | 未確認 | CWE-416 | Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. ( |
| CVE-2026-7375 | Analyzed | 未確認 | CWE-835 | UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-7376 | Modified | 未確認 | CWE-476 | Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-7378 | Analyzed | 未確認 | CWE-122 | Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-7379 | Analyzed | 未確認 | CWE-401 | Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-7381 | Analyzed | 未確認 | CWE-200, CWE-441, CWE-913 | Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) |
| CVE-2026-7382 | Deferred | 未確認 | CWE-200, CWE-359 | Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS |
| CVE-2026-7384 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8bea39/c630b8ab0f970614d42da8e566e9c0d15a16414c. This impacts the function search_papers of t |
| CVE-2026-7386 | Deferred | 未確認 | CWE-22 | A flaw has been found in fatbobman mail-mcp-bridge up to 1.3.3. Affected is an unknown function of the file src/mail_mcp_server.py. Executing a manipulation of the argument message |
| CVE-2026-7388 | Deferred | 未確認 | CWE-74, CWE-94 | A weakness has been identified in EyouCMS up to 1.7.9. Impacted is the function editFile of the file application/admin/logic/FilemanagerLogic.php of the component Template File Han |
| CVE-2026-7389 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in EyouCMS up to 1.7.9. The affected element is the function GetSortData of the file application/common.php. The manipulation of the argu |
| CVE-2026-7390 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function Customer of the file /index.php?page=customer. The mani |
| CVE-2026-7391 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function save_supplier of the file /ajax.php?action=save_supplier. This manipulati |
| CVE-2026-7392 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function delete_supplier of the file /ajax.php?action=delete_supplier. Su |
| CVE-2026-7393 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save_menu of the file /admin/admin_class_novo.php of the component File Extension |
| CVE-2026-7394 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/view_order.php of the c |
| CVE-2026-7396 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/wecom.py of the component WeCh |
| CVE-2026-7397 | Deferred | 未確認 | CWE-59, CWE-61 | A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path of the file tools/file_tools.py. The manipulation results in |
| CVE-2026-7398 | Deferred | 未確認 | CWE-22 | A weakness has been identified in florensiawidjaja BioinfoMCP up to 7ada7918b9e515604d3c0ae264d3a9af10bf6e54. This vulnerability affects the function Upload of the file bioinfo_mcp |
| CVE-2026-7399 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in MeWare Software Development Inc. PDKS allows Privilege Abuse. This issue affects PDKS: from V16.20200313 before V |
| CVE-2026-7400 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0. This issue affects the function is_path_allowed of the file server.py of the component read_fi |
| CVE-2026-7401 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action= |
| CVE-2026-7402 | Deferred | 未確認 | CWE-799 | Improper Control of Interaction Frequency vulnerability in MeWare Software Development Inc. PDKS allows Flooding. This issue affects PDKS: from V16.20200313 before VMYR_3.5.202511 |
| CVE-2026-7403 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in geldata gel-mcp 0.1.0. This impacts the function list_rules/fetch_rule of the file src/gel_mcp/server.py. The manipulation of the argument ru |
| CVE-2026-7404 | Deferred | 未確認 | CWE-22, CWE-23 | A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the function delete_shared_prompt of the file src/mcpo_simple_server/services/prompt_man |
| CVE-2026-7407 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function save_settings of the file /pizzafy/admin/a |
| CVE-2026-7408 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function save_menu of the file /admin/ajax.php?action=save_menu. Performi |
| CVE-2026-7409 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_user of the file /admin/ajax.php?action=save_user. Executing a manipulation can |
| CVE-2026-7410 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=add_to_cart. The manipulat |
| CVE-2026-7416 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function build_project/run_tests of the file src/index.ts of the component MCP Interface. The |
| CVE-2026-7417 | Deferred | 未確認 | CWE-918 | A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function xhs_publish_content of the file src/server/mcp.server.ts of the component MCP Interface. Performing |
| CVE-2026-7418 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnerability affects the function strcpy of the file route/goform/NTP. Executing a manipulation |
| CVE-2026-7419 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file route/goform/formTaskEdit_ap. The manipulation of t |
| CVE-2026-7420 | Deferred | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file route/goform/ConfigAdvideo. The manipulation of the a |
| CVE-2026-7422 | Analyzed | 未確認 | CWE-290 | Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size validation by spoofing the Eth |
| CVE-2026-7423 | Analyzed | 未確認 | CWE-191 | Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of service (device cras |
| CVE-2026-7424 | Analyzed | 未確認 | CWE-191 | Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DN |
| CVE-2026-7425 | Analyzed | 未確認 | CWE-125 | Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of se |
| CVE-2026-7426 | Analyzed | 未確認 | CWE-787 | Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause m |
| CVE-2026-7429 | Deferred | 未確認 | CWE-79 | SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attackers to execute arbitrary JavaScript by crafting malicious STL |
| CVE-2026-7435 | Deferred | 未確認 | CWE-89 | SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without parameterization or s |
| CVE-2026-7439 | Deferred | 未確認 | CWE-346 | AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers t |
| CVE-2026-7443 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzz_domain of the file src/index.ts of the component MCP In |
| CVE-2026-7445 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown functionality of the file src/managers/ResourceManager.ts of |
| CVE-2026-7446 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyze_results/filter_results/export_results/compare_results/scan_directory/create_ru |
| CVE-2026-7447 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/update_customer.php. This manipulation of t |
| CVE-2026-7461 | Analyzed | 未確認 | CWE-78 | Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a |
| CVE-2026-7466 | Deferred | 未確認 | CWE-94 | AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter to |
| CVE-2026-7468 | Deferred | 未確認 | CWE-266, CWE-284 | A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Dem |
| CVE-2026-7469 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The manipulation of the argument delf |
| CVE-2026-7470 | Analyzed | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file /goform/SafeMacFilter. This manipulation of the argument page |
| CVE-2026-7500 | Modified | 未確認 | CWE-425 | When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled. Five endpoints under the versioned path `/account/v1alpha1 |
| CVE-2026-7501 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a manipulatio |
| CVE-2026-7502 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6. The affected element is the function saveLink of the file app/Http/Controllers/UserController.php |
| CVE-2026-7503 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137. The impacted element is the function setWiFiMultipleConfig in the library /lib/cste_modules/wireless.so of th |
| CVE-2026-7505 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper autho |
| CVE-2026-7506 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts an unknown function of the file /index.php/reservation/check. Such manipulation of the ar |
| CVE-2026-7508 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. Per |
| CVE-2026-7510 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an unknown functionality of the component Benchmark/Engagement/Product/Survey. Exe |
| CVE-2026-7551 | Analyzed | 未確認 | CWE-78 | HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating sy |