NVD公開月 2026-05
6,985 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2013-10075 | Analyzed | 未確認 | CWE-672 | Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a sessi |
| CVE-2018-25319 | Deferred | 未確認 | CWE-89 | Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the myevent |
| CVE-2018-25320 | Deferred | 未確認 | CWE-94 | ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability that allows attackers to execute arbitrary commands by leveraging the EXECUTE funct |
| CVE-2018-25321 | Analyzed | 未確認 | CWE-352 | TP-Link TL-WR720N wireless router contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious web |
| CVE-2018-25322 | Deferred | 未確認 | CWE-121 | Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license name st |
| CVE-2018-25323 | Deferred | 未確認 | CWE-120 | Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplyi |
| CVE-2018-25324 | Deferred | 未確認 | CWE-98 | Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting null bytes |
| CVE-2018-25325 | Deferred | 未確認 | CWE-22 | Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered user to delete arbitrary files by submitting unescaped filenames through the delet |
| CVE-2018-25326 | Deferred | 未確認 | CWE-22 | Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by injecting directory traversal sequences in t |
| CVE-2018-25327 | Deferred | 未確認 | CWE-352 | Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token validation. Attackers can |
| CVE-2018-25328 | Deferred | 未確認 | CWE-120 | VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. |
| CVE-2018-25329 | Deferred | 未確認 | CWE-98 | WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting file paths into the ur |
| CVE-2018-25330 | Deferred | 未確認 | CWE-89 | Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabilities that allow attackers to inject malicious code through profile fields and |
| CVE-2018-25331 | Deferred | 未確認 | CWE-79 | Zenar Content Management System contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating form parameters in P |
| CVE-2018-25332 | Analyzed | 未確認 | CWE-306 | GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and |
| CVE-2018-25333 | Awaiting Analysis | 未確認 | CWE-89 | Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting maliciou |
| CVE-2018-25334 | Deferred | 未確認 | CWE-352 | Zechat 1.5 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application use |
| CVE-2018-25335 | Deferred | 未確認 | CWE-306 | WordPress Plugin Peugeot Music 1.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to the u |
| CVE-2018-25336 | Deferred | 未確認 | CWE-352 | jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft |
| CVE-2018-25337 | Deferred | 未確認 | CWE-352 | Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craf |
| CVE-2018-25338 | Deferred | 未確認 | CWE-89 | Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attac |
| CVE-2018-25339 | Deferred | 未確認 | CWE-89 | Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attack |
| CVE-2018-25340 | Deferred | 未確認 | CWE-89 | Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Atta |
| CVE-2018-25341 | Deferred | 未確認 | CWE-89 | Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Atta |
| CVE-2018-25342 | Deferred | 未確認 | CWE-89 | Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'searched |
| CVE-2018-25343 | Deferred | 未確認 | CWE-352 | Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. At |
| CVE-2018-25344 | Deferred | 未確認 | CWE-121 | 10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field that allows local attackers to execute arbitrary |
| CVE-2018-25345 | Deferred | 未確認 | CWE-120 | 10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attackers to bypass SafeSEH protections and execute arbitrary code. |
| CVE-2018-25346 | Deferred | 未確認 | CWE-89 | WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through |
| CVE-2018-25347 | Deferred | 未確認 | CWE-89 | WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping |
| CVE-2018-25348 | Deferred | 未確認 | CWE-89 | Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid |
| CVE-2018-25349 | Deferred | 未確認 | CWE-79 | userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header. Attackers can send crafted |
| CVE-2018-25350 | Deferred | 未確認 | CWE-204 | userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existingUsernameChe |
| CVE-2018-25351 | Deferred | 未確認 | CWE-89 | Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious co |
| CVE-2018-25352 | Deferred | 未確認 | CWE-89 | WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by in |
| CVE-2018-25353 | Deferred | 未確認 | CWE-863 | Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated users to bypass file extension blacklist restrictions. Attacker |
| CVE-2018-25354 | Deferred | 未確認 | CWE-352 | Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into vis |
| CVE-2018-25355 | Deferred | 未確認 | CWE-120 | Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers c |
| CVE-2018-25356 | Deferred | 未確認 | CWE-120 | SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local attackers to crash the application or execute arbitrary code |
| CVE-2018-25357 | Analyzed | 未確認 | CWE-94 | Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the db_name para |
| CVE-2018-25358 | Awaiting Analysis | 未確認 | CWE-497 | D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the table_name pa |
| CVE-2018-25359 | Deferred | 未確認 | CWE-276 | Splinterware System Scheduler Pro 5.12 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by modifying service executable fi |
| CVE-2018-25360 | Deferred | 未確認 | CWE-121 | AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name field that allows local attackers to execute arbitrary code by trigg |
| CVE-2018-25361 | Deferred | 未確認 | CWE-290 | Soroush IM Desktop App 0.17.0 contains an authentication bypass vulnerability that allows local attackers to remove passcodes by injecting pre-encrypted database entries using a co |
| CVE-2018-25362 | Deferred | 未確認 | CWE-89 | Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Attack |
| CVE-2018-25363 | Deferred | 未確認 | CWE-352 | Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can cr |
| CVE-2018-25364 | Deferred | 未確認 | CWE-89 | Twitter-Clone 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the name parameter |
| CVE-2018-25365 | Deferred | 未確認 | CWE-22 | PCViewer vt1000 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting relative path sequences in GET requests. At |
| CVE-2018-25366 | Deferred | 未確認 | CWE-120 | CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field. Atta |
| CVE-2018-25367 | Deferred | 未確認 | CWE-120 | NASA openVSP 3.16.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the geometry name field |
| CVE-2018-25368 | Deferred | 未確認 | CWE-789 | Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an excessively long string in the password |
| CVE-2018-25369 | Deferred | 未確認 | CWE-120 | Visual Ping 0.8.0.0 contains a buffer overflow vulnerability in input field handling that allows local attackers to crash the application by supplying oversized data. Attackers can |
| CVE-2018-25370 | Deferred | 未確認 | CWE-352 | Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers ca |
| CVE-2018-25371 | Deferred | 未確認 | CWE-89 | mooSocial Store Plugin 2.6 contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the product parameter in URL re |
| CVE-2018-25372 | Deferred | 未確認 | CWE-89 | MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code thro |
| CVE-2018-25373 | Deferred | 未確認 | CWE-121 | SocuSoft DVD Photo Slideshow Professional 8.07 contains a stack-based buffer overflow vulnerability in the registration name field that allows local attackers to execute arbitrary |
| CVE-2018-25374 | Deferred | 未確認 | CWE-22 | Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the path pa |
| CVE-2018-25375 | Deferred | 未確認 | CWE-121 | SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the stru |
| CVE-2018-25376 | Deferred | 未確認 | CWE-120 | Socusoft 3GP Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured |
| CVE-2018-25377 | Deferred | 未確認 | CWE-120 | Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting stru |
| CVE-2018-25378 | Deferred | 未確認 | CWE-789 | Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. |
| CVE-2018-25379 | Deferred | 未確認 | CWE-89 | Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database queries during auth |
| CVE-2018-25380 | Deferred | 未確認 | CWE-89 | Joomla Component eXtroForms 2.1.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through the filter_type_id, filter_p |
| CVE-2018-25381 | Deferred | 未確認 | CWE-89 | Joomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through multiple filter parameters. |
| CVE-2018-25382 | Deferred | 未確認 | CWE-89 | Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the uname parameter. Attacker |
| CVE-2018-25383 | Deferred | 未確認 | CWE-121 | Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception han |
| CVE-2018-25384 | Deferred | 未確認 | CWE-79 | Wikidforum 2.20 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted HTML in the reply_text parameter |
| CVE-2018-25385 | Deferred | 未確認 | CWE-89 | E-Registrasi Pencak Silat 18.10 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t |
| CVE-2018-25386 | Deferred | 未確認 | CWE-89 | HaPe PKH 1.1 contains multiple SQL injection vulnerabilities in admin/media.php that allow attackers to manipulate database queries by injecting SQL code through the 'id' parameter |
| CVE-2018-25387 | Deferred | 未確認 | CWE-352 | HaPe PKH 1.1 contains a cross-site request forgery vulnerability that allows attackers to change administrator passwords by submitting forged requests to the user update endpoint. |
| CVE-2018-25388 | Deferred | 未確認 | CWE-434 | HaPe PKH 1.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by bypassing file type validation. Attackers can upload P |
| CVE-2018-25389 | Deferred | 未確認 | CWE-89 | HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'nama_kelompok' POST par |
| CVE-2018-25390 | Deferred | 未確認 | CWE-89 | HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'desa' POST parameter se |
| CVE-2018-25391 | Deferred | 未確認 | CWE-862 | HaPe PKH 1.1 fails to enforce authorization on its record deletion endpoints, allowing unauthenticated attackers to delete arbitrary records by sending a crafted request that speci |
| CVE-2018-25392 | Deferred | 未確認 | CWE-89 | MaxOn ERP Software 8.x-9.x contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis parameters in |
| CVE-2018-25393 | Deferred | 未確認 | CWE-22 | Navigate CMS 2.8.5 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by injecting directory traversal sequences in the id paramete |
| CVE-2018-25394 | Deferred | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the release_id |
| CVE-2018-25395 | Deferred | 未確認 | CWE-89 | Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the feature_id |
| CVE-2018-25396 | Deferred | 未確認 | CWE-256 | Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing the networkSe |
| CVE-2018-25397 | Deferred | 未確認 | CWE-352 | PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms. Attackers can t |
| CVE-2018-25398 | Deferred | 未確認 | CWE-89 | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the f |
| CVE-2018-25399 | Deferred | 未確認 | CWE-89 | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the t |
| CVE-2018-25400 | Deferred | 未確認 | CWE-89 | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the ' |
| CVE-2018-25401 | Deferred | 未確認 | CWE-89 | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p |
| CVE-2018-25402 | Deferred | 未確認 | CWE-89 | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p |
| CVE-2018-25403 | Deferred | 未確認 | CWE-89 | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p |
| CVE-2018-25404 | Deferred | 未確認 | CWE-89 | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the t |
| CVE-2018-25405 | Deferred | 未確認 | CWE-89 | eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through param |
| CVE-2018-25406 | Deferred | 未確認 | CWE-89 | eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through param |
| CVE-2018-25407 | Deferred | 未確認 | CWE-89 | eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through param |
| CVE-2018-25408 | Deferred | 未確認 | CWE-22 | The Open ISES Project 3.30A contains a path traversal vulnerability in the ajax/download.php endpoint that allows unauthenticated attackers to download arbitrary files by manipulat |
| CVE-2018-25409 | Deferred | 未確認 | CWE-434 | SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by submitting PHP code through the fupload parameter. At |
| CVE-2018-25410 | Deferred | 未確認 | CWE-89 | SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. A |
| CVE-2018-25411 | Deferred | 未確認 | CWE-89 | MGB OpenSource Guestbook 0.7.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through |
| CVE-2018-25412 | Analyzed | 未確認 | CWE-306 | Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docs_upload.php with cra |
| CVE-2018-25413 | Deferred | 未確認 | CWE-89 | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'q' param |
| CVE-2018-25414 | Deferred | 未確認 | CWE-89 | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the actor par |
| CVE-2018-25415 | Deferred | 未確認 | CWE-89 | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the director |
| CVE-2018-25416 | Deferred | 未確認 | CWE-89 | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the country p |
| CVE-2018-25417 | Deferred | 未確認 | CWE-89 | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the quality p |
| CVE-2018-25418 | Deferred | 未確認 | CWE-89 | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the year para |
| CVE-2018-25419 | Deferred | 未確認 | CWE-89 | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the genre par |
| CVE-2018-25420 | Deferred | 未確認 | CWE-89 | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' para |
| CVE-2018-25421 | Deferred | 未確認 | CWE-22 | Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET |
| CVE-2018-25422 | Deferred | 未確認 | CWE-89 | MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id |
| CVE-2018-25423 | Deferred | 未確認 | CWE-120 | Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious |
| CVE-2018-25424 | Deferred | 未確認 | CWE-89 | Gate Pass Management System 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login and p |
| CVE-2018-25425 | Deferred | 未確認 | CWE-89 | Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid and cid par |
| CVE-2018-25426 | Analyzed | 未確認 | CWE-120 | WinMTR 0.91 contains a denial of service vulnerability that allows attackers to crash the application by sending a malformed payload file containing a large buffer of repeated char |
| CVE-2020-37168 | Deferred | 未確認 | CWE-328 | Ecommerce Systempay 1.0 contains a weak cryptographic implementation vulnerability that allows attackers to brute force the 16-character production secret key used for payment sign |
| CVE-2020-37169 | Deferred | 未確認 | CWE-98 | WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the pack paramet |
| CVE-2020-37174 | Deferred | 未確認 | CWE-79 | WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering XSS |
| CVE-2020-37217 | Deferred | 未確認 | CWE-352 | Easy2Pilot 7 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized user accounts by tricking authenticated administrators into visiting mali |
| CVE-2020-37218 | Deferred | 未確認 | CWE-89 | Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting maliciou |
| CVE-2020-37219 | Deferred | 未確認 | CWE-22 | Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter. Attackers |
| CVE-2020-37220 | Deferred | 未確認 | CWE-798 | Huawei HG630 V2 router contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain administrative access by retrieving the device serial number. |
| CVE-2020-37221 | Awaiting Analysis | 未確認 | CWE-121 | Atomic Alarm Clock 6.3 contains a stack overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string to the display name textbox in |
| CVE-2020-37222 | Deferred | 未確認 | CWE-79 | Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted content through t |
| CVE-2020-37223 | Deferred | 未確認 | CWE-428 | IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level. Attackers c |
| CVE-2020-37224 | Deferred | 未確認 | CWE-89 | Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sor |
| CVE-2020-37225 | Deferred | 未確認 | CWE-79 | Powie's WHOIS Domain Check 0.9.31 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by exploiting unsaniti |
| CVE-2020-37226 | Deferred | 未確認 | CWE-89 | Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sor |
| CVE-2020-37227 | Deferred | 未確認 | CWE-434 | HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary f |
| CVE-2020-37228 | Deferred | 未確認 | CWE-307 | iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object. |
| CVE-2020-37229 | Awaiting Analysis | 未確認 | CWE-428 | OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable |
| CVE-2020-37230 | Awaiting Analysis | 未確認 | CWE-428 | Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the u |
| CVE-2020-37231 | Deferred | 未確認 | CWE-428 | Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting the service st |
| CVE-2020-37232 | Deferred | 未確認 | CWE-428 | Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to escala |
| CVE-2020-37233 | Deferred | 未確認 | CWE-79 | WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inject malicious script |
| CVE-2020-37234 | Deferred | 未確認 | CWE-120 | Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized in |
| CVE-2020-37235 | Deferred | 未確認 | CWE-79 | WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows authenticated users to inject malicious scripts by manipulating |
| CVE-2020-37236 | Deferred | 未確認 | CWE-79 | NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the title parameter |
| CVE-2020-37237 | Deferred | 未確認 | CWE-79 | Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the banner management inte |
| CVE-2020-37238 | Deferred | 未確認 | CWE-79 | CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows authenticated users with Content Manager access to inject malicious scripts through SVG file |
| CVE-2020-37239 | Deferred | 未確認 | CWE-415 | libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks. Attac |
| CVE-2020-37240 | Deferred | 未確認 | CWE-79 | Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through user creation fields |
| CVE-2020-37241 | Deferred | 未確認 | CWE-352 | bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious p |
| CVE-2020-37242 | Deferred | 未確認 | CWE-89 | Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through th |
| CVE-2020-37243 | Deferred | 未確認 | CWE-89 | Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQL queries through the |
| CVE-2020-37244 | Deferred | 未確認 | CWE-89 | Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 's |
| CVE-2020-37245 | Deferred | 未確認 | CWE-79 | Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attackers to access files outside the web root by injecting direc |
| CVE-2020-37246 | Deferred | 未確認 | CWE-98 | Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the download path para |
| CVE-2020-37247 | Deferred | 未確認 | CWE-428 | Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploiting the service bina |
| CVE-2021-21508 | Awaiting Analysis | 未確認 | CWE-532 | Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager. A sys-admin user may exploit this vulnerability, leading to the disclosur |
| CVE-2021-26380 | Awaiting Analysis | 未確認 | CWE-190 | A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity. |
| CVE-2021-47907 | Deferred | 未確認 | CWE-79 | Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code through the tit |
| CVE-2021-47910 | Deferred | 未確認 | CWE-79 | AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering JavaScript payloads |
| CVE-2021-47922 | Deferred | 未確認 | CWE-79 | Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attacker |
| CVE-2021-47923 | Deferred | 未確認 | CWE-290 | OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting arbitrary values into the OCSESSID cookie. Attackers can set m |
| CVE-2021-47924 | Deferred | 未確認 | CWE-79 | Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. A |
| CVE-2021-47925 | Deferred | 未確認 | CWE-79 | CMDBuild 3.3.2 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject arbitrary web script or HTML via crafted input in card cre |
| CVE-2021-47926 | Deferred | 未確認 | CWE-79 | Contact Form to Email 1.3.24 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating forms with script tags |
| CVE-2021-47927 | Deferred | 未確認 | CWE-79 | WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting insuffi |
| CVE-2021-47928 | Deferred | 未確認 | CWE-89 | Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the |
| CVE-2021-47929 | Deferred | 未確認 | CWE-79 | Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the |
| CVE-2021-47930 | Deferred | 未確認 | CWE-89 | Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL quer |
| CVE-2021-47931 | Deferred | 未確認 | CWE-79 | Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Title and Text Block parameters in |
| CVE-2021-47932 | Deferred | 未確認 | CWE-862 | WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability that allows attackers to create administrator accounts by submitting crafted requests |
| CVE-2021-47933 | Deferred | 未確認 | CWE-306 | WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to the REST API |
| CVE-2021-47934 | Deferred | 未確認 | CWE-79 | MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields |
| CVE-2021-47935 | Analyzed | 未確認 | CWE-94 | Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects thro |
| CVE-2021-47936 | Deferred | 未確認 | CWE-306 | OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files disguised as resu |
| CVE-2021-47937 | Deferred | 未確認 | CWE-434 | e107 CMS 2.3.0 contains a remote code execution vulnerability that allows authenticated users with theme installation permissions to execute arbitrary commands by uploading malicio |
| CVE-2021-47938 | Deferred | 未確認 | CWE-94 | ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticated attackers to execute arbitrary PHP code by injec |
| CVE-2021-47939 | Deferred | 未確認 | CWE-94 | Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injectin |
| CVE-2021-47940 | Deferred | 未確認 | CWE-306 | WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exp |
| CVE-2021-47941 | Deferred | 未確認 | CWE-89 | WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code th |
| CVE-2021-47942 | Analyzed | 未確認 | CWE-22 | Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directorie |
| CVE-2021-47943 | Deferred | 未確認 | CWE-434 | TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by uploading malicious PHP files through the |
| CVE-2021-47944 | Deferred | 未確認 | CWE-789 | memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character buffers into note fields. Attacke |
| CVE-2021-47945 | Deferred | 未確認 | CWE-428 | Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exploiting the service b |
| CVE-2021-47946 | Deferred | 未確認 | CWE-352 | OpenCart 3.0.3.6 contains a cross-site request forgery vulnerability in the /account/edit endpoint that allows unauthenticated attackers to modify victim account details by trickin |
| CVE-2021-47947 | Deferred | 未確認 | CWE-79 | Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input in the 'name' par |
| CVE-2021-47948 | Deferred | 未確認 | CWE-80 | WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text field in payme |
| CVE-2021-47949 | Awaiting Analysis | 未確認 | CWE-59 | CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through |
| CVE-2021-47950 | Deferred | 未確認 | CWE-79 | Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject malicious sc |
| CVE-2021-47951 | Deferred | 未確認 | CWE-79 | WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL fi |
| CVE-2021-47952 | Deferred | 未確認 | CWE-502, CWE-94 | python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containin |
| CVE-2021-47953 | Deferred | 未確認 | CWE-352 | OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint. At |
| CVE-2021-47954 | Deferred | 未確認 | CWE-89 | LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the search_query parameter. |
| CVE-2021-47955 | Deferred | 未確認 | CWE-79 | CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript by uploading malicious SVG files through the file u |
| CVE-2021-47956 | Deferred | 未確認 | CWE-89 | EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the firstname p |
| CVE-2021-47957 | Deferred | 未確認 | CWE-79 | Cookie Law Bar 1.2.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unsanitized input to the Bar |
| CVE-2021-47958 | Deferred | 未確認 | CWE-918 | CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers |
| CVE-2021-47959 | Deferred | 未確認 | CWE-770 | WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending batched GraphQL queries wit |
| CVE-2021-47962 | Deferred | 未確認 | CWE-79 | Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account settings page that allows authenticated attackers to inject malicious HTML and JavaScr |
| CVE-2021-47963 | Deferred | 未確認 | CWE-79 | Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to execute arbitrary code by injecting malicious payloads into markdown files stored within |
| CVE-2021-47964 | Deferred | 未確認 | CWE-94 | Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious extension packages throug |
| CVE-2021-47965 | Deferred | 未確認 | CWE-434 | WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types |
| CVE-2021-47966 | Deferred | 未確認 | CWE-89 | PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in the login_userid parameter of login.php that allows unauthenticated attackers to ext |
| CVE-2021-47967 | Deferred | 未確認 | CWE-79 | PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow unauthenticated attackers to inject arbitrary JavaScript by manipulating URL paths and POST par |
| CVE-2021-47968 | Deferred | 未確認 | CWE-79 | Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the |
| CVE-2021-47969 | Deferred | 未確認 | CWE-789 | Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers |
| CVE-2021-47970 | Deferred | 未確認 | CWE-789 | Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can |
| CVE-2021-47971 | Deferred | 未確認 | CWE-789 | My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attacker |
| CVE-2021-47972 | Deferred | 未確認 | CWE-789 | Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strin |
| CVE-2021-47973 | Deferred | 未確認 | CWE-789 | Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. |
| CVE-2021-47974 | Deferred | 未確認 | CWE-428 | VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Att |
| CVE-2021-47975 | Deferred | 未確認 | CWE-79 | WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the `fieldtitle` parameter. At |
| CVE-2021-47976 | Deferred | 未確認 | CWE-352 | TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functiona |
| CVE-2021-47977 | Deferred | 未確認 | CWE-22 | WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by |
| CVE-2021-47978 | Deferred | 未確認 | CWE-98 | ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation. Att |
| CVE-2021-47979 | Deferred | 未確認 | CWE-22 | WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating parameters in AJAX r |
| CVE-2021-47980 | Deferred | 未確認 | CWE-89 | Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in |
| CVE-2021-47981 | Deferred | 未確認 | CWE-79 | Quick.CMS 6.7 contains a cross-site scripting vulnerability in the sliders form that allows authenticated attackers to inject malicious scripts by submitting XSS payloads through t |
| CVE-2022-23826 | Awaiting Analysis | 未確認 | CWE-367 | A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of inte |
| CVE-2022-23961 | Awaiting Analysis | 未確認 | CWE-79 | In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS. This vulnerability can be exploited by unauthenticated remote attackers to tar |
| CVE-2022-26522 | Awaiting Analysis | 未確認 | CWE-367 | The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel mode or cause |
| CVE-2022-26523 | Awaiting Analysis | 未確認 | CWE-400 | The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel mode or cause |
| CVE-2022-31231 | Analyzed | 未確認 | CWE-284 | Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit thi |
| CVE-2022-34363 | Analyzed | 未確認 | CWE-285 | Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the Unisphere for VMAX application running in vApp |
| CVE-2022-41656 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Account |
| CVE-2022-45899 | Analyzed | 未確認 | CWE-78 | Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pat |
| CVE-2022-4988 | Deferred | 未確認 | Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries. Alien::FreeImage contains version 3.17.0 of the FreeImage library from 2017, which has know | |
| CVE-2022-50943 | Analyzed | 未確認 | CWE-79 | Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. |
| CVE-2022-50944 | Deferred | 未確認 | CWE-94 | Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the image paramete |
| CVE-2022-50945 | Deferred | 未確認 | CWE-79 | WordPress 3dady Real-Time Web Stats plugin 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by exploiting |
| CVE-2022-50946 | Deferred | 未確認 | CWE-79 | WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by failing to sanit |
| CVE-2022-50947 | Deferred | 未確認 | CWE-79 | WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by failing |
| CVE-2022-50948 | Deferred | 未確認 | CWE-79 | Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting payloads in ac |
| CVE-2022-50949 | Deferred | 未確認 | CWE-79 | WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting unsanitize |
| CVE-2022-50954 | Deferred | 未確認 | CWE-98 | WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the controlle |
| CVE-2022-50955 | Deferred | 未確認 | CWE-352 | WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting malicious reque |
| CVE-2022-50956 | Deferred | 未確認 | CWE-22 | WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient inpu |
| CVE-2022-50957 | Analyzed | 未確認 | CWE-79 | Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the f |
| CVE-2022-50958 | Deferred | 未確認 | CWE-79 | WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the post_id p |
| CVE-2022-50959 | Deferred | 未確認 | CWE-79 | WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting the for |
| CVE-2022-50960 | Deferred | 未確認 | CWE-79 | WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin settings interface |
| CVE-2022-50961 | Deferred | 未確認 | CWE-79 | WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through |
| CVE-2022-50962 | Deferred | 未確認 | CWE-79 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module. The date_created, date_from, date_to, and created_at parameters in the filt |
| CVE-2022-50963 | Deferred | 未確認 | CWE-79 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module. The date_created, date_from, date_to, and created_at para |
| CVE-2022-50964 | Deferred | 未確認 | CWE-79 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module. The date_created, date_from, date_to, and created_at param |
| CVE-2022-50965 | Deferred | 未確認 | CWE-79 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module. The date_created, date_from, date_to, and created_at parameters in the filter |
| CVE-2022-50966 | Deferred | 未確認 | CWE-79 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module. The date_created, date_from, date_to, and created_at parameters in the filter f |
| CVE-2022-50967 | Deferred | 未確認 | CWE-79 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module. The date_created, date_from, date_to, and created_at parameters in the filte |
| CVE-2022-50968 | Deferred | 未確認 | CWE-79 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The date_created, date_from, date_to, and created_at parameters in the filt |
| CVE-2022-50969 | Deferred | 未確認 | CWE-79 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module. The date_created, date_from, date_to, and created_at parameters i |
| CVE-2022-50970 | Deferred | 未確認 | CWE-79 | WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the tab parameter |
| CVE-2022-50994 | Deferred | 未確認 | CWE-78 | DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attackers to execute |
| CVE-2023-24215 | Awaiting Analysis | 未確認 | CWE-284 | Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain administrator credentials via a crafted POST requ |
| CVE-2023-27753 | Deferred | 未確認 | CWE-434 | An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file. |
| CVE-2023-30059 | Deferred | 未確認 | CWE-639 | An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter through a craft |
| CVE-2023-31309 | Awaiting Analysis | 未確認 | CWE-129 | Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potent |
| CVE-2023-31316 | Awaiting Analysis | 未確認 | CWE-1304 | Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to w |
| CVE-2023-31317 | Awaiting Analysis | 未確認 | CWE-119 | Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially r |
| CVE-2023-42343 | Deferred | 未確認 | CWE-79 | A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type. |
| CVE-2023-42344 | Deferred | 未確認 | CWE-611 | Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet. |
| CVE-2023-42345 | Deferred | 未確認 | CWE-79 | A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp. |
| CVE-2023-42346 | Deferred | 未確認 | CWE-611 | Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host. |
| CVE-2023-46453 | Awaiting Analysis | 未確認 | CWE-89 | Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username that is both a valid SQL statement and a va |
| CVE-2023-47268 | Analyzed | 未確認 | CWE-77 | In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code expo |
| CVE-2023-52945 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbitrary code via unspeci |
| CVE-2023-54342 | Deferred | 未確認 | CWE-306 | Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerability in the console interface that allows unauthenticated attackers to execute arbitrary cod |
| CVE-2023-54344 | Deferred | 未確認 | CWE-306 | Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending payloads to the |
| CVE-2023-54345 | Analyzed | 未確認 | CWE-94 | Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitrary code by ex |
| CVE-2023-54346 | Deferred | 未確認 | CWE-538 | WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database backups by accessing pr |
| CVE-2023-54347 | Analyzed | 未確認 | CWE-307 | OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login en |
| CVE-2023-54348 | Awaiting Analysis | 未確認 | CWE-1236 | ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fields that execute on the workstation of |
| CVE-2023-54349 | Deferred | 未確認 | CWE-79 | AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search |
| CVE-2023-7345 | Deferred | 未確認 | CWE-704 | Ledger Live with vulnerable versions of ledgerhq/hw-app-eth prior to 6.34.7 contains an integer parsing vulnerability that allows attackers to manipulate EIP-712 typed data message |
| CVE-2023-7346 | Deferred | 未確認 | CWE-682 | Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting imp |
| CVE-2024-0391 | Analyzed | 未確認 | CWE-204 | The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts. The dis |
| CVE-2024-11399 | Analyzed | 未確認 | CWE-552 | Files or directories accessible to external parties vulnerability in redis-server component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to conduct denial |
| CVE-2024-13362 | Deferred | 未確認 | CWE-79 | Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and o |
| CVE-2024-21950 | Awaiting Analysis | 未確認 | CWE-125 | An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in lo |
| CVE-2024-21962 | Awaiting Analysis | 未確認 | CWE-1220 | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code e |
| CVE-2024-27686 | Awaiting Analysis | 未確認 | CWE-400 | Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted packet data to the SMB service on TCP p |
| CVE-2024-28765 | Analyzed | 未確認 | CWE-209 | IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information when a detailed techn |
| CVE-2024-30151 | Analyzed | 未確認 | CWE-532 | HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users to gain elevated privi |
| CVE-2024-30167 | Awaiting Analysis | 未確認 | CWE-77 | /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a serverName pa |
| CVE-2024-33288 | Deferred | 未確認 | CWE-89 | Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page. |
| CVE-2024-33722 | Deferred | 未確認 | CWE-89 | SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[]. |
| CVE-2024-33724 | Deferred | 未確認 | CWE-79 | SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php. |
| CVE-2024-36315 | Awaiting Analysis | 未確認 | CWE-693 | Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting |
| CVE-2024-36323 | Awaiting Analysis | 未確認 | CWE-284 | Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG co |
| CVE-2024-36332 | Awaiting Analysis | 未確認 | CWE-1189 | Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU |
| CVE-2024-36333 | Analyzed | 未確認 | CWE-427 | A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. |
| CVE-2024-36334 | Awaiting Analysis | 未確認 | CWE-347 | Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potenti |
| CVE-2024-36343 | Awaiting Analysis | 未確認 | CWE-124 | Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section |
| CVE-2024-36345 | Awaiting Analysis | 未確認 | CWE-1274 | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting i |
| CVE-2024-40684 | Analyzed | 未確認 | CWE-521 | IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 IBM SmartCl |
| CVE-2024-43384 | Analyzed | 未確認 | CWE-212 | A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer. |
| CVE-2024-45257 | Awaiting Analysis | 未確認 | CWE-77 | A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter. |
| CVE-2024-46507 | Analyzed | 未確認 | CWE-94 | A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application |
| CVE-2024-46508 | Analyzed | 未確認 | CWE-798 | yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET). |
| CVE-2024-47091 | Analyzed | 未確認 | CWE-427 | Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local unprivileged user able to create a Windows service whos |
| CVE-2024-47096 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the showSupportExpiredMessag |
| CVE-2024-47097 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the site parameter of handle |
| CVE-2024-47267 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functionality in Synology Surveillance Station before 9.2.2-11575 and |
| CVE-2024-47268 | Analyzed | 未確認 | CWE-862 | Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator |
| CVE-2024-47269 | Analyzed | 未確認 | CWE-319 | Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authentic |
| CVE-2024-47270 | Analyzed | 未確認 | CWE-281 | Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated us |
| CVE-2024-47271 | Analyzed | 未確認 | CWE-522 | Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with |
| CVE-2024-47272 | Analyzed | 未確認 | CWE-863 | Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administr |
| CVE-2024-48519 | Awaiting Analysis | 未確認 | CWE-120, CWE-121 | Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the AP_InertialSensor_AD |
| CVE-2024-51092 | Analyzed | 未確認 | CWE-78 | LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and |
| CVE-2024-51394 | Awaiting Analysis | 未確認 | CWE-119 | Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_MSP::loop, A |
| CVE-2024-51395 | Awaiting Analysis | 未確認 | CWE-121 | Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_SmartAudio:: |
| CVE-2024-52911 | Awaiting Analysis | 未確認 | CWE-284 | Bitcoin Core through 28.x has a security issue, the details of which are not disclosed. The earliest affected version is 0.14. |
| CVE-2024-53326 | Awaiting Analysis | 未確認 | CWE-502 | LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(), leading to code execution. |
| CVE-2024-54017 | Awaiting Analysis | 未確認 | CWE-334 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V |
| CVE-2024-55045 | Deferred | 未確認 | CWE-120 | Firmament-Autopilot FMT-Firmware commit de5aec was discovered to contain a buffer overflow via the task_mavobc_entry function at /comm/task_comm.c. |
| CVE-2024-56462 | Analyzed | 未確認 | CWE-530, CWE-552 | IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 002 could allow a privileged user to upload a malicious backup archive that could be restored and used to gain access to the underly |
| CVE-2025-0028 | Awaiting Analysis | 未確認 | CWE-252 | An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confid |
| CVE-2025-0040 | Awaiting Analysis | 未確認 | CWE-284 | Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the con |
| CVE-2025-0044 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability. |
| CVE-2025-0045 | Awaiting Analysis | 未確認 | CWE-120 | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting in a crash or denial |
| CVE-2025-0898 | Deferred | 未確認 | CWE-73 | The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 1.4.7 via the Draw SVG widget. This makes it poss |
| CVE-2025-10466 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Synology Safe Access before 1.3.1-0329 allows remote authentica |
| CVE-2025-10470 | Analyzed | 未確認 | CWE-400 | The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth. |
| CVE-2025-10908 | Analyzed | 未確認 | CWE-863 | Due to a lack of user account state validation during authentication, locked user accounts can be successfully authenticated using Magic Link or Pass Key methods. This bypasses the |
| CVE-2025-11024 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Blind |
| CVE-2025-11159 | Analyzed | 未確認 | Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection i | |
| CVE-2025-11262 | Deferred | 未確認 | CWE-79 | The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 0.9.0 due to insufficient in |
| CVE-2025-11482 | Awaiting Analysis | 未確認 | CWE-770 | An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating System versions before 1.8.0 may be used by an unauthenticated n |
| CVE-2025-11954 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in Sitemio Information Technologies Trade Ltd. Co. WISECP allows Cross Site Request Forgery. This issue affects WISECP: through 200 |
| CVE-2025-11993 | Deferred | 未確認 | CWE-502 | The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'settings' paramete |
| CVE-2025-12008 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in APPYAP Technology and Information Inc. Yaay Social Media App allows Accessing Functionality Not Properly Constrain |
| CVE-2025-12659 | Awaiting Analysis | 未確認 | CWE-122 | Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the cur |
| CVE-2025-12669 | Analyzed | 未確認 | CWE-94 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authentica |
| CVE-2025-12686 | Analyzed | 未確認 | CWE-120 | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute |
| CVE-2025-12714 | Deferred | 未確認 | CWE-862 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_site_editor_home |
| CVE-2025-12993 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-67968. Reason: This candidate is a reservation duplicate of CVE-2025-67968. Notes: All CVE user | |
| CVE-2025-13167 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote a |
| CVE-2025-13392 | Analyzed | 未確認 | CWE-754 | Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affected) |
| CVE-2025-13477 | Deferred | 未確認 | CWE-359, CWE-522 | Exposure of private personal information to an unauthorized actor, Insufficiently Protected Credentials vulnerability in Digital Operations Services Inc. WifiBurada allows Authenti |
| CVE-2025-13479 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in PosCube Hardware Software and Consulting Ltd. QR Menu allows Exploitation of Trusted Identifiers. This issue affe |
| CVE-2025-13593 | Analyzed | 未確認 | CWE-346 | Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content and conduct denial-of-se |
| CVE-2025-13605 | Awaiting Analysis | 未確認 | CWE-78 | 3onedata modbus gateway device model GW1101-1D(RS-485)-TB-P (hardware version V2.2.0) allows authenticated users to execute arbitrary shell commands in the context of the root user |
| CVE-2025-13618 | Deferred | 未確認 | CWE-269 | The Mentoring plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.8. This is due to the plugin not properly restricting the roles t |
| CVE-2025-13755 | Analyzed | 未確認 | CWE-532 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) stores potentially sensitive information in log files that could |
| CVE-2025-13874 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticat |
| CVE-2025-14033 | Deferred | 未確認 | CWE-639 | The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_ticket_content_callback' |
| CVE-2025-14042 | Deferred | 未確認 | CWE-79 | The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Project Details' custom field in Portfolio Items in all v |
| CVE-2025-14179 | Modified | 未確認 | CWE-89 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when preparing SQL queri |
| CVE-2025-14290 | Analyzed | 未確認 | CWE-918 | IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server-side request |
| CVE-2025-14320 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management and Information Services Trade Limited Company Online Suppo |
| CVE-2025-14341 | Deferred | 未確認 | CWE-770, CWE-915 | Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technol |
| CVE-2025-14361 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Woocommerce Envato |
| CVE-2025-14481 | Deferred | 未確認 | CWE-862 | The Yoast SEO plugin for WordPress is vulnerable to Insecure Direct Object References in all versions up to, and including, 26.5. This is due to insufficient authorization checks i |
| CVE-2025-14575 | Awaiting Analysis | 未確認 | CWE-427 | An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate |
| CVE-2025-14713 | Analyzed | 未確認 | CWE-749 | An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from |
| CVE-2025-14726 | Deferred | 未確認 | CWE-200 | The Widgets for Social Photo Feed plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the '/trustindex_f |
| CVE-2025-14755 | Deferred | 未確認 | CWE-862 | The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference (IDOR) in all versions up to, and includin |
| CVE-2025-14767 | Deferred | 未確認 | CWE-79 | The WPC Badge Management for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the `wpcbm_best_seller` shortcode in all vers |
| CVE-2025-14869 | Analyzed | 未確認 | CWE-1284 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthentic |
| CVE-2025-14870 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthentic |
| CVE-2025-14972 | Deferred | 未確認 | CWE-331 | * Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. * KSU keys using SYMCRYPTO will be impacted by t |
| CVE-2025-15023 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiti |
| CVE-2025-15024 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library |
| CVE-2025-15025 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automati |
| CVE-2025-15345 | Deferred | 未確認 | CWE-80 | The MapGeo – Interactive Geo Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'map' parameter in the display-map shortcode in all versions up to, a |
| CVE-2025-15369 | Deferred | 未確認 | CWE-862 | The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_content_editor fun |
| CVE-2025-15463 | Deferred | 未確認 | CWE-94 | The The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.9.2.3. This is due to the softw |
| CVE-2025-15609 | Deferred | 未確認 | The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive custome | |
| CVE-2025-15633 | Analyzed | 未確認 | CWE-863 | An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data (site names, versions, and confi |
| CVE-2025-15634 | Analyzed | 未確認 | CWE-862 | A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access |
| CVE-2025-15645 | Deferred | 未確認 | CWE-1284 | Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the reset_handler parameter during f |
| CVE-2025-15649 | Deferred | 未確認 | CWE-248 | IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date. _dosToUnixTime() decodes the local-file-header l |
| CVE-2025-1978 | Analyzed | 未確認 | CWE-94 | Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F70 |
| CVE-2025-22741 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RiceTheme Felan Framework allows Reflected XSS. This issue affects Felan Fram |
| CVE-2025-2514 | Analyzed | 未確認 | CWE-307 | Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virt |
| CVE-2025-26483 | Analyzed | 未確認 | CWE-601 | Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a ta |
| CVE-2025-27723 | Awaiting Analysis | 未確認 | CWE-416 | Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software ad |
| CVE-2025-27850 | Analyzed | 未確認 | CWE-59 | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. If a malicious graphics package containing symlinks is uploaded, the web server follows |
| CVE-2025-27851 | Analyzed | 未確認 | CWE-352 | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack. Among other uses, the WDU utilizes WebSockets to control |
| CVE-2025-27852 | Analyzed | 未確認 | CWE-79 | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack. This allows an attacker on the local network segment to ex |
| CVE-2025-27853 | Analyzed | 未確認 | CWE-306 | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. The WDU web site only performs authentication with the client within t |
| CVE-2025-28343 | Deferred | 未確認 | CWE-121 | striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons. |
| CVE-2025-28344 | Deferred | 未確認 | CWE-121 | striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack. |
| CVE-2025-29338 | Awaiting Analysis | 未確認 | CWE-120 | NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 was discovered to contain a buffer overflow via the mod_para parameter in the woal_init_modu |
| CVE-2025-29935 | Awaiting Analysis | 未確認 | CWE-787 | An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to lo |
| CVE-2025-29936 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availabilit |
| CVE-2025-29937 | Awaiting Analysis | 未確認 | CWE-125 | An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of |
| CVE-2025-29938 | Awaiting Analysis | 未確認 | CWE-252 | An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbit |
| CVE-2025-29944 | Awaiting Analysis | 未確認 | CWE-120 | A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash |
| CVE-2025-30028 | Analyzed | 未確認 | CWE-89 | A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. |
| CVE-2025-31951 | Awaiting Analysis | 未確認 | CWE-351, CWE-451, CWE-77 | HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit |
| CVE-2025-31957 | Analyzed | 未確認 | CWE-352 | HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data. |
| CVE-2025-31959 | Analyzed | 未確認 | CWE-1230 | HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location inform |
| CVE-2025-31960 | Analyzed | 未確認 | CWE-209 | HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an invalid or ou |
| CVE-2025-31970 | Analyzed | 未確認 | CWE-358, CWE-79 | HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base- |
| CVE-2025-31973 | Analyzed | 未確認 | HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabili | |
| CVE-2025-31974 | Analyzed | 未確認 | CWE-1188 | HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow unintended modifications to c |
| CVE-2025-31975 | Analyzed | 未確認 | CWE-200 | HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system det |
| CVE-2025-31976 | Analyzed | 未確認 | CWE-200, CWE-522 | HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could a |
| CVE-2025-31978 | Analyzed | 未確認 | CWE-201 | HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could popula |
| CVE-2025-31982 | Analyzed | 未確認 | CWE-200 | HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclo |
| CVE-2025-31983 | Analyzed | 未確認 | CWE-358 | HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing th |
| CVE-2025-31984 | Analyzed | 未確認 | CWE-200 | HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MI |
| CVE-2025-31985 | Analyzed | 未確認 | CWE-200 | HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MI |
| CVE-2025-32425 | Analyzed | 未確認 | CWE-770 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. In AutoGPT, the execution process i |
| CVE-2025-32745 | Analyzed | 未確認 | CWE-295 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially |
| CVE-2025-32746 | Analyzed | 未確認 | CWE-922 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. An unauthenticated attacker with local access could potentially e |
| CVE-2025-32747 | Analyzed | 未確認 | CWE-266 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this v |
| CVE-2025-32749 | Analyzed | 未確認 | CWE-276 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could pote |
| CVE-2025-32750 | Analyzed | 未確認 | CWE-548 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could pote |
| CVE-2025-32751 | Analyzed | 未確認 | CWE-922 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exp |
| CVE-2025-33221 | Analyzed | 未確認 | CWE-20 | NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A su |
| CVE-2025-33255 | Analyzed | 未確認 | CWE-502 | NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might le |
| CVE-2025-35969 | Awaiting Analysis | 未確認 | CWE-427 | Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. Sy |
| CVE-2025-35979 | Awaiting Analysis | 未確認 | Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest) o | |
| CVE-2025-35990 | Analyzed | 未確認 | CWE-20 | Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. U |
| CVE-2025-35991 | Awaiting Analysis | 未確認 | CWE-665 | Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. System software adversary with a privileged |
| CVE-2025-36126 | Analyzed | 未確認 | CWE-79 | IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This v |
| CVE-2025-36145 | Analyzed | 未確認 | CWE-923 | IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restr |
| CVE-2025-36148 | Analyzed | 未確認 | CWE-79 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting. This |
| CVE-2025-36220 | Analyzed | 未確認 | CWE-89 | IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection. A remote attacker could send specially craft |
| CVE-2025-36221 | Analyzed | 未確認 | CWE-1392 | IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for |
| CVE-2025-3633 | Analyzed | 未確認 | CWE-79 | IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable to cross-site scripting (XSS). This vulnerability allows a |
| CVE-2025-36510 | Awaiting Analysis | 未確認 | CWE-119 | Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adver |
| CVE-2025-36515 | Awaiting Analysis | 未確認 | CWE-427 | Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adv |
| CVE-2025-40833 | Awaiting Analysis | 未確認 | CWE-476 | The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service cond |
| CVE-2025-40900 | Modified | 未確認 | CWE-1336 | An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileg |
| CVE-2025-40901 | Modified | 未確認 | CWE-79 | A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administr |
| CVE-2025-40902 | Modified | 未確認 | CWE-79 | A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileg |
| CVE-2025-40903 | Modified | 未確認 | CWE-79 | A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter. An authenticated user with admi |
| CVE-2025-40904 | Modified | 未確認 | CWE-79 | A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privile |
| CVE-2025-40946 | Awaiting Analysis | 未確認 | CWE-321 | A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.92), blueplane |
| CVE-2025-40947 | Analyzed | 未確認 | CWE-78 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1) |
| CVE-2025-40948 | Analyzed | 未確認 | CWE-88 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1) |
| CVE-2025-40949 | Analyzed | 未確認 | CWE-78 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1) |
| CVE-2025-41265 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 |
| CVE-2025-41266 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 |
| CVE-2025-41267 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 |
| CVE-2025-41268 | Analyzed | 未確認 | CWE-23 | Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote |
| CVE-2025-41269 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and |
| CVE-2025-41270 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and |
| CVE-2025-41271 | Analyzed | 未確認 | CWE-23 | Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthe |
| CVE-2025-41272 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and |
| CVE-2025-41273 | Analyzed | 未確認 | CWE-288 | Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R250 |
| CVE-2025-41274 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and |
| CVE-2025-41275 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and |
| CVE-2025-41276 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and |
| CVE-2025-41277 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and |
| CVE-2025-41278 | Analyzed | 未確認 | CWE-125 | Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execut |
| CVE-2025-41279 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 |
| CVE-2025-41280 | Analyzed | 未確認 | CWE-23 | Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX |
| CVE-2025-41281 | Analyzed | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 |
| CVE-2025-41669 | Deferred | 未確認 | CWE-347 | The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implementing any data verif |
| CVE-2025-41670 | Deferred | 未確認 | CWE-427 | A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-wri |
| CVE-2025-4202 | Deferred | 未確認 | CWE-862 | The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the |
| CVE-2025-42611 | Awaiting Analysis | 未確認 | CWE-295 | RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications. This includes Open |
| CVE-2025-43289 | Analyzed | 未確認 | CWE-285 | A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access sensitive |
| CVE-2025-43290 | Analyzed | 未確認 | CWE-732 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protected |
| CVE-2025-43306 | Analyzed | 未確認 | CWE-269 | A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to gain root privileges. |
| CVE-2025-43451 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data. |
| CVE-2025-43524 | Analyzed | 未確認 | CWE-284 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.2. An app may be able to break |
| CVE-2025-4386 | Awaiting Analysis | 未確認 | CWE-1263 | Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal. |
| CVE-2025-4397 | Awaiting Analysis | 未確認 | CWE-313 | Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data. |
| CVE-2025-43992 | Analyzed | 未確認 | CWE-302 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replicati |
| CVE-2025-45145 | Awaiting Analysis | 未確認 | CWE-22 | Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the |
| CVE-2025-46280 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination. |
| CVE-2025-46284 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to gain root privileges. |
| CVE-2025-46307 | Analyzed | 未確認 | CWE-284 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data. |
| CVE-2025-46311 | Analyzed | 未確認 | CWE-451 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able |
| CVE-2025-46371 | Analyzed | 未確認 | CWE-327 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access coul |
| CVE-2025-47401 | Analyzed | 未確認 | CWE-125, CWE-126 | Transient DOS when processing target power rate tables during channel configuration. |
| CVE-2025-47403 | Analyzed | 未確認 | CWE-125, CWE-126 | Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. |
| CVE-2025-47404 | Analyzed | 未確認 | CWE-120, CWE-787 | Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
| CVE-2025-47405 | Analyzed | 未確認 | CWE-119, CWE-822 | Memory corruption when processing camera sensor input/output control codes with invalid output buffers. |
| CVE-2025-47406 | Analyzed | 未確認 | CWE-125, CWE-126 | Information Disclosure while processing IOCTL handler callbacks without verifying buffer size. |
| CVE-2025-47407 | Analyzed | 未確認 | CWE-367 | Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level. |
| CVE-2025-47408 | Analyzed | 未確認 | CWE-119, CWE-822 | Memory corruption when another driver calls an IOCTL with invalid input/output buffer. |
| CVE-2025-48512 | Awaiting Analysis | 未確認 | CWE-276 | Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resul |
| CVE-2025-48513 | Awaiting Analysis | 未確認 | CWE-908 | Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memory resulting in loss of confidentiality |
| CVE-2025-48516 | Awaiting Analysis | 未確認 | CWE-276 | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to |
| CVE-2025-48519 | Awaiting Analysis | 未確認 | CWE-787 | An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or write Out-of-Bounds, potentially resultin |
| CVE-2025-48520 | Awaiting Analysis | 未確認 | CWE-125 | An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-of-Bounds potentially resulting in infor |
| CVE-2025-48521 | Awaiting Analysis | 未確認 | CWE-416 | Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of |
| CVE-2025-48977 | Analyzed | 未確認 | CWE-23 | Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a ce |
| CVE-2025-51427 | Deferred | 未確認 | CWE-502, CWE-94 | An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file (dey_mini.yaml) under the key ['nnet'] |
| CVE-2025-52206 | Modified | 未確認 | CWE-79 | ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage. |
| CVE-2025-52347 | Awaiting Analysis | 未確認 | CWE-20, CWE-269 | An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004 allows attackers to access kern |
| CVE-2025-52532 | Awaiting Analysis | 未確認 | CWE-367 | A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be e |
| CVE-2025-52540 | Awaiting Analysis | 未確認 | CWE-787 | An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out-of-Bounds, potentially resulting in pri |
| CVE-2025-52613 | Analyzed | 未確認 | CWE-200 | HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated or insecure WSGI server may expose the application to known |
| CVE-2025-52747 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Themebox - Digital Products Ecommerce allows Reflected XSS. This issu |
| CVE-2025-53680 | Analyzed | 未確認 | CWE-78 | An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP |
| CVE-2025-53681 | Analyzed | 未確認 | CWE-89 | An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7 |
| CVE-2025-53844 | Modified | 未確認 | CWE-787 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code |
| CVE-2025-53870 | Analyzed | 未確認 | CWE-78 | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, Fo |
| CVE-2025-54511 | Awaiting Analysis | 未確認 | CWE-274 | Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and suc |
| CVE-2025-54517 | Awaiting Analysis | 未確認 | CWE-787 | Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution. |
| CVE-2025-54518 | Awaiting Analysis | 未確認 | CWE-1189, CWE-1220 | Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege leve |
| CVE-2025-55449 | Analyzed | 未確認 | CWE-321 | AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT. |
| CVE-2025-56352 | Deferred | 未確認 | CWE-400 | In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations during CONNECT packet parsing. When receiving a CONNECT packet w |
| CVE-2025-57282 | Awaiting Analysis | 未確認 | CWE-77 | ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection. |
| CVE-2025-57798 | Deferred | 未確認 | CWE-770 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.6.14 and prior contain a Denial of Service (DoS) vulnerability |
| CVE-2025-58074 | Awaiting Analysis | 未確認 | CWE-1386 | A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation pro |
| CVE-2025-59851 | Analyzed | 未確認 | HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, which could allow an attack | |
| CVE-2025-59852 | Analyzed | 未確認 | CWE-319 | HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attac |
| CVE-2025-59853 | Analyzed | 未確認 | CWE-209 | HCL DFXAnalytics is affected by an Improper Error Handling vulnerability where the application exposes detailed stack traces in responses, which could allow an attacker to gain ins |
| CVE-2025-59854 | Analyzed | 未確認 | CWE-79, CWE-80 | HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which could allow an at |
| CVE-2025-61081 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2025-61305 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_firmware.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbi |
| CVE-2025-61306 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_coveragealerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execut |
| CVE-2025-61307 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripted (XSS) vulnerability in the acc-menu_papers.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitr |
| CVE-2025-61308 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_maintenance.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute a |
| CVE-2025-61309 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_departments.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute a |
| CVE-2025-61310 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripted (XSS) vulnerability in the acc-menu_billings.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbi |
| CVE-2025-61311 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_alerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitr |
| CVE-2025-61312 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripted (XSS) vulnerability in the acc-menu_pricess.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbit |
| CVE-2025-61313 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_markeralerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute |
| CVE-2025-61314 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_orderopt.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbi |
| CVE-2025-61669 | Analyzed | 未確認 | CWE-601 | Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `Lo |
| CVE-2025-61971 | Awaiting Analysis | 未確認 | CWE-1233 | Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest i |
| CVE-2025-61972 | Awaiting Analysis | 未確認 | CWE-1233 | Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbi |
| CVE-2025-62127 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Themes WEN Logo Slider allows DOM-Based XSS. This issue affects WEN Logo |
| CVE-2025-62305 | Deferred | 未確認 | CWE-201 | HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions, potentially resulting in unintended disclosure of sensitive information. Such |
| CVE-2025-62308 | Deferred | 未確認 | CWE-201 | HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed. Exposure of such information could reveal internal system architecture or con |
| CVE-2025-62309 | Deferred | 未確認 | CWE-201 | HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, pot |
| CVE-2025-62310 | Deferred | 未確認 | CWE-319 | HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential intercepti |
| CVE-2025-62311 | Deferred | 未確認 | CWE-319 | HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interceptio |
| CVE-2025-62312 | Deferred | 未確認 | CWE-522 | HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential inte |
| CVE-2025-62313 | Deferred | 未確認 | CWE-307 | HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leadi |
| CVE-2025-62316 | Deferred | 未確認 | CWE-1021 | HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of b |
| CVE-2025-62317 | Deferred | 未確認 | CWE-598 | HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, o |
| CVE-2025-62345 | Awaiting Analysis | 未確認 | CWE-522 | HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability . A component contains a security weakness in its input handling implementati |
| CVE-2025-62619 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to |
| CVE-2025-62623 | Awaiting Analysis | 未確認 | CWE-119 | A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. |
| CVE-2025-62624 | Awaiting Analysis | 未確認 | CWE-122 | A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. |
| CVE-2025-62625 | Awaiting Analysis | 未確認 | CWE-269 | Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to |
| CVE-2025-62627 | Awaiting Analysis | 未確認 | CWE-822 | An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, pote |
| CVE-2025-62628 | Awaiting Analysis | 未確認 | CWE-427 | Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution |
| CVE-2025-62745 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Team Showcase allows Stored XSS. This issue affects Team Showcase |
| CVE-2025-63547 | Deferred | 未確認 | CWE-805 | An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length field |
| CVE-2025-63548 | Deferred | 未確認 | CWE-241 | An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid value in any Boolean fiel |
| CVE-2025-63703 | Deferred | 未確認 | CWE-1321 | npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js(). |
| CVE-2025-63704 | Deferred | 未確認 | CWE-1321 | NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package does not properly sanitize user supplied query parameters and merges them to the newly creat |
| CVE-2025-63705 | Awaiting Analysis | 未確認 | CWE-78 | NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js. |
| CVE-2025-63706 | Deferred | 未確認 | CWE-94 | NPM package next-npm-version1.0.1 is vulnerable to Command injection. |
| CVE-2025-63750 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2026-21709. Reason: This record is a duplicate of CVE-2026-21709. Notes: All CVE users should reference CVE-2026-21709 | |
| CVE-2025-64526 | Analyzed | 未確認 | CWE-307 | Strapi is an open source headless content management system. In Strapi versions prior to 5.45.0, the rate-limit middleware in the users-permissions plugin derived its rate-limit ke |
| CVE-2025-65086 | Analyzed | 未確認 | CWE-787 | An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to ex |
| CVE-2025-65087 | Analyzed | 未確認 | CWE-125 | An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to dis |
| CVE-2025-65088 | Analyzed | 未確認 | CWE-125 | An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to dis |
| CVE-2025-65122 | Deferred | 未確認 | CWE-400 | Regex Denial of Service in youtube-regex npm package through version 1.0.5. |
| CVE-2025-65415 | Deferred | 未確認 | CWE-384 | docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application. |
| CVE-2025-65416 | Deferred | 未確認 | CWE-434 | docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php. |
| CVE-2025-65417 | Deferred | 未確認 | CWE-79 | docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application. |
| CVE-2025-65418 | Deferred | 未確認 | CWE-22 | docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url. |
| CVE-2025-65719 | Deferred | 未確認 | CWE-94 | An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page. |
| CVE-2025-6577 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows SQL I |
| CVE-2025-65954 | Analyzed | 未確認 | CWE-601 | SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. In versions below 6.3.1 and 7.0.0, the logout endpoint accepts a url query |
| CVE-2025-66105 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation allows Exploiting Incorrectly Configured Access Control Security Levels. This issue |
| CVE-2025-66170 | Analyzed | 未確認 | CWE-863 | The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environmen |
| CVE-2025-66171 | Analyzed | 未確認 | CWE-359 | The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, whe |
| CVE-2025-66172 | Analyzed | 未確認 | CWE-359 | The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, whe |
| CVE-2025-66369 | Deferred | 未確認 | CWE-770 | An issue was discovered in MM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, W920, W930, W1000, Mo |
| CVE-2025-66467 | Analyzed | 未確認 | CWE-459 | Missing MinIO policy cleanup on bucket deletion via Apache CloudStack allows users to retain access to buckets which they previously owned. If another user creates a new bucket wit |
| CVE-2025-66592 | Analyzed | 未確認 | CWE-346 | An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and cond |
| CVE-2025-66593 | Analyzed | 未確認 | CWE-346 | An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content and conduct denial-of-service |
| CVE-2025-66660 | Awaiting Analysis | 未確認 | CWE-1284 | Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, po |
| CVE-2025-66664 | Awaiting Analysis | 未確認 | CWE-125 | Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause |
| CVE-2025-67031 | Deferred | 未確認 | CWE-94 | ORSEE (Online Recruitment System for Economic Experiments) 3.1.0 contains an authenticated Remote Code Execution vulnerability in the participant profile field processing subsystem |
| CVE-2025-67202 | Awaiting Analysis | 未確認 | CWE-79 | Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL being rended from cron.erb. |
| CVE-2025-67437 | Deferred | 未確認 | CWE-284 | Medical Management System a81df1ce700a9662cb136b27af47f4cbde64156b is vulnerable to Insecure Permissions, which allows arbitrary user password reset. |
| CVE-2025-67486 | Analyzed | 未確認 | CWE-74 | Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Versions 22.0.2 and earlier contains an authenticated remote code exe |
| CVE-2025-67604 | Analyzed | 未確認 | CWE-676 | A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyze |
| CVE-2025-67796 | Awaiting Analysis | 未確認 | CWE-284 | IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding |
| CVE-2025-67886 | Awaiting Analysis | 未確認 | CWE-434 | Bitrix24 through 25.100.300 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file a |
| CVE-2025-67887 | Awaiting Analysis | 未確認 | CWE-94 | 1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file |
| CVE-2025-67888 | Awaiting Analysis | 未確認 | CWE-78 | An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209. User input passed via the "key" GET parameter to /admin/index.php (when the "api" parameter is set) is not pro |
| CVE-2025-67903 | Deferred | 未確認 | CWE-347 | Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass. |
| CVE-2025-68060 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMart Team Member allows Blind SQL Injection. This issue affects Team Member |
| CVE-2025-68420 | Deferred | 未確認 | CWE-266 | Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible for a local attacker w |
| CVE-2025-68421 | Deferred | 未確認 | CWE-798 | Comarch ERP Optima client makes use of a hard-coded password for a database user. These credentials cannot be changed. It is possible for a remote attacker to gain an access to the |
| CVE-2025-68604 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery. This issue affects WPGraphQL: from n/a through 2.5.3. |
| CVE-2025-68708 | Deferred | 未確認 | CWE-288 | SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather than |
| CVE-2025-68709 | Deferred | 未確認 | CWE-79 | SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript execution via BrowserMainActivity, which accepts VIEW intents w |
| CVE-2025-68710 | Deferred | 未確認 | CWE-288 | Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is impleme |
| CVE-2025-68711 | Deferred | 未確認 | CWE-288 | AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is im |
| CVE-2025-68712 | Deferred | 未確認 | CWE-285, CWE-287 | SpSoft AppLock (com.sp.protector.free) 7.9.40 for Android allows a local attacker with physical access to bypass fingerprint or PIN authentication. Although the app integrates Andr |
| CVE-2025-69233 | Modified | 未確認 | CWE-367, CWE-770 | Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as missing validations, users of the platform are able to exceed |
| CVE-2025-69443 | Deferred | 未確認 | CWE-94 | Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts on behalf of the user, control the Archon UI featu |
| CVE-2025-69599 | Awaiting Analysis | 未確認 | CWE-427 | RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability |
| CVE-2025-69600 | Awaiting Analysis | 未確認 | CWE-77 | Command injection in Raynet rvia RayVentory Scan Engine 12.6 Update 8 and previous versions allows adversaries to execute commands via getconfig, upload, inventory, and oracle opti |
| CVE-2025-69606 | Awaiting Analysis | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90. The `msg` parameter in the `/painel/gateways.php/error` endpoint does not properly s |
| CVE-2025-69690 | Analyzed | 未確認 | CWE-502, CWE-915 | Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property. NOTE: the |
| CVE-2025-69691 | Analyzed | 未確認 | CWE-284, CWE-915 | Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php. NOTE: the Supplier disputes this because the API call is only available to admins and they ar |
| CVE-2025-70067 | Deferred | 未確認 | CWE-122 | Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from |
| CVE-2025-70069 | Deferred | 未確認 | CWE-1284, CWE-400, CWE-770 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() method |
| CVE-2025-70070 | Deferred | 未確認 | CWE-476 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry() |
| CVE-2025-70071 | Deferred | 未確認 | CWE-1284, CWE-400, CWE-770 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray() |
| CVE-2025-70072 | Deferred | 未確認 | CWE-125 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial() components |
| CVE-2025-70103 | Deferred | 未確認 | CWE-122 | Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc. |
| CVE-2025-70116 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields (e.g., codec/mime/profile |
| CVE-2025-70842 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted |
| CVE-2025-70950 | Deferred | 未確認 | CWE-22 | An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request. |
| CVE-2025-71210 | Analyzed | 未確認 | CWE-22 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note |
| CVE-2025-71211 | Analyzed | 未確認 | CWE-22 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerabi |
| CVE-2025-71212 | Analyzed | 未確認 | CWE-59 | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker mu |
| CVE-2025-71213 | Analyzed | 未確認 | CWE-346 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must fir |
| CVE-2025-71214 | Analyzed | 未確認 | CWE-346 | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. Ple |
| CVE-2025-71215 | Analyzed | 未確認 | CWE-367 | A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affect |
| CVE-2025-71216 | Analyzed | 未確認 | CWE-367 | A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations. |
| CVE-2025-71217 | Analyzed | 未確認 | CWE-346 | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installat |
| CVE-2025-71251 | Analyzed | 未確認 | In IMS, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. | |
| CVE-2025-71252 | Analyzed | 未確認 | In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed. | |
| CVE-2025-71253 | Analyzed | 未確認 | In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed. | |
| CVE-2025-71254 | Analyzed | 未確認 | In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed. | |
| CVE-2025-71255 | Analyzed | 未確認 | In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed. | |
| CVE-2025-71256 | Analyzed | 未確認 | In nr modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed. | |
| CVE-2025-71271 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: ensure sb->s_fs_info is always cleaned up When hfsplus was converted to the new mount api a bug was i | |
| CVE-2025-71272 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: most: core: fix resource leak in most_register_interface error paths The function most_register_interface() di |
| CVE-2025-71273 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() Simplify the code by using device managed memory a |
| CVE-2025-71274 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: core: fix race in driver_override_show() and use core helper The driver_override_show function reads th |
| CVE-2025-71285 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels MHI stack offers the 'auto_queue' feature, whi |
| CVE-2025-71286 | Modified | 未確認 | CWE-131 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls The size of the data behind of scontr |
| CVE-2025-71287 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leak on larb probe Make sure to drop the reference taken when looking up the SMI d |
| CVE-2025-71288 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leaks on common probe Make sure to drop the reference taken when looking up the SM |
| CVE-2025-71289 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle attr_set_size() errors when truncating files If attr_set_size() fails while truncating down, | |
| CVE-2025-71290 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: misc: ti_fpc202: fix a potential memory leak in probe function Use for_each_child_of_node_scoped() to simplify |
| CVE-2025-71291 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() In the function bcm_vk_read(), the point |
| CVE-2025-71292 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: jfs: nlink overflow in jfs_rename If nlink is maximal for a directory (-1) and inside that directory you perfo | |
| CVE-2025-71293 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: Move ras data alloc before bad page check In the rare event if eeprom has only invalid address |
| CVE-2025-71294 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix NULL pointer issue buffer funcs If SDMA block not enabled, buffer_funcs will not initialize, f |
| CVE-2025-71295 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: fs/buffer: add alert in try_to_free_buffers() for folios without buffers try_to_free_buffers() can be called o |
| CVE-2025-71296 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/tests: shmem: Hold reservation lock around purge Acquire and release the GEM object's reservation lock aro | |
| CVE-2025-71297 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() rtw8822b_set_antenna() can be called from user | |
| CVE-2025-71298 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/tests: shmem: Hold reservation lock around madvise Acquire and release the GEM object's reservation lock a | |
| CVE-2025-71299 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing The recent refactoring of where run | |
| CVE-2025-71300 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" This reverts commit 06d22ed6b6635b17551f386b50bb | |
| CVE-2025-71301 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/tests: shmem: Hold reservation lock around vmap/vunmap Acquire and release the GEM object's reservation lo | |
| CVE-2025-71302 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: fix for dma-fence safe access rules Commit 506aa8b02a8d6 ("dma-fence: Add safe access helpers and | |
| CVE-2025-71303 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix race condition when checking rpm_on When autosuspend is triggered, driver rpm_on flag is se |
| CVE-2025-71304 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smack: /smack/doi: accept previously used values Writing to /smack/doi a value that has ever been written ther | |
| CVE-2025-71305 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/display/dp_mst: Add protection against 0 vcpi When releasing a timeslot there is a slight chance we may en | |
| CVE-2025-71306 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec() KASAN reported a stack-out-of-bounds access in ima_ap |
| CVE-2025-71307 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix NULL pointer dereference on panthor_fw_unplug This patch removes the MCU halt and wait for ha |
| CVE-2025-71308 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential NULL pointer dereference in context cleanup aie_destroy_context() is invoked duri |
| CVE-2025-71309 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix deadlock in ni_read_folio_cmpr Syzbot reported a task hung in ni_readpage_cmpr (now ni_read_foli |
| CVE-2025-71310 | Deferred | 未確認 | CWE-80 | The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scripting (XSS) if a malicious value has been provided for the o |
| CVE-2025-71311 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize new folios before use KMSAN reports an uninitialized value in longest_match_std(), invoke |
| CVE-2025-71312 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super() In ntfs_fill_super(), the fc->fs_private pointer is |
| CVE-2025-8154 | Analyzed | 未確認 | CWE-74 | In Webhook API invocations, the component accepts user-supplied input for HTTP request headers without sufficient validation or sanitization, allowing these headers to be injected |
| CVE-2025-8325 | Analyzed | 未確認 | CWE-281 | The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/Everyone' role can invoke these APIs, bypassing intended perm |
| CVE-2025-8903 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-2052. Reason: This candidate is a reservation duplicate of CVE-2026-2052 Notes: All CVE users s | |
| CVE-2025-9661 | Analyzed | 未確認 | CWE-78 | OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28. This issue affects Hitachi Virtual |
| CVE-2025-9973 | Analyzed | 未確認 | CWE-284, CWE-863 | Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on uninte |
| CVE-2025-9987 | Deferred | 未確認 | CWE-200 | The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta() AJAX action. This mak |
| CVE-2025-9988 | Deferred | 未確認 | CWE-285 | The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the create_advertiser AJAX action in all versions up to, and includin |
| CVE-2025-9989 | Deferred | 未確認 | CWE-79 | The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.53.1 due to insufficient input sanitiza |
| CVE-2026-0073 | Analyzed | 未確認 | CWE-303 | In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent |
| CVE-2026-0235 | Analyzed | 未確認 | CWE-362, CWE-754 | A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies. |
| CVE-2026-0236 | Analyzed | 未確認 | CWE-94 | A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-ad |
| CVE-2026-0237 | Analyzed | 未確認 | CWE-424 | An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allow |
| CVE-2026-0238 | Analyzed | 未確認 | CWE-20 | A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields. |
| CVE-2026-0239 | Analyzed | 未確認 | CWE-497 | An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitive i |
| CVE-2026-0240 | Analyzed | 未確認 | CWE-497 | An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploit |
| CVE-2026-0241 | Analyzed | 未確認 | CWE-754 | Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources. |
| CVE-2026-0242 | Undergoing Analysis | 未確認 | CWE-89 | A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitatio |
| CVE-2026-0243 | Analyzed | 未確認 | CWE-606 | A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to c |
| CVE-2026-0244 | Analyzed | 未確認 | CWE-295 | An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller. |
| CVE-2026-0245 | Analyzed | 未確認 | CWE-200 | Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Lin |
| CVE-2026-0246 | Analyzed | 未確認 | CWE-862 | A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalate their privi |
| CVE-2026-0247 | Analyzed | 未確認 | CWE-306 | Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged |
| CVE-2026-0248 | Analyzed | 未確認 | CWE-295 | An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept |
| CVE-2026-0249 | Analyzed | 未確認 | CWE-295 | Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially comp |
| CVE-2026-0250 | Analyzed | 未確認 | CWE-787 | A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute ar |
| CVE-2026-0251 | Analyzed | 未確認 | CWE-426 | Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows a |
| CVE-2026-0256 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web |
| CVE-2026-0257 | Analyzed | 掲載 | CWE-565 | Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establi |
| CVE-2026-0258 | Analyzed | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to se |
| CVE-2026-0259 | Analyzed | 未確認 | CWE-73 | An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary file |
| CVE-2026-0261 | Analyzed | 未確認 | CWE-78 | Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as |
| CVE-2026-0262 | Analyzed | 未確認 | CWE-754 | Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition |
| CVE-2026-0263 | Analyzed | 未確認 | CWE-787 | A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with eleva |
| CVE-2026-0264 | Analyzed | 未確認 | CWE-122 | A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a de |
| CVE-2026-0265 | Analyzed | 未確認 | CWE-347 | An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud A |
| CVE-2026-0300 | Analyzed | 掲載 | CWE-787 | A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execu |
| CVE-2026-0393 | Analyzed | 未確認 | CWE-522 | The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication d |
| CVE-2026-0427 | Awaiting Analysis | 未確認 | CWE-459 | Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from anoth |
| CVE-2026-0428 | Awaiting Analysis | 未確認 | CWE-1284 | Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, |
| CVE-2026-0432 | Awaiting Analysis | 未確認 | CWE-276 | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution |
| CVE-2026-0438 | Awaiting Analysis | 未確認 | CWE-1072 | A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and und |
| CVE-2026-0481 | Awaiting Analysis | 未確認 | CWE-1327 | Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentia |
| CVE-2026-0502 | Awaiting Analysis | 未確認 | CWE-352 | Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send unintended requests to the |
| CVE-2026-0541 | Analyzed | 未確認 | CWE-732 | ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. This vulnerability can |
| CVE-2026-0703 | Deferred | 未確認 | CWE-79 | The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwcty_current_date' shortcode in all version |
| CVE-2026-0802 | Analyzed | 未確認 | CWE-1287 | An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be expl |
| CVE-2026-0804 | Analyzed | 未確認 | CWE-35 | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be e |
| CVE-2026-0856 | Deferred | 未確認 | CWE-284 | Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEONA Client (ad |
| CVE-2026-0857 | Deferred | 未確認 | CWE-916 | Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user accounts whose password was last set under a version before |
| CVE-2026-0983 | Awaiting Analysis | 未確認 | CWE-1286 | Denial-of-service condition in M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3 allows an authenticated user to cause the MFserver process to c |
| CVE-2026-10000 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-10001 | Analyzed | 未確認 | CWE-416 | Use after free in PerformanceManager in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-10002 | Modified | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severi |
| CVE-2026-10003 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a cr |
| CVE-2026-10004 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium |
| CVE-2026-10005 | Analyzed | 未確認 | CWE-416 | Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitra |
| CVE-2026-10006 | Analyzed | 未確認 | CWE-362 | Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: |
| CVE-2026-10007 | Analyzed | 未確認 | CWE-416 | Use after free in SVG in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-10008 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted |
| CVE-2026-10009 | Analyzed | 未確認 | CWE-472 | Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via |
| CVE-2026-10010 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Input in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolatio |
| CVE-2026-10011 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a cra |
| CVE-2026-10012 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-10013 | Analyzed | 未確認 | CWE-416 | Use after free in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-10014 | Analyzed | 未確認 | CWE-416 | Use after free in WebMIDI in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-10015 | Analyzed | 未確認 | CWE-472 | Integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-10016 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-10017 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape v |
| CVE-2026-10018 | Modified | 未確認 | CWE-472 | Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page |
| CVE-2026-10019 | Modified | 未確認 | CWE-472 | Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-10020 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potenti |
| CVE-2026-10021 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium se |
| CVE-2026-10022 | Modified | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox v |
| CVE-2026-10028 | Awaiting Analysis | 未確認 | CWE-835 | A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networkin |
| CVE-2026-10039 | Deferred | 未確認 | CWE-89 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 3.28.28 due to insuffic |
| CVE-2026-10042 | Deferred | 未確認 | CWE-502 | manga-image-translator contains a remote code execution vulnerability in the shared API server mode due to unsafe deserialization of untrusted pickle data in the share.py module, w |
| CVE-2026-10044 | Deferred | 未確認 | CWE-36 | Usagi-org ai-goofish-monitor contains an unauthenticated arbitrary file read vulnerability in the GET /api/prompts/{filename} endpoint on Windows deployments that allows unauthenti |
| CVE-2026-10052 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to |
| CVE-2026-10056 | Awaiting Analysis | 未確認 | CWE-942 | CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows allows an unaut |
| CVE-2026-10057 | Deferred | 未確認 | CWE-79 | ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes |
| CVE-2026-10058 | Deferred | 未確認 | CWE-79 | ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes |
| CVE-2026-10060 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument ip/mask/gat |
| CVE-2026-10061 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected is the function formWPS of the file /goform/formWPS. The manipulation of the argument peerPin results in command |
| CVE-2026-10062 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSetRoute of the file /goform/formSetRoute. This manipulation of th |
| CVE-2026-10063 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formWPS of the file /goform/formWPS. Such manipulation of the argument peerPin |
| CVE-2026-10064 | Analyzed | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file /goform/formSetPortTr. Performing a manipulation of the argu |
| CVE-2026-10065 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Shibby Tomato 1.28. This vulnerability affects the function get_ups_field of the file tomatodata.cgi. Executing a manipulation of the argument Dat |
| CVE-2026-10066 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Shibby Tomato up to 1.28. This issue affects the function sub_9068 of the file tomatoups.cgi of the component UPS Service. The manipul |
| CVE-2026-10067 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Shibby Tomato 1.28. Impacted is the function sub_90F0 of the file multimon.cgi. The manipulation results in stack-based buffer overflow. The attack |
| CVE-2026-10068 | Deferred | 未確認 | CWE-918 | A flaw has been found in Shibby Tomato 1.28. The affected element is the function send of the file usr/sbin/miniupnpd of the component SUBSCRIBE Call Handler. This manipulation cau |
| CVE-2026-10069 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. T |
| CVE-2026-10070 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in macrozheng mall up to 1.0.3. This affects an unknown function of the file /admin/update/ of the component Super Admin Password Handler. Performing a ma |
| CVE-2026-10071 | Deferred | 未確認 | CWE-434 | DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling |
| CVE-2026-10072 | Deferred | 未確認 | CWE-434 | DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbit |
| CVE-2026-10073 | Deferred | 未確認 | CWE-23 | DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system |
| CVE-2026-10074 | Deferred | 未確認 | CWE-23 | DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system file |
| CVE-2026-10075 | Deferred | 未確認 | CWE-36 | DreamMaker developed by Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote attackers to read file names under arbitrary path by exploiting an Absolute Pa |
| CVE-2026-10078 | Awaiting Analysis | 未確認 | CWE-598 | A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically client_id and client_secret, to be transmitted as p |
| CVE-2026-10099 | Awaiting Analysis | 未確認 | CWE-1286 | XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocket_receive_worker routine of simple_http_server.py that allows attackers to cause corrupted applicatio |
| CVE-2026-10101 | Awaiting Analysis | 未確認 | CWE-201 | ACM/MCE assisted-service writes raw referenced pull-secret contents into `InfraEnv.status.conditions[].message` when pull-secret validation fails. A namespace principal with the st |
| CVE-2026-10105 | Deferred | 未確認 | CWE-89 | agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadat |
| CVE-2026-10107 | Deferred | 未確認 | CWE-918 | MoviePilot v2 contains a server-side request forgery vulnerability in the image proxy endpoint that allows authenticated attackers to request arbitrary URLs by supplying a resource |
| CVE-2026-10108 | Deferred | 未確認 | CWE-22 | xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_path:path} endpoint that allows unauthenticated attackers to read arbitrary files |
| CVE-2026-10110 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argum |
| CVE-2026-10111 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Login Page. Executing a manipulation of the argument email can l |
| CVE-2026-10112 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name le |
| CVE-2026-10113 | Deferred | 未確認 | CWE-404 | A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality in the library lib/sbi/nnrf-handler.c of the component Shared NF-profil |
| CVE-2026-10114 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handle_scp_info in the library lib/sbi/nnrf-handler.c of the component Shared NF-profi |
| CVE-2026-10115 | Deferred | 未確認 | CWE-404 | A vulnerability was identified in Open5GS up to 2.7.7. This affects an unknown part in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. Such manipulati |
| CVE-2026-10116 | Deferred | 未確認 | CWE-404 | A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_sbi_xact_add in the library /lib/core/ogs-timer.c of the component ue-authen |
| CVE-2026-10117 | Deferred | 未確認 | CWE-404 | A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_calloc in the library /lib/sbi/nghttp2-server.c. Executing a manipulation can lea |
| CVE-2026-10119 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the a |
| CVE-2026-10120 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSetFirewallRule of the file /goform/formSetFirewallRule. The manipulation of t |
| CVE-2026-10121 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formSetUrlFilter of the file /goform/formSetUrlFilter. This manipulation of the argument |
| CVE-2026-10122 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetProtocolFilter of the file /goform/formSetProtocolFilter. Such manipulation of the a |
| CVE-2026-10123 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetDomainFilter of the file /goform/formSetDomainFilter. Performing a manipulation of the ar |
| CVE-2026-10124 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Shibby Tomato up to 1.28. Affected is the function rip_zebra_read_ipv4 of the file /usr/sbin/ripd of the component Zserv Handler. Executing a mani |
| CVE-2026-10125 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Requ |
| CVE-2026-10126 | Deferred | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function formQoS of the file /goform/formQoS of the component POST Request Handler. The |
| CVE-2026-10127 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. This m |
| CVE-2026-10152 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1. This issue affects some unknown processing of the file src/main/java/io/github/talelin/latticy/controller/v |
| CVE-2026-10153 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCa |
| CVE-2026-10154 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2. The affected element is an unknown function of the file htdocs/user/messaging.php. Such manipulation of the |
| CVE-2026-10155 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accounts_report_search of the file application/modules/account |
| CVE-2026-10156 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi/nnrf-handler.c of the component nf-instances Endpoint. Exec |
| CVE-2026-10157 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the file src/amf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handler. |
| CVE-2026-10158 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. Affected is the function formPortFw of the file /goform/formPortFw. The manipulation of the argument server_name |
| CVE-2026-10159 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSysLog of the file /goform/formSysLog. This manipulation of the ar |
| CVE-2026-10160 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. Such |
| CVE-2026-10161 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function formResetStatistic of the file /goform/formResetStatistic. Performing a manipulation of the a |
| CVE-2026-10162 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This vulnerability affects the function formSetPassword of the file /goform/formSetPassword. Executing a manipulation of the a |
| CVE-2026-10163 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. Th |
| CVE-2026-10164 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. The manipulation |
| CVE-2026-10165 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request |
| CVE-2026-10166 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. Thi |
| CVE-2026-10167 | Deferred | 未確認 | CWE-287 | A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. This impacts the function sign_auth_cook |
| CVE-2026-10168 | Deferred | 未確認 | CWE-99 | A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affected is the function mar |
| CVE-2026-10169 | Deferred | 未確認 | CWE-640 | A vulnerability was detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affected by this vulnerability is the func |
| CVE-2026-10170 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /vms/php/phone_0.php. This manipulation of th |
| CVE-2026-10171 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminUpdateAlbum.php. Such manipulation of the ar |
| CVE-2026-10172 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the function Upload of the file application/modules/dashboard/con |
| CVE-2026-10173 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Orthanc Explorer 2 up to 1.12.0. The impacted element is an unknown function of the file WebApplication/src/components/StudyList.vue of the compon |
| CVE-2026-10174 | Deferred | 未確認 | CWE-693 | A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of the component Pre-commit Hook Handler. Such manipulation of th |
| CVE-2026-10175 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editor_coder.run of the file auth.py of the component Architect Mode. P |
| CVE-2026-10176 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation ca |
| CVE-2026-10177 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file api_docs.py of the component AWS EC2 Metadata Endpoint. The |
| CVE-2026-10178 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminEditAlbum.php. The manipulation of |
| CVE-2026-10179 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEncrypt of the file /goform/formSetWlanEncrypt. This manipulation of the argument w |
| CVE-2026-10180 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/formSysCmd. Such manipulation of the argument sysCmd leads to |
| CVE-2026-10181 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysCmd of the file /goform/formSysCmd. Performing a manipulation of the argument |
| CVE-2026-10182 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing a manipulation of the |
| CVE-2026-10183 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. This affects the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument enrollee |
| CVE-2026-10184 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an unknown function of the file /classes/Users.php?f=delete. The |
| CVE-2026-10185 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipu |
| CVE-2026-10186 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patient.p |
| CVE-2026-10187 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Manageme |
| CVE-2026-10188 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the file /bin/httpd. Executing a manipulation of the argument staMac can lead to stack- |
| CVE-2026-10189 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec le |
| CVE-2026-10190 | Deferred | 未確認 | CWE-404 | A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The mani |
| CVE-2026-10191 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function cgiWifiMacFilterSet of the file /bin/httpd. This manipulation of the argument wifiMacFilterSet.m |
| CVE-2026-10192 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function set_local_time_0 of the file /bin/httpd. Such manipulation of the argument Time lead |
| CVE-2026-10193 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\ComnContr |
| CVE-2026-10194 | Deferred | 未確認 | CWE-119, CWE-122 | A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages of the file dcmqrdb/libsrc/dcmqrdbi.cc of the |
| CVE-2026-10197 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer.cpp of the compo |
| CVE-2026-10198 | Deferred | 未確認 | CWE-404, CWE-476 | A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::glTFImporter::ImportMeshes of the file glTFImporter.cpp of the component glTFImp |
| CVE-2026-10199 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability has been found in Assimp up to 6.0.4. Affected by this issue is the function glTF2::LazyDict in the library glTF2Asset.h. Such manipulation of the argument operator |
| CVE-2026-10200 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was found in Assimp up to 6.0.4. This affects the function glTFCommon::CopyValue in the library glTFCommon.h of the component 4x4 Matrix Parser. Performing a manipu |
| CVE-2026-1184 | Analyzed | 未確認 | CWE-502 | GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticate |
| CVE-2026-1185 | Analyzed | 未確認 | CWE-732 | A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation. This vulnerability can on |
| CVE-2026-1248 | Analyzed | 未確認 | CWE-209 | IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages. |
| CVE-2026-1250 | Deferred | 未確認 | CWE-89 | The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to generic SQL Injection via the ‘id’ parameter in all versions up to, and including, 1 |
| CVE-2026-1322 | Analyzed | 未確認 | CWE-840 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticat |
| CVE-2026-1338 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authentica |
| CVE-2026-1402 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could hav |
| CVE-2026-1543 | Deferred | 未確認 | CWE-79 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in all versions up to, and including, 3.15.2 due to insufficien |
| CVE-2026-1630 | Deferred | 未確認 | CWE-79 | WEBCON BPS is vulnerable to Reflected XSS via one of parameters used by "/openinmobileapp" endpoint. An attacker can send a specially crafted URL that, when opened by an authentica |
| CVE-2026-1631 | Deferred | 未確認 | CWE-862 | The Feeds for YouTube (YouTube video, channel, and gallery plugin) WordPress plugin before 2.6.4 is vulnerable to unauthorized modification of the Feeds for YouTube (YouTube video, |
| CVE-2026-1659 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthentica |
| CVE-2026-1677 | Analyzed | 未確認 | CWE-757 | Zephyr sockets created with `IPPROTO_TLS_1_3` can still negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is |
| CVE-2026-1681 | Analyzed | 未確認 | CWE-674, CWE-787 | Issuing an ICMP ping via the `net ping` shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue s |
| CVE-2026-1718 | Analyzed | 未確認 | CWE-770 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service with a specially crafted query when autonomous transactions are enabled. |
| CVE-2026-1719 | Deferred | 未確認 | CWE-89 | The Gravity Bookings Premium plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.5.9 due to insufficient escaping on the user supplied param |
| CVE-2026-1749 | Awaiting Analysis | 未確認 | CWE-284 | There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission. |
| CVE-2026-1815 | Deferred | 未確認 | CWE-613 | Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking. This issue affects Mobile Applic |
| CVE-2026-1816 | Deferred | 未確認 | CWE-307 | Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Brute Force. This issue a |
| CVE-2026-1881 | Deferred | 未確認 | CWE-639 | The Broadstreet plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.52.2 via the get_sponsored_meta AJAX action due to mi |
| CVE-2026-1921 | Deferred | 未確認 | CWE-22 | The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.8.2 via the `fsReference` AJAX route. This is due to the `findSource |
| CVE-2026-1933 | Modified | 未確認 | CWE-284 | A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underl |
| CVE-2026-1934 | Deferred | 未確認 | CWE-862 | The Motors – Car Dealership & Classified Listings plugin for WordPress is vulnerable to Payment Bypass via insecure user meta update in all versions up to, and including, 1.4.103 T |
| CVE-2026-20034 | Analyzed | 未確認 | CWE-35 | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device. Th |
| CVE-2026-20035 | Analyzed | 未確認 | CWE-918 | A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device. This vulner |
| CVE-2026-20167 | Analyzed | 未確認 | CWE-284 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition |
| CVE-2026-20168 | Analyzed | 未確認 | CWE-388 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that t |
| CVE-2026-20169 | Analyzed | 未確認 | CWE-77 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and exec |
| CVE-2026-20171 | Awaiting Analysis | 未確認 | CWE-670 | A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS |
| CVE-2026-20172 | Awaiting Analysis | 未確認 | CWE-646 | A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct browser-based attacks. To exploit this v |
| CVE-2026-20182 | Analyzed | 掲載 | CWE-287 | May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advi |
| CVE-2026-20185 | Awaiting Analysis | 未確認 | CWE-122 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG350) and Cisco 350X Series Stackable Managed Switches (SG350 |
| CVE-2026-20188 | Awaiting Analysis | 未確認 | CWE-400 | Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network Services Orchestrator ( |
| CVE-2026-20189 | Analyzed | 未確認 | CWE-862 | A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the ser |
| CVE-2026-20193 | Analyzed | 未確認 | CWE-862 | A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain unauthorized acce |
| CVE-2026-20195 | Analyzed | 未確認 | CWE-204 | A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to enumerate valid user accounts on an affected device. This |
| CVE-2026-20199 | Analyzed | 未確認 | CWE-74 | A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underlying operatin |
| CVE-2026-20206 | Awaiting Analysis | 未確認 | CWE-78 | A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated, remote attacker to execute arbitrary commands on Agents on b |
| CVE-2026-20209 | Analyzed | 未確認 | CWE-779 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their p |
| CVE-2026-20210 | Analyzed | 未確認 | CWE-779 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configur |
| CVE-2026-20219 | Awaiting Analysis | 未確認 | CWE-639 | A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results |
| CVE-2026-20223 | Analyzed | 未確認 | CWE-306 | A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privi |
| CVE-2026-20224 | Analyzed | 未確認 | CWE-20 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in |
| CVE-2026-20238 | Analyzed | 未確認 | CWE-863 | In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted through `srchFil |
| CVE-2026-20239 | Analyzed | 未確認 | CWE-532 | In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that h |
| CVE-2026-20240 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21, 10.0.2503.13, |
| CVE-2026-2030 | Deferred | 未確認 | CWE-79 | The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[lvca_carousel]` and `[lvca_posts_carousel]` shortcode attri |
| CVE-2026-2031 | Awaiting Analysis | 未確認 | CWE-862 | An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker to |
| CVE-2026-20447 | Analyzed | 未確認 | CWE-125 | In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained |
| CVE-2026-20448 | Analyzed | 未確認 | CWE-280 | In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtai |
| CVE-2026-20449 | Analyzed | 未確認 | CWE-120 | In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by t |
| CVE-2026-20450 | Analyzed | 未確認 | CWE-617 | In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by |
| CVE-2026-20451 | Analyzed | 未確認 | CWE-843 | In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privil |
| CVE-2026-2052 | Deferred | 未確認 | CWE-94 | The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and i |
| CVE-2026-20685 | Analyzed | 未確認 | CWE-20, CWE-22 | An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Rel |
| CVE-2026-20696 | Analyzed | 未確認 | CWE-862 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.4. An app may be able to acces |
| CVE-2026-20714 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege. Unprivileged softwa |
| CVE-2026-20717 | Analyzed | 未確認 | CWE-20 | Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged softwa |
| CVE-2026-20718 | Awaiting Analysis | 未確認 | CWE-276 | Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32.0.100.4511 within Ring 3: User Applications may allow an escalation of privilege. U |
| CVE-2026-20738 | Awaiting Analysis | 未確認 | CWE-822 | Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivi |
| CVE-2026-20751 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System so |
| CVE-2026-20753 | Awaiting Analysis | 未確認 | CWE-190 | Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity |
| CVE-2026-20754 | Awaiting Analysis | 未確認 | CWE-754 | Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authen |
| CVE-2026-20767 | Analyzed | 未確認 | CWE-20 | Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged |
| CVE-2026-20771 | Analyzed | 未確認 | CWE-476 | Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged softwar |
| CVE-2026-20772 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3: User Applications may allow an escalation |
| CVE-2026-20782 | Analyzed | 未確認 | CWE-120 | Buffer overflow for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversa |
| CVE-2026-20793 | Analyzed | 未確認 | CWE-252 | Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software |
| CVE-2026-20794 | Awaiting Analysis | 未確認 | CWE-120 | Buffer overflow for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow an escalation of privilege. Syste |
| CVE-2026-20879 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System s |
| CVE-2026-20881 | Analyzed | 未確認 | CWE-369 | Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversar |
| CVE-2026-20887 | Analyzed | 未確認 | CWE-284 | Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unau |
| CVE-2026-20905 | Analyzed | 未確認 | CWE-20 | Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a denial of service. Unprivileged softwar |
| CVE-2026-20914 | Analyzed | 未確認 | CWE-476 | Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service. Unprivileged softwa |
| CVE-2026-20916 | Analyzed | 未確認 | CWE-22 | An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed iControl REST endpoint on the BIG-IQ system. Note: Software ver |
| CVE-2026-21015 | Analyzed | 未確認 | CWE-276 | Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier. |
| CVE-2026-21016 | Analyzed | 未確認 | Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information. | |
| CVE-2026-21018 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code. |
| CVE-2026-21019 | Awaiting Analysis | 未確認 | Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege. | |
| CVE-2026-21020 | Analyzed | 未確認 | Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions. | |
| CVE-2026-21021 | Analyzed | 未確認 | Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity. | |
| CVE-2026-21022 | Analyzed | 未確認 | Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information. | |
| CVE-2026-21024 | Awaiting Analysis | 未確認 | Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 allows local attackers to trigger privileged functions. | |
| CVE-2026-2128 | Deferred | 未確認 | CWE-200 | The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to improper veri |
| CVE-2026-21530 | Analyzed | 未確認 | CWE-415 | Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21661 | Awaiting Analysis | 未確認 | CWE-427 | An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths. This issue affects AC2000: f |
| CVE-2026-21730 | Analyzed | 未確認 | CWE-79 | Verba is affected by a Stored Cross-Site Scripting (XSS) vulnerability within its login logging mechanism. When an unauthenticated remote attacker attempts to log in using an incor |
| CVE-2026-21785 | Awaiting Analysis | 未確認 | CWE-1021 | A misconfigured Content Security Policy (CSP) in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0442 and earlier) fails to define directives without fallbacks, allowing at |
| CVE-2026-21789 | Deferred | 未確認 | CWE-863 | HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios. |
| CVE-2026-21821 | Awaiting Analysis | 未確認 | CWE-1104 | The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x has reached end-of-life and no longer receives security u |
| CVE-2026-21836 | Awaiting Analysis | 未確認 | CWE-862 | The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability. Under certain circumstances, document level access restrictions will be ignored when determining |
| CVE-2026-21996 | Analyzed | 未確認 | CWE-369 | An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab() |
| CVE-2026-22069 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-22165 | Analyzed | 未確認 | CWE-416 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain plat |
| CVE-2026-22166 | Analyzed | 未確認 | CWE-416 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platfo |
| CVE-2026-22167 | Analyzed | 未確認 | CWE-119 | Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages. Under certain circumstances t |
| CVE-2026-22314 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority based on the reported functionality projecting intended administrative functionality. | |
| CVE-2026-22315 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-2237 | Modified | 未確認 | CWE-598 | A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to o |
| CVE-2026-2253 | Analyzed | 未確認 | CWE-611 | Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML parsers from resolving external |
| CVE-2026-2254 | Analyzed | 未確認 | CWE-732 | Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, does not apply ACLs on certain API endpoints related to platf |
| CVE-2026-2255 | Analyzed | 未確認 | CWE-522 | Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, expose Hadoop cluster credentials in plain text through the C |
| CVE-2026-22554 | Modified | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01). A specially crafted .riff file can lead to arbitrary c |
| CVE-2026-22599 | Analyzed | 未確認 | CWE-89 | Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnera |
| CVE-2026-2264 | Awaiting Analysis | 未確認 | CWE-918 | A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access |
| CVE-2026-22677 | Deferred | 未確認 | CWE-22 | Hermes WebUI prior to 0.51.44 contains a path traversal vulnerability in the session import endpoint that allows authenticated attackers to read arbitrary files by importing a craf |
| CVE-2026-22678 | Modified | 未確認 | CWE-79 | Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged a |
| CVE-2026-22706 | Analyzed | 未確認 | CWE-613 | Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, changing or resetting a user's password did not invalidate the user's existing refr |
| CVE-2026-22707 | Analyzed | 未確認 | CWE-434, CWE-693 | Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints did not enforce the administrator-configu |
| CVE-2026-22726 | Analyzed | 未確認 | CWE-923 | Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudfoun |
| CVE-2026-2280 | Deferred | 未確認 | CWE-79 | The rexCrawler plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.15 due to insufficient input sanitizat |
| CVE-2026-22810 | Analyzed | 未確認 | CWE-24 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the impo |
| CVE-2026-2288 | Deferred | 未確認 | CWE-79 | The myLinksDump plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_title' parameter in all versions up to, and including, 1.6 due to insufficient input |
| CVE-2026-22880 | Analyzed | 未確認 | CWE-352 | Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an attacker control |
| CVE-2026-2291 | Awaiting Analysis | 未確認 | dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirec | |
| CVE-2026-22924 | Analyzed | 未確認 | CWE-306 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to |
| CVE-2026-22925 | Analyzed | 未確認 | CWE-770 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SY |
| CVE-2026-2300 | Deferred | 未確認 | CWE-79 | The BJ Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `filter_images()` function in all versions up to, and including, 1.0.9. This is due to th |
| CVE-2026-2306 | Deferred | 未確認 | CWE-862 | The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the `createFluentCartTa |
| CVE-2026-2325 | Analyzed | 未確認 | CWE-770 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to limit the size of the request body on the start meeting API endpoint, which allows an authentica |
| CVE-2026-2340 | Modified | 未確認 | CWE-280 | A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable gra |
| CVE-2026-2347 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking. This issue affects E- |
| CVE-2026-23479 | Modified | 未確認 | CWE-416 | Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when |
| CVE-2026-23557 | Analyzed | 未確認 | CWE-617 | Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES command within a transaction due to an assert() triggering. In case xenstored was built with NDEBUG #defined n |
| CVE-2026-23558 | Analyzed | 未確認 | CWE-362 | The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in |
| CVE-2026-23631 | Modified | 未確認 | CWE-416 | Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism t |
| CVE-2026-23652 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network. |
| CVE-2026-23663 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-23679 | Modified | 未確認 | CWE-125 | libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor whe |
| CVE-2026-23695 | Deferred | 未確認 | CWE-79 | Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site scripting vulnerability in the Set field type's Display template option, where the templ |
| CVE-2026-23734 | Deferred | 未確認 | CWE-23 | XWiki Platform is a generic wiki platform. Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to read configuration files by using URLs such as http://localh |
| CVE-2026-2374 | Deferred | 未確認 | CWE-79 | The Login No Captcha reCAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `$_SERVER['PHP_SELF']` superglobal in all versions up to, and including, 1. |
| CVE-2026-23819 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScri |
| CVE-2026-23820 | Analyzed | 未確認 | CWE-78 | A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restric |
| CVE-2026-23821 | Analyzed | 未確認 | CWE-78 | A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-exis |
| CVE-2026-23822 | Analyzed | 未確認 | CWE-776 | A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitatio |
| CVE-2026-23823 | Analyzed | 未確認 | CWE-77 | A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation cou |
| CVE-2026-23824 | Analyzed | 未確認 | CWE-400 | Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially c |
| CVE-2026-23825 | Analyzed | 未確認 | CWE-20 | Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially c |
| CVE-2026-23826 | Analyzed | 未確認 | CWE-770 | A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by sending specially crafted |
| CVE-2026-23827 | Analyzed | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve remote code exe |
| CVE-2026-23863 | Analyzed | 未確認 | CWE-158 | An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embedded NUL bytes in the filename t |
| CVE-2026-23866 | Analyzed | 未確認 | CWE-940 | Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allo |
| CVE-2026-23870 | Analyzed | 未確認 | CWE-400 | A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory excep |
| CVE-2026-23918 | Modified | 未確認 | CWE-1341, CWE-415 | Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to vers |
| CVE-2026-23926 | Analyzed | 未確認 | CWE-79 | An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in |
| CVE-2026-23927 | Analyzed | 未確認 | CWE-522 | A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and l |
| CVE-2026-23928 | Analyzed | 未確認 | CWE-79 | The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perfor |
| CVE-2026-2393 | Analyzed | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a user-controll |
| CVE-2026-23998 | Analyzed | 未確認 | CWE-295 | Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet’s Windows MDM management endpoint could allow requests to be processed without pr |
| CVE-2026-24000 | Analyzed | 未確認 | CWE-290 | Fleet is open source device management software. Prior to version 4.80.1, Fleet trusted client-supplied IP address headers when determining the source IP for incoming requests. Thi |
| CVE-2026-24072 | Analyzed | 未確認 | CWE-269 | An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are r |
| CVE-2026-24082 | Analyzed | 未確認 | CWE-416 | Memory Corruption when copying data from a freed source while executing performance counter deselect operation. |
| CVE-2026-24118 | Modified | 未確認 | CWE-693, CWE-749, CWE-94 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from |
| CVE-2026-24120 | Modified | 未確認 | CWE-693, CWE-807, CWE-94 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing attackers to write code which can |
| CVE-2026-24142 | Analyzed | 未確認 | CWE-502 | NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, da |
| CVE-2026-24160 | Analyzed | 未確認 | CWE-690 | NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulner |
| CVE-2026-24162 | Analyzed | 未確認 | CWE-502 | NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability migh |
| CVE-2026-24163 | Analyzed | 未確認 | CWE-502 | NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might |
| CVE-2026-24182 | Analyzed | 未確認 | CWE-667 | NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks. A successful exploit of this vulnerability might lead to denial |
| CVE-2026-24187 | Analyzed | 未確認 | CWE-416 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, |
| CVE-2026-24188 | Analyzed | 未確認 | CWE-787 | NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to data tampering. |
| CVE-2026-24190 | Analyzed | 未確認 | CWE-862 | NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit of th |
| CVE-2026-24191 | Analyzed | 未確認 | CWE-367 | NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to |
| CVE-2026-24192 | Analyzed | 未確認 | CWE-681 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A successfu |
| CVE-2026-24193 | Analyzed | 未確認 | CWE-787 | NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to |
| CVE-2026-24194 | Analyzed | 未確認 | CWE-281 | NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. A successful exploit of this vulnera |
| CVE-2026-24195 | Analyzed | 未確認 | CWE-20 | NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial |
| CVE-2026-24196 | Analyzed | 未確認 | CWE-125 | NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to denial of service |
| CVE-2026-24197 | Analyzed | 未確認 | CWE-1188 | NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing |
| CVE-2026-24198 | Awaiting Analysis | 未確認 | CWE-200 | NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause limited exposure of |
| CVE-2026-24199 | Analyzed | 未確認 | CWE-362 | NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A su |
| CVE-2026-24200 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerabilit |
| CVE-2026-24201 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lea |
| CVE-2026-24206 | Analyzed | 未確認 | CWE-288 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation |
| CVE-2026-24207 | Analyzed | 未確認 | CWE-288 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execut |
| CVE-2026-24208 | Analyzed | 未確認 | CWE-22 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of ser |
| CVE-2026-24209 | Analyzed | 未確認 | CWE-22 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of ser |
| CVE-2026-24210 | Analyzed | 未確認 | CWE-190 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to denial of servic |
| CVE-2026-24212 | Analyzed | 未確認 | CWE-319 | NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability might lead to code e |
| CVE-2026-24213 | Analyzed | 未確認 | CWE-125 | NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might le |
| CVE-2026-24214 | Analyzed | 未確認 | CWE-190 | NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead |
| CVE-2026-24215 | Analyzed | 未確認 | CWE-400 | NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerabi |
| CVE-2026-24216 | Analyzed | 未確認 | CWE-502 | NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execut |
| CVE-2026-24217 | Analyzed | 未確認 | CWE-29 | NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead |
| CVE-2026-24218 | Analyzed | 未確認 | CWE-321 | NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems |
| CVE-2026-24425 | Analyzed | 未確認 | CWE-693 | Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attackers with template rendering capabilities t |
| CVE-2026-24444 | Deferred | 未確認 | CWE-798 | SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9_B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints (mgmt.php |
| CVE-2026-24464 | Analyzed | 未確認 | CWE-35 | When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role |
| CVE-2026-24520 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Tiktok Feed: from n/a throu |
| CVE-2026-24527 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Patterns in the cloud Autoship Cloud for WooCommerce Subscription Products allows Exploiting Incorrectly Configured Access Control Security L |
| CVE-2026-24545 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n |
| CVE-2026-24546 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ruben Garcia GamiPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GamiPress: from n/a throu |
| CVE-2026-24554 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1. |
| CVE-2026-24573 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Stored XSS. This issue affects Visualizer: from n |
| CVE-2026-24574 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Recorp Export WP Page to Static HTML/CSS allows Cross Site Request Forgery. This issue affects Export WP Page to Static HTML/CSS |
| CVE-2026-24582 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.2 |
| CVE-2026-24586 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Themeansar Newses allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Newses: from n/a through 2.0.0 |
| CVE-2026-24590 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pai |
| CVE-2026-24592 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Affilia |
| CVE-2026-24597 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Organization chart allows Cross Site Request Forgery. This issue affects Organization chart: from n/a through 1.7.5. |
| CVE-2026-24638 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RepairBuddy: from n |
| CVE-2026-2465 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd. Co. Turboard FOR-S allows Privilege Escalation. |
| CVE-2026-24662 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier. If a file containing malicious contents is uploaded, a |
| CVE-2026-24710 | Analyzed | 未確認 | CWE-79 | Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS. |
| CVE-2026-24711 | Analyzed | 未確認 | CWE-284 | Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 has Incorrect Access Control. |
| CVE-2026-24712 | Analyzed | 未確認 | CWE-77 | Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection. |
| CVE-2026-24781 | Modified | 未確認 | CWE-653, CWE-693, CWE-94 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability through the inspect function. This allows attackers to writ |
| CVE-2026-24792 | Deferred | 未確認 | CWE-364 | in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps. |
| CVE-2026-24899 | Analyzed | 未確認 | CWE-290 | Fleet is open source device management software. Prior to version 4.82.0, a vulnerability in Fleet's Windows MDM enrollment flow allows authentication tokens from any Azure AD tena |
| CVE-2026-24937 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in VideoWhisper.Com Broadcast Live Video allows Code Injection. This issue affects Broadcast Live Video: fr |
| CVE-2026-25077 | Modified | 未確認 | CWE-94 | Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor. Due to missing file na |
| CVE-2026-25088 | Analyzed | 未確認 | CWE-89 | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiN |
| CVE-2026-25104 | Modified | 未確認 | CWE-191 | A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code exe |
| CVE-2026-25107 | Deferred | 未確認 | CWE-321 | ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the co |
| CVE-2026-25110 | Deferred | 未確認 | CWE-476 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. |
| CVE-2026-25112 | Awaiting Analysis | 未確認 | CWE-732 | A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack. |
| CVE-2026-2515 | Deferred | 未確認 | CWE-862 | The Hostinger Reach – AI-Powered Email Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'han |
| CVE-2026-2518 | Deferred | 未確認 | CWE-862 | The FastX theme for WordPress is vulnerable to unauthorized limited plugin installation and activation due to missing capability checks on the 'ultp_install_callback' and 'ultp_act |
| CVE-2026-25193 | Analyzed | 未確認 | CWE-532 | Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. Mitigating Factor: Only si |
| CVE-2026-25199 | Modified | 未確認 | CWE-200 | Instances deployed via the Proxmox extension allow unauthorized access to instances belonging to other tenants. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22 |
| CVE-2026-25243 | Modified | 未確認 | CWE-122 | Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker wit |
| CVE-2026-25244 | Modified | 未確認 | CWE-78 | WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and Appium. Versions below 9.24.0 contain a command injection vulnera |
| CVE-2026-25266 | Analyzed | 未確認 | CWE-749, CWE-787 | Memory corruption while processing IOCTL command when device is in power-save state. |
| CVE-2026-25293 | Analyzed | 未確認 | CWE-863 | Buffer overflow due to incorrect authorization in PLC FW |
| CVE-2026-25426 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue aff |
| CVE-2026-25431 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPMU DEV Hustle allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hustle: through 7.8.10.1. |
| CVE-2026-25436 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WProyal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal Elementor A |
| CVE-2026-25444 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/ |
| CVE-2026-25468 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue a |
| CVE-2026-2554 | Deferred | 未確認 | CWE-639 | The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versi |
| CVE-2026-25588 | Analyzed | 未確認 | CWE-122 | RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the |
| CVE-2026-25589 | Analyzed | 未確認 | CWE-122 | RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed throu |
| CVE-2026-25602 | Deferred | 未確認 | CWE-345 | Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server). The MEONA Client transmits the recipient address of a feed |
| CVE-2026-25606 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allow |
| CVE-2026-25607 | Deferred | 未確認 | CWE-261 | Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded. This issue w |
| CVE-2026-25608 | Deferred | 未確認 | CWE-319 | STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, perso |
| CVE-2026-25680 | Analyzed | 未確認 | CWE-400 | Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. |
| CVE-2026-25681 | Analyzed | 未確認 | CWE-1021 | Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanit |
| CVE-2026-25690 | Analyzed | 未確認 | CWE-88 | An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3 |
| CVE-2026-25705 | Awaiting Analysis | 未確認 | CWE-35 | A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be inject |
| CVE-2026-25710 | Awaiting Analysis | 未確認 | CWE-250 | The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitr |
| CVE-2026-25713 | Modified | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted media file that contains ID3v2 tags ca |
| CVE-2026-25781 | Deferred | 未確認 | CWE-787 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered. |
| CVE-2026-25786 | Awaiting Analysis | 未確認 | CWE-79 | Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated att |
| CVE-2026-25787 | Awaiting Analysis | 未確認 | CWE-79 | Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authe |
| CVE-2026-25789 | Awaiting Analysis | 未確認 | CWE-79 | Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social engineer the user into selecting the mod |
| CVE-2026-25850 | Deferred | 未確認 | CWE-281 | in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak |
| CVE-2026-2586 | Modified | 未確認 | CWE-917, CWE-94 | An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allo |
| CVE-2026-25863 | Deferred | 未確認 | CWE-1284 | Conditional Fields for Contact Form 7 WordPress plugin through version 2.7.2 contains an uncontrolled resource consumption vulnerability in the Wpcf7cfMailParser class where the hi |
| CVE-2026-2587 | Modified | 未確認 | CWE-917 | A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes |
| CVE-2026-25900 | Analyzed | 未確認 | CWE-79 | Lack of output escaping leads to a XSS vector in the feed modules. |
| CVE-2026-25901 | Analyzed | 未確認 | CWE-79 | Lack of output escaping leads to a XSS vector in the multilingual associations component. |
| CVE-2026-2601 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 11.5 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have a |
| CVE-2026-26028 | Deferred | 未確認 | CWE-116, CWE-79 | CryptPad is an end-to-end encrypted collaborative office suite. In versions prior to 2026.2.0, the HTML sanitizer in Diffmarked.js can be bypassed due to incomplete attribute filte |
| CVE-2026-26062 | Analyzed | 未確認 | CWE-20 | Fleet is open source device management software. Prior to version 4.81.0, Fleet contained a denial-of-service (DoS) issue in the gRPC Launcher `PublishLogs` endpoint. In affected v |
| CVE-2026-2607 | Awaiting Analysis | 未確認 | CWE-532 | IBM MQ Operator SC2: v3.2.0 through 3.2.23CD: v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6.0 - v3.6.4, v3.7.0 - v3.7.2, v3.8.0, v3.8.1, v3.9.0, v3.9.1LTS: v2.0.0 - 2.0.29 |
| CVE-2026-26083 | Analyzed | 未確認 | CWE-862 | A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSandbox PaaS 23.4 |
| CVE-2026-2611 | Modified | 未確認 | CWE-346, CWE-940 | In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross |
| CVE-2026-26129 | Modified | 未確認 | CWE-138 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-2614 | Modified | 未確認 | CWE-22 | A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to rea |
| CVE-2026-26147 | Analyzed | 未確認 | CWE-20 | Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network. |
| CVE-2026-26164 | Modified | 未確認 | CWE-74 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-26191 | Analyzed | 未確認 | CWE-78 | Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow a crafted software package to execute a |
| CVE-2026-26289 | Awaiting Analysis | 未確認 | CWE-863 | PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administ |
| CVE-2026-26332 | Modified | 未確認 | CWE-653, CWE-693, CWE-94 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, SuppressedError allows attackers to escape the sandbox and run arbitrary code. This issue has been patched in |
| CVE-2026-26461 | Awaiting Analysis | 未確認 | CWE-77 | A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web r |
| CVE-2026-26462 | Deferred | 未確認 | CWE-917 | Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration. The application enables Node.js integration while disablin |
| CVE-2026-2651 | Modified | 未確認 | CWE-1220, CWE-862 | A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled. The authorization logi |
| CVE-2026-2652 | Analyzed | 未確認 | CWE-305 | A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled (`--app-n |
| CVE-2026-26946 | Analyzed | 未確認 | CWE-269 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attac |
| CVE-2026-2695 | Awaiting Analysis | 未確認 | CWE-20 | A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows |
| CVE-2026-26956 | Modified | 未確認 | CWE-653, CWE-693 | vm2 is an open source vm/sandbox for Node.js. In version 3.10.4, vm2 is vulnerable to full sandbox escape with arbitrary code execution. Attacker code inside VM.run() obtains host |
| CVE-2026-26978 | Deferred | 未確認 | CWE-502 | FreePBX is an open source IP PBX. In versions below 16.0.71 and 17.0.6, the backup module does not properly sanitize data during restore operations, potentially leading to compromi |
| CVE-2026-2710 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-27130 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Versions 0.26.6 and below have OS command injection through the appName parameter. 3 chained issues cause this proble |
| CVE-2026-27136 | Analyzed | 未確認 | CWE-1021 | Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanit |
| CVE-2026-27173 | Analyzed | 未確認 | CWE-538 | JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods. This could allow users with just read-only acce |
| CVE-2026-2725 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in the "submitted together" feature in Gerrit versions 2.12 and later allows an authenticated attacker with force push permissions on a secondary branch to |
| CVE-2026-2729 | Deferred | 未確認 | CWE-639 | The Forminator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.52.0. This is due to the plugin not properly verifying that a user |
| CVE-2026-27329 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels. This issu |
| CVE-2026-27331 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpTravelly: from n/a |
| CVE-2026-2734 | Analyzed | 未確認 | CWE-284 | In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` GraphQL query lack proper per-model authorization checks when |
| CVE-2026-27346 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a before 5 |
| CVE-2026-27349 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Ma |
| CVE-2026-27357 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Search Analyt |
| CVE-2026-27393 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Tobias CF7 WOW Styler allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CF7 WOW Styler: from n/a t |
| CVE-2026-27398 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RSVP and Even |
| CVE-2026-2740 | Awaiting Analysis | 未確認 | CWE-77 | Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote code executi |
| CVE-2026-27405 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/ |
| CVE-2026-27415 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery. This issue affects BEAR: from n/a through 1.1.5. |
| CVE-2026-27416 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF Poster: from n/a through |
| CVE-2026-27421 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons allows Stored XSS. This issue affects Royal El |
| CVE-2026-27424 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Im |
| CVE-2026-27427 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS. This issue affects Geo Mashup: from |
| CVE-2026-27644 | Analyzed | 未確認 | CWE-1236 | Traccar is an open source GPS tracking system. In versions between 6.11.1 and 6.13.0, the CSV export functionality writes position data, including user-controlled device and comput |
| CVE-2026-27648 | Deferred | 未確認 | CWE-787 | in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps. |
| CVE-2026-27662 | Awaiting Analysis | 未確認 | CWE-1188 | Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticat |
| CVE-2026-27680 | Analyzed | 未確認 | CWE-276 | Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading Style Sheets (CSS) data into a web page |
| CVE-2026-27682 | Analyzed | 未確認 | CWE-79 | Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages), an unauthenticated attacker coul |
| CVE-2026-27693 | Analyzed | 未確認 | CWE-91 | Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the KML and GPX export functionality writes device names to XML out |
| CVE-2026-27694 | Analyzed | 未確認 | CWE-79 | Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the email notification templates insert user-controlled device, geo |
| CVE-2026-27737 | Deferred | 未確認 | CWE-79 | BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.19, the recording playback (presentation format) was not sanitizing user's input in public chat. This al |
| CVE-2026-27766 | Deferred | 未確認 | CWE-364 | in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak. |
| CVE-2026-27768 | Awaiting Analysis | 未確認 | CWE-89 | SQL Injection affecting the Access Manager role. |
| CVE-2026-27781 | Deferred | 未確認 | CWE-190 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. |
| CVE-2026-27851 | Modified | 未確認 | CWE-235, CWE-89 | When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can |
| CVE-2026-27886 | Analyzed | 未確認 | CWE-200, CWE-22, CWE-943 | Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sanitize query parameters when filtering con |
| CVE-2026-27891 | Deferred | 未確認 | CWE-20, CWE-434 | FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. The system fails to pro |
| CVE-2026-27892 | Deferred | 未確認 | CWE-200, CWE-212 | FacturaScripts is an open source accounting and invoicing software. In versions prior to 2026, the Library module stores and serves uploaded images byte-for-byte, without stripping |
| CVE-2026-27960 | Analyzed | 未確認 | CWE-287 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability |
| CVE-2026-27964 | Deferred | 未確認 | CWE-79 | FacturaScripts is an open source accounting and invoicing software. Versions 2025.7 and prior contain a Reflected Cross-Site Scripting (XSS) vulnerability through the fsNick cookie |
| CVE-2026-2812 | Analyzed | 未確認 | CWE-287 | ArcGIS Server contains an improper authentication vulnerability in an undocumented administrative endpoint. An unauthenticated attacker could exploit this issue by sending a crafte |
| CVE-2026-2813 | Analyzed | 未確認 | CWE-601 | ArcGIS Server contains an input validation weakness in the login redirection workflow. An Authenticated attacker could exploit this issue by sending a specially crafted request, Su |
| CVE-2026-28201 | Analyzed | 未確認 | CWE-20, CWE-352, CWE-917 | An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user to alter or de |
| CVE-2026-2828 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-28374 | Analyzed | 未確認 | CWE-284 | Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations. |
| CVE-2026-28376 | Analyzed | 未確認 | CWE-770 | The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. |
| CVE-2026-28379 | Analyzed | 未確認 | CWE-362 | A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This resu |
| CVE-2026-28380 | Analyzed | 未確認 | CWE-862 | Any Editor could delete any snapshot, even if they have no access to read or write them. |
| CVE-2026-28383 | Analyzed | 未確認 | CWE-770 | A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to t |
| CVE-2026-28444 | Deferred | 未確認 | CWE-639 | Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the getResultLogs API endpoint authorizes the caller against the provided typebotId but fetches logs solely by resu |
| CVE-2026-28445 | Deferred | 未確認 | CWE-79 | Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the RatingButton component in the embed package renders the user-controlled customIcon.svg field directly via Solid |
| CVE-2026-28510 | Analyzed | 未確認 | CWE-302 | eLabFTW is an open source electronic lab notebook. In elabftw versions through 5.4.1, the login flow did not reliably preserve the multi-factor authentication state across authenti |
| CVE-2026-2868 | Deferred | 未確認 | CWE-79 | The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'separatorIconSVG' parameter in versions |
| CVE-2026-28732 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to enforce slash command trigger-word uniqueness during command updates which allows an authenticat |
| CVE-2026-28733 | Deferred | 未確認 | CWE-416 | in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution. |
| CVE-2026-28735 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated M |
| CVE-2026-28751 | Deferred | 未確認 | CWE-20 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. |
| CVE-2026-28758 | Analyzed | 未確認 | CWE-312 | When BIG-IP DNS is provisioned, a vulnerability exists in the gtm_add and bigip_add iControl REST commands that return the ssh-password parameter in cleartext in the iControl REST |
| CVE-2026-28759 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to validate that a remote cluster has access to a channel before processing membership removal requ |
| CVE-2026-28761 | Deferred | 未確認 | CWE-352 | Cross-site request forgery vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier. If a user views a malicious page while logged-in |
| CVE-2026-28764 | Modified | 未確認 | CWE-823 | A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary |
| CVE-2026-28780 | Modified | 未確認 | CWE-122, CWE-787 | Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP messag |
| CVE-2026-28819 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Taho |
| CVE-2026-28830 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data. |
| CVE-2026-28840 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.4. An app may be able to gain root |
| CVE-2026-28846 | Analyzed | 未確認 | CWE-121 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14. |
| CVE-2026-28847 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visi |
| CVE-2026-28848 | Analyzed | 未確認 | CWE-121 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Tahoe 26.5. A remote attacker may be able to cause unexpected syst |
| CVE-2026-28860 | Analyzed | 未確認 | CWE-20 | The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, ma |
| CVE-2026-28872 | Analyzed | 未確認 | CWE-400 | A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4. A remote attacker may be ab |
| CVE-2026-28873 | Analyzed | 未確認 | CWE-863 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4. An app may be able to circumvent App Pri |
| CVE-2026-28883 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watc |
| CVE-2026-28897 | Analyzed | 未確認 | CWE-121 | A buffer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14 |
| CVE-2026-28901 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Proce |
| CVE-2026-28902 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Proce |
| CVE-2026-28903 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visi |
| CVE-2026-28904 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visi |
| CVE-2026-28905 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing maliciou |
| CVE-2026-28906 | Analyzed | 未確認 | CWE-359 | This issue was addressed through improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7 |
| CVE-2026-28907 | Analyzed | 未確認 | CWE-116, CWE-20 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, vis |
| CVE-2026-28908 | Analyzed | 未確認 | CWE-400 | A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to m |
| CVE-2026-28910 | Analyzed | 未確認 | CWE-284 | This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files. |
| CVE-2026-28913 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing malicious |
| CVE-2026-28914 | Modified | 未確認 | CWE-358, CWE-693 | A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may b |
| CVE-2026-28915 | Analyzed | 未確認 | CWE-22 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. |
| CVE-2026-28917 | Modified | 未確認 | CWE-20 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, vis |
| CVE-2026-28918 | Analyzed | 未確認 | CWE-125, CWE-787 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5 |
| CVE-2026-28919 | Analyzed | 未確認 | CWE-269 | A consistency issue was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to gain root |
| CVE-2026-28920 | Analyzed | 未確認 | CWE-200 | An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 1 |
| CVE-2026-28922 | Analyzed | 未確認 | CWE-200, CWE-284 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to access private |
| CVE-2026-28923 | Analyzed | 未確認 | CWE-532 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A malicious app may be able to break |
| CVE-2026-28924 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to a |
| CVE-2026-28925 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexp |
| CVE-2026-28929 | Analyzed | 未確認 | CWE-1254 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. Replying to an e |
| CVE-2026-28930 | Modified | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.5. An app may be able to access protected user data. |
| CVE-2026-28936 | Modified | 未確認 | CWE-20 | The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Sonoma |
| CVE-2026-28940 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 2 |
| CVE-2026-28941 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Tahoe 26.5. Processing a maliciously crafted file may |
| CVE-2026-28942 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watc |
| CVE-2026-28943 | Analyzed | 未確認 | CWE-532 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7 |
| CVE-2026-28944 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing maliciously crafted |
| CVE-2026-28946 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to a |
| CVE-2026-28947 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5 |
| CVE-2026-28951 | Analyzed | 未確認 | CWE-863 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sono |
| CVE-2026-28952 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. |
| CVE-2026-28953 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visi |
| CVE-2026-28954 | Analyzed | 未確認 | CWE-290 | A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A m |
| CVE-2026-28955 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visi |
| CVE-2026-28956 | Analyzed | 未確認 | CWE-125, CWE-787 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5 |
| CVE-2026-28957 | Analyzed | 未確認 | CWE-284 | An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app |
| CVE-2026-28958 | Modified | 未確認 | CWE-200 | This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26. |
| CVE-2026-28959 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14. |
| CVE-2026-28961 | Modified | 未確認 | CWE-522 | This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. An attacker with physical access to a locked devi |
| CVE-2026-28962 | Modified | 未確認 | CWE-200 | This issue was addressed with improved access restrictions. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 2 |
| CVE-2026-28963 | Analyzed | 未確認 | CWE-359 | A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intellige |
| CVE-2026-28964 | Analyzed | 未確認 | CWE-451 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to access sens |
| CVE-2026-28965 | Analyzed | 未確認 | CWE-284 | A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.5 and iPadOS 26.5. A user may be able to view restricted content from the lock screen. |
| CVE-2026-28967 | Analyzed | 未確認 | CWE-400 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4. An attacker in a privileged n |
| CVE-2026-28969 | Modified | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Gol |
| CVE-2026-28971 | Modified | 未確認 | CWE-1021 | The issue was addressed with improved UI handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. A malicious iframe may use another |
| CVE-2026-28972 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macO |
| CVE-2026-28974 | Analyzed | 未確認 | CWE-284 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, v |
| CVE-2026-28976 | Analyzed | 未確認 | CWE-200, CWE-269 | An information leakage was addressed with additional validation. This issue is fixed in macOS Tahoe 26.5. An app may be able to gain root privileges. |
| CVE-2026-28977 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS |
| CVE-2026-28978 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A malicious app may be able to b |
| CVE-2026-28983 | Modified | 未確認 | CWE-843 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, |
| CVE-2026-28985 | Analyzed | 未確認 | CWE-476 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5. An attacker on the local netw |
| CVE-2026-28986 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, |
| CVE-2026-28987 | Analyzed | 未確認 | CWE-532 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7 |
| CVE-2026-28988 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, watchOS 26.5. An app may be able t |
| CVE-2026-28990 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, m |
| CVE-2026-28991 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app |
| CVE-2026-28992 | Analyzed | 未確認 | CWE-362 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS So |
| CVE-2026-28993 | Analyzed | 未確認 | CWE-284 | This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS |
| CVE-2026-28994 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Son |
| CVE-2026-28995 | Modified | 未確認 | CWE-269 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, ma |
| CVE-2026-28996 | Modified | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8. |
| CVE-2026-2900 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that when instance-level approval rule e |
| CVE-2026-29004 | Awaiting Analysis | 未確認 | CWE-122, CWE-131 | BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows net |
| CVE-2026-29080 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability in `FilterEngine.create_sqla_query()` allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search |
| CVE-2026-29090 | Analyzed | 未確認 | CWE-89 | ### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in `FilterEngine.create_postgres_query()`. This allo |
| CVE-2026-29168 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 throu |
| CVE-2026-29169 | Modified | 未確認 | CWE-476 | A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used inte |
| CVE-2026-29199 | Analyzed | 未確認 | CWE-640 | phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When force_server_vars is disabled, the servers hostname may be extracted |
| CVE-2026-29200 | Awaiting Analysis | 未確認 | CWE-639 | A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to imper |
| CVE-2026-29201 | Deferred | 未確認 | CWE-23 | Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary file read when a relative file path is passed. |
| CVE-2026-29202 | Deferred | 未確認 | CWE-94 | Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system use |
| CVE-2026-29203 | Awaiting Analysis | 未確認 | CWE-61 | A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing setting root permissions on arbitrary system files or directories. That can cause DoS or |
| CVE-2026-29204 | Deferred | 未確認 | CWE-639 | Insufficient ownership check in `clientarea.php` allows an authenticated client area user to submit requests using another user’s `addonId` without any ownership validation leading |
| CVE-2026-29205 | Analyzed | 未確認 | CWE-250 | Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints. |
| CVE-2026-29206 | Deferred | 未確認 | CWE-89 | Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL Injections on behalf of the root user if Slow Query logging is enabled. |
| CVE-2026-29207 | Modified | 未確認 | CWE-1336 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to up |
| CVE-2026-29220 | Modified | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommen |
| CVE-2026-29226 | Modified | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgr |
| CVE-2026-2948 | Deferred | 未確認 | CWE-918 | The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.5.3 via the |
| CVE-2026-29514 | Deferred | 未確認 | CWE-183 | NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method that allows authenticated users with ex |
| CVE-2026-29518 | Modified | 未確認 | CWE-367 | Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended di |
| CVE-2026-2955 | Deferred | 未確認 | CWE-79 | The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' header in versions up to, and including, 1. |
| CVE-2026-2993 | Deferred | 未確認 | CWE-89 | The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4.17 due to insufficient escaping on user suppl |
| CVE-2026-29962 | Analyzed | 未確認 | CWE-73 | HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php proc |
| CVE-2026-29963 | Analyzed | 未確認 | CWE-22 | HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint. The text parameter is used to construct |
| CVE-2026-29964 | Analyzed | 未確認 | CWE-79 | HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to improper neutralization of user-controlled input using alternate |
| CVE-2026-29965 | Analyzed | 未確認 | CWE-79 | HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to improper neutralization of user-supplied input that uses alt |
| CVE-2026-29972 | Deferred | 未確認 | CWE-121 | nanoMODBUS through v1.22.0 has a stack-based buffer overflow in recv_read_registers_res() in nanomodbus.c. When a client calls nmbs_read_holding_registers() or nmbs_read_input_regi |
| CVE-2026-29974 | Deferred | 未確認 | CWE-121 | An issue was discovered in kosma minmea 0.3.0. The minmea_scan functions format specifier copies NMEA field data to a caller-provided buffer without a size parameter. Applications |
| CVE-2026-29975 | Deferred | 未確認 | CWE-835 | lwjson 1.8.1 contains an improper input validation vulnerability in the streaming JSON parser (lwjson_stream.c). The end-of-string detection logic incorrectly identifies escaped qu |
| CVE-2026-3001 | Deferred | 未確認 | CWE-79 | The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6 due to insufficient input sani |
| CVE-2026-3004 | Deferred | 未確認 | CWE-79 | The Snow Monkey Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-slick' attribute in all versions up to, and including, 24.1.11 due to insuffi |
| CVE-2026-30117 | Deferred | 未確認 | CWE-94 | scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar Proxy endpoint. This vulnerability allows |
| CVE-2026-30118 | Deferred | 未確認 | CWE-918 | scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy endpoint. This vulnerability allows unauth |
| CVE-2026-3012 | Modified | 未確認 | CWE-345 | A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted |
| CVE-2026-30246 | Analyzed | 未確認 | CWE-436 | Fiber is a web framework for Go. In github.com/gofiber/fiber/v3 versions through 3.1.0, the default key generator in the cache middleware uses only the request path and does not in |
| CVE-2026-30363 | Deferred | 未確認 | CWE-121 | flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function. |
| CVE-2026-3039 | Modified | 未確認 | CWE-770, CWE-771 | BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constr |
| CVE-2026-3048 | Analyzed | 未確認 | CWE-502, CWE-918 | An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended serve |
| CVE-2026-30495 | Awaiting Analysis | 未確認 | CWE-285 | The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) exposes Android Debug Bridge (ADB) on TCP port 5555 over the network without requiring authentication |
| CVE-2026-30496 | Awaiting Analysis | 未確認 | CWE-285 | The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) exposes an HTTP API on TCP port 2345 that allows full unauthenticated remote control of the device. T |
| CVE-2026-30498 | Deferred | 未確認 | CWE-352 | A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0. |
| CVE-2026-30635 | Deferred | 未確認 | CWE-78 | Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit fun |
| CVE-2026-30691 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer compo |
| CVE-2026-3073 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticat |
| CVE-2026-3074 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthentic |
| CVE-2026-30760 | Deferred | 未確認 | CWE-20 | An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web app via a crafted XAJAX call. |
| CVE-2026-30761 | Deferred | 未確認 | CWE-434 | An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin v1.1.6 allows attackers to execute arbitrary code via uploading a |
| CVE-2026-30805 | Analyzed | 未確認 | CWE-1188 | Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800 |
| CVE-2026-30807 | Analyzed | 未確認 | CWE-352 | Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: from 777 through 800 |
| CVE-2026-30808 | Analyzed | 未確認 | CWE-384 | Session Fixation vulnerability allows Session Hijacking via crafted session ID. This issue affects Pandora FMS: from 777 through 800 |
| CVE-2026-30810 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS: from 777 through 800 |
| CVE-2026-30894 | Analyzed | 未確認 | CWE-79 | Lack of output escaping leads to a XSS vector in the content history component. |
| CVE-2026-30895 | Analyzed | 未確認 | CWE-79 | Lack of output escaping leads to a XSS vector in the readmore links for com_content. |
| CVE-2026-30904 | Analyzed | 未確認 | CWE-693 | Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access. |
| CVE-2026-30905 | Analyzed | 未確認 | CWE-610, CWE-73 | External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of |
| CVE-2026-30906 | Analyzed | 未確認 | CWE-426 | Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access. |
| CVE-2026-30923 | Analyzed | 未確認 | CWE-125 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Libmodsecurity is one component of the ModSecurity v3 project. A segm |
| CVE-2026-30950 | Deferred | 未確認 | CWE-862 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenti |
| CVE-2026-31069 | Deferred | 未確認 | CWE-89 | BillaBear (all versions prior to Jan 2026) contains a SQL Injection vulnerability in the EventRepository. User-controlled input from metric filter names and aggregation properties |
| CVE-2026-31070 | Deferred | 未確認 | CWE-269 | The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by self-assigning an administrative role during registrat |
| CVE-2026-31071 | Deferred | 未確認 | CWE-306 | API endpoints in LalanaChami Pharmacy Management System (commit 5c3d028) lack authentication middleware. Unauthenticated remote attackers can exploit this to dump all user records |
| CVE-2026-31072 | Deferred | 未確認 | CWE-502 | The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization. The unm |
| CVE-2026-31156 | Modified | 未確認 | CWE-22 | A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as the binary program compiled from glue_generator.cpp does not perform any validatio |
| CVE-2026-3117 | Analyzed | 未確認 | CWE-862 | Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninst |
| CVE-2026-31195 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection vulnerability in the ping diagnostic handler in /bin/httpd_clientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020801R13, 3GN8020802R |
| CVE-2026-31196 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection vulnerability in the traceroute diagnostic handler in /bin/httpd_clientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020801R13, 3GN80 |
| CVE-2026-3120 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injecti |
| CVE-2026-31205 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent function |
| CVE-2026-31214 | Deferred | 未確認 | CWE-502 | The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure deserialization vulnerabili |
| CVE-2026-31215 | Analyzed | 未確認 | CWE-552 | The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. The DELETE /{index_name}/documents endpoi |
| CVE-2026-31216 | Analyzed | 未確認 | CWE-552 | The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API. The DELETE /storage/{object_name:path} endpoi |
| CVE-2026-31217 | Analyzed | 未確認 | CWE-94 | The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitrary code exec |
| CVE-2026-31218 | Deferred | 未確認 | CWE-502 | The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure |
| CVE-2026-31219 | Deferred | 未確認 | CWE-502 | The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure |
| CVE-2026-31220 | Deferred | 未確認 | CWE-94 | PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code. The system al |
| CVE-2026-31221 | Modified | 未確認 | CWE-502 | PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoi |
| CVE-2026-31222 | Modified | 未確認 | CWE-502 | The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class. The method loads model checkpoint f |
| CVE-2026-31223 | Modified | 未確認 | CWE-502 | The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class. The method loads se |
| CVE-2026-31224 | Analyzed | 未確認 | CWE-502 | The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of the MultitaskClassifier class. The method |
| CVE-2026-31225 | Awaiting Analysis | 未確認 | CWE-94 | The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The _parse_op_part() function in query.py uses the unsaf |
| CVE-2026-31226 | Deferred | 未確認 | CWE-78 | The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file operation utili |
| CVE-2026-31228 | Awaiting Analysis | 未確認 | CWE-94 | The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. The robustness evaluation function for PyTorch models |
| CVE-2026-31229 | Deferred | 未確認 | CWE-502 | The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in its Kubeflow component's model loading functionality. When load |
| CVE-2026-31230 | Deferred | 未確認 | CWE-88, CWE-94 | The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py). The |
| CVE-2026-31231 | Deferred | 未確認 | CWE-94 | Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint. The endpoint is designed to execute arbitrary Python code pr |
| CVE-2026-31232 | Awaiting Analysis | 未確認 | CWE-502 | The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading process. W |
| CVE-2026-31233 | Deferred | 未確認 | CWE-94 | Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism. When installing validator packages via guardrails hub install, |
| CVE-2026-31234 | Deferred | 未確認 | CWE-502 | Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component. The KVStore server, used for distributed task coordination, l |
| CVE-2026-31235 | Deferred | 未確認 | CWE-502 | The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle mod |
| CVE-2026-31236 | Awaiting Analysis | 未確認 | CWE-94 | The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom |
| CVE-2026-31237 | Deferred | 未確認 | CWE-502 | The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method. When a user provides a dataset file path to the predict() method, |
| CVE-2026-31238 | Deferred | 未確認 | CWE-502 | The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component. When starting a model server with the ludwig serve command, the |
| CVE-2026-31239 | Deferred | 未確認 | CWE-502 | The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from HuggingFace Hub. The MambaLMHeadModel.from_pr |
| CVE-2026-31240 | Deferred | 未確認 | CWE-306 | The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints. Critical functions such as updating memory records (PUT /memories/{me |
| CVE-2026-31241 | Analyzed | 未確認 | CWE-306, CWE-862 | The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories). The endpoint allows unauthenticated users to delete m |
| CVE-2026-31242 | Analyzed | 未確認 | CWE-306, CWE-862 | The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint. An unauthenticated attacker |
| CVE-2026-31243 | Analyzed | 未確認 | CWE-306, CWE-862 | The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint. An unau |
| CVE-2026-31244 | Analyzed | 未確認 | CWE-306, CWE-862 | The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory_id}). The endpoint allows unauthenticated users |
| CVE-2026-31245 | Analyzed | 未確認 | CWE-306, CWE-862 | The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories). The endpoint allows unauthenticated users to submit arb |
| CVE-2026-31246 | Deferred | 未確認 | CWE-78 | GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 (2025-09-03) contains a command injection vulnerability (CWE-78) in the Executor.run() method. During project executi |
| CVE-2026-31247 | Deferred | 未確認 | CWE-400 | Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend uses etree.parse() to parse XML files without disabling entity resolution. A |
| CVE-2026-31248 | Deferred | 未確認 | CWE-776 | Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstrin |
| CVE-2026-31249 | Deferred | 未確認 | CWE-502 | CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its make_parquet_list.py data processing |
| CVE-2026-31250 | Deferred | 未確認 | CWE-502 | CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its average_model.py model averaging too |
| CVE-2026-31251 | Deferred | 未確認 | CWE-20, CWE-915, CWE-94 | CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its gRPC server component. When the serv |
| CVE-2026-31252 | Deferred | 未確認 | CWE-915, CWE-94 | CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading component. The framewo |
| CVE-2026-31253 | Deferred | 未確認 | CWE-502, CWE-94 | The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) in its checkpo |
| CVE-2026-31254 | Deferred | 未確認 | CWE-95 | The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code injection vulnerability (CWE-94) in its training script. The script re |
| CVE-2026-31266 | Deferred | 未確認 | CWE-862 | Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate). |
| CVE-2026-31378 | Modified | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the i |
| CVE-2026-31379 | Modified | 未確認 | CWE-22, CWE-79, CWE-94 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Contr |
| CVE-2026-31380 | Modified | 未確認 | CWE-917 | Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apache OFBiz. This issue affects Apache OFB |
| CVE-2026-31387 | Modified | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the iss |
| CVE-2026-31388 | Modified | 未確認 | CWE-284 | Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 2 |
| CVE-2026-3140 | Deferred | 未確認 | CWE-352 | The Ultimate Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.14. This is due to a flawed nonce validation condi |
| CVE-2026-3143 | Deferred | 未確認 | CWE-862 | The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch |
| CVE-2026-3160 | Analyzed | 未確認 | CWE-441 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticat |
| CVE-2026-31694 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache() computes a serialized dirent size from | |
| CVE-2026-31695 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Currently we execute `SET_NETDEV_DEV(dev, &priv |
| CVE-2026-31696 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpc_preparse(), there are two pa |
| CVE-2026-31697 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed When retrieving the ID for the CPU, d |
| CVE-2026-31698 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the PDH cert, d |
| CVE-2026-31699 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed When retrieving the PEK CSR, don't a |
| CVE-2026-31700 | Modified | 未確認 | CWE-362, CWE-367 | In the Linux kernel, the following vulnerability has been resolved: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() In tpacket_snd(), when PACKET_VNET_HDR is enab |
| CVE-2026-31701 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: take a reference on the USB device in create_card() The caiaq driver stores a pointer to the pare | |
| CVE-2026-31702 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() In f2fs_compress_write_end_io(), dec_page_coun |
| CVE-2026-31703 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: writeback: Fix use after free in inode_switch_wbs_work_fn() inode_switch_wbs_work_fn() has a loop like: wb_ |
| CVE-2026-31704 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use check_add_overflow() to prevent u16 DACL size overflow set_posix_acl_entries_dacl() and set_ntacl_d | |
| CVE-2026-31705 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment smb2_get_ea() applies 4-byte alignment padding vi |
| CVE-2026-31706 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() smb_inherit_dacl() trusts the on-disk num_a | |
| CVE-2026-31707 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipc_validate_msg() ipc_validate_msg() computes the expected message size for |
| CVE-2026-31708 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path smb2_ioctl_query_info() has two response-co |
| CVE-2026-31709 | Modified | 未確認 | CWE-125, CWE-1288 | In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to_cifs_acl() |
| CVE-2026-31710 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix dir separator in SMB1 UNIX mounts When calling cifs_mount_get_tcon() with SMB1 UNIX mounts, @ | |
| CVE-2026-31711 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: smb: server: fix active_num_conn leak on transport allocation failure Commit 77ffbcac4e56 ("smb: server: fix l |
| CVE-2026-31712 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: require minimum ACE size in smb_check_perm_dacl() Both ACE-walk loops in smb_check_perm_dacl() only gua |
| CVE-2026-31713 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: abort on fatal signal during sync init When sync init is used and the server exits for some reason (erro | |
| CVE-2026-31714 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid memory leak in f2fs_rename() syzbot reported a f2fs bug as below: BUG: memory leak unrefer |
| CVE-2026-31715 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() The xfstests case "generic/107" an |
| CVE-2026-31716 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec->used in journal-replay file record check check_file_record() validates rec->total agai |
| CVE-2026-31717 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate owner of durable handle on reconnect Currently, ksmbd does not verify if the user attempting t | |
| CVE-2026-31718 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger When a durable file handle survives sess |
| CVE-2026-31719 | Modified | 未確認 | CWE-354 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5enc - fix async decrypt skipping hash verification krb5enc_dispatch_decrypt() sets req->base.compl |
| CVE-2026-31720 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: validate control request size f_audio_complete() copies req->length bytes into a 4 |
| CVE-2026-31721 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: move list and spinlock inits from bind to alloc There was an issue when you did the follow | |
| CVE-2026-31722 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Fix net_device lifecycle with device_move The net_device is allocated during function in | |
| CVE-2026-31723 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix net_device lifecycle with device_move The net_device is allocated during function i | |
| CVE-2026-31724 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix net_device lifecycle with device_move The net_device is allocated during function inst | |
| CVE-2026-31725 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ecm: Fix net_device lifecycle with device_move The net_device is allocated during function inst | |
| CVE-2026-31726 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix NULL pointer dereference during unbind race Commit b81ac4395bbe ("usb: gadget: uvc: allo |
| CVE-2026-31727 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo Commit ec35c1969650 ("usb: gadget: f_ncm: Fix |
| CVE-2026-31728 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop A race condition between gether_disconne |
| CVE-2026-31729 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi_notify_common() The connector number extracted from CCI vi |
| CVE-2026-3173 | Deferred | 未確認 | CWE-639 | The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1. This is due to the plugin allowing users to |
| CVE-2026-31730 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: possible double-free of cctx->remote_heap fastrpc_init_create_static_process() may free cctx->r |
| CVE-2026-31731 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Address thermal zone removal races with resume Since thermal_zone_pm_complete() and thermal_zon |
| CVE-2026-31732 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() Since commit aab5c6f20023 ("gpio: set devic |
| CVE-2026-31733 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stale direct dispatch state in ddsp_dsq_id @p->scx.ddsp_dsq_id can be left set (non-SCX_DSQ_INV | |
| CVE-2026-31734 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU Since commit 8e4f0b1ebcf2 ("bpf: | |
| CVE-2026-31735 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommupt: Fix short gather if the unmap goes into a large mapping unmap has the odd behavior that it can unmap | |
| CVE-2026-31736 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled If the gmac0 is disabled, the precheck for a v |
| CVE-2026-31737 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ftgmac100: fix ring allocation unwind on open failure ftgmac100_alloc_rings() allocates rx_skbs, tx_skbs, | |
| CVE-2026-31738 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: validate ND option lengths in vxlan_na_create vxlan_na_create() walks ND options according to option-pr | |
| CVE-2026-31739 | Modified | 未確認 | CWE-20, CWE-617 | In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Add missing CRYPTO_ALG_ASYNC The tegra crypto driver failed to set the CRYPTO_ALG_ASYNC on its |
| CVE-2026-31740 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member The counter driver can use HW channels 1 | |
| CVE-2026-31741 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Runtime PM counter is incremented / de | |
| CVE-2026-31742 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: vt: discard stale unicode buffer on alt screen exit after resize When enter_alt_screen() saves vc_uni_lines in |
| CVE-2026-31743 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Buffer size used in dma allocation and memcpy is wrong. |
| CVE-2026-31744 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix NULL pointer dereference when perf domain ID is not found dev_energymodel_nl_get_perf_domains_doit |
| CVE-2026-31745 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: reset: gpio: fix double free in reset_add_gpio_aux_device() error path When __auxiliary_device_add() fails, re |
| CVE-2026-31746 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix memory leak with CCA cards used as accelerator Tests showed that there is a memory leak if CC |
| CVE-2026-31747 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: comedi: me4000: Fix potential overrun of firmware buffer `me4000_xilinx_download()` loads the firmware that wa |
| CVE-2026-31748 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: comedi: me_daq: Fix potential overrun of firmware buffer `me2600_xilinx_download()` loads the firmware that wa |
| CVE-2026-31749 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: comedi: ni_atmio16d: Fix invalid clean-up after failed attach If the driver's COMEDI "attach" handler function |
| CVE-2026-31750 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: comedi: runflags cannot determine whether to reclaim chanlist syzbot reported a memory leak [1], because commi |
| CVE-2026-31751 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: comedi: dt2815: add hardware detection to prevent crash The dt2815 driver crashes when attached to I/O ports w |
| CVE-2026-31752 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: validate ND option lengths br_nd_send() walks ND options according to option-provided leng | |
| CVE-2026-31753 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix NULL dereference in linedisp_release linedisp_release() currently retrieves the |
| CVE-2026-31754 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix state inconsistency on gadget init failure When cdns3_gadget_start() fails, the DRD ha | |
| CVE-2026-31755 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix NULL pointer dereference in ep_queue When the gadget endpoint is disabled or not yet c |
| CVE-2026-31756 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() dwc2_gadget_exit_clock_gating() inte |
| CVE-2026-31757 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: Fix URB memory leak on submit failure When usb_submit_urb() fails in usbio_probe(), the prev |
| CVE-2026-31758 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmc_release When calling usbtmc_release, pending anchored URBs must be |
| CVE-2026-31759 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_interface() error path When device_register() fails, ulpi_register |
| CVE-2026-31760 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: gpib: lpvo_usb: fix memory leak on disconnect The driver iterates over the registered USB interfaces during GP |
| CVE-2026-31761 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Move iio_device_register() to correct location iio_device_register() should be at the end |
| CVE-2026-31762 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix irq resource leak The interrupt handler is setup but only a few lines down if iio_trig |
| CVE-2026-31763 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix incorrect free_irq() variable The handler for the IRQ part of this driver is mpu3050-> | |
| CVE-2026-31764 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only The st_lsm6dsx_hwfifo_odr_store() f |
| CVE-2026-31765 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Currently, AMDGPU_VA_RESERVED_TRAP_SIZE is hardcoded t |
| CVE-2026-31766 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate doorbell_offset in user queue creation amdgpu_userq_get_doorbell_index() passes the user- | |
| CVE-2026-31767 | Modified | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Stop adjusting the horizontal timing |
| CVE-2026-31768 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Add a DMA-safe buffer and use it for spi_read() in | |
| CVE-2026-31769 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: gpib: fix use-after-free in IO ioctl handlers The IBRD, IBWRT, IBCMD, and IBWAIT ioctl handlers use a gpib_des |
| CVE-2026-31770 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) Fix division by zero in occ_show_power_1() In occ_show_power_1() case 1, the accumulator is divid |
| CVE-2026-31771 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: move wake reason storage into validated event handlers hci_store_wake_reason() is called |
| CVE-2026-31772 | Modified | 未確認 | CWE-121, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync hci_le_big_create_sync() uses DEFINE_ |
| CVE-2026-31773 | Modified | 未確認 | CWE-287 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_ra |
| CVE-2026-31774 | Modified | 未確認 | CWE-125, CWE-190 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() sqe->len is __u32 but gets stored into sr->len |
| CVE-2026-31775 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization The recent refactoring of xfi driver changed the as | |
| CVE-2026-31776 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling SPDIF1 DAIO type isn't properly handled in daio_device_index() |
| CVE-2026-31777 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Check the error for index mapping The ctxfi driver blindly assumed a proper value returned from d | |
| CVE-2026-31778 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in init_card The loop creates a whitespace-stripped copy of the card |
| CVE-2026-31779 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() The memcpy function as |
| CVE-2026-31780 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation The variable valuesize is declared as u8 |
| CVE-2026-31781 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/ioc32: stop speculation on the drm_compat_ioctl path The drm compat ioctl path takes a user controlled poi | |
| CVE-2026-31782 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad container_of in intel_pmu_hw_config Auto counter reload may have a group of events |
| CVE-2026-31783 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback aml_sfc_probe() registers | |
| CVE-2026-31784 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pxp: Clear restart flag in pxp_start after jumping back If we don't clear the flag we'll keep jumping b | |
| CVE-2026-31785 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_pagefault: Disallow writes to read-only VMAs The page fault handler should reject write/atomic acces | |
| CVE-2026-31835 | Analyzed | 未確認 | CWE-345 | Vaultwarden is a Bitwarden-compatible server written in Rust. In versions 1.35.4 and earlier, the WebAuthn authentication flow in `validate_webauthn_login()` updates persistent cre |
| CVE-2026-31893 | Analyzed | 未確認 | CWE-61 | Tunnelblick is an open source graphic user interface for OpenVPN on macOS. In versions 3.3beta26 through 9.0beta01, any local user can read arbitrary root-owned files by exploiting |
| CVE-2026-31906 | Modified | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are re |
| CVE-2026-31909 | Modified | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to ve |
| CVE-2026-31910 | Modified | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fi |
| CVE-2026-31986 | Modified | 未確認 | CWE-321 | Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which f |
| CVE-2026-3208 | Deferred | 未確認 | CWE-862 | The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mp_pix_image' WooCommerce API |
| CVE-2026-32134 | Deferred | 未確認 | CWE-476 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In versions 0.24.10 and below, when NanoMQ handles high-concurrency reconnect traffic using a reconnect-collis |
| CVE-2026-32161 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code o |
| CVE-2026-32170 | Modified | 未確認 | CWE-415 | Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32175 | Analyzed | 未確認 | CWE-22, CWE-36 | A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files an |
| CVE-2026-32177 | Modified | 未確認 | CWE-122, CWE-20, CWE-787 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-32185 | Analyzed | 未確認 | CWE-552 | Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally. |
| CVE-2026-3220 | Deferred | 未確認 | CWE-79 | The Autoptimize WordPress plugin before 3.1.15, Clearfy Cache WordPress plugin before 2.4.2, Speed Optimizer WordPress plugin before 7.7.9 are vulnerable to unauthenticated Store |
| CVE-2026-32204 | Analyzed | 未確認 | CWE-610, CWE-73 | External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. |
| CVE-2026-32207 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-32209 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-32244 | Analyzed | 未確認 | CWE-200, CWE-524, CWE-672 | Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, outdated cached AI summaries can leak removed content to a |
| CVE-2026-32253 | Analyzed | 未確認 | CWE-287, CWE-295 | Sunshine is a self-hosted game stream host for Moonlight. In versions prior to 2026.516.143833, the client-certificate authentication can be bypassed because of how OpenSSL verific |
| CVE-2026-32312 | Analyzed | 未確認 | CWE-862 | GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorize |
| CVE-2026-32323 | Analyzed | 未確認 | CWE-269, CWE-345, CWE-427 | Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and below, Mullvad VPN may allow local privilege escalation during installation or upg |
| CVE-2026-32389 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Linethemes NanoCare allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects NanoCare: from n/a before 1. |
| CVE-2026-32603 | Analyzed | 未確認 | CWE-20 | Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel dri |
| CVE-2026-32643 | Analyzed | 未確認 | CWE-250 | A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects th |
| CVE-2026-32658 | Analyzed | 未確認 | CWE-862 | Dell Automation Platform versions prior to 2.0.0.0, contains a missing authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vuln |
| CVE-2026-32661 | Deferred | 未確認 | CWE-121 | Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted reque |
| CVE-2026-32673 | Analyzed | 未確認 | CWE-250 | A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource Administrator or Administrator role to execute arbitrary system comman |
| CVE-2026-32683 | Awaiting Analysis | 未確認 | CWE-319 | Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on |
| CVE-2026-32684 | Deferred | 未確認 | CWE-732 | The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information. |
| CVE-2026-32686 | Deferred | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service. The decimal library does not bound the exponent on parsed input. |
| CVE-2026-32687 | Modified | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injec |
| CVE-2026-32689 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling. In 'E |
| CVE-2026-32699 | Deferred | 未確認 | CWE-472 | FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to t |
| CVE-2026-32738 | Analyzed | 未確認 | CWE-125, CWE-476 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes an u |
| CVE-2026-32739 | Analyzed | 未確認 | CWE-835 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_dura |
| CVE-2026-32740 | Modified | 未確認 | CWE-787 | libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an |
| CVE-2026-32741 | Deferred | 未確認 | CWE-120, CWE-122 | libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and below contain a heap buffer overflow in MaskImageCodec::decode_mask_image(). When decoding a HEIF fi |
| CVE-2026-3279 | Deferred | 未確認 | CWE-862 | The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `downgrade_jquery_version()` funct |
| CVE-2026-32792 | Analyzed | 未確認 | CWE-125, CWE-166 | NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt'). A bad DNSCrypt query co |
| CVE-2026-32803 | Analyzed | 未確認 | CWE-778 | Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerabil |
| CVE-2026-32814 | Deferred | 未確認 | CWE-200, CWE-908 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, when decoding a HEIF grid image with strict_decoding=false (the default), a corrupted tile |
| CVE-2026-32834 | Deferred | 未確認 | CWE-798 | Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains a hardcoded authentication bypass vulnerability in the QR code scanning functionality that allows unau |
| CVE-2026-32847 | Analyzed | 未確認 | CWE-22 | DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/main.py that allows unauthenticated attackers to read arbitrary |
| CVE-2026-32848 | Deferred | 未確認 | CWE-362, CWE-415 | NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free condit |
| CVE-2026-32849 | Deferred | 未確認 | CWE-190, CWE-476 | NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable iov_len is dec |
| CVE-2026-32882 | Deferred | 未確認 | CWE-125 | libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay() in libheif/pixelimage.cc. When co |
| CVE-2026-3290 | Awaiting Analysis | 未確認 | CWE-332 | Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values |
| CVE-2026-32905 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.5.4 contains an authorization bypass vulnerability in the bundled device-pair plugin that allows non-owner authorized chat senders to issue device-pairing boot |
| CVE-2026-32906 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.5.12 contains a privilege escalation vulnerability in Slack plugin approvals that allows exec-authorized users to resolve plugin approvals through the exec app |
| CVE-2026-3291 | Analyzed | 未確認 | CWE-926 | Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. HP is releasing u |
| CVE-2026-32934 | Analyzed | 未確認 | CWE-770 | CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-QUIC (DoQ) server can be driven into unbounded goroutine and memory growth by a remote client |
| CVE-2026-32936 | Analyzed | 未確認 | CWE-400 | CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-HTTPS (DoH) GET path accepts oversized dns= query parameter values and performs URL query par |
| CVE-2026-3294 | Analyzed | 未確認 | CWE-20, CWE-862 | An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the ad |
| CVE-2026-32991 | Deferred | 未確認 | CWE-863 | Improper authorization checks of team members privileges allow a team member to escalate privileges to the team owner account. |
| CVE-2026-32992 | Analyzed | 未確認 | CWE-295 | SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials. |
| CVE-2026-32993 | Deferred | 未確認 | CWE-93 | Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated attacker to inject arbitrary HTTP header to the response. |
| CVE-2026-32994 | Deferred | 未確認 | CWE-284 | The /api/v1/autotranslate.translateMessage endpoint in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.6, <7.13.8, and <7.10.12 allows any authenticated user to retrieve the |
| CVE-2026-32995 | Awaiting Analysis | 未確認 | CWE-284 | The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.5, <7.13.8, and <7.10.12 accepts a client-supplied IMessage objec |
| CVE-2026-32996 | Deferred | 未確認 | CWE-532 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. |
| CVE-2026-32997 | Deferred | 未確認 | CWE-36 | A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server. |
| CVE-2026-32998 | Deferred | 未確認 | CWE-233 | This vulnerability in Veeam Service Provider Console allows for remote code execution. |
| CVE-2026-32999 | Deferred | 未確認 | CWE-94 | Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privile |
| CVE-2026-33000 | Analyzed | 未確認 | CWE-20 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. |
| CVE-2026-33006 | Analyzed | 未確認 | CWE-208 | A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker. Users are recommended to upgrade to version 2.4 |
| CVE-2026-33007 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward pro |
| CVE-2026-33052 | Deferred | 未確認 | CWE-639 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.0 and 2.28.1 allow a low-privileged authenticated user assigned the "add_profile_threshold" permission |
| CVE-2026-33079 | Deferred | 未確認 | CWE-1333 | In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdo |
| CVE-2026-33109 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network. |
| CVE-2026-33110 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-33111 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a |
| CVE-2026-33112 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-33117 | Modified | 未確認 | CWE-287, CWE-347 | The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorre |
| CVE-2026-33137 | Deferred | 未確認 | CWE-862 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform is a generic wiki platform. In versions starting with 15.10. |
| CVE-2026-3314 | Deferred | 未確認 | CWE-549 | Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center |
| CVE-2026-3318 | Deferred | 未確認 | CWE-601 | Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform. The vulnerability occurs in the login form endpoint, where the ‘returnUrl’ parameter all |
| CVE-2026-3319 | Deferred | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint / |
| CVE-2026-33190 | Analyzed | 未確認 | CWE-303 | CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT, DoH, DoH3, DoQ, and gRPC) because it tru |
| CVE-2026-3320 | Deferred | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint / |
| CVE-2026-33232 | Deferred | 未確認 | CWE-400, CWE-459, CWE-770 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.4.2 through 0.6.51 are vulnerable to an unauth |
| CVE-2026-33233 | Deferred | 未確認 | CWE-345, CWE-502, CWE-94 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions 0.6.34 through 0.6.51, the backend deserializ |
| CVE-2026-33234 | Deferred | 未確認 | CWE-918 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions 0.1.0 through 0.6.51, SendEmailBlock in auto |
| CVE-2026-33278 | Modified | 未確認 | CWE-416, CWE-672 | NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a resu |
| CVE-2026-33324 | Analyzed | 未確認 | CWE-89 | SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the Text2SQL chat interface is vulnerable to prompt injection. Th |
| CVE-2026-33356 | Deferred | 未確認 | CWE-639 | In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from devices the |
| CVE-2026-33357 | Deferred | 未確認 | CWE-862 | In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the integrated call path to |
| CVE-2026-33359 | Deferred | 未確認 | CWE-862 | In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication, signed URLs |
| CVE-2026-33361 | Deferred | 未確認 | CWE-326 | In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jpgx3 |
| CVE-2026-33362 | Deferred | 未確認 | CWE-321 | In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-critical secre |
| CVE-2026-33376 | Analyzed | 未確認 | CWE-1188 | When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired |
| CVE-2026-33377 | Analyzed | 未確認 | CWE-284, CWE-287 | An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege. |
| CVE-2026-33378 | Analyzed | 未確認 | CWE-400 | Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or no |
| CVE-2026-33380 | Analyzed | 未確認 | CWE-552 | A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature tog |
| CVE-2026-33381 | Analyzed | 未確認 | CWE-284 | When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose acces |
| CVE-2026-33384 | Deferred | 未確認 | CWE-384 | QuickCMS allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to |
| CVE-2026-33386 | Deferred | 未確認 | CWE-79 | QuickCMS is vulnerable to Cross-Site Scripting (XSS) through its insecure HTTP-based plugin‑fetching mechanism. A malicious attacker can perform a Man‑in‑the‑Middle (MITM) attack b |
| CVE-2026-33420 | Analyzed | 未確認 | CWE-862 | Vaultwarden is a Bitwarden-compatible server written in Rust. In version 1.35.4 and earlier, the get_org_collections_details endpoint (GET /api/organizations/{org_id}/collections/d |
| CVE-2026-33441 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE: CVE-2026-33079. | |
| CVE-2026-33462 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability was identified in Kibana's dashboard management functionality. An authenticated user with limited permissions could create a dashboard with a special |
| CVE-2026-33463 | Analyzed | 未確認 | CWE-672 | Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure. A logic error in how expiration timestamps were validat |
| CVE-2026-33464 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding a low-privileged role can |
| CVE-2026-3348 | Deferred | 未確認 | CWE-79 | The MinhNhut Link Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings (Description, Title, and other fields) in all versions up to, |
| CVE-2026-33489 | Analyzed | 未確認 | CWE-863 | CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a parent zone and a more-specific subzone ar |
| CVE-2026-3349 | Deferred | 未確認 | CWE-79 | The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including, 3. |
| CVE-2026-33514 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, an authenticated user on a Discourse instance with the for |
| CVE-2026-33523 | Analyzed | 未確認 | CWE-443 | HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4 |
| CVE-2026-33552 | Deferred | 未確認 | CWE-269 | Northern.tech Mender Enterprise Server before 4.1.1 has Incorrect Access Control. |
| CVE-2026-33565 | Deferred | 未確認 | CWE-364 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. |
| CVE-2026-33570 | Awaiting Analysis | 未確認 | CWE-863 | PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions. |
| CVE-2026-33583 | Deferred | 未確認 | CWE-749 | Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arq |
| CVE-2026-33584 | Deferred | 未確認 | CWE-749 | Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. Thi |
| CVE-2026-33585 | Deferred | 未確認 | CWE-233 | Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpir |
| CVE-2026-33587 | Analyzed | 未確認 | CWE-20 | Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via Server-Side Te |
| CVE-2026-33588 | Analyzed | 未確認 | CWE-20 | Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container via path traver |
| CVE-2026-33589 | Analyzed | 未確認 | CWE-20 | Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to access local files content from the docker container via path |
| CVE-2026-3359 | Deferred | 未確認 | CWE-89 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to SQL Injection via the 'inputs' parameter in versions up to, and inc |
| CVE-2026-33590 | Awaiting Analysis | 未確認 | CWE-276 | Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authenticated non-administr |
| CVE-2026-33603 | Analyzed | 未確認 | CWE-99 | Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This requires that the attacker is able to position itself betwee |
| CVE-2026-33633 | Analyzed | 未確認 | CWE-122 | Kitty is a cross-platform GPU based terminal. Versions 0.46.2 and below contain a heap buffer overflow in load_image_data() that allows any process which can write to the terminal' |
| CVE-2026-33637 | Analyzed | 未確認 | CWE-918 | Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Versions 2.0.0 through 2.14.1 still allow protocol-relative host override w |
| CVE-2026-33642 | Analyzed | 未確認 | CWE-125, CWE-190, CWE-787 | Kitty is a cross-platform GPU based terminal. In versions 0.46.2 and below, the handle_compose_command() function in kitty/graphics.c performs bounds validation on composition offs |
| CVE-2026-3366 | Analyzed | 未確認 | CWE-22 | IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directorie |
| CVE-2026-33712 | Deferred | 未確認 | CWE-862, CWE-918 | Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the preview chat endpoint (POST /api/v1/typebots/{typebotId}/preview/startChat) allows unauthenticated users to ach |
| CVE-2026-33741 | Deferred | 未確認 | CWE-79 | EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below allow authenticated users to upload SVG attachments through normal attachment-capab |
| CVE-2026-3375 | Deferred | 未確認 | CWE-79 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify_ccss and /wp-json/litespeed/v1/notify_ucss REST API endpo |
| CVE-2026-33811 | Modified | 未確認 | CWE-1341, CWE-415 | When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. |
| CVE-2026-33814 | Modified | 未確認 | CWE-606, CWE-835 | When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0. |
| CVE-2026-33821 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-33823 | Analyzed | 未確認 | CWE-285 | Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network. |
| CVE-2026-33833 | Analyzed | 未確認 | CWE-74 | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing ove |
| CVE-2026-33834 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33835 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33837 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33838 | Analyzed | 未確認 | CWE-415 | Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33839 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33840 | Modified | 未確認 | CWE-416 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33841 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33843 | Analyzed | 未確認 | CWE-288 | Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-33844 | Modified | 未確認 | CWE-20 | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network. |
| CVE-2026-33846 | Awaiting Analysis | 未確認 | CWE-130 | A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragmen |
| CVE-2026-33857 | Analyzed | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4. |
| CVE-2026-33862 | Analyzed | 未確認 | CWE-79 | A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Tea |
| CVE-2026-33893 | Analyzed | 未確認 | CWE-798 | A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Tea |
| CVE-2026-33975 | Deferred | 未確認 | CWE-918 | Twenty is an open source CRM built with NestJS (Node.js). In versions 1.18.0 and earlier, the SSRF protection in twenty-server's SecureHttpClientService can be bypassed using IPv4- |
| CVE-2026-34000 | Modified | 未確認 | CWE-125 | A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` func |
| CVE-2026-34002 | Modified | 未確認 | CWE-805 | A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 |
| CVE-2026-34019 | Analyzed | 未確認 | CWE-410 | When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop |
| CVE-2026-34032 | Analyzed | 未確認 | CWE-125, CWE-170 | Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to vers |
| CVE-2026-34059 | Analyzed | 未確認 | CWE-126 | Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the i |
| CVE-2026-34084 | Analyzed | 未確認 | CWE-502, CWE-918 | PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.2 and earlier, 2.0.0 through 2.1.14, 2.2.0 through 2.4.3, 3.3.0 through 3.10.3, and 4.0.0 th |
| CVE-2026-34086 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2. |
| CVE-2026-34087 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue affects OATHAuth: from * before 1.43.7, 1.44.4, 1.45.2. |
| CVE-2026-34088 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2. |
| CVE-2026-34089 | Analyzed | 未確認 | CWE-401, CWE-79 | Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45.0 before 1.45.2. |
| CVE-2026-34090 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser. This issue affects CheckUser: from 1.45.0 before 1.45.2. |
| CVE-2026-34091 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2. |
| CVE-2026-34092 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Skin/Skin |
| CVE-2026-34093 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Specials/ |
| CVE-2026-34094 | Analyzed | 未確認 | CWE-668 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki: from * before 1.4 |
| CVE-2026-34095 | Analyzed | 未確認 | CWE-668 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php, includes/Request/FauxResponse.Php. |
| CVE-2026-34126 | Analyzed | 未確認 | CWE-319 | TP-Link has identified a vulnerability in Tapo L535E v1.0 and v3.0, Tapo P300 v1.0, and Tapo D100C v1.0, where Bluetooth communication during the initial setup phase is transmitted |
| CVE-2026-34127 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability has been identified in the web management interface of TP-Link's TL-SG108PE v5 switch due to improper sanitation of the SYSNAM con |
| CVE-2026-34154 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, a vulnerability in the discourse-subscriptions plugin all |
| CVE-2026-34176 | Analyzed | 未確認 | CWE-78 | When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker |
| CVE-2026-34187 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 throug |
| CVE-2026-34207 | Deferred | 未確認 | CWE-20, CWE-918 | TypeBot is a chatbot builder tool. In versions prior to 3.16.0, SSRF protection for Webhook / HTTP Request blocks validates only the URL string, blocked hostname literals, and lite |
| CVE-2026-34216 | Deferred | 未確認 | CWE-470 | CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the admin settings update endpoint accepted a fully qualified class name directly from |
| CVE-2026-34233 | Deferred | 未確認 | CWE-284, CWE-862 | CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, multiple admin controllers expose DataTable endpoints without authorization checks, al |
| CVE-2026-34234 | Deferred | 未確認 | CWE-284, CWE-78 | CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the web-based installer (public/installer/index.php) is vulnerable to unauthenticated |
| CVE-2026-34241 | Deferred | 未確認 | CWE-79 | CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability in the ticket reply notification |
| CVE-2026-34246 | Deferred | 未確認 | CWE-116, CWE-80 | CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability exists in the admin role managem |
| CVE-2026-3425 | Deferred | 未確認 | CWE-98 | The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.2 via the 'path' parameter of the 'get_content' |
| CVE-2026-34253 | Deferred | 未確認 | CWE-124 | A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in th |
| CVE-2026-34258 | Awaiting Analysis | 未確認 | CWE-451 | SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content. Successful exploitation may mislead victi |
| CVE-2026-34259 | Awaiting Analysis | 未確認 | CWE-77 | Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated attacker with administrative authorizations could abuse a non-remote-enabled funct |
| CVE-2026-3426 | Deferred | 未確認 | CWE-862 | The RTMKit Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the save_widget() and reset_all_widgets( |
| CVE-2026-34260 | Awaiting Analysis | 未確認 | CWE-89 | SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an authenticated attacker to inject malicious SQL statements through user-controlled |
| CVE-2026-34263 | Awaiting Analysis | 未確認 | CWE-459 | Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to perform malicious input injection, resulting in arbitrary server-side code execu |
| CVE-2026-34311 | Analyzed | 未確認 | Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). Supported versions that are affected are 5.6.19.24 | |
| CVE-2026-34327 | Analyzed | 未確認 | CWE-610 | Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-34329 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-34330 | Modified | 未確認 | CWE-190, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34331 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34332 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network. |
| CVE-2026-34333 | Analyzed | 未確認 | CWE-190, CWE-416 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34334 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34336 | Modified | 未確認 | CWE-122 | Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34337 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34338 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34339 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally. |
| CVE-2026-34340 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34341 | Analyzed | 未確認 | CWE-415 | Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34342 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges |
| CVE-2026-34343 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34344 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34345 | Modified | 未確認 | CWE-362, CWE-416 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34347 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34350 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network. |
| CVE-2026-34351 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34354 | Deferred | 未確認 | CWE-367 | Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation. The GPA service creates an IPC socket in the world-wr |
| CVE-2026-34358 | Deferred | 未確認 | CWE-284, CWE-862 | CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contains a broken access control vulnerability where multiple admin controllers enforce pe |
| CVE-2026-34390 | Deferred | 未確認 | CWE-284 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior have a Privilege Escalation vulnerability where insufficient access control checks in Proje |
| CVE-2026-34408 | Deferred | 未確認 | CWE-640 | An issue was discovered in Gambio 4.9.2.0 (patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0). The password reset function can be bypassed to set arbitrary passwords for arbit |
| CVE-2026-34458 | Analyzed | 未確認 | CWE-93 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, an INI injection vulnerability allows any standard local user to bypa |
| CVE-2026-34459 | Analyzed | 未確認 | CWE-121 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieSvc proxy service's GetRawInputDeviceInfoSlave handler contai |
| CVE-2026-34461 | Analyzed | 未確認 | CWE-121 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack buffer overflo |
| CVE-2026-34462 | Analyzed | 未確認 | CWE-121, CWE-170 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, several ProcessServer handlers (KillAllHandler, SuspendAllHandler, an |
| CVE-2026-34463 | Deferred | 未確認 | CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior contain a Stored XSS vulnerability. When cloning an issue originating from a Project other |
| CVE-2026-34464 | Analyzed | 未確認 | CWE-121, CWE-170 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, NamedPipeServer::OpenHandler copies the server field from NAMED_PIPE_ |
| CVE-2026-34473 | Awaiting Analysis | 未確認 | CWE-400 | Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q. A denial-of-service condition |
| CVE-2026-34474 | Awaiting Analysis | 未確認 | CWE-200 | Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6. A crafted request to the router web interface can expose sensitive device and acc |
| CVE-2026-34507 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy checks. Attackers ca |
| CVE-2026-34527 | Analyzed | 未確認 | CWE-328 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, SbieIniServer::HashPassword converts a SHA-1 digest to hexadecimal in |
| CVE-2026-3454 | Deferred | 未確認 | CWE-639 | The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0. This is due to missing object-level authoriza |
| CVE-2026-3456 | Deferred | 未確認 | CWE-89 | The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is vulnerable to SQL Injection via the 'attributekey' parameter in versions up t |
| CVE-2026-34579 | Deferred | 未確認 | CWE-200, CWE-863 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior are vulnerable to Authorization Bypass through the private issue monitoring feature . Using |
| CVE-2026-34596 | Analyzed | 未確認 | CWE-367 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a Time-of-Check-to-Time-of-Use (TOCTOU) race condition exists during |
| CVE-2026-34600 | Deferred | 未確認 | CWE-200, CWE-281, CWE-863 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.5.2 and prior contain a logic error in the delta API that allow |
| CVE-2026-34636 | Analyzed | 未確認 | CWE-787 | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-34637 | Analyzed | 未確認 | CWE-787 | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-34638 | Analyzed | 未確認 | CWE-416 | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Ex |
| CVE-2026-34639 | Analyzed | 未確認 | CWE-787 | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u |
| CVE-2026-34640 | Analyzed | 未確認 | CWE-190 | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of th |
| CVE-2026-34642 | Analyzed | 未確認 | CWE-122 | After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curre |
| CVE-2026-34643 | Analyzed | 未確認 | CWE-787 | After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-34644 | Analyzed | 未確認 | CWE-190 | After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the |
| CVE-2026-34645 | Analyzed | 未確認 | CWE-863 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability that could result in a |
| CVE-2026-34646 | Analyzed | 未確認 | CWE-863 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability that could result in a |
| CVE-2026-34647 | Analyzed | 未確認 | CWE-918 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could r |
| CVE-2026-34648 | Analyzed | 未確認 | CWE-400 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could l |
| CVE-2026-34649 | Analyzed | 未確認 | CWE-400 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could l |
| CVE-2026-34650 | Analyzed | 未確認 | CWE-400 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could l |
| CVE-2026-34651 | Analyzed | 未確認 | CWE-400 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could l |
| CVE-2026-34652 | Analyzed | 未確認 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability | |
| CVE-2026-34653 | Analyzed | 未確認 | CWE-22 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory |
| CVE-2026-34654 | Analyzed | 未確認 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability | |
| CVE-2026-34655 | Analyzed | 未確認 | CWE-79 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be |
| CVE-2026-34656 | Analyzed | 未確認 | CWE-285 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Authorization vulnerability that could result in a |
| CVE-2026-34658 | Analyzed | 未確認 | CWE-79 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be |
| CVE-2026-34659 | Analyzed | 未確認 | CWE-502 | Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the cont |
| CVE-2026-34660 | Analyzed | 未確認 | CWE-863 | Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of th |
| CVE-2026-34661 | Analyzed | 未確認 | CWE-787 | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
| CVE-2026-34662 | Analyzed | 未確認 | CWE-476 | Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could expl |
| CVE-2026-34663 | Analyzed | 未確認 | CWE-125 | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this |
| CVE-2026-34664 | Analyzed | 未確認 | CWE-22 | Substance3D - Designer versions 15.1.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead t |
| CVE-2026-34665 | Modified | 未確認 | CWE-400 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-o |
| CVE-2026-34666 | Modified | 未確認 | CWE-20 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-s |
| CVE-2026-34667 | Modified | 未確認 | CWE-191 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an applicatio |
| CVE-2026-34668 | Modified | 未確認 | CWE-20 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-s |
| CVE-2026-34669 | Modified | 未確認 | CWE-20 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-s |
| CVE-2026-34670 | Modified | 未確認 | CWE-20 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-s |
| CVE-2026-34671 | Modified | 未確認 | CWE-190 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial |
| CVE-2026-34672 | Modified | 未確認 | CWE-191 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an applicatio |
| CVE-2026-34673 | Modified | 未確認 | CWE-400 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-o |
| CVE-2026-34675 | Analyzed | 未確認 | CWE-787 | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u |
| CVE-2026-34676 | Analyzed | 未確認 | CWE-787 | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u |
| CVE-2026-34677 | Modified | 未確認 | CWE-400 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-o |
| CVE-2026-34678 | Modified | 未確認 | CWE-400 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-o |
| CVE-2026-34679 | Modified | 未確認 | CWE-20 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-s |
| CVE-2026-34680 | Modified | 未確認 | CWE-190 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial |
| CVE-2026-34681 | Analyzed | 未確認 | CWE-787 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-34682 | Analyzed | 未確認 | CWE-787 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-34683 | Modified | 未確認 | CWE-787 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-34684 | Modified | 未確認 | CWE-787 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-34685 | Modified | 未確認 | CWE-20 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Input Validation vulnerability that could result in |
| CVE-2026-34686 | Analyzed | 未確認 | CWE-79 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be |
| CVE-2026-34687 | Analyzed | 未確認 | CWE-122 | Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-34688 | Modified | 未確認 | CWE-20 | CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-s |
| CVE-2026-34690 | Modified | 未確認 | CWE-121 | After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-3471 | Analyzed | 未確認 | CWE-939 | Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent an invalid URL from loading in a pop-up window in the Mattermost Desktop App which allows a malicious server ow |
| CVE-2026-3473 | Analyzed | 未確認 | CWE-639 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authenticated user |
| CVE-2026-34744 | Deferred | 未確認 | CWE-200, CWE-281 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior permit a user to list and download their own attachments from an Issue created by another u |
| CVE-2026-34754 | Deferred | 未確認 | CWE-284 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized |
| CVE-2026-3481 | Deferred | 未確認 | CWE-79 | The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode' parameter in all versions up to and including 0.9.14. This is due to insuff |
| CVE-2026-34882 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2026-6074. Reason: This record is a reservation duplicate of CVE-2026-6074. Notes: All CVE users should reference CVE-2 | |
| CVE-2026-34883 | Awaiting Analysis | 未確認 | CWE-59 | An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a symbolic link vulnerability allows a local low-privileged us |
| CVE-2026-34908 | Analyzed | 掲載 | CWE-284 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. |
| CVE-2026-34909 | Analyzed | 掲載 | CWE-22 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulat |
| CVE-2026-34910 | Analyzed | 掲載 | CWE-20 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. |
| CVE-2026-34911 | Analyzed | 未確認 | CWE-22 | A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that |
| CVE-2026-34926 | Analyzed | 掲載 | CWE-23 | A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code |
| CVE-2026-34927 | Analyzed | 未確認 | CWE-346 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obt |
| CVE-2026-34928 | Analyzed | 未確認 | CWE-346 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but ex |
| CVE-2026-34929 | Analyzed | 未確認 | CWE-346 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but ex |
| CVE-2026-34930 | Analyzed | 未確認 | CWE-346 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but ex |
| CVE-2026-3495 | Analyzed | 未確認 | CWE-79 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that could contain malicious content during error page composition which allows an attacker |
| CVE-2026-34956 | Awaiting Analysis | 未確認 | CWE-120 | A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafte |
| CVE-2026-34960 | Modified | 未確認 | CWE-125 | barebox prior to version 2026.04.0 contains an out-of-bounds read vulnerability in DHCP option parsing within the dhcp_message_type() function that fails to verify the options poin |
| CVE-2026-34961 | Modified | 未確認 | CWE-125 | barebox prior to version 2026.04.0 contains out-of-bounds read vulnerabilities in ext4 extent parsing due to missing validation of the eh_entries field against buffer capacity in f |
| CVE-2026-34962 | Modified | 未確認 | CWE-835 | barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_common.c where the ext4fs_iterate_dir() function fails to va |
| CVE-2026-34963 | Modified | 未確認 | CWE-190 | barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation |
| CVE-2026-34970 | Deferred | 未確認 | CWE-200 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow a bugnote author to access the note's Revisions page after losing access to the paren |
| CVE-2026-35007 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows authenticated attackers to inject arbitrary JavaScript by pas |
| CVE-2026-35008 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authenticated attackers to inject arbitrary JavaScript by passing |
| CVE-2026-35009 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_note.php that allows authenticated attackers to inject arbitrary JavaScript by passin |
| CVE-2026-35010 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows authenticated attackers to inject arbitrary JavaScript by pass |
| CVE-2026-35011 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authenticated attackers to inject arbitrary JavaScript by passing a |
| CVE-2026-35012 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows authenticated attackers to inject arbitrary JavaScript by pas |
| CVE-2026-35013 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in street_view.php that allows authenticated attackers to inject arbitrary JavaScript by pas |
| CVE-2026-35014 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passi |
| CVE-2026-35015 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in do_unit_mail.php that allows authenticated attackers to inject arbitrary JavaScript by pa |
| CVE-2026-35016 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScript by passing |
| CVE-2026-3504 | Deferred | 未確認 | CWE-200 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.1 |
| CVE-2026-35062 | Analyzed | 未確認 | CWE-266 | An authenticated iControl SOAP user may be able to obtain information of other accounts. Note: Software versions which have reached End of Technical Support (EoTS) are not evalua |
| CVE-2026-35070 | Analyzed | 未確認 | CWE-77 | Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high pr |
| CVE-2026-35071 | Analyzed | 未確認 | CWE-78 | Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability. A hig |
| CVE-2026-3508 | Awaiting Analysis | 未確認 | CWE-125 | An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash (BSOD) via a read size that exceeds the buffer s |
| CVE-2026-35086 | Modified | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended |
| CVE-2026-35087 | Deferred | 未確認 | CWE-288 | Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the appropriate command. T |
| CVE-2026-35089 | Deferred | 未確認 | CWE-1391 | In Slican telephone exchanges secure key is generated in a predictable manner using properties of the telephone exchange which can be obtained without authentication. An unauthenti |
| CVE-2026-35090 | Deferred | 未確認 | CWE-288 | In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID. T |
| CVE-2026-3515 | Awaiting Analysis | 未確認 | CWE-88 | A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via th |
| CVE-2026-35157 | Analyzed | 未確認 | CWE-1236 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the |
| CVE-2026-35192 | Analyzed | 未確認 | CWE-539 | An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. Response headers do not vary on cookies if a session is not modified, but `SESSION_SAVE_EVERY_REQUEST` is `True`. |
| CVE-2026-35194 | Analyzed | 未確認 | CWE-94 | Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary c |
| CVE-2026-35220 | Analyzed | 未確認 | CWE-352 | Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users. |
| CVE-2026-35221 | Analyzed | 未確認 | CWE-89 | Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder. |
| CVE-2026-35222 | Analyzed | 未確認 | CWE-89 | Improperly validated order clauses lead to a SQL injection vulnerability in com_tags. |
| CVE-2026-35223 | Analyzed | 未確認 | CWE-284 | An improper access check allows unauthorized access to com_config webservice endpoints. |
| CVE-2026-35227 | Awaiting Analysis | 未確認 | CWE-772 | An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is successfully explo |
| CVE-2026-35228 | Deferred | 未確認 | CWE-89 | Vulnerability in the Oracle MCP Server Helper Tool product of Oracle Open Source Projects (component: helper tool). The supported versions that is affected is 1.0.1-1.0.156. Easily |
| CVE-2026-35233 | Analyzed | 未確認 | CWE-125 | An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instruments - |
| CVE-2026-35253 | Analyzed | 未確認 | CWE-346, CWE-601 | Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected is v0.22.0. Easily exploitable vulnerability allows unauthe |
| CVE-2026-35254 | Analyzed | 未確認 | CWE-22 | Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated |
| CVE-2026-35255 | Analyzed | 未確認 | CWE-94 | Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2. Easily exploi |
| CVE-2026-35266 | Analyzed | 未確認 | CWE-352, CWE-400 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged atta |
| CVE-2026-35277 | Analyzed | 未確認 | CWE-284, CWE-400 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attack |
| CVE-2026-35397 | Modified | 未確認 | CWE-22 | Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape th |
| CVE-2026-35415 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-35416 | Modified | 未確認 | CWE-416 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-35417 | Modified | 未確認 | CWE-843 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-35418 | Analyzed | 未確認 | CWE-367, CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-35419 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
| CVE-2026-35420 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-35421 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally. |
| CVE-2026-35422 | Analyzed | 未確認 | CWE-288 | Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network. |
| CVE-2026-35423 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-35424 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. |
| CVE-2026-35428 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-35429 | Modified | 未確認 | CWE-451 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-35430 | Analyzed | 未確認 | CWE-639 | Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-35433 | Modified | 未確認 | CWE-190, CWE-20 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-35435 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-35436 | Modified | 未確認 | CWE-1220 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. |
| CVE-2026-35438 | Analyzed | 未確認 | CWE-862 | Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-35439 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-35440 | Analyzed | 未確認 | CWE-552 | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-35453 | Analyzed | 未確認 | CWE-79 | PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.3 and earlier, 2.0.0 through 2.1.15, 2.2.0 through 2.4.4, 3.3.0 through 3.10.4, and 4.0.0 th |
| CVE-2026-35504 | Awaiting Analysis | 未確認 | CWE-93 | PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication. |
| CVE-2026-35506 | Deferred | 未確認 | CWE-78 | ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processing a crafted request sent by a logged-in |
| CVE-2026-35527 | Analyzed | 未確認 | CWE-918 | Incus is an open source container and virtual machine manager. In versions prior to 7.0.0, the image import flow issues an outbound HEAD request to a user-supplied URL before valid |
| CVE-2026-35555 | Awaiting Analysis | 未確認 | CWE-863 | PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an unauthorized deletion of project groups. |
| CVE-2026-35579 | Modified | 未確認 | CWE-287, CWE-303 | CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUI |
| CVE-2026-35593 | Deferred | 未確認 | CWE-22, CWE-73 | Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases. Versions 0.102.1 and prior are vulnerable to Local |
| CVE-2026-35630 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fails to enforce configured approver identity. Non-approver users can |
| CVE-2026-35671 | Deferred | 未確認 | CWE-266 | phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API user password endpoint that allows authenticated administrators to change any user |
| CVE-2026-35672 | Deferred | 未確認 | CWE-1188 | phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in API v4.0 where the default empty api.apiClientToken allows unauthenticated users to create and modify FAQ e |
| CVE-2026-35673 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.29 contains an SSRF policy bypass vulnerability in browser debug and export routes that allows reuse of already-open blocked tabs. Attackers with access to t |
| CVE-2026-35674 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands. Attackers with operator.wr |
| CVE-2026-35675 | Deferred | 未確認 | CWE-307 | phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in the password reset endpoint that allows unauthenticated attackers to reset any user account password withou |
| CVE-2026-35676 | Deferred | 未確認 | CWE-640 | phpMyFAQ before 4.1.3 contains an unauthenticated password reset vulnerability in the user password update API endpoint that allows attackers to change account passwords without to |
| CVE-2026-3592 | Analyzed | 未確認 | CWE-408 | BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume dis |
| CVE-2026-3593 | Modified | 未確認 | CWE-416, CWE-825 | A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 thr |
| CVE-2026-3601 | Deferred | 未確認 | CWE-862 | The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `embed_form_action()` function i |
| CVE-2026-3603 | Analyzed | 未確認 | CWE-611 | IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 is vulnera |
| CVE-2026-3604 | Deferred | 未確認 | CWE-79 | The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `_kcseo_ative_tab` parameter in all versions up to, and including, 2.8.1 |
| CVE-2026-36044 | Deferred | 未確認 | CWE-78 | @pensar/apex <= 0.0.58 is vulnerable to OS command injection via the smart_enumerate tool. The createSmartEnumerateTool() function in src/core/agent/tools.ts constructs a shell com |
| CVE-2026-36045 | Deferred | 未確認 | CWE-78 | picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool component (pkg/tools/shell.go). The guardCommand() function attempts to restrict shell command |
| CVE-2026-3607 | Analyzed | 未確認 | CWE-1280 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticat |
| CVE-2026-3609 | Modified | 未確認 | Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation vulnerability provides access to the IRP_MJ_WRITE command interf | |
| CVE-2026-36189 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc allows a local attacke |
| CVE-2026-36226 | Awaiting Analysis | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the Create New P |
| CVE-2026-36227 | Deferred | 未確認 | CWE-22 | Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter |
| CVE-2026-36228 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality |
| CVE-2026-3623 | Analyzed | 未確認 | CWE-250 | IBM Netezza Performance Server Replication Services 3.0.2.0 through 3.0.5.0 allows an attacker with low‑privileged access to escalate their privileges to root. By exploiting this f |
| CVE-2026-36239 | Deferred | 未確認 | CWE-79 | PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality |
| CVE-2026-36324 | Deferred | 未確認 | CWE-79 | SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) due to improper handling of user supplied input in the user registration functionality in r |
| CVE-2026-36341 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the comment field during Activity creation on |
| CVE-2026-36355 | Awaiting Analysis | 未確認 | CWE-200, CWE-782, CWE-787 | The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89F5) |
| CVE-2026-36356 | Awaiting Analysis | 未確認 | CWE-306, CWE-78 | The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg |
| CVE-2026-36358 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function |
| CVE-2026-3636 | Analyzed | 未確認 | CWE-200 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to sanitize team member data when returned via API to users without elevated perm |
| CVE-2026-36365 | Awaiting Analysis | 未確認 | CWE-77, CWE-94 | An issue in Lymphatus caesium-image-compressor All versions up to and including commit 02da2c6 allows a local attacker to execute arbitrary code via the shutdownMachine and putMach |
| CVE-2026-3637 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to check the create_post channel permission during post edit operations which allows an authenticat |
| CVE-2026-36387 | Deferred | 未確認 | CWE-434 | A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add_members.php. This vulnerability affects the file upload functionality, where |
| CVE-2026-36388 | Deferred | 未確認 | CWE-79 | A Cross-Site Scripting (XSS) vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php page. This flaw allows an authenticated att |
| CVE-2026-36438 | Awaiting Analysis | 未確認 | CWE-640 | An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information via password reset functionality under /OutsideCmd |
| CVE-2026-36458 | Deferred | 未確認 | CWE-94 | ChestnutCMS v1.5.10 has a SQL injection vulnerability. The content parameter of the cms_content tag can be manipulated in the admin backend and injected into a SQL query when the t |
| CVE-2026-36538 | Deferred | 未確認 | CWE-798 | Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, |
| CVE-2026-36539 | Deferred | 未確認 | CWE-200 | Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router configuration as a JSON response with no authentication required. An |
| CVE-2026-36540 | Deferred | 未確認 | CWE-77 | Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the /cgi-bin/skk_set.cgi endpoint. The password and new_pwd_confirm POST parameters are |
| CVE-2026-3655 | Deferred | 未確認 | CWE-287 | The OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass in versions 1.8.50 through 1.8.60. This is due to the Firebase verific |
| CVE-2026-3660 | Analyzed | 未確認 | CWE-863 | IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthoriz |
| CVE-2026-36734 | Deferred | 未確認 | CWE-77 | EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with access to the network can submit crafted input to the WLAN configuration functionality. |
| CVE-2026-36738 | Analyzed | 未確認 | CWE-284 | U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. The device exposes a UART interface that lacks authentication, authorization, o |
| CVE-2026-36741 | Analyzed | 未確認 | CWE-77 | U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. The Network Time Protocol (NTP) configuration interface does not properly sanitize use |
| CVE-2026-36742 | Deferred | 未確認 | CWE-276 | Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when battery is disconnected (hidden/debug mode). |
| CVE-2026-3676 | Analyzed | 未確認 | CWE-1284 | IBM Cloud APM, Base Private 8.1.4 and IBM Cloud APM, Advanced Private 8.1.4 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to c |
| CVE-2026-36827 | Deferred | 未確認 | CWE-78 | A command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7. The web management interface invokes the backend helper /usr/sbin/pappiw and passes user-con |
| CVE-2026-36828 | Deferred | 未確認 | CWE-78 | A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7. The CGI component allows authenticated users to exec |
| CVE-2026-36829 | Deferred | 未確認 | CWE-22, CWE-287 | An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7. The server validates session cookies using a filesystem exi |
| CVE-2026-36906 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in iotgateway v.3.0.1 allows a remote attacker to execute arbitrary code via the Log Record Function |
| CVE-2026-3694 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the bt_bb_button shortcode in all versions up to, and including, |
| CVE-2026-36962 | Deferred | 未確認 | CWE-89 | SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potentially gain re |
| CVE-2026-36983 | Analyzed | 未確認 | CWE-77 | D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to comman |
| CVE-2026-3718 | Deferred | 未確認 | CWE-79 | The ManageWP Worker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'MWP-Key-Name' HTTP request header in all versions up to, and including, 4.9.31. This |
| CVE-2026-37266 | Deferred | 未確認 | CWE-98 | An issue in Responsive File Manager Responsive FileManager Version 9.14.0 allows a remote attacker to execute arbitrary code via the force_download.php component |
| CVE-2026-37281 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url param |
| CVE-2026-37428 | Deferred | 未確認 | CWE-89 | qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysDeptMapper.xml file. This vulnerability allows attackers to a |
| CVE-2026-37429 | Deferred | 未確認 | CWE-89 | qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysUserMapper.xml file. This vulnerability allows attackers to a |
| CVE-2026-37430 | Deferred | 未確認 | CWE-434 | An arbitrary file upload vulnerability in the ShopOrderImportController.java component of qihang-wms commit 75c15a allows attackers to execute arbitrary code via uploading a crafte |
| CVE-2026-37431 | Deferred | 未確認 | CWE-89 | Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerabilit |
| CVE-2026-37457 | Modified | 未確認 | CWE-787 | An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denia |
| CVE-2026-37458 | Analyzed | 未確認 | CWE-20 | Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via supplyin |
| CVE-2026-37459 | Deferred | 未確認 | CWE-191, CWE-400 | An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. |
| CVE-2026-37461 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. |
| CVE-2026-37470 | Deferred | 未確認 | CWE-1021 | An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components |
| CVE-2026-37503 | Analyzed | 未確認 | CWE-79 | Cross-Site Scripting (XSS) in V2Board thru 1.7.4. The custom_html field in theme configuration is rendered using Blade unescaped output in public/theme/v2board/dashboard.blade.php. |
| CVE-2026-37504 | Analyzed | 未確認 | CWE-598 | Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers/Server/UniProxyController.php, the server authentication token is accepted via GET p |
| CVE-2026-37505 | Analyzed | 未確認 | CWE-89 | SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin/UserController.php, the sort parameter from user input is passed directly to User::orderBy($s |
| CVE-2026-37525 | Analyzed | 未確認 | CWE-269 | AGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation vulnerability in the supervision Do command. The on_supervision_call function in src/afb-supe |
| CVE-2026-37526 | Analyzed | 未確認 | CWE-284 | AGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute privileged supervision commands (Exit, Do, Sclose, Config, Trace, Debug, Token, slist) wi |
| CVE-2026-37530 | Analyzed | 未確認 | CWE-121 | AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library. The send_diagnostic_request function in uds.c allocates a 6-byte stack buffer (MAX |
| CVE-2026-37531 | Analyzed | 未確認 | CWE-22, CWE-367 | AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-367) in the widget installation flow. The i |
| CVE-2026-37532 | Analyzed | 未確認 | CWE-126 | AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library. In isotp_continue_receive (receive.c:87-89), the payload_length for a Single Fra |
| CVE-2026-37534 | Awaiting Analysis | 未確認 | CWE-191 | Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Transport_Protocol_Data_Transfer,allows attack |
| CVE-2026-37535 | Awaiting Analysis | 未確認 | CWE-125 | openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the ISO-TP Single Frame receive handler, where the 4-bit payload |
| CVE-2026-37536 | Awaiting Analysis | 未確認 | CWE-121 | miaofng/uds-c commit e506334e270d77b20c0bc259ac6c7d8c9b702b7a (2016-10-05) contains a stack buffer overflow in send_diagnostic_request. A 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOA |
| CVE-2026-37537 | Awaiting Analysis | 未確認 | CWE-190 | collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Protocol Data Tr |
| CVE-2026-37538 | Awaiting Analysis | 未確認 | CWE-121 | Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via crafted bus_n |
| CVE-2026-37539 | Deferred | 未確認 | CWE-121 | Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and decoder.cpp in function decodeFrame allowing remote attackers t |
| CVE-2026-37540 | Analyzed | 未確認 | CWE-190 | OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit va |
| CVE-2026-37541 | Analyzed | 未確認 | CWE-121 | Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary data is not properly validated, allowing |
| CVE-2026-37552 | Analyzed | 未確認 | CWE-502 | Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke TCP server (Server.php:87) receives data from a TCP socket, passes it directly to Opis\Clo |
| CVE-2026-37554 | Deferred | 未確認 | CWE-248 | An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service. The vulnerability exists in the GeoNetworking packet processing p |
| CVE-2026-37579 | Deferred | 未確認 | CWE-502 | An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the Cmpp7FDeliverRequestMessageCodec.java component |
| CVE-2026-37630 | Deferred | 未確認 | CWE-94 | An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark function |
| CVE-2026-37709 | Analyzed | 未確認 | CWE-284 | Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attacker to execute arbitrary code via the |
| CVE-2026-37711 | Deferred | 未確認 | CWE-94 | An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/core/actions_addupdatedelete.inc.php |
| CVE-2026-37712 | Deferred | 未確認 | CWE-94 | An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, call_user_ |
| CVE-2026-37713 | Deferred | 未確認 | CWE-94 | An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/core/class/commonobject.class.php. |
| CVE-2026-3772 | Deferred | 未確認 | CWE-352 | The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2. This is due to missing nonce verification in the 'add_ |
| CVE-2026-37978 | Analyzed | 未確認 | CWE-639 | A flaw was found in Keycloak. A low-privilege administrator with the 'view-clients' role can exploit this by invoking the 'evaluate-scopes' Admin API endpoints with an arbitrary us |
| CVE-2026-37979 | Analyzed | 未確認 | CWE-284 | A flaw was found in Keycloak. This access control vulnerability in Keycloak's OpenID Connect (OIDC) token introspection endpoint allows a confidential client to bypass audience res |
| CVE-2026-37981 | Analyzed | 未確認 | CWE-1220 | A flaw was found in Keycloak. A broken access control vulnerability in the Account Resources user lookup endpoint allows a remote authenticated user, who owns at least one User-Man |
| CVE-2026-37982 | Analyzed | 未確認 | CWE-294 | A flaw was found in Keycloak. This authentication vulnerability allows a remote attacker to replay `ExecuteActionsActionToken` tokens within Keycloak's WebAuthn (Web Authentication |
| CVE-2026-3828 | Awaiting Analysis | 未確認 | CWE-78 | Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with vali |
| CVE-2026-3829 | Deferred | 未確認 | CWE-862 | The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data due to missin |
| CVE-2026-38360 | Deferred | 未確認 | CWE-22 | Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py |
| CVE-2026-38361 | Modified | 未確認 | CWE-400, CWE-670 | Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.7.0a2. The chunked-upload handler (dash_uploader/httprequesthandler.py, dash_upl |
| CVE-2026-38422 | Deferred | 未確認 | CWE-121 | Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmota_xdrv_driver/xdrv_10_scripter.ino, |
| CVE-2026-38426 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv_10_scripter.ino, fetch_jpg(), jpg_task.bounda |
| CVE-2026-38427 | Deferred | 未確認 | CWE-122 | An issue in fetch_jpg() in xdrv_10_scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The Content-Length from a JPEG stream is stored |
| CVE-2026-38428 | Analyzed | 未確認 | CWE-89 | Kestra v1.3.3 and before is vulnerable to SQL Injection. The vulnerability occurs because user-controlled input from a GET parameter is directly concatenated into an SQL query with |
| CVE-2026-38429 | Deferred | 未確認 | CWE-611 | OpenCMS v20 and before is vulnerable to XML External Entity (XXE) in the Admin Import DB feature due to insecure XML parsing of user supplied .zip files containing a manifest.xml. |
| CVE-2026-38431 | Analyzed | 未確認 | CWE-94 | ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI). An attacker with permission to create or edit email templates can inject template expressions t |
| CVE-2026-38432 | Analyzed | 未確認 | CWE-79 | ERPNext v15.103.1 and before is vulnerable to Cross Site Scripting (XSS) in the Email Template engine. An attacker with permission to create or edit email templates can inject mali |
| CVE-2026-38566 | Deferred | 未確認 | CWE-352 | HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint. All forms (password change at /profile, candidate deletion at /candidates/delete/<id>, f |
| CVE-2026-38567 | Deferred | 未確認 | CWE-89 | HireFlow v1.2 is vulnerable to SQL injection in the /login and /search endpoints. User-supplied input is concatenated directly into SQL queries without parameterization. An unauthe |
| CVE-2026-38568 | Deferred | 未確認 | CWE-639 | HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/<id> and /interview/<id> endpoints. The route |
| CVE-2026-38569 | Deferred | 未確認 | CWE-79 | HireFlow v1.2 is vulnerable to Cross Site Scripting (XSS) in candidate_detail.html via the Resume or Feedback Comment fields via POST /candidates/add or POST /feedback/add. |
| CVE-2026-38587 | Deferred | 未確認 | CWE-639 | An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticat |
| CVE-2026-38669 | Deferred | 未確認 | CWE-79 | wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog. |
| CVE-2026-38702 | Analyzed | 未確認 | CWE-77 | A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1 |
| CVE-2026-38703 | Analyzed | 未確認 | CWE-77 | A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1 |
| CVE-2026-38704 | Analyzed | 未確認 | CWE-77 | A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V |
| CVE-2026-38707 | Analyzed | 未確認 | CWE-77 | A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0. |
| CVE-2026-38719 | Deferred | 未確認 | CWE-125 | OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format (CPF) parser, specifically in CreateCommonPacketFormatStructure() in source/src/en |
| CVE-2026-38728 | Deferred | 未確認 | CWE-400 | An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtp-stream.js components |
| CVE-2026-38740 | Awaiting Analysis | 未確認 | CWE-319 | Foscam VD1 Video Doorbell before V5.3.13_1072 is vulnerable to Cleartext Transmission of Sensitive Information. The device transmits sensitive Session Description Protocol (SDP), i |
| CVE-2026-38751 | Analyzed | 未確認 | CWE-434 | OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php) |
| CVE-2026-38807 | Deferred | 未確認 | CWE-639 | Insecure Permissions vulnerability in kvf-admin v1.0.0 allows a remote attacker to escalate privileges via the UserController.java component |
| CVE-2026-38808 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in uzy-ssm-mall v1.1.0 allows a remote attacker to obtain sensitive information via the ProductMapper.xml and /OrderUtil.java components |
| CVE-2026-3892 | Deferred | 未確認 | CWE-73 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.4.107. This is due to |
| CVE-2026-38930 | Deferred | 未確認 | CWE-89 | OpenRapid RapidCMS v1.3.1 was discovered to contain an authentication bypass in the /template/default/menu.php component. This vulnerability is exploited via injecting a crafted SQ |
| CVE-2026-38931 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff (Latest as of 2026-02-27) via injectin |
| CVE-2026-38945 | Awaiting Analysis | 未確認 | CWE-77 | Command injection in Raynet rvia version 12.6 Update 8 and previous versions allows adversaries to execute arbitrary code via a crafted path that matches the improperly terminated |
| CVE-2026-38947 | Deferred | 未確認 | CWE-79 | FluentCMS 1.2.3 is vulnerable to Cross Site Scripting (XSS) in TextHTML plugin. |
| CVE-2026-3895 | Deferred | 未確認 | CWE-862 | The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lvca_admin_ajax` AJAX action in all versions up to, and incl |
| CVE-2026-3896 | Deferred | 未確認 | CWE-862 | The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lsow_admin_ajax` AJAX action in all versions up to, and including, 3.9.2 |
| CVE-2026-3897 | Deferred | 未確認 | CWE-862 | The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `labb_admin_ajax` AJAX action in all versions up to, and including, |
| CVE-2026-39047 | Awaiting Analysis | 未確認 | CWE-121 | Buffer Overflow vulnerability in EPSON L14150 FL27PB allows a remote attacker to execute arbitrary code via the RAW Printing Service (JetDirect) on TCP port 9100 |
| CVE-2026-39052 | Deferred | 未確認 | CWE-94 | Oinone Pamirs 7.0.0 contains a code execution vulnerability via ScriptRunner. The method ScriptRunner.run(String expression, String type, Map<String, Object> context) evaluates att |
| CVE-2026-39053 | Deferred | 未確認 | CWE-611 | Oinone Pamirs 7.0.0 contains an XML External Entity (XXE) issue in its XStream-based XML parsing logic. When attacker-controlled XML is passed to framework parsing entry points suc |
| CVE-2026-39054 | Deferred | 未確認 | CWE-77 | Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands. The method starts a shell process and writes attacker-controlled command strings di |
| CVE-2026-39079 | Deferred | 未確認 | CWE-200 | An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and /modules/ups |
| CVE-2026-39103 | Analyzed | 未確認 | CWE-122 | Buffer Overflow vulnerability in GPAC before commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702 allows an attacker to cause a denial of service via the src/scenegraph/svg_attributes. |
| CVE-2026-39229 | Deferred | 未確認 | CWE-89 | Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can exploit this through the |
| CVE-2026-39250 | Deferred | 未確認 | CWE-284 | An authorization vulnerability exists in Innoshop 0.6.0. After logging into the frontend, an attacker can directly access backend application interfaces, leading to further dangero |
| CVE-2026-39276 | Analyzed | 未確認 | CWE-22 | The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZI |
| CVE-2026-39292 | Deferred | 未確認 | CWE-434 | Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows remote attackers to upload arbitrary fil |
| CVE-2026-39309 | Deferred | 未確認 | CWE-290, CWE-451 | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuratio |
| CVE-2026-39310 | Deferred | 未確認 | CWE-284, CWE-306 | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Clipper API in Triliu |
| CVE-2026-39311 | Deferred | 未確認 | CWE-79, CWE-94 | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Versions 0.102.1 and prior contain a critical security f |
| CVE-2026-39352 | Deferred | 未確認 | CWE-22 | Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary File Read vulnerability via Path Traversal. The issue is resol |
| CVE-2026-39358 | Deferred | 未確認 | CWE-89 | CubeCart is an ecommerce software solution. Prior to 6.6.0, Authenticated Time-Based Blind SQL Injection vulnerabilities were identified in the sorting parameters (sort[price], sor |
| CVE-2026-39383 | Analyzed | 未確認 | CWE-918 | Gotenberg is an API-based document conversion tool. In version 8.29.1, an unauthenticated attacker with network access can force the server to make outbound HTTP POST requests to a |
| CVE-2026-39402 | Analyzed | 未確認 | CWE-863 | lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete OV |
| CVE-2026-39405 | Deferred | 未確認 | CWE-22 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.50.0 and below, a user with course editing role could upload a |
| CVE-2026-39428 | Deferred | 未確認 | CWE-79 | CubeCart is an ecommerce software solution. Prior to 6.6.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in CubeCart v6.x. An attacker with administrative privileges ca |
| CVE-2026-39432 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Timetics: from n/a through 1. |
| CVE-2026-39436 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in bgermann CformsII allows Cross Site Request Forgery. This issue affects CformsII: from n/a through 15.1.3. |
| CVE-2026-39455 | Analyzed | 未確認 | CWE-772 | When the BIG-IP Configuration utility is configured to use Lightweight Directory Access Protocol (LDAP) authentication, undisclosed traffic can cause the httpd process to exhaust t |
| CVE-2026-39458 | Modified | 未確認 | CWE-824 | When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orchestrator, Advanced WAF DoS protection), undisclosed traffic can cause the Traffic |
| CVE-2026-39459 | Analyzed | 未確認 | CWE-272 | A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged, authenticated attacker with at least the Manager role can create configuration objects |
| CVE-2026-39461 | Analyzed | 未確認 | CWE-121 | libcasper(3) communicates with helper processes via UNIX domain sockets, and uses the select(2) system call to wait for data to become available. However, it does not verify that |
| CVE-2026-3953 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gosoft Software Industry and Trade Ltd. Co. Proticaret E-Commerce allows Cross |
| CVE-2026-39531 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injection. This issue affe |
| CVE-2026-39593 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HAPPY: from n/a through 1.0.10. |
| CVE-2026-39642 | Deferred | 未確認 | CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code Injection. This issue affects Nyla: from n/a through 1.7. |
| CVE-2026-39655 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a |
| CVE-2026-39661 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magentech SW Core allows PHP Local File Inclusion. This is |
| CVE-2026-39803 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion. The chunked clause of ' |
| CVE-2026-39804 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion when WebSocket permessage |
| CVE-2026-39805 | Deferred | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smuggling via duplicate Content-Length headers. 'Elixir.Bandit.Headers':get_conten |
| CVE-2026-39806 | Analyzed | 未確認 | CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel bandit allows unauthenticated remote denial of service via worker process exhaustion. 'Elixir.Bandi |
| CVE-2026-39807 | Deferred | 未確認 | CWE-807 | Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows unauthenticated transport-state spoofing on plaintext HTTP connections. 'Elixir.Bandit.P |
| CVE-2026-39816 | Modified | 未確認 | CWE-862 | The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The Ti |
| CVE-2026-39817 | Analyzed | 未確認 | CWE-787 | The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file |
| CVE-2026-39819 | Analyzed | 未確認 | CWE-59 | The "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp"). An attacker with access to the temporary directory can crea |
| CVE-2026-39820 | Modified | 未確認 | CWE-606, CWE-770 | Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations. |
| CVE-2026-39821 | Modified | 未確認 | CWE-1289 | The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns th |
| CVE-2026-39823 | Analyzed | 未確認 | CWE-79 | CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces arou |
| CVE-2026-39824 | Awaiting Analysis | 未確認 | CWE-190 | NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it return |
| CVE-2026-39825 | Analyzed | 未確認 | ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, Re | |
| CVE-2026-39826 | Analyzed | 未確認 | CWE-116 | If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would i |
| CVE-2026-39827 | Analyzed | 未確認 | CWE-924 | An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting a |
| CVE-2026-39828 | Modified | 未確認 | CWE-281, CWE-295 | When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restri |
| CVE-2026-39829 | Modified | 未確認 | CWE-1284, CWE-347 | The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minute |
| CVE-2026-39830 | Modified | 未確認 | CWE-119, CWE-772 | A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by |
| CVE-2026-39831 | Analyzed | 未確認 | CWE-862 | The Verify() method for FIDO/U2F security key types ([email protected], [email protected]) did not check the User Presence flag. Signatures generated with |
| CVE-2026-39832 | Modified | 未確認 | CWE-281, CWE-502 | When adding a key to a remote agent constraint extensions such as [email protected] were not serialized in the request. Destination restrictions were silently st |
| CVE-2026-39833 | Modified | 未確認 | CWE-862 | The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt |
| CVE-2026-39834 | Analyzed | 未確認 | CWE-190 | When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, |
| CVE-2026-39835 | Modified | 未確認 | CWE-295, CWE-476 | SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChe |
| CVE-2026-39836 | Analyzed | 未確認 | CWE-476 | The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0). |
| CVE-2026-39849 | Analyzed | 未確認 | CWE-93 | Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. In versions before 6.6.1, the `dns.interface` configuration field in Pi-hole FTL acce |
| CVE-2026-3985 | Deferred | 未確認 | CWE-89 | The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkout_uuid' parameter in all versions up to, and |
| CVE-2026-39850 | Deferred | 未確認 | CWE-20, CWE-98 | Yii 2 is a PHP application framework. Versions 2.0.54 and prior contain flawed logic in the core view rendering method View::renderPhpFile() that leads to Local File Inclusion. The |
| CVE-2026-39852 | Modified | 未確認 | CWE-551, CWE-863 | Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and 3.35.2, a path normalization inconsiste |
| CVE-2026-39869 | Analyzed | 未確認 | CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, mac |
| CVE-2026-39870 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. Processing a maliciously crafted image ma |
| CVE-2026-39871 | Analyzed | 未確認 | CWE-552 | A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to observe unprotect |
| CVE-2026-39929 | Awaiting Analysis | 未確認 | CWE-125, CWE-754 | Lakeside SysTrack Agent versions prior to 11.2.1.28, 11.3.0.38, 11.4.0.24, 11.5.0.15 contain an out-of-bounds read vulnerability in the Command ID 30 UDP packet handler that allows |
| CVE-2026-39960 | Deferred | 未確認 | CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and below contain flawed logic that causes improper escaping of a textarea custom field's contents in |
| CVE-2026-39964 | Deferred | 未確認 | CWE-79 | TypeBot is a chatbot builder tool. In versions prior to 3.16.0, the Typebot viewer (packages/embeds/js) renders anchor tags from rich text bubble content without filtering the java |
| CVE-2026-39965 | Deferred | 未確認 | CWE-918 | TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain an SSRF via Open Redirect Bypass as the HTTP Request block and Code block validate the initial request URL via |
| CVE-2026-39966 | Deferred | 未確認 | CWE-863 | TypeBot is a chatbot builder tool. In versions 3.15.2, the getLinkedTypebots API endpoint returns full bot definitions to any authenticated user who references a target bot ID in a |
| CVE-2026-39967 | Deferred | 未確認 | CWE-639, CWE-862 | TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the bot engine's the findResult query does not filter results by typebotId, allowing an authenticated user to load |
| CVE-2026-39968 | Deferred | 未確認 | CWE-284, CWE-522, CWE-639 | TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 ("Credential Theft via Client-Side Script Execution and API Authorization Bypass") |
| CVE-2026-39969 | Deferred | 未確認 | CWE-287, CWE-345 | TypeBot is a chatbot builder tool. In versions 3.16.0 and prior, the WhatsApp Cloud API webhook endpoint (POST /v1/workspaces/{workspaceId}/whatsapp/{credentialsId}/webhook) does n |
| CVE-2026-39970 | Deferred | 未確認 | CWE-79 | TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain a critical stored XSS vulnerability in the app.typebot.io profile picture upload form. The application fails to |
| CVE-2026-40001 | Awaiting Analysis | 未確認 | CWE-269 | There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code execution, privilege escalat |
| CVE-2026-40003 | Analyzed | 未確認 | CWE-787 | ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to |
| CVE-2026-40004 | Analyzed | 未確認 | CWE-427 | There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges. |
| CVE-2026-40010 | Modified | 未確認 | CWE-384 | Missing invocation of Servlet http web request method changeSessionId after session binding can be exploited for a session fixation attack in Apache Wicket. This issue affects Apa |
| CVE-2026-40016 | Analyzed | 未確認 | CWE-400 | Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit. Attacker |
| CVE-2026-40020 | Analyzed | 未確認 | CWE-284 | Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no. This causes folders to be spammed to all users |
| CVE-2026-40033 | Modified | 未確認 | CWE-122, CWE-787 | FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap memory. The vulnerability occurs |
| CVE-2026-40034 | Deferred | 未確認 | CWE-77 | gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInMo |
| CVE-2026-40060 | Analyzed | 未確認 | CWE-252 | When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which |
| CVE-2026-40061 | Analyzed | 未確認 | CWE-77 | When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with the Resour |
| CVE-2026-40067 | Analyzed | 未確認 | CWE-120 | When a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the apmd process to terminate. Note: Software versions which have reached End of |
| CVE-2026-40068 | Analyzed | 未確認 | CWE-20, CWE-77 | In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents. An attacker could craft |
| CVE-2026-40075 | Analyzed | 未確認 | CWE-22 | OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the `/openmrs/moduleResources/{moduleid}` |
| CVE-2026-40076 | Analyzed | 未確認 | CWE-22 | OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the module upload endpoint at POST `/openm |
| CVE-2026-40092 | Deferred | 未確認 | CWE-252 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and below, a malicious network peer can crash any Nimiq full node by publishin |
| CVE-2026-40094 | Deferred | 未確認 | CWE-754 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and prior, network-libp2p discovery accepts signed PeerContact updates from un |
| CVE-2026-40102 | Analyzed | 未確認 | CWE-943 | Plane is an open-source project management tool. In versions 1.3.0 and below, SavedAnalyticEndpoint passes the user-controlled segment query parameter directly to a Django F() expr |
| CVE-2026-40110 | Modified | 未確認 | CWE-625, CWE-777 | Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against |
| CVE-2026-40127 | Awaiting Analysis | 未確認 | CWE-639 | OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log cont |
| CVE-2026-40129 | Awaiting Analysis | 未確認 | CWE-94 | Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticated attacker could send specially crafted inputs to the appli |
| CVE-2026-40131 | Awaiting Analysis | 未確認 | CWE-89 | SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically constructed using user input without proper parameterization or prepared statements |
| CVE-2026-40132 | Awaiting Analysis | 未確認 | CWE-862 | Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizard in Business Server Pages), an authenticated attacker could access information that they |
| CVE-2026-40133 | Awaiting Analysis | 未確認 | CWE-862 | Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, result |
| CVE-2026-40134 | Awaiting Analysis | 未確認 | CWE-862 | Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users could invoke a remote-enabled function module to perform ta |
| CVE-2026-40135 | Analyzed | 未確認 | CWE-77 | An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated attacker with administrative access to |
| CVE-2026-40136 | Awaiting Analysis | 未確認 | CWE-404 | SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminating their sessions temporarily preventing access. However, the application itself |
| CVE-2026-40137 | Awaiting Analysis | 未確認 | CWE-79 | SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker?controlled s |
| CVE-2026-40165 | Deferred | 未確認 | CWE-287, CWE-436, CWE-91 | authentik is an open-source identity provider. Versions 2025.12.4 and prior, and versions 2026.2.0-rc1 through 2026.2.2 were vulnerable to Authentication Bypass through SAML NameID |
| CVE-2026-40166 | Deferred | 未確認 | CWE-200, CWE-863 | authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2, authenticated non-admin users with at least one OAuth2 access token |
| CVE-2026-40171 | Awaiting Analysis | 未確認 | CWE-79 | In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packa |
| CVE-2026-40172 | Deferred | 未確認 | CWE-269 | authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2, the PATCH /api/v3/core/users/{pk}/ API allows a caller with change_ |
| CVE-2026-40174 | Deferred | 未確認 | CWE-352 | Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the cUsers.updateAddress function does not properly validate anti-CSRF tokens for user |
| CVE-2026-40195 | Analyzed | 未確認 | CWE-476 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage bucket import logic allows an authenticated user with acc |
| CVE-2026-40197 | Analyzed | 未確認 | CWE-476 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume import logic allows an authenticated user with acc |
| CVE-2026-40201 | Deferred | 未確認 | CWE-79 | @diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file. |
| CVE-2026-40213 | Awaiting Analysis | 未確認 | CWE-863 | OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keysto |
| CVE-2026-40214 | Awaiting Analysis | 未確認 | CWE-282 | In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer. The project_id column in the database is never populated (NULL |
| CVE-2026-4024 | Deferred | 未確認 | CWE-862 | The Royal Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `wpr_update_form_action_meta` AJAX a |
| CVE-2026-40243 | Analyzed | 未確認 | CWE-295 | Incus is a system container and virtual machine manager. In versions before 7.0.0, broken TLS validation logic in the OVN database connection logic can allow connections to an atta |
| CVE-2026-40251 | Analyzed | 未確認 | CWE-129 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume import logic allows an authenticated user with acc |
| CVE-2026-40280 | Analyzed | 未確認 | CWE-918 | Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list |
| CVE-2026-40281 | Analyzed | 未確認 | CWE-88 | Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 and earlier, the metadata write endpoint validates metadata keys for control characters but leaves met |
| CVE-2026-4029 | Deferred | 未確認 | CWE-862 | The Database Backup for WordPress plugin for WordPress is vulnerable to unauthorized database export in all versions up to, and including, 2.5.2. This is due to the plugin not prop |
| CVE-2026-40295 | Analyzed | 未確認 | CWE-601 | Devise is an authentication solution for Rails based on Warden. In versions 5.0.3 and below, when the Timeoutable module is enabled in Devise, the FailureApp#redirect_url method re |
| CVE-2026-40296 | Analyzed | 未確認 | CWE-79 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML writer skips htmlspecialchars escaping when a cell's formatted value differs from the origi |
| CVE-2026-4030 | Deferred | 未確認 | CWE-862 | The Database Backup for WordPress plugin for WordPress is vulnerable to unauthorized arbitrary file read and deletion in all versions up to, and including, 2.5.2. This is due to th |
| CVE-2026-40300 | Analyzed | 未確認 | CWE-284 | Zulip is an open-source team collaboration tool. Prior to 12.0, With message_edit_history_visibility_policy set to "moves", /api/v1/messages/{id}/history still returns historical c |
| CVE-2026-40309 | Deferred | 未確認 | CWE-352 | Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the cTrash.empty function does not validate anti-CSRF tokens for trash management reque |
| CVE-2026-4031 | Deferred | 未確認 | CWE-862 | The Database Backup for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.5.2. This is due to the plugin not restricting |
| CVE-2026-40325 | Deferred | 未確認 | CWE-352 | Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the `cTrash.restore` function does not properly validate anti-CSRF tokens for content r |
| CVE-2026-40326 | Deferred | 未確認 | CWE-352 | Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the createBundle method in `csettings.cfc` does not properly validate anti-CSRF tokens |
| CVE-2026-40327 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-40328 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-40329 | Deferred | 未確認 | CWE-89 | Masa CMS is an open source content management system. In versions 7.5.2 and earlier, a SQL injection vulnerability exists in the beanFeed.cfc component within the getQuery function |
| CVE-2026-40330 | Deferred | 未確認 | CWE-89 | Masa CMS is an open source content management system. In versions 7.2.0 through 7.2.9, 7.3.0 through 7.3.14, 7.4.0 through 7.4.9, and 7.5.0 through 7.5.2, a SQL injection vulnerabi |
| CVE-2026-40331 | Deferred | 未確認 | CWE-89 | Masa CMS is an open source content management system. In versions 7.2.0 through 7.2.9, 7.3.0 through 7.3.14, 7.4.0 through 7.4.9, and 7.5.0 through 7.5.2, the unauthenticated JSON |
| CVE-2026-40332 | Deferred | 未確認 | CWE-601 | Masa CMS is affected by an Open Redirect vulnerability due to improper handling of scheme-relative URLs. The application incorrectly interprets paths beginning with double slashes |
| CVE-2026-40357 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-40358 | Modified | 未確認 | CWE-416 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-40359 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-40360 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-40361 | Modified | 未確認 | CWE-416 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-40362 | Modified | 未確認 | CWE-122 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-40363 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-40364 | Analyzed | 未確認 | CWE-122, CWE-843, CWE-908 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-40365 | Modified | 未確認 | CWE-1220 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-40366 | Modified | 未確認 | CWE-416 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-40367 | Modified | 未確認 | CWE-822 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-40368 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-40369 | Modified | 未確認 | CWE-822 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40370 | Analyzed | 未確認 | CWE-610, CWE-73 | External control of file name or path in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-40374 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network. |
| CVE-2026-40377 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40379 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-40380 | Analyzed | 未確認 | CWE-122, CWE-125, CWE-197 | Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack. |
| CVE-2026-40381 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40382 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40383 | Analyzed | 未確認 | CWE-22 | An improper validation of user-supplied input leads to a local file inclusion vulnerability. |
| CVE-2026-40384 | Analyzed | 未確認 | CWE-22 | An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability. |
| CVE-2026-40397 | Modified | 未確認 | CWE-191 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40398 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40399 | Modified | 未確認 | CWE-121 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40401 | Modified | 未確認 | CWE-476 | Windows TCP/IP Denial of Service Vulnerability |
| CVE-2026-40402 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-40403 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally. |
| CVE-2026-40405 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
| CVE-2026-40406 | Analyzed | 未確認 | CWE-416 | Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-40407 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40408 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40410 | Analyzed | 未確認 | CWE-416 | Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40411 | Analyzed | 未確認 | CWE-20 | Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network. |
| CVE-2026-40412 | Analyzed | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-40413 | Modified | 未確認 | CWE-476 | Windows TCP/IP Denial of Service Vulnerability |
| CVE-2026-40414 | Modified | 未確認 | CWE-476 | Windows TCP/IP Denial of Service Vulnerability |
| CVE-2026-40415 | Analyzed | 未確認 | CWE-416 | Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
| CVE-2026-40416 | Analyzed | 未確認 | CWE-451 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-40417 | Analyzed | 未確認 | CWE-1390 | Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40418 | Modified | 未確認 | CWE-416 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40419 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40420 | Modified | 未確認 | CWE-284 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40421 | Modified | 未確認 | CWE-73 | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-40423 | Analyzed | 未確認 | CWE-770 | When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reac |
| CVE-2026-40425 | Analyzed | 未確認 | CWE-552 | The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root p |
| CVE-2026-40435 | Analyzed | 未確認 | CWE-420 | When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blocked addresses. Note: Software versions which have reached |
| CVE-2026-40460 | Analyzed | 未確認 | CWE-290 | When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or |
| CVE-2026-40462 | Analyzed | 未確認 | CWE-732 | Incorrect permission assignment vulnerabilities exist in iControl REST and TMOS shell (tmsh) undisclosed command which may allow an authenticated attacker to view sensitive informa |
| CVE-2026-4051 | Analyzed | 未確認 | CWE-749 | IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properl |
| CVE-2026-40510 | Analyzed | 未確認 | CWE-121 | OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/card-piv.c that allows physically presen |
| CVE-2026-40528 | Analyzed | 未確認 | CWE-121, CWE-122 | OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attacke |
| CVE-2026-4053 | Analyzed | 未確認 | CWE-672 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file at |
| CVE-2026-4054 | Analyzed | 未確認 | CWE-754 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to enact client-sid |
| CVE-2026-4055 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.5.x <= 11.5.1 fail to validate team-level run_create permission against the target team when creating a playbook run which allows an authenticated team membe |
| CVE-2026-40561 | Modified | 未確認 | CWE-444 | Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chun |
| CVE-2026-40562 | Analyzed | 未確認 | CWE-444 | Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chun |
| CVE-2026-40563 | Modified | 未確認 | CWE-94 | Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query str |
| CVE-2026-40564 | Modified | 未確認 | CWE-552, CWE-918 | Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently |
| CVE-2026-40596 | Deferred | 未確認 | CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.11.0 through 2.28.1 allow any authenticated user to inject arbitrary HTML by updating their account's font |
| CVE-2026-40597 | Deferred | 未確認 | CWE-358, CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, given any pre-existing XSS / HTML injection vulnerability, an attacker can bypass the C |
| CVE-2026-40598 | Deferred | 未確認 | CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, improper escaping of the redirection page (retrieved from the request's Referer header) |
| CVE-2026-4060 | Deferred | 未確認 | CWE-89 | The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.18. This is due to insufficient es |
| CVE-2026-40607 | Deferred | 未確認 | CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.11.0 through 2.28.1, a Stored XSS vulnerability is caused by incorrect escaping of a saved filter's own |
| CVE-2026-4061 | Deferred | 未確認 | CWE-89 | The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'map_post_type' parameter in all versions up to, and including, 1.13.18. This is due to the `S |
| CVE-2026-40610 | Analyzed | 未確認 | CWE-59 | BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.38 and prior, the build packaging workflow follows attack |
| CVE-2026-40612 | Analyzed | 未確認 | CWE-674 | jq is a command-line JSON processor. In 1.8.1 and earlier, jv_contains recurses into nested arrays/objects with no depth limit. With a sufficiently nested input structure (built pr |
| CVE-2026-40618 | Analyzed | 未確認 | CWE-131 | When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel QuickAssist Technology (QAT) or on BIG-IP hardware platforms with the database va |
| CVE-2026-4062 | Deferred | 未確認 | CWE-89 | The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'object_ids' and 'exclude_object_ids' parameters in all versions up to, and including, 1.13.18 |
| CVE-2026-40621 | Deferred | 未確認 | CWE-288 | ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication. |
| CVE-2026-40622 | Analyzed | 未確認 | CWE-346 | NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain window by up to on |
| CVE-2026-40629 | Analyzed | 未確認 | CWE-770 | When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections. Note: Software versions which hav |
| CVE-2026-40631 | Analyzed | 未確認 | CWE-552 | An authenticated attacker with the Resource Administrator or Administrator role can modify configuration objects through iControl SOAP resulting in privilege escalation. Note: Sof |
| CVE-2026-40636 | Analyzed | 未確認 | CWE-798 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with l |
| CVE-2026-40638 | Analyzed | 未確認 | CWE-250 | Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potenti |
| CVE-2026-40682 | Modified | 未確認 | CWE-611 | XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The Dictio |
| CVE-2026-40698 | Analyzed | 未確認 | CWE-77 | A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can create SNMP configuration ob |
| CVE-2026-40699 | Analyzed | 未確認 | CWE-643 | A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information. |
| CVE-2026-4070 | Deferred | 未確認 | CWE-352 | The Alfie – Feed Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing nonce validation on the |
| CVE-2026-40701 | Analyzed | 未確認 | CWE-416 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directiv |
| CVE-2026-40703 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support |
| CVE-2026-40797 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saleswonder LLC WebinarIgnition allows Blind SQL Injection. This issue affect |
| CVE-2026-40810 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint due to improper neutralization of special elements in a SQL S |
| CVE-2026-40811 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the ssoabstractservice due to improper neutralization of special elements in a SQL |
| CVE-2026-40812 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions sn parameter due to improper neutralization of special |
| CVE-2026-40813 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions tagid parameter due to improper neutralization of speci |
| CVE-2026-40814 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files _mb24confi_getTagAlarm function due to improper neutralizatio |
| CVE-2026-40815 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24api_getUserAccount function due to improper neutralization of special elem |
| CVE-2026-40816 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24alarm.php files _mb24confi_getTagAlarm function due to improper neutralizat |
| CVE-2026-40817 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in |
| CVE-2026-40818 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24confi_getDevice function due to improper neutralization of special element |
| CVE-2026-40819 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync_data24 task due to improper neutralization of special elements in a SQL SE |
| CVE-2026-40821 | Deferred | 未確認 | CWE-89 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a |
| CVE-2026-40822 | Deferred | 未確認 | CWE-89 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a |
| CVE-2026-40823 | Deferred | 未確認 | CWE-89 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a |
| CVE-2026-40824 | Deferred | 未確認 | CWE-89 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view userid parameter due to improper neutralization of special el |
| CVE-2026-40825 | Deferred | 未確認 | CWE-89 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view devices parameter due to improper neutralization of special e |
| CVE-2026-40826 | Deferred | 未確認 | CWE-89 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dsgvo_contracts view due to improper neutralization of special elements in a SQL |
| CVE-2026-40827 | Deferred | 未確認 | CWE-89 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _RemoveRequest function due to improper neutralization of special elements in a |
| CVE-2026-40828 | Deferred | 未確認 | CWE-89 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DeleteSysLogEntry function due to improper neutralization of special elements in |
| CVE-2026-40829 | Deferred | 未確認 | CWE-89 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the view.html.php files UpdateParam function due to improper neutralization of speci |
| CVE-2026-40830 | Deferred | 未確認 | CWE-89 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the admin.mbnetj.php files UpdateParam function due to improper neutralization of sp |
| CVE-2026-40831 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the Easy View due to improper neutralization of special elements in a SQL SELECT com |
| CVE-2026-40832 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDevicegroups function due to improper neutralization of special elements in a |
| CVE-2026-40833 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash.php files saveDashboardLayout function due to improper neutralization of sp |
| CVE-2026-40834 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash_layout.php files saveDashboardLayout function due to improper neutralizatio |
| CVE-2026-40835 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements i |
| CVE-2026-40836 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the inmessage model due to improper neutralization of special elements in a SQL DELE |
| CVE-2026-40837 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectScalings function due to improper neutralization of special elements i |
| CVE-2026-40838 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDeviceScalings function due to improper neutralization of special elements in |
| CVE-2026-40839 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings function due to improper neutralization of special elements |
| CVE-2026-40840 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the VerifyCreateLicences function due to improper neutralization of special elements |
| CVE-2026-40841 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags function due to improper neutralization of special elements in a |
| CVE-2026-40842 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getWidgetTags function due to improper neutralization of special elements in a S |
| CVE-2026-40843 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the alarming view due to improper neutralization of special elements in a SQL SELECT |
| CVE-2026-40844 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due to improper neutralization of special elements in a SQL SELEC |
| CVE-2026-40845 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuration view due to improper neutralization of special elements in |
| CVE-2026-40846 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system view due to improper neutralization of special elements in a SQL SELECT c |
| CVE-2026-40847 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system_tag view due to improper neutralization of special elements in a SQL SELE |
| CVE-2026-40848 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to improper neutralization of special elements in a SQL SELECT comm |
| CVE-2026-40849 | Deferred | 未確認 | CWE-89 | An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile view due to improper neutralization of special elements in a S |
| CVE-2026-40850 | Deferred | 未確認 | CWE-89 | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountData function due to improper neutralization of special elements in a |
| CVE-2026-40851 | Deferred | 未確認 | CWE-1287 | A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confiden |
| CVE-2026-40852 | Deferred | 未確認 | CWE-78 | A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value |
| CVE-2026-40863 | Analyzed | 未確認 | CWE-770 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0, the SpreadsheetML XML reader (Reader\Xml) does no |
| CVE-2026-40864 | Analyzed | 未確認 | CWE-352 | JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection (updated in 4.1.0) inappropriately tr |
| CVE-2026-40893 | Analyzed | 未確認 | CWE-184, CWE-73 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg only checks if the tag is exactly FileName, so System:FileName slips right through and ExifToo |
| CVE-2026-40902 | Analyzed | 未確認 | CWE-770 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0, the XLSX reader's ColumnAndRowAttributes::readRow |
| CVE-2026-40914 | Modified | 未確認 | CWE-863 | A vulnerability exists in Apache Artemis whereby an application using the STOMP protocol with security credentials that grant either the consume or send permission on an address ca |
| CVE-2026-4093 | Analyzed | 未確認 | CWE-79 | In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline. Vector A (token display templates): When the Token module is e |
| CVE-2026-40934 | Analyzed | 未確認 | CWE-613 | Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at ~/.local |
| CVE-2026-4094 | Deferred | 未確認 | CWE-862 | The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'admin_head' function |
| CVE-2026-40981 | Modified | 未確認 | CWE-1220, CWE-639 | When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP |
| CVE-2026-40982 | Modified | 未確認 | CWE-22 | Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request us |
| CVE-2026-4100 | Deferred | 未確認 | CWE-862 | The Paid Memberships Pro plugin for WordPress is vulnerable to unauthorized modification and disruption of Stripe webhook configuration in all versions up to, and including, 3.6.5. |
| CVE-2026-41002 | Analyzed | 未確認 | CWE-367 | The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTO |
| CVE-2026-41004 | Analyzed | 未確認 | CWE-532 | When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 |
| CVE-2026-41009 | Analyzed | 未確認 | CWE-22 | When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log (line 332-339) reads response['value'][ |
| CVE-2026-41018 | Analyzed | 未確認 | CWE-532 | The Elasticsearch logging provider, when configured with a `host` URL that embeds credentials (for example `https://user:[email protected]:9200`), wrote the full host URL |
| CVE-2026-41050 | Analyzed | 未確認 | CWE-863 | Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets fro |
| CVE-2026-41051 | Awaiting Analysis | 未確認 | CWE-367 | csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories. |
| CVE-2026-41054 | Awaiting Analysis | 未確認 | CWE-305 | In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting |
| CVE-2026-41069 | Analyzed | 未確認 | CWE-125, CWE-476 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file can trigger an out-of-bounds read in core sequence parsing |
| CVE-2026-41070 | Deferred | 未確認 | CWE-287 | openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows. From version 1.26.3 to before version 1.27.3 |
| CVE-2026-41071 | Analyzed | 未確認 | CWE-125 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares more samples than actually exist |
| CVE-2026-41073 | Deferred | 未確認 | CWE-1236 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10 and 6.0.0 through 6.0.2 contain a spreadsheet (CSV/formula) injection vulnerabilit |
| CVE-2026-41074 | Deferred | 未確認 | CWE-352 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 through 6.0.2 contain a Cross-Site Request Forgery (CSRF) vulnerability. An attacker who can |
| CVE-2026-41075 | Deferred | 未確認 | CWE-89 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticat |
| CVE-2026-41076 | Deferred | 未確認 | CWE-287 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.9 and prior in addition to 6.0.0 through 6.0.2 contain an authentication bypass vulnerability |
| CVE-2026-41085 | Awaiting Analysis | 未確認 | CWE-269 | Thermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability that may allow an authenticated user with limited access privileges to gain unauth |
| CVE-2026-41086 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-41088 | Modified | 未確認 | CWE-73 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-41089 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. |
| CVE-2026-41090 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-41091 | Analyzed | 掲載 | CWE-59 | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
| CVE-2026-41094 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network. |
| CVE-2026-41095 | Analyzed | 未確認 | CWE-416 | Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally. |
| CVE-2026-41096 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-41097 | Analyzed | 未確認 | CWE-1329 | Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-41100 | Analyzed | 未確認 | CWE-284 | Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally. |
| CVE-2026-41101 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. |
| CVE-2026-41102 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally. |
| CVE-2026-41103 | Analyzed | 未確認 | CWE-303 | Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-41104 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-41105 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-41107 | Analyzed | 未確認 | CWE-610, CWE-73 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-41109 | Analyzed | 未確認 | CWE-74 | Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a s |
| CVE-2026-41119 | Awaiting Analysis | 未確認 | CWE-295 | Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this |
| CVE-2026-41125 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 G |
| CVE-2026-41132 | Analyzed | 未確認 | CWE-295 | CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the configured SMTP server may be spoofed with any certifi |
| CVE-2026-41139 | Modified | 未確認 | CWE-915, CWE-94 | Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be executed via the expression parser of mat |
| CVE-2026-41141 | Deferred | 未確認 | CWE-639 | EspoCRM is an open source customer relationship management application. Prior to 9.3.5, the POST /api/v1/EmailTemplate/:id/prepare endpoint accepts an emailAddress parameter and re |
| CVE-2026-41142 | Modified | 未確認 | CWE-190 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9 |
| CVE-2026-41143 | Deferred | 未確認 | CWE-89 | YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php at line 704. T |
| CVE-2026-41147 | Deferred | 未確認 | CWE-79 | NukeViet CMS is a multi Content Management System. Versions 4.5.07 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability caused by insufficient server-side input sani |
| CVE-2026-41148 | Deferred | 未確認 | CWE-94 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5 and prior, in addition to 11.0.0-alpha.1 through 11.12.0 are |
| CVE-2026-41149 | Deferred | 未確認 | CWE-94 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5 and earlier, as well as 11.0.0-alpha.1 through 11.14.0, are |
| CVE-2026-41150 | Analyzed | 未確認 | CWE-835 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, there is a denial-of-service attack when render |
| CVE-2026-41159 | Modified | 未確認 | CWE-94 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, Mermaid's default configuration allows injecti |
| CVE-2026-41160 | Deferred | 未確認 | CWE-284, CWE-639, CWE-862 | EspoCRM is an open source customer relationship management application. Prior to 9.3.5, a business logic flaw (Broken Access Control) in EspoCRM 9.3.3 allows low-privileged users t |
| CVE-2026-41161 | Analyzed | 未確認 | CWE-208 | Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.2.0, the /api/auth/login endpoint contains a logic flaw t |
| CVE-2026-41163 | Deferred | 未確認 | CWE-269 | bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to atta |
| CVE-2026-41164 | Deferred | 未確認 | CWE-345 | nuts-node is the reference implementation of the Nuts specification. Prior to 6.2.3 and 5.4.31, the v1 access token introspection endpoint (/auth/v1/introspect_access_token) accept |
| CVE-2026-41181 | Analyzed | 未確認 | CWE-201 | Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.44, 3.6.15, and 3.7.0-rc.3, there is an information disclosure vulnerability in Traefik's errors (custom error pag |
| CVE-2026-41184 | Analyzed | 未確認 | CWE-532 | In Calico, the install-cni init container logs the rendered CNI configuration to standard output. When the configuration template uses the __SERVICEACCOUNT_TOKEN__ placeholder (Can |
| CVE-2026-41185 | Analyzed | 未確認 | CWE-532 | When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin |
| CVE-2026-41195 | Deferred | 未確認 | CWE-918 | mosparo is the modern solution to protect your online forms from spam. Prior to 1.4.13, the automatic rule package source URL feature allows a project member with the editor role t |
| CVE-2026-41201 | Deferred | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. In version 0.31.4.0, an attacker can a |
| CVE-2026-41202 | Deferred | 未確認 | CWE-22 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.5.0, ci4ms Backu |
| CVE-2026-41203 | Deferred | 未確認 | CWE-22 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.5.0, ci4ms Theme |
| CVE-2026-41217 | Analyzed | 未確認 | CWE-732 | A vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with resource administrator or administrator role to execute arbi |
| CVE-2026-41218 | Analyzed | 未確認 | CWE-416 | When BIG-IP PEM iRules are configured on a virtual server (iRules using commands starting with CLASSIFICATION::, CLASSIFY::, PEM::, PSC::, and the urlcatquery command), undisclosed |
| CVE-2026-41219 | Analyzed | 未確認 | CWE-532 | An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read sensitive information from a QKView file. Note: Softwar |
| CVE-2026-41225 | Analyzed | 未確認 | CWE-648 | A vulnerability exists in iControl REST where a highly privileged, authenticated attacker with at least the Manager role can create configuration objects that allow running arbitra |
| CVE-2026-41227 | Analyzed | 未確認 | CWE-770 | On an HTTP/2 virtual server with Layer 7 DoS Protection configured, undisclosed traffic can result in an increase in memory consumption causing the Traffic Management Microkernel ( |
| CVE-2026-41250 | Deferred | 未確認 | CWE-79 | Taiga is a project management platform for startups and agile developers. Prior 6.9.1, Taiga front is vulnerable to stored XSS. This vulnerability is fixed in 6.9.1. |
| CVE-2026-41255 | Analyzed | 未確認 | CWE-352 | CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, Access to the views via tokens or unauthenticated requests |
| CVE-2026-41256 | Analyzed | 未確認 | CWE-158 | jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq programs loaded from a file with -f are truncated at the first embedded NUL byte on current upstream HEAD. A |
| CVE-2026-41257 | Analyzed | 未確認 | CWE-190, CWE-787 | jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode VM's data stack tracks its allocation size in a signed int. When the stack grows beyond ≈1 GiB (via deepl |
| CVE-2026-41258 | Deferred | 未確認 | CWE-94 | OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria() method in OpenMRS Cor |
| CVE-2026-41281 | Deferred | 未確認 | CWE-319 | Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability. A man-in-the-middle attacker may acces |
| CVE-2026-41284 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1. |
| CVE-2026-41286 | Modified | 未確認 | CWE-121 | Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could |
| CVE-2026-41287 | Modified | 未確認 | CWE-121 | Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could |
| CVE-2026-41288 | Modified | 未確認 | CWE-732 | Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their privileges t |
| CVE-2026-41292 | Modified | 未確認 | CWE-1050, CWE-407, CWE-770 | NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending |
| CVE-2026-41293 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9 |
| CVE-2026-41308 | Analyzed | 未確認 | CWE-288 | Password Pusher is an open source application to communicate sensitive information over the web. Prior to versions 1.69.3 and 2.4.2, a security issue in OSS PasswordPusher allowed |
| CVE-2026-41310 | Analyzed | 未確認 | CWE-400, CWE-770 | OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth |
| CVE-2026-41311 | Analyzed | 未確認 | CWE-674 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in {% layout %} / {% block %} causes an inf |
| CVE-2026-41315 | Analyzed | 未確認 | CWE-78, CWE-862 | mdserver-web is a simple Linux panel. From 0.18.0 to 0.18.4, mdserver-web has a front-end unauthorized remote command execution vulnerability. Due to the lack of authentication on |
| CVE-2026-4137 | Analyzed | 未確認 | CWE-378 | In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` creates temporary directories with world-writable permissions |
| CVE-2026-41401 | Deferred | 未確認 | CWE-416 | libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default m |
| CVE-2026-41410 | Rejected | 未確認 | Rejected reason: REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-40520. Reason: This candidate is a duplicate of CVE-2026-40520. Notes: All CVE users should refere | |
| CVE-2026-41413 | Analyzed | 未確認 | CWE-918 | Istio is an open platform to connect, manage, and secure microservices. Prior to versions 1.28.6 and 1.29.2, when a RequestAuthentication resource is created with a jwksUri pointin |
| CVE-2026-41417 | Analyzed | 未確認 | CWE-444, CWE-93 | Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later changed via `setUri()`. The constr |
| CVE-2026-41422 | Deferred | 未確認 | CWE-89 | Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.4, the /aggregate/:typename endpoint accepted column and group query parameters that were passed verbatim to goqu.L |
| CVE-2026-41423 | Analyzed | 未確認 | CWE-918 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and |
| CVE-2026-41431 | Deferred | 未確認 | CWE-347 | Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource (MAR) updater (org.mozilla.updater) that has had all MAR signature verification s |
| CVE-2026-41432 | Analyzed | 未確認 | CWE-1188, CWE-345, CWE-863 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a vulnerability exists in the Stripe webhook hand |
| CVE-2026-41470 | Awaiting Analysis | 未確認 | CWE-863 | LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated |
| CVE-2026-41471 | Deferred | 未確認 | CWE-639 | The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains an information disclosure vulnerability in the QR code scanning endpoint that allows unauthenticat |
| CVE-2026-41483 | Analyzed | 未確認 | CWE-770 | OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments. In versions 1.15.0-beta.1 and earlier, the AzureVmMetaDataRequestor class makes HTTP requests to |
| CVE-2026-41484 | Analyzed | 未確認 | CWE-770 | OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP. In versions 1.15.0 and earlier, when a request to the configured b |
| CVE-2026-41486 | Analyzed | 未確認 | CWE-502, CWE-94 | Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension types (ray.data.arrow_tensor, ray.data.arrow_tensor_v2, ray.dat |
| CVE-2026-41487 | Analyzed | 未確認 | CWE-284 | Langfuse is an open source large language model engineering platform. From version 3.68.0 to before version 3.167.0, there is a role-based-access control flaw in the LLM connectio |
| CVE-2026-41489 | Deferred | 未確認 | CWE-15, CWE-269, CWE-732 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to before Core 6.4.2 and FTL 6.6.1, two shell scripts ex |
| CVE-2026-41490 | Awaiting Analysis | 未確認 | CWE-89 | Dagster is an orchestration platform for the development, production, and observation of data assets. Prior to Dagster Core version 1.13.1 and prior to Dagster libraries version 0. |
| CVE-2026-41491 | Analyzed | 未確認 | CWE-22, CWE-284 | Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. From versions 1.3.0 to before 1.15.14, 1.16.0-rc.1 to before 1.16.14, and 1.1 |
| CVE-2026-41493 | Analyzed | 未確認 | CWE-22 | YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability was discovered in YARD when using yard server to serve documentation. This bug would allo |
| CVE-2026-41495 | Analyzed | 未確認 | CWE-532 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.11, when n8n-mcp runs in HTTP transport mod |
| CVE-2026-41496 | Modified | 未確認 | CWE-89 | PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.9 and praisonaiagents version 1.6.9, the fix for CVE-2026-40315 added input validation to SQLiteConversation |
| CVE-2026-41497 | Analyzed | 未確認 | CWE-77, CWE-78 | PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for PraisonAI's MCP command handling does not add a command allowlist or argument validation to parse_mcp_c |
| CVE-2026-41498 | Analyzed | 未確認 | CWE-862 | Kimai is an open-source time tracking application. Prior to version 2.54.0, the Team API endpoints use #[IsGranted('edit_team')] instead of #[IsGranted('edit', 'team')], causing Sy |
| CVE-2026-41500 | Analyzed | 未確認 | CWE-77 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/ele |
| CVE-2026-41501 | Analyzed | 未確認 | CWE-77 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/ele |
| CVE-2026-41505 | Awaiting Analysis | 未確認 | CWE-330, CWE-338 | RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictable token generation in auth.py's make_sign_in_key() function and exam.py's gen_t |
| CVE-2026-41506 | Analyzed | 未確認 | CWE-522 | go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following re |
| CVE-2026-41507 | Analyzed | 未確認 | CWE-94 | math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse() is injected verbatim into a new Function() body witho |
| CVE-2026-41509 | Analyzed | 未確認 | CWE-121, CWE-122 | CROSS implementation contains reference and optimized implementations of the CROSS post-quantum signature algorithm. Prior to commit fc6b7e7, there is a buffer overflow in crypto_s |
| CVE-2026-41511 | Analyzed | 未確認 | CWE-835 | OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also known as Structured Storage. Prior to version 3.1.3, OpenMcdf does not detect cycle |
| CVE-2026-41512 | Analyzed | 未確認 | CWE-94 | ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection |
| CVE-2026-41513 | Deferred | 未確認 | CWE-601 | Horilla is an HR and CRM software. In 1.5.0, the notification endpoints trust the unvalidated next parameter and redirect users to arbitrary external URLs. This allows an attacker |
| CVE-2026-41517 | Deferred | 未確認 | CWE-434 | Emlog is an open source website building system. Prior to version 2.6.11, insecure plugin upload functionality allows attackers to upload and execute arbitrary PHP code, leading to |
| CVE-2026-41519 | Analyzed | 未確認 | CWE-613 | Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes their password, browser sessions are correctly invalidated via "cycle_session_keys()", but DR |
| CVE-2026-41520 | Analyzed | 未確認 | CWE-200, CWE-312 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.18.9, and 1.19.3, the output of cilium-bugtool can contain s |
| CVE-2026-41524 | Deferred | 未確認 | CWE-79 | Brave CMS is an open-source CMS. Prior to commit 6c56603, page and article body content entered through the CKEditor rich-text editor is stored verbatim in the database and subsequ |
| CVE-2026-41530 | Deferred | 未確認 | CWE-22 | The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. When the affected product is configured with the automatic |
| CVE-2026-41551 | Awaiting Analysis | 未確認 | CWE-23 | A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a path traversal vulnerability because user input is not properly sanitized. This co |
| CVE-2026-41552 | Analyzed | 未確認 | CWE-22 | PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization. An unauthenticated user could craft the html paylo |
| CVE-2026-41553 | Analyzed | 未確認 | CWE-78 | PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An unauthenticated attacker can |
| CVE-2026-41554 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricks Builder allows Reflected XSS. This issue affects Bricks Builder: from |
| CVE-2026-41565 | Deferred | 未確認 | CWE-121 | CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers. The gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_ve |
| CVE-2026-41570 | Analyzed | 未確認 | CWE-88, CWE-93 | PHPUnit is a testing framework for PHP. In versions 12.5.21 and 13.1.5, PHPUnit forwards PHP INI settings to child processes (used for isolated/PHPT test execution) as -d name=valu |
| CVE-2026-41571 | Deferred | 未確認 | CWE-287 | Note Mark is an open-source note-taking application. In version 0.19.2, IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt("null") placeholder whenever a use |
| CVE-2026-41572 | Deferred | 未確認 | CWE-285 | Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note-mark owner soft-deletes a public book, its notes and uploaded assets stay readable at /ap |
| CVE-2026-41574 | Analyzed | 未確認 | CWE-287 | Nhost is an open source Firebase alternative with GraphQL. Prior to version 0.49.1, Nhost automatically links an incoming OAuth identity to an existing Nhost account when the email |
| CVE-2026-41575 | Analyzed | 未確認 | CWE-79, CWE-80 | In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application. Unsanitized u |
| CVE-2026-41576 | Deferred | 未確認 | CWE-79 | Brave CMS is an open-source CMS. Prior to commit 6c56603, the contact form is publicly accessible (no authentication required). User-supplied message text is passed through PHP's n |
| CVE-2026-41583 | Analyzed | 未確認 | CWE-573 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-script version 5.0.2, after a refactoring, Zebra failed to validate a consensus rul |
| CVE-2026-41584 | Analyzed | 未確認 | CWE-617 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-chain version 6.0.2, Orchard transactions contain a rk field which is a randomized |
| CVE-2026-41585 | Analyzed | 未確認 | CWE-248, CWE-617 | ZEBRA is a Zcash node written entirely in Rust. From zebrad versions 2.2.0 to before 4.3.1 and from zebra-rpc versions 1.0.0-beta.45 to before 6.0.2, a vulnerability in Zebra's JSO |
| CVE-2026-41586 | Analyzed | 未確認 | CWE-502 | Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26, Channel.java implement |
| CVE-2026-41587 | Deferred | 未確認 | CWE-434 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.26.0.0 to before versio |
| CVE-2026-41588 | Analyzed | 未確認 | CWE-203, CWE-208 | RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched via c |
| CVE-2026-41589 | Analyzed | 未確認 | CWE-22 | Wish is an SSH server with defaults and a collection of middlewares. From version 2.0.0 to before version 2.0.1, the SCP middleware in charm.land/wish/v2 is vulnerable to path trav |
| CVE-2026-41591 | Analyzed | 未確認 | CWE-79 | Marko is a declarative, HTML-based language for building web apps. Prior to marko version 5.38.36 and prior to @marko/runtime-tags 6.0.164, when dynamic text is interpolated into a |
| CVE-2026-41610 | Analyzed | 未確認 | CWE-200, CWE-59, CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-41611 | Analyzed | 未確認 | CWE-77, CWE-79, CWE-80 | Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally. |
| CVE-2026-41612 | Analyzed | 未確認 | CWE-22, CWE-23 | Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally. |
| CVE-2026-41613 | Analyzed | 未確認 | CWE-384, CWE-78 | Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-41614 | Analyzed | 未確認 | CWE-284 | Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally. |
| CVE-2026-41615 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-41640 | Analyzed | 未確認 | CWE-89 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the queryParentSQL() function in the core |
| CVE-2026-41641 | Analyzed | 未確認 | CWE-284, CWE-89 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the checkSQL() validation function that bl |
| CVE-2026-41642 | Analyzed | 未確認 | CWE-476 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.3.0, a remote Denial of Service (DoS) vulnerability exists in GoBG |
| CVE-2026-41643 | Analyzed | 未確認 | CWE-129 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.3.0, a remote Denial of Service (DoS) vulnerability exists i |
| CVE-2026-41644 | Analyzed | 未確認 | CWE-209, CWE-770, CWE-918 | monetr is a budgeting application for recurring expenses. Prior to version 1.12.5, a server-side request forgery (SSRF) vulnerability in monetr's Lunch Flow integration allowed any |
| CVE-2026-41645 | Analyzed | 未確認 | CWE-94 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before version 3.8.0, a vulnerability in Nuclei's expression evaluation engine makes it po |
| CVE-2026-41646 | Analyzed | 未確認 | CWE-284 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before version 3.8.0, a vulnerability in Nuclei's JavaScript protocol runtime allows JavaS |
| CVE-2026-41647 | Analyzed | 未確認 | CWE-476 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, a missing error handling could lead an authenticated Incus user to cause a daemon crash through the |
| CVE-2026-41648 | Analyzed | 未確認 | CWE-770 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, user provided image and backup tarballs would be unpacked and YAML files parsed without any size re |
| CVE-2026-41650 | Analyzed | 未確認 | CWE-91 | fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Prior to version 5.7.0, XMLBuilder does not escape the "-->" sequence in comm |
| CVE-2026-41653 | Deferred | 未確認 | CWE-79 | BentoPDF is a client-side PDF toolkit that is self hostable. Prior to version 2.8.3, a cross-site scripting vulnerability was identified in BentoPD. An attacker may be able to exec |
| CVE-2026-41654 | Analyzed | 未確認 | CWE-20, CWE-918 | Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with project.add permission (default on hosted Weblate SaaS and for any user holding an act |
| CVE-2026-41655 | Deferred | 未確認 | CWE-22 | Admidio is an open-source user management solution. Prior to version 5.0.9, the ecard_preview.php endpoint does not validate that the ecard_template POST parameter is a safe filena |
| CVE-2026-41656 | Deferred | 未確認 | CWE-22 | Admidio is an open-source user management solution. Prior to version 5.0.9, the add mode in modules/documents-files.php accepts a name parameter validated only as 'string' type (HT |
| CVE-2026-41657 | Deferred | 未確認 | CWE-863 | Admidio is an open-source user management solution. Prior to version 5.0.9, the contacts_data.php endpoint uses a weaker permission check (isAdministratorUsers(), requiring only ro |
| CVE-2026-41658 | Deferred | 未確認 | CWE-862 | Admidio is an open-source user management solution. Prior to version 5.0.9, the Admidio inventory module enforces authorization for destructive operations (delete, retire, reinstat |
| CVE-2026-41659 | Deferred | 未確認 | CWE-200 | Admidio is an open-source user management solution. Prior to version 5.0.9, the member assignment DataTables endpoint (members_assignment_data.php) includes hidden profile fields ( |
| CVE-2026-41660 | Deferred | 未確認 | CWE-863 | Admidio is an open-source user management solution. Prior to version 5.0.9, a logic error in Admidio's two-factor authentication reset inverts the authorization check. Non-admin us |
| CVE-2026-41661 | Deferred | 未確認 | CWE-79 | Admidio is an open-source user management solution. Prior to version 5.0.9, an unauthenticated attacker can execute arbitrary JavaScript in any Admidio user's browser through a ref |
| CVE-2026-41662 | Deferred | 未確認 | CWE-754 | Admidio is an open-source user management solution. Prior to version 5.0.9, Role::stopMembership() does not verify whether removing a user from the administrator role leaves zero a |
| CVE-2026-41663 | Deferred | 未確認 | CWE-352 | Admidio is an open-source user management solution. Prior to version 5.0.9, several administrative operations in Admidio's preferences module (database backup, test email, htaccess |
| CVE-2026-41669 | Deferred | 未確認 | CWE-347 | Admidio is an open-source user management solution. Prior to version 5.0.9, the Admidio SAML Identity Provider implementation discards the return value of its validateSignature() m |
| CVE-2026-41670 | Deferred | 未確認 | CWE-20, CWE-601 | Admidio is an open-source user management solution. Prior to version 5.0.9, the SAML IdP implementation in Admidio's SSO module uses the AssertionConsumerServiceURL value directly |
| CVE-2026-41671 | Deferred | 未確認 | CWE-287 | Admidio is an open-source user management solution. Prior to version 5.0.9, the OIDC token introspection endpoint (/modules/sso/index.php/oidc/introspect) always returns {"active": |
| CVE-2026-41672 | Deferred | 未確認 | CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom versi |
| CVE-2026-41673 | Deferred | 未確認 | CWE-674, CWE-776 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom versi |
| CVE-2026-41674 | Deferred | 未確認 | CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom versi |
| CVE-2026-41675 | Deferred | 未確認 | CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom versi |
| CVE-2026-41682 | Deferred | 未確認 | CWE-195, CWE-918 | pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi() |
| CVE-2026-41683 | Deferred | 未確認 | CWE-113, CWE-79 | i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Prior to version 3.9.3, i18next-http-middleware wrote user |
| CVE-2026-41684 | Analyzed | 未確認 | CWE-476 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, backup.GetInfo() trusts the inline backup/index.yaml config when present and only falls back to par |
| CVE-2026-41685 | Analyzed | 未確認 | CWE-770 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by authenticated users can run the Incus server out of disk space, |
| CVE-2026-41686 | Analyzed | 未確認 | CWE-732 | Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.91.1, the BetaLocalFiles |
| CVE-2026-41687 | Deferred | 未確認 | CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.8.1, the SSRF protection in endpoints/subscription/add.php (line 42) and endpoints/payment |
| CVE-2026-41688 | Deferred | 未確認 | CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the incomplete SSRF fix in Wallos validates webhook URLs via gethostbyname() but |
| CVE-2026-41689 | Deferred | 未確認 | CWE-863, CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the webhook notification feature reuses an administrator-configured local-target |
| CVE-2026-41690 | Deferred | 未確認 | CWE-1321, CWE-22 | 18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Versions prior to 3.9.3 allow an unauthenticated HTTP clien |
| CVE-2026-41691 | Analyzed | 未確認 | CWE-22, CWE-74 | Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes. |
| CVE-2026-41692 | Analyzed | 未確認 | CWE-79, CWE-94 | i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes. Versions prior to 4.0.8 substitute {{key}} interpolation to |
| CVE-2026-41693 | Deferred | 未確認 | CWE-22, CWE-73 | i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem. Prior to version 2.6.4, i18next-fs-backend substitutes the |
| CVE-2026-41702 | Analyzed | 未確認 | CWE-367 | VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrat |
| CVE-2026-41704 | Analyzed | 未確認 | CWE-284 | AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response['value']['result']['compile_log |
| CVE-2026-41705 | Analyzed | 未確認 | CWE-917 | Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x: affected from 1.0.0 through |
| CVE-2026-41712 | Analyzed | 未確認 | CWE-276 | Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users. |
| CVE-2026-41713 | Analyzed | 未確認 | CWE-1336 | A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user- |
| CVE-2026-41863 | Analyzed | 未確認 | CWE-22 | Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write fi |
| CVE-2026-41872 | Deferred | 未確認 | CWE-295 | "Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communicat |
| CVE-2026-41883 | Deferred | 未確認 | CWE-917 | OmniFaces is a utility library for Faces. Prior to versions 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3, there is a server-side EL injection leading to Remote Code Execution (RCE). T |
| CVE-2026-41885 | Deferred | 未確認 | CWE-22, CWE-74 | i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in the browser and for Deno. Prior to version 9.0.2, i18next-locize-backend interpol |
| CVE-2026-41886 | Deferred | 未確認 | CWE-346, CWE-79 | locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener("message", …) handler that d |
| CVE-2026-41887 | Deferred | 未確認 | CWE-22, CWE-918 | Flarum is open-source forum software. Prior to versions 1.8.16 and 2.0.0-rc.1, Flarum's patch for CVE-2023-27577 restricted the @import and data-uri() LESS features in the custom_l |
| CVE-2026-41888 | Analyzed | 未確認 | CWE-863 | Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2/<name>/manifests/<tag> endpoint bypasses the storage. |
| CVE-2026-41889 | Analyzed | 未確認 | CWE-89 | pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used |
| CVE-2026-41890 | Deferred | 未確認 | CWE-20 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.31.1.0 to before versio |
| CVE-2026-41891 | Deferred | 未確認 | CWE-613 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.26.0 to before version |
| CVE-2026-41893 | Analyzed | 未確認 | CWE-307 | Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.25.0, the HTTP login endpoints (POST /login and POST /signalk/v1/auth/login) are pr |
| CVE-2026-41895 | Analyzed | 未確認 | CWE-611 | changedetection.io is a free open source web page change detection tool. In 0.54.9 and earlier, xpath_filter() switches to XML mode for XML/RSS content and creates etree.XMLParser( |
| CVE-2026-41897 | Deferred | 未確認 | CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.0.0 to 2.28.1, lack of validation of filter_target parameter on return_dynamic_filters.php (normally used as a |
| CVE-2026-41900 | Analyzed | 未確認 | CWE-250, CWE-284, CWE-693, CWE-78, CWE-94 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX c |
| CVE-2026-41901 | Deferred | 未確認 | CWE-1336, CWE-917 | Thymeleaf is a server-side Java template engine for web and standalone environments. Prior to 3.1.5.RELEASE, a security bypass vulnerability exists in the expression execution mech |
| CVE-2026-41902 | Deferred | 未確認 | CWE-613 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, the /user-setup/{hash} endpoint accepts a 60-character random invite_ha |
| CVE-2026-41903 | Deferred | 未確認 | CWE-863 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERM_EDIT_USERS permission (intended for general use |
| CVE-2026-41904 | Deferred | 未確認 | CWE-79 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user with updateAutoReply permission can store an XSS payload in the |
| CVE-2026-41905 | Deferred | 未確認 | CWE-918 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, Helper::sanitizeRemoteUrl() in app/Misc/Helper.php follows HTTP redirec |
| CVE-2026-41906 | Deferred | 未確認 | CWE-639 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.214, the Change Customer modal correctly hides out-of-scope customers throug |
| CVE-2026-41917 | Deferred | 未確認 | CWE-22 | OpenKM 6.3.12 contains a local file inclusion vulnerability in the administrative scripting interface at /admin/Scripting that allows authenticated administrators to read arbitrary |
| CVE-2026-41919 | Modified | 未確認 | CWE-90 | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are re |
| CVE-2026-41922 | Deferred | 未確認 | CWE-78 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cgi binary that allows unauthenticated remote attackers to exe |
| CVE-2026-41923 | Deferred | 未確認 | CWE-78 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote attackers to exe |
| CVE-2026-41924 | Deferred | 未確認 | CWE-78 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to |
| CVE-2026-41925 | Deferred | 未確認 | CWE-78 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthenticated remot |
| CVE-2026-41926 | Deferred | 未確認 | CWE-78 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficien |
| CVE-2026-41927 | Deferred | 未確認 | CWE-121 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthentic |
| CVE-2026-41928 | Deferred | 未確認 | CWE-497 | Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application's secret cron key. At |
| CVE-2026-41929 | Deferred | 未確認 | CWE-79 | Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute arbitrary JavaS |
| CVE-2026-41930 | Deferred | 未確認 | CWE-306 | Vvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker-compose-apache.yaml configuration that allows unauthenticated attackers to access the bun |
| CVE-2026-41931 | Deferred | 未確認 | CWE-1188, CWE-209 | Vvveb before version 1.0.8.2 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain sensitive server information by triggering unhandled e |
| CVE-2026-41932 | Deferred | 未確認 | CWE-79 | Vvveb before 1.0.8.3 contains a stored cross-site scripting vulnerability in the customer signup flow where the Signup::addUser() controller copies raw POST username values into th |
| CVE-2026-41933 | Deferred | 未確認 | CWE-548 | Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability that allows unauthenticated attackers to enumerate files and directories by accessing multipl |
| CVE-2026-41934 | Deferred | 未確認 | CWE-184 | Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the admin code editor that allows low-privilege authenticated users to execute arbitra |
| CVE-2026-41935 | Deferred | 未確認 | CWE-209, CWE-674 | Vvveb before 1.0.8.3 contains an uncontrolled recursion vulnerability in the admin controller dispatch cycle where Base::init() repeatedly invokes permission() on error handlers, c |
| CVE-2026-41936 | Deferred | 未確認 | CWE-611 | Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the admin Tools/Import feature that allows authenticated site_admin users to read arbi |
| CVE-2026-41937 | Deferred | 未確認 | CWE-434, CWE-61 | Vvveb before 1.0.8.3 contains an unrestricted file upload vulnerability in the plugin upload endpoint that allows super_admin users to execute arbitrary PHP code by uploading a mal |
| CVE-2026-41938 | Deferred | 未確認 | CWE-434 | Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media upload handler that allows authenticated users with media-upload permissions to bypass |
| CVE-2026-41947 | Modified | 未確認 | CWE-639 | Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor users to set and enable trace configurations for any application regardle |
| CVE-2026-41948 | Modified | 未確認 | CWE-23 | Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal REST API by ex |
| CVE-2026-41949 | Modified | 未確認 | CWE-639 | Dify before version 1.14.2 contains an authorization bypass vulnerability in the file preview endpoint that allows any authenticated user to read up to 3,000 characters of any uplo |
| CVE-2026-41950 | Modified | 未確認 | CWE-639 | Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users within the same |
| CVE-2026-41951 | Deferred | 未確認 | CWE-22 | Path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is running in GRO |
| CVE-2026-41953 | Analyzed | 未確認 | CWE-77 | A vulnerability exists in BIG-IP systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can modify configuration objects resulting |
| CVE-2026-41954 | Analyzed | 未確認 | CWE-200 | Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resourc |
| CVE-2026-41956 | Analyzed | 未確認 | CWE-121 | When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions |
| CVE-2026-41957 | Analyzed | 未確認 | CWE-502 | An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility. Note: Software versions which have reached |
| CVE-2026-41959 | Analyzed | 未確認 | CWE-732 | Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics commands and in BIG-IP iControl REST. These vulnerabilities may all |
| CVE-2026-41960 | Deferred | 未確認 | CWE-200 | Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41961 | Deferred | 未確認 | CWE-840 | Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41962 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-41963 | Deferred | 未確認 | CWE-121 | Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41964 | Deferred | 未確認 | CWE-362 | Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41965 | Deferred | 未確認 | CWE-840 | Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41966 | Deferred | 未確認 | CWE-840 | Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-41967 | Deferred | 未確認 | CWE-840 | Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41968 | Deferred | 未確認 | CWE-840 | Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41969 | Deferred | 未確認 | CWE-275 | Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-41970 | Deferred | 未確認 | CWE-787 | Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41971 | Deferred | 未確認 | CWE-840 | Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-41999 | Analyzed | 未確認 | CWE-284 | Incorrect Behaviour of Views with TCP PROXY Requests |
| CVE-2026-42000 | Analyzed | 未確認 | CWE-77 | Insufficient Validation of Names During AXFR |
| CVE-2026-42001 | Analyzed | 未確認 | CWE-400 | Insufficient Validation of Autoprimary SOA Queries |
| CVE-2026-42002 | Analyzed | 未確認 | CWE-364 | Concurrency and locking defects in GSS-TSIG |
| CVE-2026-42006 | Modified | 未確認 | CWE-400, CWE-770 | An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still |
| CVE-2026-42009 | Modified | 未確認 | CWE-475 | A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible f |
| CVE-2026-42010 | Modified | 未確認 | CWE-170, CWE-626 | A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated username |
| CVE-2026-42011 | Awaiting Analysis | 未確認 | CWE-295 | A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name |
| CVE-2026-42012 | Awaiting Analysis | 未確認 | CWE-295 | A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Serv |
| CVE-2026-42013 | Awaiting Analysis | 未確認 | CWE-295 | A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Co |
| CVE-2026-42015 | Awaiting Analysis | 未確認 | CWE-193 | A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a P |
| CVE-2026-42027 | Modified | 未確認 | CWE-470, CWE-502 | Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5, before 2.5.9, before 3.0.0-M3 Description: The Exten |
| CVE-2026-42028 | Deferred | 未確認 | CWE-22 | novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability has been identified in novaGallery. This allows unauthenticated users to read image files |
| CVE-2026-42030 | Analyzed | 未確認 | CWE-80 | MapServer is a system for developing web-based GIS applications. From version 6.0 to before version 8.6.2, a reflected XSS vulnerability in MapServer's WMS server allows an unauthe |
| CVE-2026-42031 | Analyzed | 未確認 | CWE-89 | CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastore_search_sql allowed attackers |
| CVE-2026-42032 | Analyzed | 未確認 | CWE-863 | CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastore_search_sql allowed attackers |
| CVE-2026-42045 | Deferred | 未確認 | CWE-79 | LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.48, when LobeChat processes custom tags in the Render pr |
| CVE-2026-42046 | Deferred | 未確認 | CWE-122, CWE-190, CWE-787 | libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas import functionality allows an attacker to cause a controll |
| CVE-2026-42047 | Analyzed | 未確認 | CWE-200, CWE-497 | Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerabi |
| CVE-2026-42048 | Analyzed | 未確認 | CWE-22 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (DELETE /api/v1/k |
| CVE-2026-42050 | Analyzed | 未確認 | CWE-121 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when |
| CVE-2026-42051 | Analyzed | 未確認 | CWE-862 | Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, the system API endpoint leaks license data and installed version to authenticated users. This |
| CVE-2026-42052 | Deferred | 未確認 | CWE-79 | Beets is the media library management system. Prior to version 2.10.0, the bundled web UI uses Underscore template interpolation mode <%= ... %> for untrusted metadata fields. In t |
| CVE-2026-42058 | Analyzed | 未確認 | CWE-732 | An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local user account names. Note: Software versions which have rea |
| CVE-2026-42062 | Deferred | 未確認 | CWE-78 | ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be execut |
| CVE-2026-42063 | Analyzed | 未確認 | CWE-552 | A vulnerability exists in iControl SOAP where an authenticated attacker with the Resource Administrator or Administrator role can download sensitive files. Note: Software versions |
| CVE-2026-42069 | Analyzed | 未確認 | CWE-862 | Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, read access to site, user and role information is not gated by permissions. This issue has bee |
| CVE-2026-42070 | Deferred | 未確認 | CWE-863 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, the mc_issue_update() function in MantisBT allows users having update_bug_threshold access (UPDATER, |
| CVE-2026-42071 | Deferred | 未確認 | CWE-862 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 2.23.0 to 2.28.1, a missing authorization check in MantisBT's file visibility function allows any authenticated |
| CVE-2026-42072 | Deferred | 未確認 | CWE-1392 | Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag |
| CVE-2026-42075 | Deferred | 未確認 | CWE-22 | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write |
| CVE-2026-42076 | Deferred | 未確認 | CWE-78 | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to execute ar |
| CVE-2026-42077 | Deferred | 未確認 | CWE-1321 | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify the |
| CVE-2026-42078 | Deferred | 未確認 | CWE-22 | PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdown_t |
| CVE-2026-42079 | Deferred | 未確認 | CWE-95 | PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of LLM-generate |
| CVE-2026-42080 | Deferred | 未確認 | CWE-22 | PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This iss |
| CVE-2026-42081 | Analyzed | 未確認 | CWE-358 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not verify the UE Security Capabilities received in NGAP PathSwitchRequest |
| CVE-2026-42082 | Analyzed | 未確認 | CWE-358 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not enforce the concurrent security procedure rules defined in 3GPP TS 33.5 |
| CVE-2026-42083 | Analyzed | 未確認 | CWE-862 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, PCF Npcf_SMPolicyControl missing authentication middleware allows unauthenticated access to SM poli |
| CVE-2026-42084 | Analyzed | 未確認 | CWE-620 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password |
| CVE-2026-42085 | Analyzed | 未確認 | CWE-23 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contai |
| CVE-2026-42086 | Analyzed | 未確認 | CWE-79 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0, the Command Sender UI uses an unsafe |
| CVE-2026-42087 | Analyzed | 未確認 | CWE-89 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL inject |
| CVE-2026-42088 | Analyzed | 未確認 | CWE-250 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows |
| CVE-2026-42090 | Analyzed | 未確認 | CWE-79, CWE-94 | Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS |
| CVE-2026-42091 | Analyzed | 未確認 | CWE-352 | goshs is a SimpleHTTPServer written in Go. Prior to version 2.0.2, the PUT upload handler (httpserver/updown.go) lacks the CSRF token validation that was added to the POST upload h |
| CVE-2026-42092 | Deferred | 未確認 | CWE-200 | titra is an open source time tracking project. In version 0.99.52, the globalsettings Meteor publication returns all global settings without any admin or role check. Any authentica |
| CVE-2026-42096 | Analyzed | 未確認 | CWE-863 | Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database. Due to lack of permission checks, any low privileged user can run arbitrary SQ |
| CVE-2026-42097 | Analyzed | 未確認 | CWE-639 | Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the binary blob in POST requ |
| CVE-2026-42098 | Awaiting Analysis | 未確認 | CWE-603 | Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Architect |
| CVE-2026-42099 | Analyzed | 未確認 | CWE-362 | Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint. The application downloads the properties of the object pointed by guid |
| CVE-2026-42100 | Analyzed | 未確認 | CWE-228 | Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially crafted SQL query. This |
| CVE-2026-42137 | Analyzed | 未確認 | CWE-862, CWE-863 | Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, `pages.access/list` and `files.access/list` permissions are not consistently checked in the Pa |
| CVE-2026-42138 | Analyzed | 未確認 | CWE-79 | Dify is an open-source LLM app development platform. Prior to version 1.13.1, using the method POST /api/files/upload, any unauthenticated user can upload an SVG file with XSS. The |
| CVE-2026-42140 | Deferred | 未確認 | CWE-918 | PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior to version 2.4.1, the PlantUML Macro is vulnerable to Server-Side Request Forgery (SSRF). Th |
| CVE-2026-42141 | Deferred | 未確認 | CWE-918 | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.1, an authenticated Server-Side Request Forge |
| CVE-2026-42144 | Deferred | 未確認 | CWE-190 | CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an integer overflow vulnerability in the W*H*D size computation inside _load_pnm() that can by |
| CVE-2026-42146 | Deferred | 未確認 | CWE-789 | CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nb_colors field read from the BMP file header is used directly to compute an allocation size withou |
| CVE-2026-42150 | Analyzed | 未確認 | CWE-79 | wlc is a Weblate command-line client using Weblate's REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing c |
| CVE-2026-42151 | Modified | 未確認 | CWE-200, CWE-256, CWE-312 | Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuratio |
| CVE-2026-42154 | Modified | 未確認 | CWE-400, CWE-770, CWE-789 | Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared |
| CVE-2026-42155 | Deferred | 未確認 | CWE-330, CWE-331, CWE-338 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backwar |
| CVE-2026-42156 | Deferred | 未確認 | CWE-943 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a nod |
| CVE-2026-42157 | Deferred | 未確認 | CWE-79 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a map |
| CVE-2026-42158 | Deferred | 未確認 | CWE-284 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, an adversary with knowledge of an |
| CVE-2026-42159 | Analyzed | 未確認 | CWE-79 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, Flowsint allows a user to create i |
| CVE-2026-42160 | Deferred | 未確認 | CWE-602, CWE-863 | Data Space Portal is an open-source Software as a Service (SaaS) solution designed to streamline Dataspace management. From version 2.1.1 to before version 7.3.2, there is insuffic |
| CVE-2026-42174 | Analyzed | 未確認 | CWE-862 | Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, user avatar creation, replacement and deletion are not gated by user update permissions. This |
| CVE-2026-42175 | Deferred | 未確認 | CWE-918 | requests-hardened is a library that overrides the default behaviors of the requests library, and adds new security features. Prior to , the SSRF protection in requests-hardened fai |
| CVE-2026-42176 | Deferred | 未確認 | CWE-306 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.67.0, Scoold allows the admins configuration value to be modified through /api/config/set/admins with |
| CVE-2026-42177 | Deferred | 未確認 | CWE-284, CWE-436 | linux-entra-sso is a browser plugin for Linux to SSO on Microsoft Entra ID. Prior to 1.8.1, platform/chrome/js/platform-chrome.js:69-88 registers a single declarativeNetRequest rul |
| CVE-2026-42180 | Deferred | 未確認 | CWE-918 | Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy allows an authenticated low-privileged user to create a link post through POST /api/v3/post. |
| CVE-2026-42181 | Deferred | 未確認 | CWE-918 | Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy fetches metadata for user-supplied post URLs and, under the default StoreLinkPreviews image |
| CVE-2026-42183 | Analyzed | 未確認 | CWE-476 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, a nil pointer dereferen |
| CVE-2026-42184 | Analyzed | 未確認 | CWE-918 | Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a flaw in Tauri's is_local_url() function causes it to incorrectly classify remote U |
| CVE-2026-42185 | Deferred | 未確認 | CWE-269 | People is an application to handle users and teams, and distribute permissions across La Suite. Prior to version 1.25.0, a user holding the Administrator role on a mail domain coul |
| CVE-2026-42186 | Analyzed | 未確認 | CWE-212 | OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao's initial namespace deletion fails, subsequent retries fail to properly remove all |
| CVE-2026-42188 | Analyzed | 未確認 | CWE-918 | Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Prior to 2.9.3, a server-side request forgery (SSRF) vulnerability exists in Geyser’s handling of |
| CVE-2026-42189 | Analyzed | 未確認 | CWE-770, CWE-789 | Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication denial-of-service vulnerability exists in the server's keyboard-interactive authenticatio |
| CVE-2026-42190 | Analyzed | 未確認 | CWE-352 | RedwoodSDK is a server-first React framework. From version 1.0.0-beta.50 to before version 1.2.3, server actions in rwsdk apply HTTP method enforcement but no origin validation. A |
| CVE-2026-42191 | Analyzed | 未確認 | CWE-379 | OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Export |
| CVE-2026-42192 | Deferred | 未確認 | CWE-79 | Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, a stored cross-site scripting (XSS) vulnerability exists in the campaign management feature, |
| CVE-2026-42193 | Deferred | 未確認 | CWE-347 | Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, the /webhooks/sns endpoint accepts Amazon SNS notification payloads from unauthenticated req |
| CVE-2026-42194 | Deferred | 未確認 | CWE-918 | Admidio is an open-source user management solution. Prior to version 5.0.9, the incomplete SSRF fix in Admidio's fetch_metadata.php validates the resolved IP address but passes the |
| CVE-2026-42195 | Deferred | 未確認 | CWE-200, CWE-601 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.9, the draw.io client accepts a ?gitlab= URL parameter that overrides the GitLab server U |
| CVE-2026-42196 | Deferred | 未確認 | CWE-22, CWE-26 | django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can |
| CVE-2026-42197 | Deferred | 未確認 | CWE-79 | RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolle |
| CVE-2026-42199 | Deferred | 未確認 | CWE-190 | Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand_rows() can corrupt the relationship between the grid’s logi |
| CVE-2026-42202 | Deferred | 未確認 | CWE-285 | nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle endpoint (POST/nova-vendor/nova-toggle/toggle/{resource}/{resourceId}) was protected only by |
| CVE-2026-42203 | Modified | 未確認 | CWE-1336, CWE-94 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before version 1.83.7, the POST /prompts/test endpoint accepted user-su |
| CVE-2026-42205 | Deferred | 未確認 | CWE-284, CWE-639 | Avo is a framework to create admin panels for Ruby on Rails apps. Prior to version 3.31.2, a broken access control vulnerability was identified in the ActionsController of the Avo |
| CVE-2026-42206 | Deferred | 未確認 | CWE-345 | Roadiz is a polymorphic content management system based on a node system. Prior to versions 2.3.43, 2.5.45, 2.6.31, and 2.7.18, the roadiz/openid package generates an OIDC nonce in |
| CVE-2026-42207 | Deferred | 未確認 | CWE-601 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backwar |
| CVE-2026-42208 | Analyzed | 掲載 | CWE-89 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key chec |
| CVE-2026-42209 | Deferred | 未確認 | CWE-369 | FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.1, a remote client with retained publish permission can crash the FlashMQ broker when bo |
| CVE-2026-42212 | Deferred | 未確認 | CWE-400, CWE-611, CWE-776 | SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM. From version 1.0.0 to before version 1.0.2, Opening a .gpp file in the SolidC |
| CVE-2026-42213 | Deferred | 未確認 | CWE-200, CWE-22, CWE-295, CWE-918 | SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM. From version 1.0.0 to before version 1.0.2, the inc "filename" directive in G |
| CVE-2026-42214 | Analyzed | 未確認 | CWE-94 | Notepad Next is a cross-platform, reimplementation of Notepad++. Prior to version 0.14, NotepadNext's detectLanguageFromExtension() function interpolates a file's extension directl |
| CVE-2026-42215 | Analyzed | 未確認 | CWE-78 | GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git options such as --upload-pack and |
| CVE-2026-42216 | Modified | 未確認 | CWE-125, CWE-130 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9 |
| CVE-2026-42217 | Analyzed | 未確認 | CWE-190 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9 |
| CVE-2026-42220 | Analyzed | 未確認 | CWE-200, CWE-863 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, an authenticated user can call GET /api/settings and retrieve sensitive configuration values, inc |
| CVE-2026-42221 | Analyzed | 未確認 | CWE-306 | Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before version 2.3.8, an unauthenticated network attacker can claim the initial administrator accou |
| CVE-2026-42222 | Analyzed | 未確認 | CWE-284, CWE-306 | Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenticated bootstrap takeover exists in nginx-ui during the initial installation window exposed |
| CVE-2026-42223 | Analyzed | 未確認 | CWE-200 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler (api/settings/settings.go:24-65) serializes all settings structs to J |
| CVE-2026-42224 | Deferred | 未確認 | CWE-79 | ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim's |
| CVE-2026-42225 | Analyzed | 未確認 | CWE-295 | PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport (sip_transport_tls) can accept connect |
| CVE-2026-42226 | Analyzed | 未確認 | CWE-862 | n8n is an open source workflow automation platform. Prior to versions 1.123.33 and 2.17.5, the dynamic-node-parameters endpoints did not verify whether the authenticated caller was |
| CVE-2026-42227 | Analyzed | 未確認 | CWE-639 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with a valid API key scoped to variable:list could read va |
| CVE-2026-42228 | Analyzed | 未確認 | CWE-862 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /chat WebSocket endpoint used by the Chat Trigger node's Hosted Chat feature |
| CVE-2026-42229 | Analyzed | 未確認 | CWE-89 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the SeaTable node's row:search and row:get operations allowed user-con |
| CVE-2026-42230 | Analyzed | 未確認 | CWE-601 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /mcp-oauth/register endpoint accepted OAuth client registrations without aut |
| CVE-2026-42231 | Analyzed | 未確認 | CWE-1321 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the xml2js library used to parse XML request bodies in n8n's webhook h |
| CVE-2026-42232 | Analyzed | 未確認 | CWE-1321 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows could achiev |
| CVE-2026-42233 | Analyzed | 未確認 | CWE-89 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the Oracle Database node's select operation allowed user-controlled in |
| CVE-2026-42234 | Analyzed | 未確認 | CWE-94 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows containing a |
| CVE-2026-42235 | Analyzed | 未確認 | CWE-79, CWE-87 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an unauthenticated attacker could register a malicious MCP OAuth client with a c |
| CVE-2026-42236 | Analyzed | 未確認 | CWE-770 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the MCP OAuth client registration endpoint accepted unauthenticated requests and |
| CVE-2026-42237 | Analyzed | 未確認 | CWE-89 | n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover the Snowflake node or the legacy M |
| CVE-2026-42238 | Analyzed | 未確認 | CWE-94 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-ui exposes a backup restore endpoint (POST /api/restore) that is completely unauthenticated |
| CVE-2026-42239 | Analyzed | 未確認 | CWE-1004 | Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT session token is set with httpOnly: false at packages/backend-co |
| CVE-2026-42241 | Deferred | 未確認 | CWE-789 | ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.0.1, DecimalConverter.ReadDecimal makes a stackalloc using w |
| CVE-2026-42245 | Analyzed | 未確認 | CWE-407 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time |
| CVE-2026-42246 | Modified | 未確認 | CWE-325, CWE-392, CWE-393, CWE-636, CWE-754, CWE-841 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cau |
| CVE-2026-42250 | Awaiting Analysis | 未確認 | CWE-787 | bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, result |
| CVE-2026-42256 | Analyzed | 未確認 | CWE-1322, CWE-770 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to before 0.6.4, |
| CVE-2026-42257 | Analyzed | 未確認 | CWE-77, CWE-93 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw stri |
| CVE-2026-42258 | Modified | 未確認 | CWE-77, CWE-93 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments to commands are vulnerable |
| CVE-2026-42259 | Deferred | 未確認 | CWE-601 | Saltcorn is an extensible, open source, no-code database application builder. Prior to versions 1.4.6, 1.5.6, and 1.6.0-beta.5, Saltcorn validates the post-login dest parameter wit |
| CVE-2026-42260 | Deferred | 未確認 | CWE-918 | Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval. Prior to 2.1.7, isPublicHttpUrl / assertPublicHttpUrl in src/utils/ur |
| CVE-2026-42261 | Analyzed | 未確認 | CWE-20, CWE-693, CWE-918 | PromptHub is an all-in-one AI toolbox for prompt, skill, and agent management. From version 0.4.9 to before version 0.5.4, apps/web/src/routes/skills.ts exposes an authenticated en |
| CVE-2026-42264 | Modified | 未確認 | CWE-1321, CWE-915 | Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties (auth, baseURL, socketPath, beforeRedirect, a |
| CVE-2026-42266 | Modified | 未確認 | CWE-602, CWE-88 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions th |
| CVE-2026-42267 | Analyzed | 未確認 | CWE-1236 | Kimai is an open-source time tracking application. From version 2.27.0 to before version 2.54.0, any ROLE_USER can create a tag with a formula string as its name (e.g. =SUM(54+51)) |
| CVE-2026-42268 | Analyzed | 未確認 | CWE-191, CWE-248 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception (std::ou |
| CVE-2026-42271 | Analyzed | 掲載 | CWE-77, CWE-78 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server befo |
| CVE-2026-42272 | Deferred | 未確認 | CWE-178, CWE-436 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall handles URL-encoded slashes (%2F) in a case-sensitive manner |
| CVE-2026-42273 | Deferred | 未確認 | CWE-178, CWE-436 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs host matching in a case-sensitive manner, while HTT |
| CVE-2026-42274 | Deferred | 未確認 | CWE-35, CWE-436 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs rule matching on the raw (non-normalized) request p |
| CVE-2026-42275 | Analyzed | 未確認 | CWE-22, CWE-61 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.2, the zrok WebDAV drive backend (davServer.Dir) restricts path traversal through lexi |
| CVE-2026-42276 | Analyzed | 未確認 | CWE-639 | Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets any authenticated user stop any othe |
| CVE-2026-42277 | Analyzed | 未確認 | CWE-639 | Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated user to download any other user's uplo |
| CVE-2026-42278 | Deferred | 未確認 | CWE-284, CWE-639 | UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine implementation of SmartTransferTx contains a critical logic flaw in its policy e |
| CVE-2026-42279 | Analyzed | 未確認 | CWE-639 | solidtime is an open-source time-tracking app. In version 0.12.0, the PUT /api/v1/organizations/{organization}/time-entries/{timeEntry} API accepts a route-bound timeEntry from ano |
| CVE-2026-42280 | Analyzed | 未確認 | CWE-863 | Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a |
| CVE-2026-42281 | Analyzed | 未確認 | CWE-918 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.36.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the /cors endpoint allows any |
| CVE-2026-42282 | Analyzed | 未確認 | CWE-532 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.13, when n8n-mcp runs in HTTP transport mod |
| CVE-2026-42283 | Analyzed | 未確認 | CWE-200, CWE-306 | DevSpace is a client-only developer tool for cloud-native development with Kubernetes. Prior to 6.3.21, DevSpace's UI server WebSocket accepts connections from all origins by defau |
| CVE-2026-42284 | Modified | 未確認 | CWE-88 | GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ". |
| CVE-2026-42285 | Analyzed | 未確認 | CWE-476 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic |
| CVE-2026-42286 | Deferred | 未確認 | CWE-352 | Emlog is an open source website building system. Prior to version 2.6.11, missing CSRF protection in critical admin functions allows attackers to trick authenticated administrators |
| CVE-2026-42287 | Deferred | 未確認 | CWE-89 | Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL co |
| CVE-2026-42288 | Deferred | 未確認 | CWE-94 | ChurchCRM is an open-source church management system. Prior to 7.3.2, The fix for CVE-2026-39337 is incomplete. The pre-authentication remote code execution vulnerability in Church |
| CVE-2026-42289 | Deferred | 未確認 | CWE-269, CWE-306, CWE-352 | ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user account creation and permission updates entirely through $_POST parameters with |
| CVE-2026-42290 | Analyzed | 未確認 | CWE-78 | protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbts invoked JSDoc by building a shell command string from input file paths and executing it th |
| CVE-2026-42291 | Deferred | 未確認 | CWE-639 | SysReptor is a fully customizable pentest reporting platform. From version 2026.4 to before version 2026.27, the endpoints for reading and creating sharing links for personal notes |
| CVE-2026-42294 | Modified | 未確認 | CWE-770 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, the Webhook Interceptor loads t |
| CVE-2026-42295 | Analyzed | 未確認 | CWE-522 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the workflow executor l |
| CVE-2026-42296 | Modified | 未確認 | CWE-863 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, a user with create Workflow per |
| CVE-2026-42297 | Modified | 未確認 | CWE-425, CWE-862 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the Sync Service's Conf |
| CVE-2026-42298 | Analyzed | 未確認 | CWE-94 | Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (.github/workflows/pr-docker- |
| CVE-2026-42300 | Deferred | 未確認 | CWE-288 | DevGuard provides vulnerability management for the full software supply chain. Prior to 1.2.2, the SessionMiddleware accepts a client-supplied X-Admin-Token HTTP request header and |
| CVE-2026-42301 | Deferred | 未確認 | CWE-20, CWE-94 | pyp2spec generates working Fedora RPM spec file for Python projects. Prior to version 0.14.1, pyp2spec was writing PyPI package metadata (e.g. the summary field) into the generated |
| CVE-2026-42302 | Deferred | 未確認 | CWE-306 | FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execut |
| CVE-2026-42303 | Deferred | 未確認 | CWE-288, CWE-306, CWE-841 | Fides is an open-source privacy engineering platform. From 2.75.0 to before 2.83.2, Fides deployments that enable both subject identity verification and duplicate privacy request d |
| CVE-2026-42304 | Analyzed | 未確認 | CWE-400, CWE-407 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service (DoS) attac |
| CVE-2026-42307 | Analyzed | 未確認 | CWE-78 | Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing |
| CVE-2026-42308 | Analyzed | 未確認 | CWE-190 | Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may |
| CVE-2026-42309 | Analyzed | 未確認 | CWE-122 | Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ImageD |
| CVE-2026-42310 | Analyzed | 未確認 | CWE-835 | Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% |
| CVE-2026-42311 | Analyzed | 未確認 | CWE-190, CWE-787 | Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash |
| CVE-2026-42312 | Analyzed | 未確認 | CWE-295, CWE-306, CWE-863 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api |
| CVE-2026-42313 | Analyzed | 未確認 | CWE-441, CWE-863, CWE-918 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api |
| CVE-2026-42314 | Analyzed | 未確認 | CWE-22 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, package folder names are sanitized using insufficient string replacement. The pattern |
| CVE-2026-42315 | Analyzed | 未確認 | CWE-22, CWE-36 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, when passing a folder name in the set_package_data() API function call inside the data |
| CVE-2026-42316 | Deferred | 未確認 | CWE-943 | kafka-sink-azure-kusto Kafka Connect plugin is the official Microsoft sink for Azure Data Explorer (Kusto). Prior to 5.2.3, kafka-sink-azure-kusto did not sanitize user-controlled |
| CVE-2026-42327 | Deferred | 未確認 | CWE-20 | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs from a certificate's AI |
| CVE-2026-42328 | Deferred | 未確認 | CWE-674 | go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for b |
| CVE-2026-42333 | Deferred | 未確認 | CWE-200 | Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to versions 2.11.1-lts, 2.16.0-lts, and 2.17.0, the generated aut |
| CVE-2026-42334 | Analyzed | 未確認 | CWE-74 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.9, 7.8.9, 8.22.1, and 9.1.6, a vulnerability allows bypassing Mongoose’s s |
| CVE-2026-42335 | Deferred | 未確認 | CWE-918 | MaxKB is an open-source AI assistant for enterprise. Prior to 2.8.1, MaxKB v2.8.0 and prior are vulnerable to a server-side request forgery (SSRF) bypass in the OSS file service UR |
| CVE-2026-42336 | Deferred | 未確認 | CWE-367, CWE-918 | MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a server-side request forgery (SSRF) bypass in the OSS file service URL fetch functiona |
| CVE-2026-42337 | Deferred | 未確認 | CWE-862 | MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a broken access control vulnerability in the OSS file service URL fetch API (chat/api/o |
| CVE-2026-42338 | Modified | 未確認 | CWE-79 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-contro |
| CVE-2026-42339 | Analyzed | 未確認 | CWE-918 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and prior, the SSRF protection introduced in v0. |
| CVE-2026-42343 | Deferred | 未確認 | CWE-400 | FastGPT is an AI Agent building platform. In versions 4.14.13 and prior, the code-sandbox component suffers from insufficient resource isolation and uncontrolled resource consumpti |
| CVE-2026-42344 | Deferred | 未確認 | CWE-367 | FastGPT is an AI Agent building platform. In versions 4.14.11 and prior, FastGPT's isInternalAddress() function in packages/service/common/system/utils.ts is vulnerable to DNS rebi |
| CVE-2026-42345 | Deferred | 未確認 | CWE-918 | FastGPT is an AI Agent building platform. In versions 4.14.11 and prior, FastGPT's isInternalAddress() function in packages/service/common/system/utils.ts blocks cloud metadata end |
| CVE-2026-42346 | Deferred | 未確認 | CWE-918 | Postiz is an AI social media scheduling tool. From version 2.16.6 to before version 2.21.7, all SSRF protections added in v2.21.4–v2.21.6 share a fundamental TOCTOU (Time-of-Check- |
| CVE-2026-42347 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-28496. Reason: This candidate is a duplicate of CVE-2026-28496. Notes: All CVE users should ref | |
| CVE-2026-42348 | Analyzed | 未確認 | CWE-789 | OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates |
| CVE-2026-42349 | Analyzed | 未確認 | CWE-754, CWE-863 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), auth.protect(), and related authorization predicates in @clerk/shared, @clerk/nextjs, @clerk |
| CVE-2026-42350 | Deferred | 未確認 | CWE-601 | Kargo manages and automates the promotion of software artifacts. Prior to versions 1.7.10, 1.8.13, 1.9.8, and 1.10.2, Kargo is vulnerable to open redirect in UI OIDC login flow via |
| CVE-2026-42351 | Deferred | 未確認 | CWE-22 | pygeoapi is a Python server implementation of the OGC API suite of standards. From version 0.23.0 to before version 0.23.3, a raw string path concatenation vulnerability in pygeoap |
| CVE-2026-42352 | Deferred | 未確認 | CWE-918 | pygeoapi is a Python server implementation of the OGC API suite of standards. From version 0.23.0 to before version 0.23.3, OGC API process execution requests can use the subscrib |
| CVE-2026-42353 | Deferred | 未確認 | CWE-22, CWE-918 | i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Prior to version 3.9.3, i18next-http-middleware passes the |
| CVE-2026-42354 | Analyzed | 未確認 | CWE-290 | Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementation o |
| CVE-2026-42355 | Analyzed | 未確認 | CWE-674 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an uncontrolled recursion vulnerability exists in the Electron Archive (ASAR) parser in NanaZip. When |
| CVE-2026-42364 | Modified | 未確認 | CWE-78 | An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary co |
| CVE-2026-42365 | Modified | 未確認 | CWE-341 | A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an aut |
| CVE-2026-42366 | Analyzed | 未確認 | CWE-79 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious ur |
| CVE-2026-42367 | Modified | 未確認 | CWE-522 | A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credentials |
| CVE-2026-42368 | Modified | 未確認 | CWE-266 | A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged o |
| CVE-2026-42369 | Deferred | 未確認 | CWE-787 | GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other security devices. It is a native application accessed locally, but |
| CVE-2026-42370 | Modified | 未確認 | CWE-787 | A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execut |
| CVE-2026-42372 | Analyzed | 未確認 | CWE-798 | D-Link DIR-605L Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alpha |
| CVE-2026-42373 | Analyzed | 未確認 | CWE-798 | D-Link DIR-605L Hardware Revision B2 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alpha |
| CVE-2026-42374 | Analyzed | 未確認 | CWE-798 | D-Link DIR-600L Hardware Revision B1 (End-of-Life) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetwo |
| CVE-2026-42375 | Analyzed | 未確認 | CWE-798 | D-Link DIR-600L Hardware Revision A1 (End-of-Life) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetwo |
| CVE-2026-42376 | Analyzed | 未確認 | CWE-798 | D-Link DIR-456U Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the user |
| CVE-2026-42383 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue |
| CVE-2026-42396 | Analyzed | 未確認 | CWE-94 | Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail |
| CVE-2026-42398 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuri |
| CVE-2026-42399 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can cause Kibana to c |
| CVE-2026-42400 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted compres |
| CVE-2026-42401 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection. A user with write access to an Elasticsearch index could persist c |
| CVE-2026-42402 | Analyzed | 未確認 | CWE-400 | Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specially crafted WS-Policy documents can trigger an exponential C |
| CVE-2026-42403 | Analyzed | 未確認 | CWE-400 | Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references (where Policy A references Policy B |
| CVE-2026-42404 | Analyzed | 未確認 | CWE-918 | Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API |
| CVE-2026-42406 | Analyzed | 未確認 | CWE-267 | A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects th |
| CVE-2026-42408 | Analyzed | 未確認 | CWE-312 | When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) command that may allow a highly privileged authenticated attacker to view sensitive infor |
| CVE-2026-42409 | Analyzed | 未確認 | CWE-476 | When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traffic Management |
| CVE-2026-42425 | Deferred | 未確認 | CWE-89 | OpenKM 6.3.12 contains an unrestricted SQL execution vulnerability that allows authenticated administrative users to execute arbitrary SQL statements against the application databa |
| CVE-2026-42433 | Deferred | 未確認 | CWE-862 | OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level autho |
| CVE-2026-42434 | Deferred | 未確認 | CWE-863 | OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by specifying host=node. Attackers can bypass |
| CVE-2026-42435 | Deferred | 未確認 | CWE-184 | OpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection vulnerability allowing attackers to inject environment variable assignments at the |
| CVE-2026-42436 | Deferred | 未確認 | CWE-862 | OpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, screenshot, and tab routes that fail to consistently validate the final browser tar |
| CVE-2026-42437 | Deferred | 未確認 | CWE-770 | OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without proper validat |
| CVE-2026-42438 | Analyzed | 未確認 | CWE-863 | OpenClaw versions 2026.4.9 before 2026.4.10 contain a sender policy bypass vulnerability in the outbound host-media attachment read helper that allows unauthorized local file discl |
| CVE-2026-42439 | Analyzed | 未確認 | CWE-862, CWE-918 | OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. Attackers can bypass configured bro |
| CVE-2026-42440 | Modified | 未確認 | CWE-770, CWE-789 | OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before 1.9.5 before 2.5.9 before 3.0.0-M3 Description: The Ab |
| CVE-2026-42442 | Analyzed | 未確認 | CWE-476 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a null-pointer dereference exists in the UFS/UFS2 filesystem image parser in NanaZip. The vulnerabilit |
| CVE-2026-42443 | Analyzed | 未確認 | CWE-369 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an integer divide-by-zero exists in the UFS/UFS2 filesystem image parser in NanaZip. The vulnerability |
| CVE-2026-42444 | Analyzed | 未確認 | CWE-770 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a denial-of-service vulnerability exists in the littlefs filesystem image parser in NanaZip. The handl |
| CVE-2026-42445 | Analyzed | 未確認 | CWE-674 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an uncontrolled recursion vulnerability exists in the UFS/UFS2 filesystem image parser in NanaZip. The |
| CVE-2026-42446 | Analyzed | 未確認 | CWE-125 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a stack-based out-of-bounds read exists in the ZealFS filesystem image parser in NanaZip. The vulnerab |
| CVE-2026-42448 | Deferred | 未確認 | CWE-22 | Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. Prior to 0.24.0, there is a path traversal when a receiver who specifies |
| CVE-2026-42449 | Analyzed | 未確認 | CWE-918 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. In versions 2.47.4 through 2.47.13, the SDK embedder path (N8NDoc |
| CVE-2026-42451 | Deferred | 未確認 | CWE-79, CWE-80 | Grimmory is a self-hosted digital library. Prior to version 2.3.1, a stored cross-site scripting (XSS) vulnerability in Grimmory's browser-based EPUB reader allows an attacker to e |
| CVE-2026-42452 | Deferred | 未確認 | CWE-304 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, /users/login issues a temporary JWT (temp_toke |
| CVE-2026-42453 | Deferred | 未確認 | CWE-77 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, the extractArchive and compressFiles endpoints |
| CVE-2026-42454 | Deferred | 未確認 | CWE-78 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, all Docker container management endpoints in T |
| CVE-2026-42455 | Deferred | 未確認 | CWE-79 | Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In versions 2.14.0 and prior, the archive upload endpoint (POST / |
| CVE-2026-42456 | Analyzed | 未確認 | CWE-200, CWE-639 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, GET /api/workspace/:slug/tts/:c |
| CVE-2026-42457 | Deferred | 未確認 | CWE-79 | vCluster Platform provides a Kubernetes platform for managing virtual clusters, multi-tenancy, and cluster sharing. Prior to 4.4.3, 4.5.5, 4.6.2, 4.7.1, and 4.8.0, there is a Store |
| CVE-2026-42458 | Deferred | 未確認 | CWE-87 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backwar |
| CVE-2026-42459 | Analyzed | 未確認 | CWE-20, CWE-209 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm |
| CVE-2026-42461 | Analyzed | 未確認 | CWE-862 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to version 1.18.0, four GET endpoints under /api/templates* in Arcane's Huma backend are |
| CVE-2026-42463 | Analyzed | 未確認 | CWE-639 | SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.8.0, SQLBot contains a Cross-Workspace IDOR (Insecure Direct Object Reference) and Au |
| CVE-2026-42467 | Deferred | 未確認 | CWE-400 | An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Binary_Data_Transfer_DM16 causing a denial of service |
| CVE-2026-42468 | Analyzed | 未確認 | CWE-121 | Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote at |
| CVE-2026-42469 | Analyzed | 未確認 | CWE-121 | Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing |
| CVE-2026-42471 | Deferred | 未確認 | CWE-502 | Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke client (Connection.php:76) calls unserialize() on data received from the server response, |
| CVE-2026-42472 | Deferred | 未確認 | CWE-502 | Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on data from Redis in the RedisHandler object. |
| CVE-2026-42473 | Deferred | 未確認 | CWE-502 | Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on data from the filesystem in the FileHandler object. |
| CVE-2026-42474 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `data` array to the data function in BuildHelper.php. |
| CVE-2026-42475 | Analyzed | 未確認 | CWE-89 | SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `on` array to the joinOn function in BuildHelper.php. |
| CVE-2026-42476 | Modified | 未確認 | CWE-125 | Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 exist in RWStl_Reader::ReadAscii because buffers returne |
| CVE-2026-42477 | Modified | 未確認 | CWE-122, CWE-125 | A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows user-assisted attackers to cause a de |
| CVE-2026-42478 | Modified | 未確認 | CWE-125, CWE-476 | An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a |
| CVE-2026-42479 | Modified | 未確認 | CWE-125 | An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service |
| CVE-2026-42480 | Analyzed | 未確認 | CWE-125 | A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of ser |
| CVE-2026-42481 | Analyzed | 未確認 | CWE-125 | Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can be triggered by crafted IGES or STEP files. These issues incl |
| CVE-2026-42482 | Modified | 未確認 | CWE-121, CWE-787 | A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execu |
| CVE-2026-42483 | Modified | 未確認 | CWE-122, CWE-787 | A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted Kerberos |
| CVE-2026-42484 | Modified | 未確認 | CWE-787 | A heap-based buffer overflow in hex_to_binary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a cr |
| CVE-2026-42485 | Deferred | 未確認 | CWE-121 | AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library. The send_diagnostic_request function in uds.c allocates a 6-byte stack buffer (MAX_DIAGNOSTIC_P |
| CVE-2026-42496 | Modified | 未確認 | CWE-22, CWE-59 | Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linknam |
| CVE-2026-42497 | Modified | 未確認 | CWE-59, CWE-732 | Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory. _make_special_file() passes the tar header's linkname t |
| CVE-2026-42498 | Analyzed | 未確認 | CWE-200 | Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through |
| CVE-2026-42499 | Modified | 未確認 | CWE-1046 | Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. |
| CVE-2026-42500 | Deferred | 未確認 | Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image. | |
| CVE-2026-42501 | Analyzed | 未確認 | CWE-347 | A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an |
| CVE-2026-42502 | Analyzed | 未確認 | CWE-1021 | Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanit |
| CVE-2026-42503 | Analyzed | 未確認 | CWE-1327 | gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or |
| CVE-2026-42506 | Analyzed | 未確認 | CWE-79 | Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanit |
| CVE-2026-42508 | Modified | 未確認 | CWE-295 | Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked. |
| CVE-2026-42509 | Modified | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, 9 |
| CVE-2026-42526 | Analyzed | 未確認 | CWE-863 | In the AWS Secrets Manager and SSM Parameter Store secrets backends of `apache-airflow-providers-amazon` prior to 9.28.0, the team-scoping logic could resolve a `conn_id` containin |
| CVE-2026-42534 | Modified | 未確認 | CWE-440, CWE-911 | NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purpose and degrade resolution performance. Retransmits of the s |
| CVE-2026-42541 | Deferred | 未確認 | CWE-862 | Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions (which isn't the default) can craft |
| CVE-2026-42544 | Deferred | 未確認 | CWE-20, CWE-248, CWE-400 | Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Granian aborts a worker process when an unauthenticated client sends a WebSocket upgrade request whose S |
| CVE-2026-42545 | Deferred | 未確認 | CWE-248, CWE-755 | Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts a worker process if a WSGI application returns an invalid HTTP response header name or va |
| CVE-2026-42548 | Deferred | 未確認 | CWE-79 | Flight is an extensible micro-framework for PHP. Prior to 3.18.1, Flight::jsonp() concatenates the ?jsonp= query parameter directly into an application/javascript response body wit |
| CVE-2026-42549 | Deferred | 未確認 | CWE-22 | Flight is an extensible micro-framework for PHP. Prior to 3.18.1, the make:controller CLI command calls mkdir(..., recursive: true) on a path built from the user-supplied controlle |
| CVE-2026-42550 | Deferred | 未確認 | CWE-89 | Flight is an extensible micro-framework for PHP. Prior to 3.18.1, SimplePdo::insert(), SimplePdo::update(), and SimplePdo::delete() build SQL statements by concatenating the $table |
| CVE-2026-42551 | Deferred | 未確認 | CWE-436 | Flight is an extensible micro-framework for PHP. Prior to 3.18.1, Request::getMethod() unconditionally honors the X-HTTP-Method-Override header and the $_REQUEST['_method'] paramet |
| CVE-2026-42552 | Deferred | 未確認 | CWE-209 | Flight is an extensible micro-framework for PHP. Prior to 3.18.1, the default error handler Engine::_error() writes the full exception message, exception code, and stack trace (inc |
| CVE-2026-42553 | Deferred | 未確認 | CWE-20 | Cinny is a Matrix client. Prior to 4.10.3, A remote authenticated attacker who shares a room with a victim and has permissions to create room emotes (for example in a DM) can cause |
| CVE-2026-42554 | Analyzed | 未確認 | CWE-79 | Fiber is a web framework for Go. Prior to 2.52.12 and 3.1.0, Cross-Site Scripting vulnerability in Go Fiber allows a remote attacker to inject arbitrary HTML/JavaScript by supplyin |
| CVE-2026-42555 | Deferred | 未確認 | CWE-94 | Valtimo is an open-source business process automation platform. com.ritense.valtimo:document from 12.0.0 to before 12.32.0, com.ritense.valtimo:case from 13.0.0 to before 13.23.0, |
| CVE-2026-42556 | Analyzed | 未確認 | CWE-79 | Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store arbitrary HTML in post content by |
| CVE-2026-42557 | Modified | 未確認 | CWE-79 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlis |
| CVE-2026-42559 | Deferred | 未確認 | CWE-346, CWE-350 | RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate's Streamable HTTP server transport (crates/rmcp/src/transport/streamable_http_se |
| CVE-2026-42560 | Deferred | 未確認 | CWE-287 | auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patr |
| CVE-2026-42561 | Deferred | 未確認 | CWE-606, CWE-770 | Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part header parsing. When parsing |
| CVE-2026-42562 | Deferred | 未確認 | CWE-269 | Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in |
| CVE-2026-42564 | Deferred | 未確認 | CWE-200, CWE-22 | jotty·page is a self-hosted app for your checklists and notes. Prior to 1.22.0, an unauthenticated path traversal vulnerability exists in /api/app-icons/[filename]. The filename ro |
| CVE-2026-42565 | Deferred | 未確認 | CWE-601 | @workos/authkit-session is a toolkit for building WorkOS AuthKit framework integrations. Prior to 0.5.1, an open redirect vulnerability exists in AuthService.handleCallback due to |
| CVE-2026-42569 | Deferred | 未確認 | CWE-284, CWE-306, CWE-862 | phpVMS is a PHP application to run and simulate an airline. Prior to version 7.0.6, a critical vulnerability in phpVMS allowed unauthenticated access to a legacy import feature. Th |
| CVE-2026-42571 | Deferred | 未確認 | CWE-863 | Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is |
| CVE-2026-42572 | Analyzed | 未確認 | CWE-639, CWE-863 | Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.83.39, a missing authorization directive on the GET /api/v1/stable/d |
| CVE-2026-42574 | Deferred | 未確認 | CWE-22, CWE-59 | apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before version 1.2.5, a crafted .apk could install a TypeSymlink tar ent |
| CVE-2026-42575 | Deferred | 未確認 | CWE-345, CWE-494 | apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, apko verifies the signature on APKINDEX.tar.gz but never compares indiv |
| CVE-2026-42576 | Deferred | 未確認 | CWE-704 | apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, DiscoverKeys in pkg/apk/apk/implementation.go unconditionally type-asse |
| CVE-2026-42577 | Analyzed | 未確認 | CWE-772 | Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to 4.2.13.Final , Netty's epoll transport fails to detect and close TCP connections that rece |
| CVE-2026-42578 | Modified | 未確認 | CWE-113, CWE-93 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HTTP CONNECT requests with header |
| CVE-2026-42579 | Modified | 未確認 | CWE-1286, CWE-20, CWE-400, CWE-626 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints d |
| CVE-2026-42580 | Analyzed | 未確認 | CWE-190, CWE-444 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently overflows int, enabling request sm |
| CVE-2026-42581 | Modified | 未確認 | CWE-444 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting Content-Length header when a r |
| CVE-2026-42582 | Analyzed | 未確認 | CWE-770, CWE-789 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final, when decoding header blocks, the non-Huffman branch of io.netty.handler.codec.http3.Qpa |
| CVE-2026-42583 | Analyzed | 未確認 | CWE-400, CWE-770 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Lz4FrameDecoder allocates a ByteBuf of size decompressedLength (up to |
| CVE-2026-42584 | Modified | 未確認 | CWE-444 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound response with an outbound request |
| CVE-2026-42585 | Analyzed | 未確認 | CWE-444 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty incorrectly parses malformed Transfer-Encoding, enabling reques |
| CVE-2026-42586 | Analyzed | 未確認 | CWE-93 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the Netty Redis codec encoder (RedisEncoder) writes user-controlled s |
| CVE-2026-42587 | Modified | 未確認 | CWE-400, CWE-770 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxAllocation parameter to limit de |
| CVE-2026-42589 | Analyzed | 未確認 | CWE-78 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg's /forms/pdfengines/metadata/write HTTP endpoint accepts a JSON metadata object and passes its |
| CVE-2026-42590 | Analyzed | 未確認 | CWE-184 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.30.0, The ExifTool metadata write blocklist in Gotenberg can be bypassed using ExifTool's group-prefix syntax, |
| CVE-2026-42591 | Analyzed | 未確認 | CWE-918 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the LibreOffice conversion endpoint (/forms/libreoffice/convert) passes uploaded documents directly to L |
| CVE-2026-42592 | Analyzed | 未確認 | CWE-367, CWE-918 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, FilterOutboundURL resolves the hostname, checks the resolved IPs against the private-address deny-list, |
| CVE-2026-42593 | Analyzed | 未確認 | CWE-22, CWE-73 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, pdfengines/merge, pdfengines/split, libreoffice/convert, chromium/convert/url, chromium/convert/html, an |
| CVE-2026-42594 | Analyzed | 未確認 | CWE-362 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the webhook middleware spawns a goroutine that holds a reference to the request's echo.Context after the |
| CVE-2026-42595 | Analyzed | 未確認 | CWE-918 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, Gotenberg's Chromium URL-to-PDF endpoint (/forms/chromium/convert/url) has no default protection against |
| CVE-2026-42596 | Analyzed | 未確認 | CWE-918 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, the default deny-lists used by Gotenberg's downloadFrom feature and webhook feature are bypassable. Beca |
| CVE-2026-42597 | Analyzed | 未確認 | CWE-73, CWE-918 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the /forms/chromium/convert/url and /forms/chromium/screenshot/url routes accept url=file:///tmp/... fro |
| CVE-2026-42598 | Deferred | 未確認 | CWE-22 | Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers. From 2.4.0, to before 2.13.0, when requesting content from a Static Route |
| CVE-2026-42600 | Analyzed | 未確認 | CWE-22 | MinIO is a high-performance object storage system. From RELEASE.2022-07-24T01-54-52Z to before RELEASE.2026-04-14T21-32-45Z, A path traversal vulnerability in MinIO's ReadMultiple |
| CVE-2026-42601 | Analyzed | 未確認 | CWE-88 | ArchiveBox is an open source self-hosted web archiving system. In versions 0.8.6rc0 and prior, the /add/ endpoint (AddView in core/views.py) accepts a config JSON field that gets m |
| CVE-2026-42602 | Analyzed | 未確認 | CWE-208, CWE-287, CWE-290, CWE-294, CWE-347 | azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in azureauthextension allows any party who holds a single vali |
| CVE-2026-42603 | Deferred | 未確認 | CWE-94, CWE-95 | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. Prior to 2.1.2, .github/workflows/pre-commit-fix.yaml u |
| CVE-2026-42605 | Analyzed | 未確認 | CWE-22 | AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the currentDirectory request parameter in the Flow.js media upload endpoint (POST /api/s |
| CVE-2026-42606 | Analyzed | 未確認 | CWE-640 | AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the ApplyXForwarded middleware unconditionally trusts the client-supplied X-Forwarded-Ho |
| CVE-2026-42607 | Deferred | 未確認 | CWE-94 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with administrative privileges can achieve Remote Code Execution (RCE) by uploading a specially craf |
| CVE-2026-42608 | Analyzed | 未確認 | CWE-22 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, there is a Path Traversal vulnerability within the FormFlash core component. By manipulating the session_id (passed as __f |
| CVE-2026-42609 | Modified | 未確認 | CWE-269, CWE-285, CWE-639, CWE-837 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation permissions) |
| CVE-2026-42610 | Analyzed | 未確認 | CWE-863 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged user (EX: Content Editor with only pages.update permissions) can bypass the existing Twig sandbox restric |
| CVE-2026-42611 | Analyzed | 未確認 | CWE-79 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged (with the ability to create a page) user can cause XSS with the injection of svg element. The XSS can fur |
| CVE-2026-42612 | Analyzed | 未確認 | CWE-79 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (XSS) vulnerability in getgrav/grav allows publisher-level accounts to execute arbitrary Jav |
| CVE-2026-42613 | Deferred | 未確認 | CWE-20, CWE-862 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Login plugin accepts attacker-controlled groups and access fields from the registratio |
| CVE-2026-42626 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | HP ENVY 5000 series printers VERBASPP1N003.2237A.00 do not properly manage concurrent TCP connections to port 9100 (JetDirect/RAW printing). An unauthenticated remote attacker on t |
| CVE-2026-42627 | Deferred | 未確認 | CWE-190 | In Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn/Tensor.cpp allows a crafted TFLite model file to bypass buffer size validation and tr |
| CVE-2026-42725 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Exploiting Incorrectly Conf |
| CVE-2026-42726 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels. |
| CVE-2026-42727 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-w |
| CVE-2026-42728 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows Stored XSS.This issue affec |
| CVE-2026-42729 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows DOM-Based XSS.This issue affect |
| CVE-2026-4273 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate that the RefreshedToken differs from the original invite token during remote cluster invite confirmation |
| CVE-2026-42730 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Bli |
| CVE-2026-42731 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp ver |
| CVE-2026-42732 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded allows Input Data Manipulation.This issue affects Ads by WP |
| CVE-2026-42733 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 WPCS currency-switcher allows DOM-Based XSS.This issue affects WPCS |
| CVE-2026-42734 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo |
| CVE-2026-42735 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This issue |
| CVE-2026-42736 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages allows Exploiting Incorrectly Configured Access Control Security Le |
| CVE-2026-42737 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Path Traversal.This |
| CVE-2026-42738 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Stored XSS.T |
| CVE-2026-42739 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IniLerm Advanced IP Blocker advanced-ip-blocker allows DOM-Based XSS.This issu |
| CVE-2026-42740 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows Blind SQL Injection.This issue affects Taina |
| CVE-2026-42741 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submissions on y |
| CVE-2026-42742 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL Injection.This |
| CVE-2026-42744 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded allows Manipulating Hidden Fields.This issue affects Ads by |
| CVE-2026-42745 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypass.This issue affects |
| CVE-2026-42746 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Retrieve Embedded Sensitive Data.This issue aff |
| CVE-2026-42747 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection. |
| CVE-2026-42748 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from |
| CVE-2026-42749 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types (Remove comments) comments-plus allows Password Recovery Exp |
| CVE-2026-42750 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nexcess WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: |
| CVE-2026-42751 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevelop Booking Manager booking-manager allows Stored XSS.This issue affects |
| CVE-2026-42753 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect |
| CVE-2026-42754 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phbernard Favicon favicon-by-realfavicongenerator allows Reflected XSS.This is |
| CVE-2026-42755 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issu |
| CVE-2026-42756 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ludwig You QuickWebP – Compress / Optimize Images & Convert WebP | SEO Fri |
| CVE-2026-42757 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Path Traversal.This |
| CVE-2026-42758 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Privilege Escalation.This issue affects WebinarIgnition: from n/a t |
| CVE-2026-42759 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timo Affiliate Super Assistent amazonsimpleadmin allows Stored XSS.This issue |
| CVE-2026-42760 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Password Recovery Exploitation.This i |
| CVE-2026-42761 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-w |
| CVE-2026-42762 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows DOM-Based XSS |
| CVE-2026-42763 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in SePay team SePay Gateway allows Retrieve Embedded Sensitive Data. This issue affects SePay Gateway: from n/a through 1.1.20. |
| CVE-2026-42773 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eMagicOne eMagicOne Store Manager allows Blind SQL Injection. This issue affe |
| CVE-2026-42774 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine allows SQL Injection. This issue affects JetEngine: from |
| CVE-2026-42776 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sunshine Photo C |
| CVE-2026-42778 | Analyzed | 未確認 | CWE-502 | The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer. |
| CVE-2026-42779 | Analyzed | 未確認 | CWE-502 | The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: Apache MINA's AbstractIoBuffer.resolveClass() contai |
| CVE-2026-42780 | Analyzed | 未確認 | CWE-22 | A directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an authenticated attacker with high privilege to overwrite, delete or corrupt arbitrary local file |
| CVE-2026-42781 | Analyzed | 未確認 | CWE-835 | When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can cause an increase in ePVA and Traffic Management Microkernel (T |
| CVE-2026-42782 | Modified | 未確認 | CWE-653 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class con |
| CVE-2026-42785 | Deferred | 未確認 | CWE-94 | OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /admin/Scripting endpoint |
| CVE-2026-42786 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion. The fragment reassembly |
| CVE-2026-42788 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated memory exhaustion via oversized HTTP/2 frames. 'Elixir.Bandit.HTTP2.Fra |
| CVE-2026-42789 | Modified | 未確認 | CWE-295, CWE-296 | Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an intermediate issue |
| CVE-2026-42790 | Modified | 未確認 | CWE-295, CWE-297 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS nameConstraints bypass via subject CommonName fallback in T |
| CVE-2026-42791 | Modified | 未確認 | CWE-295, CWE-672 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows forged OCSP responses signed with an expired responder certificate to be accepted |
| CVE-2026-42793 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing atta |
| CVE-2026-42794 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. |
| CVE-2026-42796 | Analyzed | 未確認 | CWE-306 | Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /rest/configure REST endpoint that accepts a plugins query parameter and forwards it to |
| CVE-2026-42797 | Analyzed | 未確認 | CWE-202 | Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL |
| CVE-2026-42809 | Analyzed | 未確認 | CWE-20, CWE-862 | Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location has been validated or durably reserved. Th |
| CVE-2026-42810 | Analyzed | 未確認 | CWE-116, CWE-20 | Apache Polaris accepts literal `*` characters in namespace and table names. When it later builds temporary S3 access policies for delegated table access, those same characters appe |
| CVE-2026-42811 | Analyzed | 未確認 | CWE-20, CWE-917 | In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted namespace or table name can cause those credenti |
| CVE-2026-42812 | Analyzed | 未確認 | CWE-20, CWE-284, CWE-732, CWE-863 | In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table version to read. `write.metadata.path` is |
| CVE-2026-42822 | Analyzed | 未確認 | CWE-287 | Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-42823 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-42825 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42826 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-42827 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-42830 | Analyzed | 未確認 | CWE-426 | Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42831 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-42832 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally. |
| CVE-2026-42833 | Modified | 未確認 | CWE-250 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. |
| CVE-2026-42834 | Modified | 未確認 | CWE-59 | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-42838 | Analyzed | 未確認 | CWE-74 | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate pri |
| CVE-2026-42841 | Analyzed | 未確認 | CWE-79 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page editing permissions can inject an executable JavaScript event-handler attribute into rende |
| CVE-2026-42842 | Deferred | 未確認 | CWE-79 | The form plugin for Grav adds the ability to create and use forms. Prior to 9.1.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Grav CMS Form plugin's select fie |
| CVE-2026-42843 | Analyzed | 未確認 | CWE-863 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content, media, configuration, users, and system management. Prior to 1.0.0-beta.15, |
| CVE-2026-42844 | Analyzed | 未確認 | CWE-269, CWE-434 | Grav is a file-based Web platform. In Grav 2.0.0-beta.2, a low-privileged authenticated API user with api.media.write can abuse /api/v1/blueprint-upload to write an arbitrary YAML |
| CVE-2026-42845 | Deferred | 未確認 | CWE-73 | The form plugin for Grav adds the ability to create and use forms. Prior to 9.1.0 , there is an unauthenticated page-content overwrite via file upload (GHSA-w4rc-p66m-x6qq). Public |
| CVE-2026-42847 | Deferred | 未確認 | CWE-89 | ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #122, there is a critical SQL Injection (SQLi) vulnerability in ClipBucket, exploitable through the type pa |
| CVE-2026-42854 | Analyzed | 未確認 | CWE-121 | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer multipart form parser in arduino |
| CVE-2026-42855 | Analyzed | 未確認 | CWE-287 | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer Digest authentication implementa |
| CVE-2026-42856 | Deferred | 未確認 | CWE-306 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC tools/call requests with no authentication, session, origin, or |
| CVE-2026-42857 | Modified | 未確認 | CWE-79 | Open edX Platform enables the authoring and delivery of online learning at any scale. The HTML sanitizer clean_thread_html_body() used for discussion notification emails fails to r |
| CVE-2026-42858 | Analyzed | 未確認 | CWE-918 | Open edX Platform enables the authoring and delivery of online learning at any scale. The sync_provider_data endpoint in SAMLProviderDataViewSet allows authenticated Enterprise Adm |
| CVE-2026-42859 | Deferred | 未確認 | CWE-120 | Neat VNC is a VNC server library. Prior to 0.9.6, a pre-authentication stack buffer overflow exists in neatvnc in the RSA-AES security type handler. An unauthenticated remote attac |
| CVE-2026-4286 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to check if {{team_id}} was being changed when updating playbooks, allowing users with only {{Manage Playbook Configu |
| CVE-2026-42860 | Analyzed | 未確認 | CWE-918 | The Open edx Enterprise Service app provides enterprise features to the Open edX platform. From 7.0.2 to 7.0.4, the sync_provider_data endpoint in SAMLProviderDataViewSet fetches S |
| CVE-2026-42864 | Deferred | 未確認 | CWE-306, CWE-918 | FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/raid/jira_bot endpoint (CreateJiraBotView) is reachable without authentication (per |
| CVE-2026-42865 | Analyzed | 未確認 | CWE-200 | Inbox Zero is an AI personal assistant for email. Prior to 2.29.3, the cleaner email stream endpoint used a shared Redis subscription listener, which could deliver thread events fo |
| CVE-2026-42866 | Deferred | 未確認 | CWE-22, CWE-73 | Tookie is a advanced OSINT information gathering tool. Prior to 4.1fix, modules/modules.py's write_txt, write_csv, write_json, and (commented-but-shipping) scan_file helpers open t |
| CVE-2026-42869 | Deferred | 未確認 | CWE-287, CWE-522, CWE-798 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57, SOCFortress CoPilot ships a hardcoded JWT signing secret as |
| CVE-2026-42870 | Deferred | 未確認 | CWE-79 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a Stored Cross-Site Scripting (XSS) flaw was identified at the following endpoint: funcionario/profi |
| CVE-2026-42871 | Deferred | 未確認 | CWE-200 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiar_docfamiliar.php displays an overly descriptive error message, including database-r |
| CVE-2026-42872 | Deferred | 未確認 | CWE-79 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a reflected Cross-Site Scripting (XSS) vulnerability exists in lista_arquivos_etapa.php due to impro |
| CVE-2026-42873 | Deferred | 未確認 | CWE-200 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, when attempting to upload a file with malicious content to funcionario/docdependente_upload.php, th |
| CVE-2026-42874 | Deferred | 未確認 | CWE-113 | Microdot is a minimalistic Python web framework. Prior to 2.6.1, the Response.set_cookie() method does not sanitize its string arguments, and in particular will not detect the pres |
| CVE-2026-42875 | Deferred | 未確認 | CWE-285, CWE-668 | External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.0, Namespaced SecretStore resources |
| CVE-2026-42876 | Deferred | 未確認 | CWE-285 | External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.1, a user who only has permission to |
| CVE-2026-42877 | Deferred | 未確認 | CWE-79 | FacturaScripts is an open source accounting and invoicing software. In 2025.92 and earlier, a stored Cross-Site Scripting (XSS) vulnerability exists in the product search modal of |
| CVE-2026-42878 | Deferred | 未確認 | CWE-200 | FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure vulnerability in the Installer controller allows any r |
| CVE-2026-42879 | Deferred | 未確認 | CWE-434, CWE-94 | FacturaScripts is an open source accounting and invoicing software. In 2025.81 and earlier, an authenticated unrestricted file upload vulnerability exists in FacturaScripts' produc |
| CVE-2026-42880 | Modified | 未確認 | CWE-200, CWE-201, CWE-212 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data- |
| CVE-2026-42881 | Deferred | 未確認 | CWE-22, CWE-73 | STIGQter is an open-source reimplementation of DISA's STIG Viewer. From 0.1.2 to before 1.2.7, an attacker can achieve local code execution (LCE) with the privileges of the user ru |
| CVE-2026-42882 | Deferred | 未確認 | CWE-22, CWE-863 | oxyno-zeta/s3-proxy is an aws s3 proxy written in go. Prior to 5.0.0, s3-proxy contains an authentication bypass caused by inconsistent URL path interpretation between the authenti |
| CVE-2026-42883 | Deferred | 未確認 | CWE-863 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /api/libraries/:id/download endpoint validates that the requesting user has access to the lib |
| CVE-2026-42884 | Deferred | 未確認 | CWE-863 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /api/collections and GET /api/collections/:id endpoints return collections from all libraries |
| CVE-2026-42885 | Deferred | 未確認 | CWE-22 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/filesystem/pathexists endpoint uses String.startsWith() to validate that a resolved fil |
| CVE-2026-42886 | Deferred | 未確認 | CWE-409 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/backups/upload endpoint decompresses the details entry from an uploaded .audiobookshelf |
| CVE-2026-42887 | Deferred | 未確認 | CWE-79 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.33.0, a stored cross-site scripting (XSS) vulnerability exists in the Login Page due to improper sanitizati |
| CVE-2026-42888 | Deferred | 未確認 | CWE-22 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/controllers/PodcastController.js accepts a user-controlled fi |
| CVE-2026-42889 | Deferred | 未確認 | CWE-639, CWE-863 | Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentic |
| CVE-2026-42891 | Analyzed | 未確認 | CWE-451 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-42893 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-42896 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42897 | Analyzed | 掲載 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network |
| CVE-2026-42898 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. |
| CVE-2026-42899 | Modified | 未確認 | CWE-835 | Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-4290 | Deferred | 未確認 | CWE-862 | The WP Travel Pro plugin for WordPress is vulnerable to arbitrary user deletion via the /wp-json/wp-travel/v1/travel-guide/{user_id} REST API endpoint in all versions up to, and in |
| CVE-2026-42901 | Analyzed | 未確認 | CWE-346 | Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-42919 | Analyzed | 未確認 | CWE-121 | A vulnerability exists in BIG-IP systems that may allow an authenticated attacker with administrative access to escalate their privileges. A successful exploit may allow the attack |
| CVE-2026-42920 | Analyzed | 未確認 | CWE-835 | When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminat |
| CVE-2026-42923 | Analyzed | 未確認 | CWE-407 | NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does not take int |
| CVE-2026-42924 | Analyzed | 未確認 | CWE-78 | An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP resulting in privilege escalation. Note |
| CVE-2026-42926 | Analyzed | 未確認 | CWE-172 | When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and p |
| CVE-2026-42929 | Analyzed | 未確認 | CWE-798 | Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials. |
| CVE-2026-4293 | Deferred | 未確認 | CWE-79 | The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows the attacker |
| CVE-2026-42930 | Undergoing Analysis | 未確認 | CWE-35 | When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system. Note: Software v |
| CVE-2026-42934 | Analyzed | 未確認 | CWE-125 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering (" |
| CVE-2026-42937 | Analyzed | 未確認 | CWE-732 | Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST. These vulnerabilities may allow an a |
| CVE-2026-42941 | Analyzed | 未確認 | CWE-1392 | The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change. |
| CVE-2026-42944 | Modified | 未確認 | CWE-131, CWE-197, CWE-787 | NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Paddin |
| CVE-2026-42945 | Modified | 未確認 | CWE-122, CWE-131 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or s |
| CVE-2026-42946 | Analyzed | 未確認 | CWE-789, CWE-823 | A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. When scgi_pass or uwsgi |
| CVE-2026-42948 | Deferred | 未確認 | CWE-79 | Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed |
| CVE-2026-42950 | Deferred | 未確認 | CWE-754 | ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user's |
| CVE-2026-42951 | Analyzed | 未確認 | CWE-522 | An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes. |
| CVE-2026-42959 | Modified | 未確認 | CWE-824 | NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies. When |
| CVE-2026-42960 | Analyzed | 未確認 | CWE-349 | NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section. Promiscuous RRSets that complement DNS replies i |
| CVE-2026-42961 | Deferred | 未確認 | CWE-344 | ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the use |
| CVE-2026-42965 | Modified | 未確認 | CWE-918 | A flaw was found in the OpenShift Router. A user with EndpointSlice write access can exploit this vulnerability by creating a Service backed by an FQDN (Fully Qualified Domain Name |
| CVE-2026-42994 | Analyzed | 未確認 | CWE-78, CWE-94 | Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to a Checkmarx supply chain incident. |
| CVE-2026-42996 | Deferred | 未確認 | CWE-121 | JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator. This occurs |
| CVE-2026-42997 | Modified | 未確認 | CWE-201, CWE-669 | An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential f |
| CVE-2026-42998 | Analyzed | 未確認 | CWE-863 | An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the user supplied in the authentication |
| CVE-2026-42999 | Modified | 未確認 | CWE-639, CWE-863 | An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforce_call unconditionally merges the raw JSON request body into the policy enfo |
| CVE-2026-43000 | Modified | 未確認 | CWE-266, CWE-863 | An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation vulnerability, an attacker with the member role on a project |
| CVE-2026-43001 | Modified | 未確認 | CWE-1288, CWE-863 | An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied project_id for an EC2-type credential matched the projec |
| CVE-2026-43002 | Analyzed | 未確認 | CWE-696 | An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be ex |
| CVE-2026-43003 | Modified | 未確認 | CWE-78, CWE-829 | An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partit |
| CVE-2026-43004 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: stm32-ospi: Fix resource leak in remove() callback The remove() callback returned early if pm_runtime_res | |
| CVE-2026-43005 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (tps53679) Fix array access with zero-length block read i2c_smbus_read_block_data() can return 0, indic |
| CVE-2026-43006 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: reject zero-length fixed buffer import validate_fixed_range() admits buf_addr at the exact end |
| CVE-2026-43007 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner went away When a DBC is released, the device sends a QAIC_TRA |
| CVE-2026-43008 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() devm_regmap_init_mmio() returns an ERR_PTR() |
| CVE-2026-43009 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrack_insn encounters a BPF_STX ins |
| CVE-2026-4301 | Deferred | 未確認 | CWE-862 | The Rate Star Review Vote - AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. The vwrsr_revie |
| CVE-2026-43010 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobe_multi programs at attach time kprobe.multi programs run in atomic/RCU context and | |
| CVE-2026-43011 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_frame it calls kfree_skb(skb) a |
| CVE-2026-43012 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of failure If for some internal reason switchdev mode fails, we | |
| CVE-2026-43013 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs __mlx5_lag_dev_add_mdev() may return 0 (success) e |
| CVE-2026-43014 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister fixed rate clocks The additional resources allocated with clk_register_fixed_ra | |
| CVE-2026-43015 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platform_device_unregister() may still want to use the |
| CVE-2026-43016 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). syzbot reported use-after- |
| CVE-2026-43017 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate mesh send advertising payload length mesh_send() currently bounds MGMT_OP_MESH_SEND | |
| CVE-2026-43018 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt hci_conn lookup and field access m |
| CVE-2026-43019 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync hci_conn lookup and field access must be covered |
| CVE-2026-43020 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load Load Long Term Keys stores the user-provided enc_size and later |
| CVE-2026-43021 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails When hci_cmd_sync_queue_once() returns with |
| CVE-2026-43022 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists hci_cmd_sync_queue_once() needs to ind | |
| CVE-2026-43023 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_connect() sco_sock_connect() checks sk_state and sk_type witho |
| CVE-2026-43024 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE verdict nft_queue is always used from userspace nftables to de | |
| CVE-2026-43025 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on new expectations Use the existing master conntrack helper, any |
| CVE-2026-43026 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent ctnetlink_alloc_expect() allocates exp | |
| CVE-2026-43027 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expect cleanup nf_conntrack_helper_unregister() calls nf_ct_exp |
| CVE-2026-43028 | Modified | 未確認 | CWE-170 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-terminated Reject names that lack a \0 character before feeding them |
| CVE-2026-43029 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix soft lockup in mptcp_recvmsg() syzbot reported a soft lockup in mptcp_recvmsg() [0]. When receivin |
| CVE-2026-43030 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In case rold->reg->range == BEYOND_PKT_END && rcur->reg->range == N |
| CVE-2026-43031 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets When a TX packet spans multiple buffer descri | |
| CVE-2026-43032 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFC: pn533: bound the UART receive buffer pn532_receive_buf() appends every incoming byte to dev->recv_skb and | |
| CVE-2026-43033 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption When decrypting data that is |
| CVE-2026-43034 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: set backing store type from query type bnxt_hwrm_func_backing_store_qcaps_v2() stores resp->type from | |
| CVE-2026-43035 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak When buildi |
| CVE-2026-43036 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: net: use skb_header_pointer() for TCPv4 GSO frag_off check Syzbot reported a KMSAN uninit-value warning in gso |
| CVE-2026-43037 | Modified | 未確認 | CWE-121, CWE-787, CWE-843 | In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem. ip4ip6_err() calls ic |
| CVE-2026-43038 | Modified | 未確認 | CWE-787, CWE-843 | In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icm |
| CVE-2026-43039 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch emac_dispatch_skb_zc() alloca | |
| CVE-2026-4304 | Deferred | 未確認 | CWE-89 | The WeePie Cookie Allow plugin for WordPress is vulnerable to SQL Injection via the 'consent' parameter in all versions up to, and including, 3.4.11 due to insufficient escaping on |
| CVE-2026-43040 | Modified | 未確認 | CWE-909 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak Whe |
| CVE-2026-43041 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak __radix_tree_create() allocates and |
| CVE-2026-43042 | Modified | 未確認 | CWE-125, CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platform_label{,s} pair The RCU-protected codepaths (mpls_forward, mpls_dump |
| CVE-2026-43043 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in scatterwalk The AF_ALG interface fails to unmark the end of a |
| CVE-2026-43044 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix DMA corruption on long hmac keys When a key longer than block size is supplied, it is copie | |
| CVE-2026-43045 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mshv: Fix error handling in mshv_region_pin The current error handling has two issues: First, pin_user_pages_ | |
| CVE-2026-43046 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and zero drop_level [BUG] When recovering relocation at mount time |
| CVE-2026-43047 | Modified | 未確認 | CWE-20, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report responses match the request It is possible for a malicious (or clumsy) |
| CVE-2026-43048 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus memset() The memset() in hid_report_raw_event() has the go |
| CVE-2026-43049 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Presently, if the force f |
| CVE-2026-43050 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix use-after-free in sock_def_readable() A race condition exists between lec_atm_close() setting pr |
| CVE-2026-43051 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq The wacom_intuos_bt_irq() function processes Bluetoo |
| CVE-2026-43052 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only | |
| CVE-2026-43053 | Modified | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivation When inactivating an inode with node-format extended attr |
| CVE-2026-43054 | Analyzed | 未確認 | CWE-772 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Drain commands in target_reset handler tcm_loop_target_reset() violates the SCSI EH co |
| CVE-2026-43055 | Modified | 未確認 | CWE-457 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: file: Use kzalloc_flex for aio_cmd The target_core_file doesn't initialize the aio_cmd->iocb for |
| CVE-2026-43056 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in add_adev() error path If auxiliary_device_add() fails, add_adev() jumps to ad |
| CVE-2026-43057 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback NETIF_F_IPV6_CSUM only advertises support for | |
| CVE-2026-43058 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtv_ts_null_write_into() and vidtv_ts_pcr_writ |
| CVE-2026-43059 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers Commit 302a1f674c00 ("Bluetooth: MGM |
| CVE-2026-43060 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: drop pending enqueued packets on removal Packets sitting in nfqueue might hold a reference |
| CVE-2026-43061 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix TX deadlock when using DMA `dmaengine_terminate_async` does not guarantee that the `__dma_tx |
| CVE-2026-43062 | Modified | 未確認 | CWE-843 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() l2cap_ecred_reconf_rsp() casts the incoming d |
| CVE-2026-43063 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't irele after failing to iget in xfs_attri_recover_work xlog_recovery_iget* never set @ip to a valid |
| CVE-2026-43064 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix not releasing workqueue on .release() The workqueue associated with an DSA/IAA device is | |
| CVE-2026-43065 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: always drain queued discard work in ext4_mb_release() While reviewing recent ext4 patch[1], Sashiko rais | |
| CVE-2026-43066 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths During code review, Joseph found that ext4_fc_rep |
| CVE-2026-43067 | Modified | 未確認 | CWE-822 | In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for blocks for indirect mapped blocks Commit 4865c768b563 ("ext4: alway |
| CVE-2026-43068 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() There's issue as follows: ... EXT4-f |
| CVE-2026-43069 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_ll: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hci_ll.c:587 download_fi |
| CVE-2026-43070 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register ID for BPF_END value tracking When a register undergoes a BPF_END (byte swap) operation, i |
| CVE-2026-43071 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to two There is an OOB read problem on dentry_hashtable when user s |
| CVE-2026-43072 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: platform_get_irq_byname() returns an int platform_get_irq_byname() will return a negative value if an | |
| CVE-2026-43073 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86-64: rename misleadingly named '__copy_user_nocache()' function This function was a masterclass in bad nami | |
| CVE-2026-43074 | Modified | 未確認 | CWE-401, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situations, ep_free() in eventpoll.c wil |
| CVE-2026-43075 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2_write_end_inline KASAN reports a use-after-free write of 4086 bytes in |
| CVE-2026-43076 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline data i_size during inode read When reading an inode from disk, ocfs2_validate_inode_blo |
| CVE-2026-43077 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size di | |
| CVE-2026-43078 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl When page reassignment was added to af_alg |
| CVE-2026-43079 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Skip discovery table for offline dies This warning can be triggered if NUMA is disabled | |
| CVE-2026-43080 | Modified | 未確認 | CWE-674 | In the Linux kernel, the following vulnerability has been resolved: l2tp: Drop large packets with UDP encap syzbot reported a WARN on my patch series [1]. The actual issue is an |
| CVE-2026-43081 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ Fix the field masks to match the hardware layout | |
| CVE-2026-43082 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: leave space for null terminators on property_entry Lists of struct property_entry are supposed to | |
| CVE-2026-43083 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: net: ioam6: fix OOB and missing lock When trace->type.bit6 is set: if (trace->type.bit6) { ... |
| CVE-2026-43084 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: make hash table per queue Sharing a global hash table among all queues is tempting |
| CVE-2026-43085 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator When batching multiple NFLOG messages ( | |
| CVE-2026-43086 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix NULL deref in ip_vs_add_service error path When ip_vs_bind_scheduler() succeeds in ip_vs_add_service |
| CVE-2026-43087 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Disable all pin interrupts during probe A chip being probed may have the interrupt-on-chang | |
| CVE-2026-43088 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: af_key: zero aligned sockaddr tail in PF_KEY exports PF_KEY export paths use `pfkey_sockaddr_size()` when | |
| CVE-2026-43089 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() struct xfrm_usersa_id has a one-byte padding hole after the proto |
| CVE-2026-43090 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix refcount leak in xfrm_migrate_policy_find syzkaller reported a memory leak in xfrm_policy_alloc: | |
| CVE-2026-43091 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns exit xfrm_policy_fini() frees the policy_bydst hash tables afte |
| CVE-2026-43092 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AF_XDP bind currently accepts zero-copy pool configuration | |
| CVE-2026-43093 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account for tailroom and min frame The current headroom validation in |
| CVE-2026-43094 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiate_features op to Hyper-V ops table Commit a7075f501bd3 ("ixgbevf: fix mailbox API |
| CVE-2026-43095 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Fix errors in IRQ cleanup IRQs are enabled through sdca_irq_populate() from component probe using | |
| CVE-2026-43096 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: mshv: Fix infinite fault loop on permission-denied GPA intercepts Prevent infinite fault loops when guests acc |
| CVE-2026-43097 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: PCI: hv: Fix double ida_free in hv_pci_probe error path If hv_pci_probe() fails after storing the domain numbe |
| CVE-2026-43098 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: s3fwrn5: allocate rx skb before consuming bytes s3fwrn82_uart_read() reports the number of accepted bytes | |
| CVE-2026-43099 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmp_build_probe() ipv6_stub->ipv6_dev_find() may return ERR_PTR(-EAFNOSUPPO |
| CVE-2026-43100 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bridge: guard local VLAN-0 FDB helpers against NULL vlan group When CONFIG_BRIDGE_VLAN_FILTERING is not set, b |
| CVE-2026-43101 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() We need to check __in6_dev_get() for |
| CVE-2026-43102 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix memory leak in airoha_qdma_rx_process() If an error occurs on the subsequents buffers belongi |
| CVE-2026-43103 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: lapbether: handle NETDEV_PRE_TYPE_CHANGE lapbeth_data_transmit() expects the underlying device type to be | |
| CVE-2026-43104 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix a memory leak in hang state error path When vc4_save_hang_state() encounters an early return cond |
| CVE-2026-43105 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix memory leak of BO array in hang state The hang state's BO array is allocated separately with kzal |
| CVE-2026-43106 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix incorrect dentry refcount in cachefiles_cull() The patch mentioned below changed cachefiles_bu | |
| CVE-2026-43107 | Modified | 未確認 | CWE-131 | In the Linux kernel, the following vulnerability has been resolved: xfrm: account XFRMA_IF_ID in aevent size calculation xfrm_get_ae() allocates the reply skb with xfrm_aevent_ms |
| CVE-2026-43108 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei It looks element length declared in servreg | |
| CVE-2026-43109 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86: shadow stacks: proper error handling for mmap lock 김영민 reports that shstk_pop_sigframe() doesn't check fo | |
| CVE-2026-43110 | Modified | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF events brcmf_fweh_handle_if_event() validates the firmware-provi |
| CVE-2026-43111 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccat_report_event roccat_report_event() iterates over the device->readers |
| CVE-2026-43112 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an em |
| CVE-2026-43113 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: validate packet IDs before indexing tx_frames wl1251_tx_packet_cb() uses the firmware completion |
| CVE-2026-43114 | Modified | 未確認 | CWE-20, CWE-480 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry New test case fails unexpectedly whe |
| CVE-2026-43115 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: srcu: Use irq_work to start GP in tiny SRCU Tiny SRCU's srcu_gp_start_if_needed() directly calls schedule_work | |
| CVE-2026-43116 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ensure safe access to master conntrack Holding reference on the expectation is not suffi |
| CVE-2026-43117 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() If overlay is used on top of |
| CVE-2026-43118 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists, as part of l | |
| CVE-2026-43119 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: annotate data-races around hdev->req_status __hci_cmd_sync_sk() sets hdev->req_status und | |
| CVE-2026-43120 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix double free related to rereg_user_mr If IB_MR_REREG_TRANS is set during rereg_user_mr, the ume |
| CVE-2026-43121 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix user_ref race between scrub and refill paths The io_zcrx_put_niov_uref() function uses a no |
| CVE-2026-43122 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-43123 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: fbcon: check return value of con2fb_acquire_newinfo() If fbcon_open() fails when called from con2fb_acquire_ne |
| CVE-2026-43124 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return when vmap() fails In persistent_ram_vmap(), vmap() may return N |
| CVE-2026-43125 | Modified | 未確認 | CWE-130, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and come |
| CVE-2026-43126 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mixer: oss: Add card disconnect checkpoints ALSA OSS mixer layer calls the kcontrol ops rather individua | |
| CVE-2026-43127 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix circular locking dependency in run_unpack_ex Syzbot reported a circular locking dependency between |
| CVE-2026-43128 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix double dma_buf_unpin in failure path In ib_umem_dmabuf_get_pinned_with_dma_device(), the call t |
| CVE-2026-43129 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ima: verify the previous kernel's IMA buffer lies in addressable RAM Patch series "Address page fault in ima_r | |
| CVE-2026-43130 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac ("iommu/v | |
| CVE-2026-43131 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix null pointer dereference issue If SMU is disabled, during RAS initialization, there will be nu |
| CVE-2026-43132 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm_bufio_client_create( | |
| CVE-2026-43133 | Modified | 未確認 | CWE-628, CWE-754 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to |
| CVE-2026-43134 | Modified | 未確認 | CWE-326 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ This adds a check for encryption key size u |
| CVE-2026-43135 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Add missing unmap in snd_cx23885_hw_params() In error path, add cx23885_alsa_dma_unmap() to re | |
| CVE-2026-43136 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() Do not crash when a report has no fields. Fa | |
| CVE-2026-43137 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix NULL pointer dereference If there's a mismatch between the DAI links in the machine |
| CVE-2026-43138 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: reset: gpio: suppress bind attributes in sysfs This is a special device that's created dynamically and is supp |
| CVE-2026-43139 | Modified | 未確認 | CWE-457, CWE-908 | In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() xfrm6_get_saddr() does not check the return value of ipv6_ |
| CVE-2026-43140 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for |
| CVE-2026-43141 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut Number of MW LUTs depends on NTB configuration and |
| CVE-2026-43142 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, th |
| CVE-2026-43143 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mfd: core: Add locking around 'mfd_of_node_list' Manipulating a list in the kernel isn't safe without some sor | |
| CVE-2026-43144 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential kernel oops when probe fails When probe of the sdio brcmfmac device fails for so |
| CVE-2026-43145 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Fix invalid loaded resource table detection imx_rproc_elf_find_loaded_rsc_table() may i |
| CVE-2026-43146 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: iris: Add buffer to list only after successful allocation Move `list_add_tail()` to after `dma_alloc_at | |
| CVE-2026-43147 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" This reverts commit 05703271c3c |
| CVE-2026-43148 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() As kcalloc() may fail, check its return |
| CVE-2026-43149 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() The priv->rx_buffer and priv->tx_buffer are | |
| CVE-2026-43150 | Modified | 未確認 | CWE-122, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: perf/arm-cmn: Reject unsupported hardware configurations So far we've been fairly lax about accepting both unk |
| CVE-2026-43151 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Revert "media: iris: Add sanity check for stop streaming" This reverts commit ad699fa78b59241c9d71a8cafb51525f | |
| CVE-2026-43152 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-pl: handle probe errors Errors in init must be reported back or we'll follow a NULL pointer the first | |
| CVE-2026-43153 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfs: remove xfs_attr_leaf_hasname The calling convention of xfs_attr_leaf_hasname() is problematic, because it |
| CVE-2026-43154 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits in volume label handling Crafted EROFS images containing valid volume labels | |
| CVE-2026-43155 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mux: mmio: fix regmap leak on probe failure The mmio regmap that may be allocated during probe is never freed. |
| CVE-2026-43156 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: enable basic endpoint checking pegasus_probe() fills URBs with hardcoded endpoint pipes wit | |
| CVE-2026-43157 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps (rx_fc_pfvf_bmap and tx_fc_pfvf_bmap) are a |
| CVE-2026-43158 | Modified | 未確認 | CWE-664, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 and xfs/794 both trip this assertion in |
| CVE-2026-43159 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix null dereference in find_network The variable pwlan has the possibility of being NULL |
| CVE-2026-43160 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: mfd: macsmc: Initialize mutex Initialize struct apple_smc's mutex in apple_smc_probe(). Using the mutex uninit |
| CVE-2026-43161 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode PCIe endpoints with ATS en | |
| CVE-2026-43162 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: tegra-video: Fix memory leak in __tegra_channel_try_format() The state object allocated by __v4l2_subde |
| CVE-2026-43163 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resize race A General Protection Fault occurs in write_page() durin |
| CVE-2026-43164 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb(). syzbot reported null-ptr-deref of udp_sk(sk)->udp |
| CVE-2026-43165 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin When calling of_parse_phandle_with_args(), t |
| CVE-2026-43166 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced plain identification for encoded extents Only plain data whose start position and on-dis |
| CVE-2026-43167 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEV_UNREGISTER event syzbot is reporting that "struct xfrm_state" | |
| CVE-2026-43168 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix reflink preserve cleanup issue commit c06c303832ec ("ocfs2: fix xattr array entry __counted_by erro | |
| CVE-2026-43169 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Prevent BUG_ON by validating rounded allocation When DRM_BUDDY_CONTIGUOUS_ALLOCATION is set, the re | |
| CVE-2026-43170 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Move vbus draw to workqueue context Currently dwc3_gadget_vbus_draw() can be called from at | |
| CVE-2026-43171 | Analyzed | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region The current logic at cper_print_fw_err() doesn't check if the er |
| CVE-2026-43172 | Modified | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix 22000 series SMEM parsing If the firmware were to report three LMACs (which doesn't exist i |
| CVE-2026-43173 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: xscale: Check for PTP support properly In ixp4xx_get_ts_info() ixp46x_ptp_find() is called unco |
| CVE-2026-43174 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix post open error handling Closing a queue doesn't guarantee that all associated page pools a | |
| CVE-2026-43175 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 The 9FGV0841 has 8 outputs and registers 8 struct clk |
| CVE-2026-43176 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate release report content before using for RTL8922DE The commit 957eda596c76 ("wifi: r |
| CVE-2026-43177 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Fix RPM reference leak in probe error paths Several error paths in ipu6_pci_probe() were jumping | |
| CVE-2026-43178 | Modified | 未確認 | CWE-1341, CWE-415 | In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in do_procmap_query() When user provides incorrectly sized buffer for buil |
| CVE-2026-43179 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits for invalid metabox-enabled images Crafted EROFS images with metadata compres | |
| CVE-2026-43180 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode kaweth_set_rx_mode(), the ndo_set_rx_mode |
| CVE-2026-43181 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: sysfs: fix chip removal with GPIOs exported over sysfs Currently if we export a GPIO over sysfs and unbi | |
| CVE-2026-43182 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: media: ccs: Avoid possible division by zero Calculating maximum M for scaler configuration involves dividing b |
| CVE-2026-43183 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: cx25821: Fix a resource leak in cx25821_dev_setup() Add release_mem_region() if ioremap() fails to rele |
| CVE-2026-43184 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, | |
| CVE-2026-43185 | Modified | 未確認 | CWE-674 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix signededness bug in smb_direct_prepare_negotiation() smb_direct_prepare_negotiation() casts an unsi |
| CVE-2026-43186 | Modified | 未確認 | CWE-122, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() On the receive path, __ioam6_fill_trace_data |
| CVE-2026-43187 | Modified | 未確認 | CWE-190, CWE-191 | In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf freemap entries when empty Back in commit 2a2b5932db6758 ("xfs: fix attr leaf header fre |
| CVE-2026-43188 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, move_dirty_folio | |
| CVE-2026-43189 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: Fix error handling on steps after finding a match Once an async connection is found to be m | |
| CVE-2026-43190 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length before reading optlen Quoting reporter: In net/netfilter/xt_tcp |
| CVE-2026-43191 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 [Why] A backport of the change | |
| CVE-2026-43192 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm mpath: Add missing dm_put_device when failing to get scsi dh name When commit fd81bc5cca8f ("scsi: device_h | |
| CVE-2026-43193 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg() Claude pointed out that there is a nfs4_file refcoun | |
| CVE-2026-43194 | Modified | 未確認 | CWE-754 | In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GSO frames udpgro_frglist.sh and udpgro_bench.sh are the flakiest tests currently |
| CVE-2026-43195 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate user queue size constraints Add validation to ensure user queue sizes meet hardware requi | |
| CVE-2026-43196 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in pruss_clk_mux_setup() In the pruss_clk_mux_setup(), the devm_add_action_or_ |
| CVE-2026-43197 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netconsole: avoid OOB reads, msg is not nul-terminated msg passed to netconsole from the console subsystem is |
| CVE-2026-43198 | Modified | 未確認 | CWE-362, CWE-821 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_ |
| CVE-2026-43199 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query Fix a "scheduling while atomic" bug in mlx |
| CVE-2026-4320 | Deferred | 未確認 | CWE-288 | Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain unauthorized access to protected features by manipulating the HTTP redirect headers o |
| CVE-2026-43200 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions struct configfs_it | |
| CVE-2026-43201 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ARM processor Error: don't go past allocated memory If the BIOS generates a very small ARM Processo | |
| CVE-2026-43202 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: vt8500lcdfb: fix missing dma_free_coherent() fbi->fb.screen_buffer is allocated with dma_alloc_coherent | |
| CVE-2026-43203 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-free in tasklets during device removal When the PCA-200E or SBA-200E adapter is b |
| CVE-2026-43204 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6asm: drop DSP responses for closed data streams 'Commit a354f030dbce ("ASoC: qcom: q6asm: handle | |
| CVE-2026-43205 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate num_ifs to prevent out-of-bounds write The driver obtains sw_attr.num_ifs from firmware |
| CVE-2026-43206 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() The kfd_event_page_set() function writes KFD_SIGNA |
| CVE-2026-43207 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe function Add mtk_mdp_unregister_m2m_device() on the error handling |
| CVE-2026-43208 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: net: do not pass flow_id to set_rps_cpu() Blamed commit made the assumption that the RPS table for each receiv |
| CVE-2026-43209 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: minix: Add required sanity checking to minix_check_superblock() The fs/minix implementation of the minix files | |
| CVE-2026-43210 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: ring-buffer: Fix to check event length before using Check the event length before adding it for acces | |
| CVE-2026-43211 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() error handling Commit a4e772898f8b ("PCI: Add missing bridge lock to pci_bus_lock( |
| CVE-2026-43212 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE The arch definition of cpumask_of_node() cannot | |
| CVE-2026-43213 | Modified | 未確認 | CWE-125, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence number of TX release report Hardware rarely reports abnormal sequence numb |
| CVE-2026-43214 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() Add SRCU read-side protection when reading |
| CVE-2026-43215 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix locking usage for tcon fields We used to use the cifs_tcp_ses_lock to protect a lot of objects that |
| CVE-2026-43216 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skb_may_tx_timestamp() skb_may_tx_timestamp() may acquire sock::sk_callback_lock. The lo |
| CVE-2026-43217 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: iris: gen2: Add sanity check for session stop In iris_kill_session, inst->state is set to IRIS_INST_ERR |
| CVE-2026-43218 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: i2c/tw9903: Fix potential memory leak in tw9903_probe() In one of the error paths in tw9903_probe(), th |
| CVE-2026-43219 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: Fix potential unregister of netdev that has not been registered yet If an error occurs during r | |
| CVE-2026-43220 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: serialize sequence allocation under concurrent TLB invalidations With concurrent TLB invalidations, | |
| CVE-2026-43221 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: initialise event handler read bytes IPMB doesn't use i2c reads, but the handler needs to set a val |
| CVE-2026-43222 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: AV1: Fix tile info buffer size Each tile info is composed of: row_sb, col_sb, start_pos an | |
| CVE-2026-43223 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix URB leak in pvr2_send_request_ex When pvr2_send_request_ex() submits a write URB successfu |
| CVE-2026-43224 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix sgtable leak on mapping failures In an unlikely case when io_populate_area_dma() fails, whi |
| CVE-2026-43225 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix memory leak on failure path cfg80211_inform_bss_frame() may return NULL on failure. In |
| CVE-2026-43226 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: No shortcut out of RDS_CONN_ERROR RDS connections carry a state "rds_conn_path::cp_state" and transit | |
| CVE-2026-43227 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/sh_tmu: Always leave device running after probe The TMU device can be used as both a clock | |
| CVE-2026-43228 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, folder_count, and file_ |
| CVE-2026-43229 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix device cleanup order to prevent kernel panic Move video device unregistration t | |
| CVE-2026-43230 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: Clear reconnect pending bit When canceling the reconnect worker, care must be taken to reset the reco | |
| CVE-2026-43231 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: radio-keene: fix memory leak in error path Fix a memory leak in usb_keene_probe(). The v4l2 control han |
| CVE-2026-43232 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets When the FarSync T-series card is bei |
| CVE-2026-43233 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() In decode_choice(), the boundary check before ge |
| CVE-2026-43234 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: team: avoid NETDEV_CHANGEMTU event when unregistering slave syzbot is reporting unregister_netdevice: waiti | |
| CVE-2026-43235 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: iris: Add missing platform data entries for SM8750 Two platform-data fields for SM8750 were missed: | |
| CVE-2026-43236 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release The atmel_hlcdc_plane_atomic_duplicate_st |
| CVE-2026-43237 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 This commit |
| CVE-2026-43238 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() Commit 38a6f0865796 ("net: sched: support has |
| CVE-2026-43239 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in ->query_interfaces() It was possible for two query interface works to be concurr |
| CVE-2026-43240 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/kexec: add a sanity check on previous kernel's ima kexec buffer When the second-stage kernel is booted via | |
| CVE-2026-43241 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access Number of MW LUTs depends on NTB configuration and |
| CVE-2026-43242 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: soc: ti: k3-socinfo: Fix regmap leak on probe failure The mmio regmap allocated during probe is never freed. |
| CVE-2026-43243 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src Trying to access link enc on a dpia link w | |
| CVE-2026-43244 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: kcm: fix zero-frag skb in frag_list on partial sendmsg error Syzkaller reported a warning in kcm_write_msgs() |
| CVE-2026-43245 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: ->d_compare() must not block ... so don't use __getname() there. Switch it (and ntfs_d_hash(), while we | |
| CVE-2026-43246 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: i2c/tw9906: Fix potential memory leak in tw9906_probe() In one of the error paths in tw9906_probe(), th |
| CVE-2026-43247 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix SError of kernel panic when closed SError of kernel panic rarely happened while | |
| CVE-2026-43248 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa Remove duplication by consolidating these here. This reduces |
| CVE-2026-43249 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: 9p/xen: protect xen_9pfs_front_free against concurrent calls The xenwatch thread can race with other back-end |
| CVE-2026-43250 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() The ChipIdea UDC driver can encounter "not page align |
| CVE-2026-43251 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: HID: prodikeys: Check presence of pm->input_ep82 Fake USB devices can send their own report descriptors for wh |
| CVE-2026-43252 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail when rm endp Syzkaller managed to find a combination of actions t |
| CVE-2026-43253 | Modified | 未確認 | CWE-667, CWE-833 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock With iommu.strict=1, the existing completion wait path can cause |
| CVE-2026-43254 | Analyzed | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - fix packet extraction from stream When processing TCP stream data in ovpn_tcp_recv, we receive lar |
| CVE-2026-43255 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix WARNING in usb_tx_block The function usb_tx_block() submits cardp->tx_urb without ensuring | |
| CVE-2026-43256 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() vfe_isr() iterates using MSM_VFE_IMA |
| CVE-2026-43257 | Analyzed | 未確認 | CWE-772 | In the Linux kernel, the following vulnerability has been resolved: media: cx88: Add missing unmap in snd_cx88_hw_params() In error path, add cx88_alsa_dma_unmap() to release res |
| CVE-2026-43258 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: alpha: fix user-space corruption during memory compaction Alpha systems can suffer sporadic user-space crashes |
| CVE-2026-43259 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: set platform driver data Add missing platform_set_drvdata() as the data will be used in r | |
| CVE-2026-43260 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RSS context delete logic We need to free the corresponding RSS context VNIC in FW everytime an RS |
| CVE-2026-43261 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable to the Spectre-BHB (Br | |
| CVE-2026-43262 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: gfs2: fiemap page fault fix In gfs2_fiemap(), we are calling iomap_fiemap() while holding the inode glock. Th |
| CVE-2026-43263 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while testing fluster When multi instances are created/destroyed |
| CVE-2026-43264 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: of: display_timing: fix refcount leak in of_get_display_timings() of_parse_phandle() returns a device_n | |
| CVE-2026-43265 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() Ignore -EBUSY when checking nested event | |
| CVE-2026-43266 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't go past the ARM processor CPER record buffer There's a logic inside GHES/CPER to detect if the | |
| CVE-2026-43267 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in beacon tracking During fuzz testing, it was discovered that |
| CVE-2026-43268 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: pretend special inodes as regular files Since commit af153bb63a33 ("vfs: catch invalid modes in may_o | |
| CVE-2026-43269 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback After several commits, the slab memory |
| CVE-2026-43270 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() In mtk_mdp_probe(), vpu_get_plat_device() increas | |
| CVE-2026-43271 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in process_metadata_update The function process_metadata_update() bli |
| CVE-2026-43272 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There is a pointer head_page in rb_meta_validat |
| CVE-2026-43273 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in ceph_zero_partial_object() The ceph_zero_partial_object function was missing | |
| CVE-2026-43274 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq() The cluster_cfg array is dy |
| CVE-2026-43275 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Flush exception handling work when RPM level is zero Ensure that the exception event handling |
| CVE-2026-43276 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix double destroy_workqueue on service rescan PCI path While testing corner cases in the driver, a |
| CVE-2026-43277 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ensure that won't go past CPER allocated record The logic at ghes_new() prevents allocating too lar | |
| CVE-2026-43278 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clone bio completes Stale rq->bio values have been observed to |
| CVE-2026-43279 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at silencing At silencing the playback URB packets in the imp |
| CVE-2026-43280 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise When user provides a bogus pat_ind |
| CVE-2026-43281 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Although it is guided that `#mbox-cells` must b |
| CVE-2026-43282 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port The function ionic_query_port() calls i |
| CVE-2026-43283 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle dma_free_coherent() in error path takes priv->rx_buf | |
| CVE-2026-43284 | Modified | 未確認 | CWE-123 | In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly t |
| CVE-2026-43285 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not access current->mems_allowed_seq if !allow_spin Lockdep complains when get_from_any_partial() | |
| CVE-2026-43286 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore failed global reservations to subpool Commit a833a693a490 ("mm: hugetlb: fix incorrect fal |
| CVE-2026-43287 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm: Account property blob allocations to memcg DRM_IOCTL_MODE_CREATEPROPBLOB allows userspace to allocate arb |
| CVE-2026-43288 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: ext4: move ext4_percpu_param_init() before ext4_mb_init() When running `kvm-xfstests -c ext4/1k -C 1 generic/3 |
| CVE-2026-43289 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kexec: derive purgatory entry from symbol kexec_load_purgatory() derives image->start by locating e_entry insi | |
| CVE-2026-43290 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Return queued buffers on start_streaming() failure Return buffers if streaming fails to start | |
| CVE-2026-43291 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Fix parameter validation for packet data Since commit 9c328f54741b ("net: nfc: nci: Add paramet |
| CVE-2026-43292 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node When CONFIG_PAGE_OWNER is enabled, freeing KASAN | |
| CVE-2026-43293 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix kthread worker destruction in polling mode Fix the cleanup order in polling mod | |
| CVE-2026-43294 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels Since commit 56de5e305d4b ("clk | |
| CVE-2026-43295 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() When idtab allocation fails, net is not r | |
| CVE-2026-43296 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky NIX SQ manager sticky mode is known to cause stall |
| CVE-2026-43297 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() rga_get_frame() can return ERR_PTR(-E |
| CVE-2026-43298 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip vcn poison irq release on VF VF doesn't enable VCN poison irq in VCNv2.5. Skip releasing it a | |
| CVE-2026-43299 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() [BUG] There is a bug report that | |
| CVE-2026-43300 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() In jdi_panel_dsi_remove(), jdi is |
| CVE-2026-43301 | Analyzed | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix PM runtime usage count underflow Replace pm_runtime_put_sync() with pm_runtime_ |
| CVE-2026-43302 | Analyzed | 未確認 | CWE-131 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Set DMA segment size to avoid debug warnings When using V3D rendering with CONFIG_DMA_API_DEBUG enabl |
| CVE-2026-43303 | Modified | 未確認 | CWE-416, CWE-457 | In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: clear page->private in free_pages_prepare() Several subsystems (slub, shmem, ttm, etc.) use pag |
| CVE-2026-43304 | Modified | 未確認 | CWE-121 | In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN When decoding the key, verify that the key material would fit int |
| CVE-2026-43305 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path [Why] The evaluation for whether we |
| CVE-2026-43306 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: crypto: Use the correct destructor kfunc type With CONFIG_CFI enabled, the kernel strictly enforces that | |
| CVE-2026-43307 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: adxl380: Avoid reading more entries than present in FIFO The interrupt handler reads FIFO entries | |
| CVE-2026-43308 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() There is no need to BUG(), we can j | |
| CVE-2026-43309 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-raid target | |
| CVE-2026-43310 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC For the i.MX8MQ platform, there is a hard | |
| CVE-2026-43311 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix unsafe generic_handle_irq() call Currently, when resuming from system suspend on Tegra pla | |
| CVE-2026-43312 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Initialize subdev before controls In ov5647_init_controls() we call v4l2_get_subdevdata, b | |
| CVE-2026-43313 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() In acpi_processor_errata_piix4( |
| CVE-2026-43314 | Analyzed | 未確認 | CWE-772 | In the Linux kernel, the following vulnerability has been resolved: dm: remove fake timeout to avoid leak request Since commit 15f73f5b3e59 ("blk-mq: move failure injection out o |
| CVE-2026-43315 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding Drop the WARN in svm_set_nested_ | |
| CVE-2026-43316 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: solo6x10: Check for out of bounds chip_id Clang with CONFIG_UBSAN_SHIFT=y noticed a condition where a s | |
| CVE-2026-43317 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: most: core: fix leak on early registration failure A recent commit fixed a resource leak on early registration |
| CVE-2026-43318 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify Invalidating a dmabuf will impact other users of t | |
| CVE-2026-43319 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: spi: spidev: fix lock inversion between spi_lock and buf_lock The spidev driver previously used two mutexes, s |
| CVE-2026-43320 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dsc eDP issue [why] Need to add function hook check before use | |
| CVE-2026-43321 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: bpf: Properly mark live registers for indirect jumps For a `gotox rX` instruction the rX register should be ma |
| CVE-2026-43322 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix UAF in le_read_features_complete This fixes the following backtrace caused by hci_con |
| CVE-2026-43323 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix zero_vruntime tracking fix John reported that stress-ng-yield could make his machine unhappy a | |
| CVE-2026-43324 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix interrupt synchronization error This fixes an error in synchronization in the dummy-hcd dr | |
| CVE-2026-43325 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't send a 6E related command when not supported MCC_ALLOWED_AP_TYPE_CMD is related to 6 | |
| CVE-2026-43326 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback SCX_KICK_WAIT busy-waits in kick_c |
| CVE-2026-43327 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix locking/synchronization error Syzbot testing was able to provoke an addressing exception a |
| CVE-2026-43328 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path When kobject_init_and_add() fails |
| CVE-2026-43329 | Modified | 未確認 | CWE-122, CWE-770 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware of |
| CVE-2026-43330 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is supplied, it is copied and |
| CVE-2026-43331 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Disable KCOV instrumentation after load_segments() The load_segments() function changes segment reg | |
| CVE-2026-43332 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix thermal zone device registration error path If thermal_zone_device_register_with_trips() fa |
| CVE-2026-43333 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTR_TO_BUF pointers check_mem_access() matches PTR_TO_BUF via base_type( |
| CVE-2026-43334 | Modified | 未確認 | CWE-863 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements before building the pairing response smp_cmd_pairing_req() c |
| CVE-2026-43335 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes() The change to dynamic IDs for SM8 |
| CVE-2026-43336 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permuted_state before it leaves scope Since the ChaCha permutation is invertible, | |
| CVE-2026-43337 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() dcn401_init_hw() assumes that update_bw_boun |
| CVE-2026-43338 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: reserve enough transaction items for qgroup ioctls Currently our qgroup ioctls don't reserve any space, | |
| CVE-2026-43339 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_addr() The mentioned helper try to warn the user about an exc |
| CVE-2026-4334 | Deferred | 未確認 | CWE-79 | The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headline' parameter in the [shariff] shortcode in all versions up to, and including, |
| CVE-2026-43340 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: comedi: Reinit dev->spinlock between attachments to low-level drivers `struct comedi_device` is the main contr | |
| CVE-2026-43341 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: net/ipv6: ioam6: prevent schema length wraparound in trace fill ioam6_fill_trace_data() stores the schema cont |
| CVE-2026-43342 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to |
| CVE-2026-43343 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix unbalanced refcnt in geth_free geth_alloc() increments the reference count, but get | |
| CVE-2026-43344 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix die ID init and look up bugs In snbep_pci2phy_map_init(), in the nr_node_ids > 8 pa |
| CVE-2026-43345 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix event ring index not programmed for IPA v5.0+ For IPA v5.0+, the event ring index field moved fr | |
| CVE-2026-43346 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: ice: ptp: don't WARN when controlling PF is unavailable In VFIO passthrough setups, it is possible to pass thr |
| CVE-2026-43347 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: monaco: Reserve full Gunyah metadata region We observe spurious "Synchronous External Abort" | |
| CVE-2026-43348 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER When registering VTL0 memory via MSHV_ADD_VTL0_MEMORY, t | |
| CVE-2026-43349 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer syzbot reported a f2fs bug as below: |
| CVE-2026-43350 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: smb: client: require a full NFS mode SID before reading mode bits parse_dacl() treats an ACE SID matching sid_ |
| CVE-2026-43351 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Eagerly init vgic dist/redist on vgic creation If vgic_allocate_private_irqs_locked() fails for an | |
| CVE-2026-43352 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue The logic used to abort the DMA ring contai | |
| CVE-2026-43353 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue The HCI DMA dequeue path (hci_dma_dequeue_xfer()) may be invok |
| CVE-2026-43354 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: iio: proximity: hx9023s: Protect against division by zero in set_samp_freq Avoid division by zero when samplin |
| CVE-2026-43355 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error path Move pm_runtime_put_autosuspend() before the error check |
| CVE-2026-43356 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis: Fix NULL pointer dereference in adis_init The adis_init() function dereferences adis->ops to c |
| CVE-2026-43357 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050-core: fix pm_runtime error handling The return value of pm_runtime_get_sync() is not checke | |
| CVE-2026-43358 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer() Call rcu_read_lock() before | |
| CVE-2026-43359 | Analyzed | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioctl due to item overflow If the set received ioctl fails due to |
| CVE-2026-43360 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on file creation due to name hash collision If we attempt to create several files | |
| CVE-2026-43361 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort when snapshotting received subvolumes Currently a user can trigger a transaction | |
| CVE-2026-43362 | Modified | 未確認 | CWE-662, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix in-place encryption corruption in SMB2_write() SMB2_write() places write payload in iov[1..n] |
| CVE-2026-43363 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/apic: Disable x2apic on resume if the kernel expects so When resuming from s2ram, firmware may re-enable x | |
| CVE-2026-43364 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix NULL pointer dereference in ublk_ctrl_set_size() ublk_ctrl_set_size() unconditionally dereferences u |
| CVE-2026-43365 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix undersized l_iclog_roundoff values If the superblock doesn't list a log stripe unit, we set the incor |
| CVE-2026-43366 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: check if target buffer list is still legacy on recycle There's a gap between when the buffer wa |
| CVE-2026-43367 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix a few more NULL pointer dereference in device cleanup I found a few more paths that cleanup fails |
| CVE-2026-43368 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatterlist length When a scatterlists table of a GEM shmem object o |
| CVE-2026-43369 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix NULL pointer dereference in device cleanup When GPU initialization fails due to an unsupported HW |
| CVE-2026-43370 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm->process_info assignment with cmpxchg( |
| CVE-2026-43371 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: macb: Shuffle the tx ring before enabling tx Quanyang observed that when using an NFS rootfs on an AMD Zy |
| CVE-2026-43372 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Fix error path in PTP IRQ setup If request_threaded_irq() fails during the PTP message IR | |
| CVE-2026-43373 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: ncsi: fix skb leak in error paths Early return paths in NCSI RX and AEN handlers fail to release the rece |
| CVE-2026-43374 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry When removing a nexthop from a group, remove_nh |
| CVE-2026-43375 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent |
| CVE-2026-43376 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free by using call_rcu() for oplock_info ksmbd currently frees oplock_info immediately us |
| CVE-2026-43377 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Don't log keys in SMB3 signing and encryption key generation When KSMBD_DEBUG_AUTH logging is enabled, | |
| CVE-2026-43378 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: smb: server: fix use-after-free in smb2_open() The opinfo pointer obtained via rcu_dereference(fp->f_opinfo) i |
| CVE-2026-43379 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() opinfo pointer obtained via rcu_dereference(f |
| CVE-2026-43380 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read The q54sj108a2_debugfs_read function suffers from |
| CVE-2026-43381 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep If we have runtime suspended, and userspace wa | |
| CVE-2026-43382 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid double-rtnl_lock ELP metric worker batadv_v_elp_get_throughput() might be called when the RT |
| CVE-2026-43383 | Modified | 未確認 | CWE-208 | In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in con |
| CVE-2026-43384 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in cons | |
| CVE-2026-43385 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: Fix rcu_tasks stall in threaded busypoll I was debugging a NIC driver when I noticed that when I enable t | |
| CVE-2026-43386 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie The current code checks 'i + 5 < i |
| CVE-2026-43387 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Just like in commit 154828bf9559 ("staging: | |
| CVE-2026-43388 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: clear walk_control on inactive context in damos_walk() damos_walk() sets ctx->walk_control to t |
| CVE-2026-43389 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm: memfd_luo: always dirty all folios A dirty folio is one which has been written to. A clean folio is its o | |
| CVE-2026-43390 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nstree: tighten permission checks for listing Even privileged services should not necessarily be able to see o | |
| CVE-2026-43391 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nsfs: tighten permission checks for handle opening Even privileged services should not necessarily be able to | |
| CVE-2026-43392 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix starvation of scx_enable() under fair-class saturation During scx_enable(), the READY -> ENABLE | |
| CVE-2026-43393 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() Fix a chunk map leak in btrf |
| CVE-2026-43394 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). nfsd_nl_listener_set_doit() uses get_current_cred() wi |
| CVE-2026-43395 | Analyzed | 未確認 | CWE-459 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Cleanup partially initialized sync on parse failure xe_sync_entry_parse() can allocate references |
| CVE-2026-43396 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Fix user fence leak on alloc failure When dma_fence_chain_alloc() fails, properly release the use |
| CVE-2026-43397 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: samsung-dsim: Fix memory leak in error path In samsung_dsim_host_attach(), drm_bridge_add() is cal |
| CVE-2026-43398 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpu_userq_wait_ioctl ca | |
| CVE-2026-43399 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl Drop reference to syncobj and timeline fence w | |
| CVE-2026-43400 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in signal ioctl Huge input values in amdgpu_userq_signal_ioct | |
| CVE-2026-43401 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request() The update_cpu_qos_request() f |
| CVE-2026-43402 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: kthread: consolidate kthread exit paths to prevent use-after-free Guillaume reported crashes via corrupted RCU |
| CVE-2026-43403 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nsfs: tighten permission checks for ns iteration ioctls Even privileged services should not necessarily be abl | |
| CVE-2026-43404 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: mm: Fix a hmm_range_fault() livelock / starvation problem If hmm_range_fault() fails a folio_trylock() in do_s |
| CVE-2026-43405 | Modified | 未確認 | CWE-190, CWE-908 | In the Linux kernel, the following vulnerability has been resolved: libceph: Use u32 for non-negative values in ceph_monmap_decode() This patch fixes unnecessary implicit convers |
| CVE-2026-43406 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in process_message_header() If the message frame is (maliciousl |
| CVE-2026-43407 | Modified | 未確認 | CWE-125, CWE-190 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() This patch fixes an out-of-bounds acce |
| CVE-2026-43408 | Modified | 未確認 | CWE-457, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ceph: add a bunch of missing ceph_path_info initializers ceph_mdsc_build_path() must be called with a zero-ini |
| CVE-2026-43409 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: kprobes: avoid crash when rmmod/insmod after ftrace killed After we hit ftrace is killed by some errors, the k |
| CVE-2026-43410 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled When the Remote System Update (RSU) |
| CVE-2026-43411 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix divide-by-zero in tipc_sk_filter_connect() A user can set conn_timeout to any value via setsockopt(T |
| CVE-2026-43412 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start During ADSP stop and start, the kernel |
| CVE-2026-43413 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Fix NULL pointer exception during user_scan() user_scan() invokes updated sas_user_scan() for |
| CVE-2026-43414 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcm |
| CVE-2026-43415 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend In __ufshcd_wl_suspend(), cancel_delayed_w |
| CVE-2026-43416 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: powerpc, perf: Check that current->mm is alive before getting user callchain It may happen that mm is already |
| CVE-2026-43417 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Handle vfork()/CLONE_VM correctly Matthieu and Jiri reported stalls where a task endlessly loops | |
| CVE-2026-43418 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Prevent CID stalls due to concurrent forks A newly forked task is accounted as MMCID user before | |
| CVE-2026-43419 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in ceph_mdsc_build_path() Add __putname() calls to error code paths that did not free t |
| CVE-2026-43420 | Analyzed | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix i_nlink underrun during async unlink During async unlink, we drop the `i_nlink` counter before we re |
| CVE-2026-43421 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Fix net_device lifecycle with device_move The network device outlived its parent gadget de |
| CVE-2026-43422 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-43423 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-43424 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling The `tpg->tpg_nexus` pointer in the USB Ta |
| CVE-2026-43425 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: kill download URB on timeout mdc800_device_read() submits download_urb and waits for compl | |
| CVE-2026-43426 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: fix use-after-free in ISR during device removal In usbhs_remove(), the driver frees resour |
| CVE-2026-43427 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimizat |
| CVE-2026-43428 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Limit the length of unkillable synchronous timeouts The usb_control_msg(), usb_bulk_msg(), and usb_ | |
| CVE-2026-43429 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts The usbtmc driver accepts timeout values | |
| CVE-2026-43430 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: usb: yurex: fix race in probe The bbu member of the descriptor must be set to the value standing for uninitial |
| CVE-2026-43431 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: xhci: Fix NULL pointer dereference when reading portli debugfs files Michal reported and debgged a NULL pointe |
| CVE-2026-43432 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and, when |
| CVE-2026-43433 | Analyzed | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: avoid reading the written value in offsets array When sending a transaction, its offsets array is |
| CVE-2026-43434 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: check ownership before using vma When installing missing pages (or zapping them), Rust Binder wil | |
| CVE-2026-43435 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: fix oneway spam detection The spam detection logic in TreeRange was executed before the current r | |
| CVE-2026-43436 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces The Scarlett2 mixer quirk in USB |
| CVE-2026-43437 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() In the drain loop, the local variabl |
| CVE-2026-43438 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Remove redundant css_put() in scx_cgroup_init() The iterator css_for_each_descendant_pre() walks th |
| CVE-2026-43439 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: cgroup: fix race between task migration and iteration When a task is migrated out of a css_set, cgroup_migrate |
| CVE-2026-43440 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/mana: Null service_wq on setup error to prevent double destroy In mana_gd_setup() error path, set gc->serv |
| CVE-2026-43441 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' paramet |
| CVE-2026-43442 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops When IORING_SETUP_SQE_MIXED is used without | |
| CVE-2026-43443 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition The acp_card_rt5682_init() and acp_c |
| CVE-2026-43444 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unreserve bo if queue update failed Error handling path should unreserve bo then return failed. ( |
| CVE-2026-43445 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: e1000/e1000e: Fix leak in DMA error cleanup If an error is encountered while mapping TX buffers, the driver sh |
| CVE-2026-43446 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix runtime suspend deadlock when there is pending job The runtime suspend callback drains the |
| CVE-2026-43447 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: iavf: fix PTP use-after-free during reset Commit 7c01dbfc8a1c5f ("iavf: periodically cache PHC time") introduc |
| CVE-2026-43448 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix race bug in nvme_poll_irqdisable() In the following scenario, pdev can be disabled between (1) a |
| CVE-2026-43449 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set dev->online_queues is a count incremented in nvme_init_queu |
| CVE-2026-43450 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() nfnl_cthelper_dump_table() has a 'go |
| CVE-2026-43451 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path nfqnl_recv_verdict() calls find_dequeu |
| CVE-2026-43452 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers against 1-byte tail reads When the last byte of options is a non-sin |
| CVE-2026-43453 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() pipapo_drop() passes rulemap[i + 1].n |
| CVE-2026-43454 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix for duplicate device in netdev hooks When handling NETDEV_REGISTER notification, dup | |
| CVE-2026-43455 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mctp: route: hold key->lock in mctp_flow_prepare_output() mctp_flow_prepare_output() checks key->dev and may c | |
| CVE-2026-43456 | Modified | 未確認 | CWE-843, CWE-908 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bond_setup_by_slave() kernel BUG at net/core/skbuff.c:2306! Oops: invalid opcod |
| CVE-2026-43457 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mctp: i2c: fix skb memory leak in receive path When 'midev->allow_rx' is false, the newly allocated skb isn't |
| CVE-2026-43458 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: serial: caif: hold tty->link reference in ldisc_open and ser_release A reproducer triggers a KASAN slab-use-af |
| CVE-2026-43459 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: flush delayed work before removing DAIs and widgets When a sound card is unbound while a PCM s |
| CVE-2026-43460 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove() callback The driver uses devm_spi_register_controller() for reg |
| CVE-2026-43461 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: amlogic: spifc-a4: Fix DMA mapping error handling Fix three bugs in aml_sfc_dma_buffer_setup() error path | |
| CVE-2026-43462 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: spacemit: Fix error handling in emac_tx_mem_map() The DMA mappings were leaked on mapping error. Free the | |
| CVE-2026-43463 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer() rxrpc_kernel_lookup_peer() can al |
| CVE-2026-43464 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ XDP multi-buf programs can modify the layout of t | |
| CVE-2026-43465 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ XDP multi-buf programs can modify the layout of | |
| CVE-2026-43466 | Modified | 未確認 | CWE-662 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery In case of a TX error CQE, a recovery flow is triggere |
| CVE-2026-43467 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix crash when moving to switchdev mode When moving to switchdev mode when the device doesn't suppor | |
| CVE-2026-43468 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix deadlock between devlink lock and esw->wq esw->work_queue executes esw_functions_changed_event_h |
| CVE-2026-43469 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decrement re_receiving on the early exit paths In the event that rpcrdma_post_recvs() fails to creat |
| CVE-2026-43470 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir If we found an alias through nfs3_do_create/nfs_add | |
| CVE-2026-43471 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() The kernel log indicates |
| CVE-2026-43472 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: unshare: fix unshare_fs() handling There's an unpleasant corner case in unshare(2), when we have a CLONE_NEWNS |
| CVE-2026-43473 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Add NULL checks when resetting request and reply queues The driver encountered a crash during re |
| CVE-2026-43474 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: fs: init flags_valid before calling vfs_fileattr_get syzbot reported a uninit-value bug in [1]. Similar to th |
| CVE-2026-43475 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT This resolves the follow splat and lock-up when runni | |
| CVE-2026-43476 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() sizeof(num) evaluates to sizeof(size_t) (8 | |
| CVE-2026-43477 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL Apparently ICL may hang with an MCE if w | |
| CVE-2026-43478 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put The correct helper to use in rt101 | |
| CVE-2026-43479 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect Remove redundant netif_napi_del() call fr | |
| CVE-2026-4348 | Deferred | 未確認 | CWE-89 | The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the `get_current_letter_docs` and `docs_sort_by_letter` AJAX actions in all versions up to, and including |
| CVE-2026-43480 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition The acp3x_5682_init() function |
| CVE-2026-43481 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net-shapers: don't free reply skb after genlmsg_reply() genlmsg_reply() hands the reply skb to netlink, and ne | |
| CVE-2026-43482 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Disable preemption between scx_claim_exit() and kicking helper work scx_claim_exit() atomically set | |
| CVE-2026-43483 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Explicitly set/clear CR8 write intercept | |
| CVE-2026-43484 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid bitfield RMW for claim/retune flags Move claimed and retune control flags out of the bitfield | |
| CVE-2026-43485 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nouveau/gsp: drop WARN_ON in ACPI probes These WARN_ONs seem to trigger a lot, and we don't seem to have a pla | |
| CVE-2026-43486 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults contpte_ptep_set_access_flags() compare |
| CVE-2026-43487 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Disable LPM on ST1000DM010-2EP102 According to a user report, the ST1000DM010-2EP102 has pro | |
| CVE-2026-43488 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Prevent interrupt storm on host controller error (HCE) The xHCI controller reports a Host Controlle | |
| CVE-2026-43489 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: luo_file: remember retrieve() status LUO keeps track of successful retrieve attempts on a LUO file | |
| CVE-2026-43490 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate inherited ACE SID length smb_inherit_dacl() walks the parent directory DACL loaded from the se |
| CVE-2026-43491 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registration per node Current code does no bound checking on the numbe | |
| CVE-2026-43492 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() Yiming reports an integer underflow in mpi_r |
| CVE-2026-43493 | Modified | 未確認 | CWE-390 | In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY. Handle them by c |
| CVE-2026-43494 | Modified | 未確認 | CWE-1341, CWE-415 | In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_fro |
| CVE-2026-43495 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler t7xx_port_enum_msg_h |
| CVE-2026-43496 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked When red qdisc has children |
| CVE-2026-43497 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free dlfb_ops_mmap() uses remap_pfn_range() to |
| CVE-2026-43498 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Disallow re-exporting imported GEM objects Prevent re-exporting of imported GEM buffers by adding |
| CVE-2026-43499 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock paths, |
| CVE-2026-43500 | Modified | 未確認 | CWE-123, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpc_input_ |
| CVE-2026-43501 | Modified | 未確認 | CWE-131, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows ipv6_rpl_srh_rcv() decompresses an RFC 6554 So |
| CVE-2026-43502 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the message is queued A zerocopy send can fail after user pages h |
| CVE-2026-43503 | Modified | 未確認 | CWE-664, CWE-691 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy |
| CVE-2026-43504 | Analyzed | 未確認 | CWE-863 | An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in a paused scen |
| CVE-2026-43505 | Analyzed | 未確認 | CWE-420 | An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in the activatio |
| CVE-2026-43506 | Analyzed | 未確認 | CWE-401 | An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthentic |
| CVE-2026-43507 | Analyzed | 未確認 | CWE-770 | An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by XML parsing resource amplific |
| CVE-2026-43510 | Awaiting Analysis | 未確認 | CWE-266 | manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in anot |
| CVE-2026-43512 | Analyzed | 未確認 | CWE-592 | DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 |
| CVE-2026-43513 | Analyzed | 未確認 | CWE-178 | Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1 |
| CVE-2026-43514 | Analyzed | 未確認 | CWE-208 | Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10 |
| CVE-2026-43515 | Analyzed | 未確認 | CWE-285 | Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0- |
| CVE-2026-43526 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content. Attackers can exp |
| CVE-2026-43527 | Analyzed | 未確認 | CWE-1188, CWE-918 | OpenClaw before 2026.4.14 contains a server-side request forgery vulnerability in browser SSRF policy that allows private-network navigation by default. Attackers can exploit this |
| CVE-2026-43528 | Analyzed | 未確認 | CWE-212 | OpenClaw before 2026.4.14 contains a redaction bypass vulnerability that allows authenticated gateway clients to receive unredacted secrets through sourceConfig and runtimeConfig a |
| CVE-2026-43529 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.4.10 contains a time-of-check-time-of-use vulnerability in the validateScriptFileForShellBleed function that allows local attackers to bypass workspace boundar |
| CVE-2026-43530 | Analyzed | 未確認 | CWE-863 | OpenClaw versions 2026.2.23 before 2026.4.12 contain a weakened exec approval binding vulnerability in busybox and toybox applet execution that allows attackers to obscure which ap |
| CVE-2026-43531 | Analyzed | 未確認 | CWE-15 | OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject var |
| CVE-2026-43532 | Analyzed | 未確認 | CWE-184 | OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject h |
| CVE-2026-43533 | Analyzed | 未確認 | CWE-23 | OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended media storage b |
| CVE-2026-43534 | Analyzed | 未確認 | CWE-345 | OpenClaw before 2026.4.10 contains an input validation vulnerability that allows external hook metadata to be enqueued as trusted system events. Attackers can supply malicious hook |
| CVE-2026-43535 | Analyzed | 未確認 | CWE-266 | OpenClaw before 2026.4.14 contains an authorization context reuse vulnerability in collect-mode queue batches that allows messages from different senders to inherit the final sende |
| CVE-2026-43566 | Analyzed | 未確認 | CWE-184 | OpenClaw versions 2026.4.7 before 2026.4.14 contain a privilege escalation vulnerability where heartbeat owner downgrade logic skips webhook wake events carrying untrusted content. |
| CVE-2026-43567 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.4.10 contains a path traversal vulnerability in the screen_record tool's outPath parameter that bypasses workspace-only filesystem guards. Attackers can exploi |
| CVE-2026-43568 | Analyzed | 未確認 | CWE-862 | OpenClaw versions 2026.4.5 before 2026.4.10 contain a privilege escalation vulnerability allowing write-scoped operators to modify persistent memory dreaming settings. Attackers wi |
| CVE-2026-43569 | Analyzed | 未確認 | CWE-829 | OpenClaw before 2026.4.9 contains an authentication bypass vulnerability allowing untrusted workspace plugins to be auto-enabled during non-interactive onboarding when provider aut |
| CVE-2026-43570 | Analyzed | 未確認 | CWE-61 | OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected re |
| CVE-2026-43571 | Analyzed | 未確認 | CWE-829 | OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to resolve workspace plugin shadows before bundled channel plugins. |
| CVE-2026-43572 | Analyzed | 未確認 | CWE-862 | OpenClaw versions 2026.4.10 before 2026.4.14 contain a missing authorization vulnerability in the Microsoft Teams SSO invoke handler that fails to apply sender allowlist checks. At |
| CVE-2026-43573 | Analyzed | 未確認 | CWE-862, CWE-918 | OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation gu |
| CVE-2026-43574 | Analyzed | 未確認 | CWE-183 | OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit approval author |
| CVE-2026-43575 | Analyzed | 未確認 | CWE-862 | OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that exposes interactive browser session credentials. |
| CVE-2026-43576 | Analyzed | 未確認 | CWE-601, CWE-918 | OpenClaw before 2026.4.5 contains a server-side request forgery vulnerability in the CDP /json/version WebSocket endpoint that allows attackers to pivot to untrusted second-hop tar |
| CVE-2026-43577 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.4.9 contains a file read vulnerability allowing attackers to bypass navigation guards through browser act/evaluate interactions. Attackers can pivot into the l |
| CVE-2026-43578 | Analyzed | 未確認 | CWE-184 | OpenClaw versions 2026.3.31 before 2026.4.10 contain a privilege escalation vulnerability where heartbeat owner downgrade detection misses local background async exec completion ev |
| CVE-2026-43579 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile |
| CVE-2026-43580 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.4.10 contains an incomplete navigation guard vulnerability that allows attackers to trigger navigation without complete SSRF policy enforcement. Browser press/ |
| CVE-2026-43581 | Analyzed | 未確認 | CWE-1188 | OpenClaw before 2026.4.10 contains an improper network binding vulnerability in the sandbox browser CDP relay that exposes Chrome DevTools Protocol on 0.0.0.0. Attackers can access |
| CVE-2026-43582 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.4.10 contains a server-side request forgery vulnerability in browser navigation policy that allows attackers to bypass hostname validation through DNS rebindin |
| CVE-2026-43583 | Analyzed | 未確認 | CWE-862 | OpenClaw versions 2026.4.10 before 2026.4.14 fail to persist session context during delivery queue recovery for media replay. Attackers can exploit recovered queued outbound media |
| CVE-2026-43584 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.4.10 contains an insufficient environment variable denylist vulnerability in its exec environment policy that allows operator-supplied overrides of high-risk i |
| CVE-2026-43585 | Analyzed | 未確認 | CWE-672 | OpenClaw before 2026.4.15 captures resolved bearer-auth configuration at startup, allowing revoked tokens to remain valid after SecretRef rotation. Gateway HTTP and WebSocket handl |
| CVE-2026-43616 | Analyzed | 未確認 | CWE-23 | Detect-It-Easy prior to 3.21 contains a path traversal vulnerability that allows attackers to write arbitrary files to the filesystem by crafting malicious archive entries with rel |
| CVE-2026-43617 | Analyzed | 未確認 | CWE-289 | Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot. Attack |
| CVE-2026-43618 | Modified | 未確認 | CWE-125, CWE-190 | Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for overflow, allowing a malici |
| CVE-2026-43619 | Analyzed | 未確認 | CWE-367, CWE-59 | Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink, mknod, link |
| CVE-2026-4362 | Deferred | 未確認 | CWE-862 | The ElementsKit Elementor Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `Live_Action::reset()` function in |
| CVE-2026-43620 | Analyzed | 未確認 | CWE-125 | Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver.c that allows a malicious rsync server to crash the rsync c |
| CVE-2026-43633 | Deferred | 未確認 | CWE-502 | HestiaCP versions 1.9.0 through 1.9.4 contain a deserialization vulnerability in the web terminal component caused by a session format mismatch between PHP and Node.js that allows |
| CVE-2026-43634 | Deferred | 未確認 | CWE-348 | HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an a |
| CVE-2026-43638 | Analyzed | 未確認 | CWE-862 | Bitwarden Server prior to v2026.4.1 contains a missing authorization vulnerability that allows any authenticated user to write ciphers into an arbitrary organization via `POST /cip |
| CVE-2026-43639 | Analyzed | 未確認 | CWE-862 | Bitwarden Server prior to v2026.4.0 contains a missing authorization vulnerability that allows a provider service user to add an arbitrary organization to their provider via `POST |
| CVE-2026-43640 | Analyzed | 未確認 | CWE-303 | Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key, allowing an authenticated user wi |
| CVE-2026-43644 | Analyzed | 未確認 | CWE-79 | podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to th |
| CVE-2026-43646 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, from 9.0.0 through 9.22.0, |
| CVE-2026-43652 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.5. An app may be able to access protected user data. |
| CVE-2026-43653 | Modified | 未確認 | CWE-400 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, mac |
| CVE-2026-43654 | Analyzed | 未確認 | CWE-497 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, mac |
| CVE-2026-43655 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to |
| CVE-2026-43656 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macO |
| CVE-2026-43658 | Modified | 未確認 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, vi |
| CVE-2026-43659 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, |
| CVE-2026-43660 | Modified | 未確認 | CWE-693 | A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visio |
| CVE-2026-43661 | Modified | 未確認 | CWE-121 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, iOS 26.7 and iPadOS 26.7, macO |
| CVE-2026-43666 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS |
| CVE-2026-43668 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Son |
| CVE-2026-43680 | Analyzed | 未確認 | CWE-94 | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule types and execu |
| CVE-2026-43685 | Analyzed | 未確認 | CWE-78 | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input |
| CVE-2026-4372 | Analyzed | 未確認 | CWE-1066, CWE-502 | A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft |
| CVE-2026-4377 | Awaiting Analysis | 未確認 | CWE-1391 | Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easi |
| CVE-2026-43824 | Deferred | 未確認 | CWE-212, CWE-312 | In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data. |
| CVE-2026-43826 | Analyzed | 未確認 | CWE-532 | The OpenSearch logging provider, when configured with a `host` URL that embeds credentials (for example `https://user:[email protected]:9200`), wrote the full host URL — |
| CVE-2026-43827 | Analyzed | 未確認 | CWE-384 | Default configurations of Apache Shiro have a session fixation vulnerability. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgra |
| CVE-2026-43828 | Analyzed | 未確認 | CWE-614 | Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. |
| CVE-2026-43859 | Deferred | 未確認 | CWE-158 | mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. |
| CVE-2026-43860 | Deferred | 未確認 | CWE-193 | mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest. |
| CVE-2026-43861 | Deferred | 未確認 | CWE-158 | mutt before 2.3.2 does not check for '\0' in url_pct_decode. |
| CVE-2026-43862 | Deferred | 未確認 | CWE-843 | In mutt before 2.3.2, the imap_auth_gss security level is mishandled. |
| CVE-2026-43863 | Deferred | 未確認 | CWE-253 | mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. |
| CVE-2026-43864 | Deferred | 未確認 | CWE-476 | mutt before 2.3.2 has a show_sig_summary NULL pointer dereference. |
| CVE-2026-43868 | Modified | 未確認 | CWE-1285, CWE-789 | Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, w |
| CVE-2026-43869 | Modified | 未確認 | CWE-295, CWE-297 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version |
| CVE-2026-4387 | Awaiting Analysis | 未確認 | CWE-312, CWE-522 | StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric key material |
| CVE-2026-43870 | Analyzed | 未確認 | CWE-113, CWE-22, CWE-346, CWE-400 | Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Re |
| CVE-2026-43873 | Deferred | 未確認 | CWE-209 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/CloneSite/cloneClient.json.php echoes the local CloneSite shared secret ($objClone->myKey |
| CVE-2026-43874 | Deferred | 未確認 | CWE-94 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, the server-side mitigation for the YPTSocket autoEvalCodeOnHTML eval sink (from CVE-2026-40911) |
| CVE-2026-43875 | Deferred | 未確認 | CWE-598 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/MobileManager/oauth2.php completes an OAuth login by sending an HTTP 302 Location: oauth2 |
| CVE-2026-43876 | Deferred | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/notifySubscribers.json.php takes the raw message POST parameter and passes it into sendS |
| CVE-2026-43877 | Deferred | 未確認 | CWE-352 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/userSavePhoto.php is a legacy profile-photo endpoint that accepts a base64 POST paramete |
| CVE-2026-43878 | Deferred | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/Meet/iframe.php echoes the attacker-controlled user and pass query parameters unescaped i |
| CVE-2026-43879 | Deferred | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, an authenticated user can configure their own donation-notification webhook URL to point at inte |
| CVE-2026-43880 | Deferred | 未確認 | CWE-940 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/sendEmail.json.php exposes two branches depending on whether contactForm=1 is submitted. |
| CVE-2026-43881 | Deferred | 未確認 | CWE-306 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/users.json.php exposes two unauthenticated paths that disclose the full set of registere |
| CVE-2026-43882 | Deferred | 未確認 | CWE-93 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, the unauthenticated plugin/Scheduler/downloadICS.php endpoint passes attacker-controlled title, |
| CVE-2026-43883 | Deferred | 未確認 | CWE-639 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/PayPalYPT/agreementCancel.json.php cancels a PayPal billing agreement using an attacker-s |
| CVE-2026-43884 | Deferred | 未確認 | CWE-918 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, two endpoints (plugin/AI/receiveAsync.json.php and objects/EpgParser.php) in AVideo call isSSRFS |
| CVE-2026-43885 | Deferred | 未確認 | CWE-200, CWE-862 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, an unauthenticated user can read APISecret from objects/plugins.json.php and use it to call prot |
| CVE-2026-43886 | Deferred | 未確認 | CWE-269 | Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, a logic error in OAuthInterface.validateScope() uses Array.some() to validate requested OAut |
| CVE-2026-43887 | Deferred | 未確認 | CWE-79 | Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, the Outline comment section permits users to mention other users; however, the backend does |
| CVE-2026-43888 | Deferred | 未確認 | CWE-22 | Outline is a service that allows for collaborative documentation. Prior to 1.7.0, ZipHelper.extract computes the extraction path for each entry by passing a full filesystem path th |
| CVE-2026-43889 | Deferred | 未確認 | CWE-863 | Outline is a service that allows for collaborative documentation. Prior to 1.7.0, the shares.create API accepts both collectionId and documentId simultaneously and, when published= |
| CVE-2026-43890 | Deferred | 未確認 | CWE-639 | Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.7.0, the subscriptions.create API endpoint in server/routes/api/subscriptions/subscriptions.ts ex |
| CVE-2026-43891 | Analyzed | 未確認 | CWE-73 | changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from b |
| CVE-2026-43892 | Deferred | 未確認 | CWE-1188, CWE-79, CWE-94 | AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulne |
| CVE-2026-43893 | Deferred | 未確認 | CWE-88 | exiftool-vendored provides cross-platform Node.js access to ExifTool. Prior to 35.19.0, exiftool-vendored starts ExifTool in -stay_open True -@ - mode, where arguments are read fro |
| CVE-2026-43894 | Analyzed | 未確認 | CWE-190 | jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is given a number literal of INT_MAX-1 (2147483646) digits, the D2U() macro overflows during sig |
| CVE-2026-43895 | Analyzed | 未確認 | CWE-158, CWE-20 | jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes in import paths at the jq-language level, but later resolves those paths through C string o |
| CVE-2026-43896 | Analyzed | 未確認 | CWE-674 | jq is a command-line JSON processor. In 1.8.1 and earlier, unbounded recursion in jv_object_merge_recursive() allows a crafted jq program to crash the process with a segfault. The |
| CVE-2026-43897 | Deferred | 未確認 | CWE-918 | Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check for IPv6 loopback attacks. There was also a DNS attack, where an address could be resolved |
| CVE-2026-43898 | Modified | 未確認 | CWE-94 | SandboxJS is a JavaScript sandboxing library. Prior to 0.9.6, sandbox-defined functions expose Function.caller, allowing sandboxed code to recover the internal LispType.Call runtim |
| CVE-2026-43899 | Deferred | 未確認 | CWE-20 | DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, An incomplete mitigation for CVE-2025-55733 leaves |
| CVE-2026-4390 | Deferred | 未確認 | CWE-119, CWE-416 | A weakness has been identified in TeamSpeak 3 Server up to 3.13.7. This affects the function process_resend_queue of the component Connection State Management. This manipulation ca |
| CVE-2026-43900 | Deferred | 未確認 | CWE-79 | DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, a Cross-Site Scripting (XSS) vulnerability exists |
| CVE-2026-43901 | Modified | 未確認 | CWE-22 | Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp expose |
| CVE-2026-43903 | Analyzed | 未確認 | CWE-787 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, sgiinput.cpp:265,2 |
| CVE-2026-43904 | Modified | 未確認 | CWE-787 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, softimageinput.cpp |
| CVE-2026-43905 | Analyzed | 未確認 | CWE-190 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, jpeg2000input.cpp: |
| CVE-2026-43906 | Analyzed | 未確認 | CWE-122 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a heap-based buffe |
| CVE-2026-43907 | Analyzed | 未確認 | CWE-190, CWE-787 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed integer o |
| CVE-2026-43908 | Analyzed | 未確認 | CWE-190, CWE-787 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit in |
| CVE-2026-43909 | Analyzed | 未確認 | CWE-125, CWE-190, CWE-787 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit in |
| CVE-2026-4391 | Deferred | 未確認 | CWE-119, CWE-122 | A security vulnerability has been detected in TeamSpeak 3 Server up to 3.13.7. This vulnerability affects unknown code of the component ECC Key Parser. Such manipulation leads to h |
| CVE-2026-43911 | Analyzed | 未確認 | CWE-613 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, refresh tokens are not invalidated when the user's security_stamp is rotated by some security-sensiti |
| CVE-2026-43912 | Analyzed | 未確認 | CWE-285 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, Vaultwarden does not enforce that a groups_users.users_organizations_uuid entry belongs to the same o |
| CVE-2026-43913 | Analyzed | 未確認 | CWE-863 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, Vaultwarden allows an unconfirmed organization owner to purge the entire organization vault. The orga |
| CVE-2026-43914 | Analyzed | 未確認 | CWE-307 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.4, there is a security vulnerability in Vaultwarden that allows bypassing the login brute-force protecti |
| CVE-2026-43916 | Deferred | 未確認 | CWE-125, CWE-191 | pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes. Prior to 0.2.0-alpha, a heap buffer over-read in peer_lookup_tcp |
| CVE-2026-43917 | Deferred | 未確認 | CWE-639 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.19.0 and earlier, the protectedProcedure middleware only verifies the user is authenticated - it does NOT enforc |
| CVE-2026-43919 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43918. Reason: This candidate is a duplicate of CVE-2026-43918. Notes: All CVE users should ref | |
| CVE-2026-4392 | Deferred | 未確認 | CWE-617 | A vulnerability was detected in TeamSpeak 3 Server up to 3.13.7. This issue affects some unknown processing of the component clientek Handshake Handler. Performing a manipulation o |
| CVE-2026-43929 | Deferred | 未確認 | CWE-184, CWE-918 | ssrfcheck is a library that checks if a string contains a potential SSRF attack. In 1.3.0 and earlier, ssrfcheck fails to block Server-Side Request Forgery attacks when the target |
| CVE-2026-43930 | Analyzed | 未確認 | CWE-362 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.76 and 9.9.0-alpha.2, a race condition in the MFA SMS one-time |
| CVE-2026-43934 | Deferred | 未確認 | CWE-284, CWE-639 | e107 is a content management system (CMS). Prior to 2.3.4, a Broken Access Control vulnerability exists in the application, allowing an unauthorized authenticated user to edit comm |
| CVE-2026-43935 | Deferred | 未確認 | CWE-20, CWE-807 | e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to genera |
| CVE-2026-43936 | Deferred | 未確認 | CWE-918 | e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a rem |
| CVE-2026-43937 | Deferred | 未確認 | CWE-841, CWE-89 | YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum. Prior to 4.0.5, Any admin OnPost… handler executes its side effects before the ResultFilterAttribute rewrites the response to a |
| CVE-2026-43938 | Deferred | 未確認 | CWE-116, CWE-79, CWE-80 | YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum. Prior to 4.0.5 and 3.2.12, the application's database logger (YAFNET.Core/Logger/DbLogger.cs) captures the incoming request's U |
| CVE-2026-43939 | Deferred | 未確認 | CWE-116, CWE-79, CWE-80 | YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum. Prior to 4.0.5 and 3.2.12, the thread posting and reply feature accepts user-supplied content via a a post or reply that is sto |
| CVE-2026-43940 | Analyzed | 未確認 | CWE-22, CWE-829 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the runWidget function in src/app/widgets/load-widget.js construc |
| CVE-2026-43941 | Analyzed | 未確認 | CWE-601, CWE-88 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm's terminal hyperlink handler passes any URL clicked |
| CVE-2026-43942 | Analyzed | 未確認 | CWE-200, CWE-312 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in src/app/lib/ipc-sync.js se |
| CVE-2026-43943 | Analyzed | 未確認 | CWE-78, CWE-88 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists in electerm's SFTP ope |
| CVE-2026-43944 | Modified | 未確認 | CWE-20, CWE-829, CWE-94 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerable to arbitrary local code execu |
| CVE-2026-43948 | Deferred | 未確認 | CWE-863 | wger is a free, open-source workout and fitness manager. Prior to 2.6, the reset_user_password and gym_permissions_user_edit views in wger perform a gym-scope authorization check u |
| CVE-2026-43964 | Modified | 未確認 | CWE-193 | Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third n |
| CVE-2026-43967 | Analyzed | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.A |
| CVE-2026-43968 | Analyzed | 未確認 | CWE-93 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values. cow_sse:event |
| CVE-2026-43969 | Modified | 未確認 | CWE-93 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows HTTP request splitting and cookie smuggling via unvalidated cookie name and va |
| CVE-2026-43970 | Deferred | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines cowlib allows unauthenticated remote denial of service via memory exhaustion. cow_spdy: |
| CVE-2026-43975 | Analyzed | 未確認 | CWE-22 | FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId parameter or the clientFileName before constructing file paths, allowing an unauthenticat |
| CVE-2026-43979 | Deferred | 未確認 | CWE-79, CWE-918 | Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.0, PDFService._markdown_to_html() constructs an HTML document by interpolating us |
| CVE-2026-43981 | Deferred | 未確認 | CWE-362 | Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, in engine/luahandler.go, the sync.RWMutex protecting LoadCommonFunctions is released before L.Push() and L.P |
| CVE-2026-43982 | Deferred | 未確認 | CWE-22 | Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, uploadedFileSaveIn() in lua/upload/upload.go uses filepath.Join() with the caller-supplied directory but per |
| CVE-2026-43983 | Analyzed | 未確認 | CWE-285, CWE-613 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.6.0, The createTokenFromRefreshToken function (oidc_service.go) val |
| CVE-2026-43988 | Deferred | 未確認 | CWE-248 | Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline |
| CVE-2026-43989 | Deferred | 未確認 | CWE-20, CWE-22, CWE-59, CWE-73 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent and uploaded whatever bytes |
| CVE-2026-43990 | Deferred | 未確認 | CWE-77, CWE-78 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and passe |
| CVE-2026-43991 | Deferred | 未確認 | CWE-184, CWE-78 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversari |
| CVE-2026-43992 | Deferred | 未確認 | CWE-200, CWE-312, CWE-522, CWE-532 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every MCP write tool (send_tokens, execute_contract, instantiate_contract, upload_wasm, ibc_tra |
| CVE-2026-43993 | Deferred | 未確認 | CWE-918 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the WAVS bridge's computeDataVerify called fetch() on agent-supplied URLs without validating sc |
| CVE-2026-43995 | Analyzed | 未確認 | CWE-918 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, multiple tool implementations directly import and invoke raw HTTP clients ( |
| CVE-2026-43996 | Modified | 未確認 | CWE-125 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, the bounds check i |
| CVE-2026-43997 | Modified | 未確認 | CWE-653, CWE-94 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, it is possible to obtain the host Object. There are various ways to use the host Object, to escape the sandbox, one e |
| CVE-2026-43998 | Modified | 未確認 | CWE-59 | vm2 is an open source vm/sandbox for Node.js. In 3.10.5, NodeVM's require.root path restriction can be bypassed using filesystem symlinks, allowing sandboxed code to load modules f |
| CVE-2026-43999 | Modified | 未確認 | CWE-829, CWE-863 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, NodeVM's builtin allowlist can be bypassed when the module builtin is allowed (including via the '*' wildcard). The m |
| CVE-2026-44000 | Analyzed | 未確認 | CWE-693 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox boundary violation in vm2 allows host object identity to cross into the sandbox through host Promise resolu |
| CVE-2026-44001 | Modified | 未確認 | CWE-248 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox escape vulnerability in vm2 v3.10.5 allows any sandboxed code to crash the host Node.js process via a singl |
| CVE-2026-44002 | Analyzed | 未確認 | CWE-209 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's CallSite wrapper class (intended as a safe wrapper for V8's native CallSite) blocks getThis() and getFunction() |
| CVE-2026-44003 | Analyzed | 未確認 | CWE-693 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's code transformer has a performance optimization that skips AST analysis when the code does not contain catch, i |
| CVE-2026-44004 | Modified | 未確認 | CWE-1285, CWE-770 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, sandboxed code can call Buffer.alloc() with an arbitrary size to allocate memory directly on the host heap. Because B |
| CVE-2026-44005 | Modified | 未確認 | CWE-1321, CWE-653, CWE-94 | vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and then forwards sandbox writes i |
| CVE-2026-44006 | Modified | 未確認 | CWE-914, CWE-94 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes. This vulnerability |
| CVE-2026-44007 | Modified | 未確認 | CWE-1100, CWE-284 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code can unconditionally require('vm2') regardless of the outer |
| CVE-2026-44008 | Modified | 未確認 | CWE-1100, CWE-668 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call into this side via get |
| CVE-2026-44009 | Modified | 未確認 | CWE-653, CWE-668 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, This vulnerability is fixed in 3.11.2. |
| CVE-2026-44010 | Deferred | 未確認 | CWE-862 | Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, the GraphQL Address element resolver (src/gql/resolvers/elements/Address.php) performs no s |
| CVE-2026-44011 | Deferred | 未確認 | CWE-479 | Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, Craft CMS which contains an input-handling flaw in a Yii object creation path that let any |
| CVE-2026-44012 | Deferred | 未確認 | CWE-862 | Craft CMS is a content management system (CMS). From 5.0.0-RC1 to before 5.9.18, AssetsController::actionShowInFolder() fetches an asset by ID and returns its filename and complete |
| CVE-2026-44015 | Modified | 未確認 | CWE-918 | Nginx UI is a web user interface for the Nginx web server. In 2.3.4 and earlier, an authenticated user can perform Server-Side Request Forgery (SSRF) by creating a cluster node poi |
| CVE-2026-44028 | Deferred | 未確認 | CWE-674 | An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser could lead to a stack-to-heap overflow when the parser is ru |
| CVE-2026-44029 | Deferred | 未確認 | CWE-36 | An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fi |
| CVE-2026-44047 | Deferred | 未確認 | CWE-89 | An SQL injection vulnerability in the MySQL CNID backend in Netatalk 3.1.0 through 4.4.2 allows a remote authenticated attacker to obtain unauthorized access to data, modify data, |
| CVE-2026-44048 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow via UCS-2 type confusion in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or caus |
| CVE-2026-44049 | Deferred | 未確認 | CWE-787 | An out-of-bounds write due to improper null termination in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cau |
| CVE-2026-44050 | Deferred | 未確認 | CWE-122 | A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated |
| CVE-2026-44051 | Deferred | 未確認 | CWE-59 | An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read arbitrary files or overwrite arbitrary files via attacker-c |
| CVE-2026-44052 | Deferred | 未確認 | CWE-532 | Netatalk 2.1.0 through 4.4.2 inserts LDAP simple-bind passwords into log output in cleartext, which allows an attacker with access to the log files to obtain LDAP credentials. |
| CVE-2026-44053 | Deferred | 未確認 | CWE-327 | Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or impersonate a user v |
| CVE-2026-44054 | Deferred | 未確認 | CWE-330 | Netatalk 2.0.0 through 4.4.2 generates AFP session tokens derived from predictable process IDs, which allows a remote authenticated attacker to cause a denial of service by exploit |
| CVE-2026-44055 | Deferred | 未確認 | CWE-78 | A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code. |
| CVE-2026-44056 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow in desktop.c in Netatalk 1.3 through 4.2.2 allows a remote authenticated attacker to cause a denial of service, obtain limited information, or modify |
| CVE-2026-44057 | Deferred | 未確認 | CWE-561 | A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may al |
| CVE-2026-44058 | Deferred | 未確認 | CWE-287 | An authentication bypass vulnerability in Netatalk 2.2.2 through 4.4.2 allows a remote privileged user to authenticate as an arbitrary user via the admin auth user mechanism. |
| CVE-2026-44059 | Deferred | 未確認 | CWE-362 | A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause a minor serv |
| CVE-2026-44060 | Deferred | 未確認 | CWE-191 | An integer underflow in dsi_writeinit() in Netatalk 1.5.0 through 4.4.2 allows a remote unauthenticated attacker to cause a denial of service via a crafted DSI write request. |
| CVE-2026-44061 | Deferred | 未確認 | CWE-208 | Netatalk 1.5.0 through 4.4.2 uses DES-ECB for authentication with a timing side channel, which allows a remote attacker to recover authentication credentials via timing analysis. |
| CVE-2026-44062 | Deferred | 未確認 | CWE-787 | A missing output length bounds check in pull_charset_flags() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of s |
| CVE-2026-44063 | Deferred | 未確認 | CWE-90 | An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDAP queries and obtain limited information or modify LDAP entr |
| CVE-2026-44064 | Deferred | 未確認 | CWE-125 | An out-of-bounds read in ASP session ID handling in Netatalk 1.3 through 4.4.2 allows an adjacent network attacker to obtain limited information or cause a denial of service via a |
| CVE-2026-44065 | Deferred | 未確認 | CWE-193 | An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted |
| CVE-2026-44066 | Deferred | 未確認 | CWE-125 | Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive information or c |
| CVE-2026-44067 | Deferred | 未確認 | CWE-125 | A heap over-read in extended attribute (EA) header parsing in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to obtain limited information or cause a minor ser |
| CVE-2026-44068 | Deferred | 未確認 | CWE-22 | Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outside the intended met |
| CVE-2026-44069 | Deferred | 未確認 | CWE-191 | An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local privileged user to obtain limited information, modify limited data, or cause a minor se |
| CVE-2026-44070 | Deferred | 未確認 | CWE-770 | An unbounded memory reallocation in the charset conversion code in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafte |
| CVE-2026-44071 | Deferred | 未確認 | CWE-693 | Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote attacker to cause a min |
| CVE-2026-44072 | Deferred | 未確認 | CWE-78 | Netatalk 2.2.1 through 4.4.2 calls system() after a failed chdir() without properly handling the error condition, which allows a local privileged user to execute unintended command |
| CVE-2026-44073 | Deferred | 未確認 | CWE-273 | Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated privileges un |
| CVE-2026-44074 | Deferred | 未確認 | CWE-682 | Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allo |
| CVE-2026-44075 | Deferred | 未確認 | CWE-484 | A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch case to fall through into DSIOPT_SERVQUANT, resulting in un |
| CVE-2026-44076 | Deferred | 未確認 | CWE-78 | Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path. |
| CVE-2026-4408 | Modified | 未確認 | CWE-78 | A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If th |
| CVE-2026-44088 | Deferred | 未確認 | CWE-434 | SzafirHost verifies the signature of the downloaded JAR file using class JarInputStream (reading from the beginning of the file), but loads classes using class JarFile/URLClassLoad |
| CVE-2026-4409 | Deferred | 未確認 | CWE-200 | The Subscribe To Comments Reloaded plugin for WordPress is vulnerable to unauthorized modification of data due to a leaked secret key and usage of a weak hash generation algorithm |
| CVE-2026-4410 | Analyzed | 未確認 | CWE-400 | IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a |
| CVE-2026-44109 | Analyzed | 未確認 | CWE-1188 | OpenClaw before 2026.4.15 contains an authentication bypass vulnerability in Feishu webhook and card-action validation that allows unauthenticated requests to reach command dispatc |
| CVE-2026-44110 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries. Attackers with DM-paired |
| CVE-2026-44111 | Analyzed | 未確認 | CWE-183 | OpenClaw before 2026.4.15 contains an arbitrary file read vulnerability in the QMD backend memory_get function that allows callers to read any Markdown files within the workspace r |
| CVE-2026-44112 | Modified | 未確認 | CWE-367 | OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in OpenShell sandbox filesystem writes that allows attackers to redirect writes outside the intended m |
| CVE-2026-44113 | Modified | 未確認 | CWE-367 | OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root |
| CVE-2026-44114 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override critical runtime v |
| CVE-2026-44115 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by |
| CVE-2026-44116 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs through the SSRF g |
| CVE-2026-44117 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation. Attackers can bypass SSRF protections by send |
| CVE-2026-44118 | Analyzed | 未確認 | CWE-290 | OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients can present themselves as own |
| CVE-2026-44125 | Deferred | 未確認 | CWE-862 | SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to ac |
| CVE-2026-44126 | Deferred | 未確認 | CWE-502 | SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data, which can be reached from the new GINA UI and may allow unauthenticated remote attackers |
| CVE-2026-44127 | Deferred | 未確認 | CWE-73 | SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows |
| CVE-2026-44128 | Deferred | 未確認 | CWE-95 | SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a pa |
| CVE-2026-44129 | Deferred | 未確認 | CWE-1336 | SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled templ |
| CVE-2026-44159 | Awaiting Analysis | 未確認 | CWE-1392 | Tyler Identity Local (TID-L) uses documented, default administrative credentials. Users are not required to change the credentials before deployment. TID-L has not been distributed |
| CVE-2026-44166 | Analyzed | 未確認 | CWE-287 | Pocketbase is an open source web backend written in go. Prior to 0.22.42 and 0.37.4, in some situations, if an attacker knows the email address of the victim they can create and li |
| CVE-2026-44167 | Deferred | 未確認 | CWE-400 | phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, |
| CVE-2026-44183 | Deferred | 未確認 | CWE-290, CWE-348 | Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent. Prior to 2.9.10, TrustedNetworkAut |
| CVE-2026-44184 | Deferred | 未確認 | CWE-346, CWE-942 | Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent. Prior to 2.9.10, Cleanuparr's glob |
| CVE-2026-44193 | Analyzed | 未確認 | CWE-88 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section fails to sanitize user supplied input leading to Remot |
| CVE-2026-44194 | Analyzed | 未確認 | CWE-78 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with user- |
| CVE-2026-44195 | Analyzed | 未確認 | CWE-307 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset th |
| CVE-2026-44196 | Deferred | 未確認 | CWE-287, CWE-697 | Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication bypass vulnerability allows an attacker who has obtained a |
| CVE-2026-44197 | Analyzed | 未確認 | CWE-280 | Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could access revisions of the pag |
| CVE-2026-44198 | Analyzed | 未確認 | CWE-280 | Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could still access the history re |
| CVE-2026-44199 | Analyzed | 未確認 | CWE-280 | Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form p |
| CVE-2026-44200 | Analyzed | 未確認 | CWE-280 | Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to pages could copy a page they don't have acces |
| CVE-2026-44201 | Analyzed | 未確認 | CWE-280 | Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, the Documents and Images API incorrectly listed items in private collections. A |
| CVE-2026-44204 | Deferred | 未確認 | CWE-20, CWE-89 | Shelf is a platform for tracking physical assets. From 1.12 to before 1.20.1, a SQL injection vulnerability in the sortBy query parameter on the /assets route allows any authentica |
| CVE-2026-44209 | Deferred | 未確認 | CWE-1336, CWE-917 | Banks generates meaningful LLM prompts using a template language that makes sense. Prior to 2.4.2, banks uses jinja2.Environment() (unsandboxed) to render prompt templates. Applica |
| CVE-2026-44212 | Deferred | 未確認 | CWE-79 | PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting (XSS) vulnerability in the PrestaShop back-office Customer |
| CVE-2026-44213 | Awaiting Analysis | 未確認 | CWE-295 | The OpenTelemetry.Exporter.Instana exports telemetry to Instana backend. Prior to 1.1.0, the OpenTelemetry.Exporter.Instana NuGet package does not validate HTTPS/TLS certificates a |
| CVE-2026-44214 | Analyzed | 未確認 | CWE-113, CWE-93 | eventsource-encoder encodes events as well-formed EventSource/Server Sent Event (SSE) messages. Prior to 1.0.2, eventsource-encoder does not sanitize the event or id fields of an E |
| CVE-2026-44215 | Analyzed | 未確認 | CWE-787 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a one-byte heap out-of-bounds null write exists in the UFS/UFS2 filesystem image parser in NanaZip. Th |
| CVE-2026-44216 | Modified | 未確認 | CWE-190, CWE-770 | Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8, 43.0.2, and 44.0.1, Wasmtime's allocation logic for a WebAssembly table contained checked arithmetic which panicked on |
| CVE-2026-44217 | Deferred | 未確認 | CWE-93 | sse-channel is an SSE-implementation which can be used to any node.js http request/response stream. Prior to 4.0.1, implementations that allow user-provided values to be passed to |
| CVE-2026-44218 | Deferred | 未確認 | CWE-269 | ciguard is a static security auditor for CI/CD pipelines. From 0.1.0 to 0.8.1, the published ghcr.io/jo-jo98/ciguard container image inherits the default root user because the Dock |
| CVE-2026-44219 | Deferred | 未確認 | CWE-770 | ciguard is a static security auditor for CI/CD pipelines. From 0.6.0 to 0.8.1, both SCA HTTP clients (src/ciguard/analyzer/sca/osv.py and src/ciguard/analyzer/sca/endoflife.py) cal |
| CVE-2026-44220 | Deferred | 未確認 | CWE-59 | ciguard is a static security auditor for CI/CD pipelines. From 0.8.0 to 0.8.1 , the discover_pipeline_files() function in src/ciguard/discovery.py walks a directory tree following |
| CVE-2026-44221 | Deferred | 未確認 | CWE-863 | ArcadeDB is a Multi-Model DBMS. Starting in version 21.10.1 and prior to version 26.4.2, authenticated users and API tokens scoped to a specific database could read, write, and mut |
| CVE-2026-44222 | Analyzed | 未確認 | CWE-129 | vLLM is an inference and serving engine for large language models (LLMs). From 0.6.1 to before 0.20.0, there is a a Token Injection vulnerability in vLLM’s multimodal processing. U |
| CVE-2026-44223 | Modified | 未確認 | CWE-131, CWE-704 | vLLM is an inference and serving engine for large language models (LLMs). From 0.18.0 to before 0.20.0, the extract_hidden_states speculative decoding proposer in vLLM returns a te |
| CVE-2026-44224 | Analyzed | 未確認 | CWE-269 | Wiki.js is an open source wiki app built on Node.js. Prior to 2.5.313, the users.update GraphQL mutation accepts an arbitrary groups array and applies it directly to the database w |
| CVE-2026-44225 | Deferred | 未確認 | CWE-22, CWE-284 | Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to 0.1.1, Pulpy injects a pulpy.fs JavaScript API into every packaged web application, givin |
| CVE-2026-44226 | Analyzed | 未確認 | CWE-209 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, pyload-ng WebUI returns full Python traceback details to clients on unhandled exceptio |
| CVE-2026-44232 | Deferred | 未確認 | CWE-791 | DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.3, every IPv6 category bypasses is_url_safe. This vulnerability is |
| CVE-2026-44237 | Analyzed | 未確認 | CWE-1390 | FreePBX is an open source IP PBX. Prior to 17.0.8, the FreePBX api module's OAuth2 implementation does not sufficiently validate client credentials during token issuance. Knowledge |
| CVE-2026-44238 | Analyzed | 未確認 | CWE-89 | FreePBX is an open source IP PBX. Prior to 16.0.50 and 17.0.11, the CDR Reports module page allows SQL injection through the order and sort POST parameters. Authentication with a F |
| CVE-2026-44239 | Analyzed | 未確認 | CWE-98 | FreePBX is an open source IP PBX. Prior to 16.0.22 and 17.0.5, the Dashboard module's getcontent AJAX handler includes PHP files based on user-supplied input without path sanitizat |
| CVE-2026-44240 | Deferred | 未確認 | CWE-400, CWE-770 | basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious o |
| CVE-2026-44241 | Deferred | 未確認 | CWE-400 | Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. From 4.3.0 to before 4.10.22, 3.10.6, and 3.8.14, Time |
| CVE-2026-44242 | Deferred | 未確認 | CWE-400 | Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Prior to 4.10.22, the bundleCache is keyed by (Locale, |
| CVE-2026-44243 | Analyzed | 未確認 | CWE-22 | GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path |
| CVE-2026-44244 | Analyzed | 未確認 | CWE-94 | GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python's configparser without validating |
| CVE-2026-44245 | Analyzed | 未確認 | CWE-79 | Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-documented mechanism for injecting raw HT |
| CVE-2026-44246 | Analyzed | 未確認 | CWE-74 | nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Prior to 2.4.1, the nnU-Net Issue Triage workflow in .github/workflows/issue-triag |
| CVE-2026-44247 | Analyzed | 未確認 | CWE-400, CWE-770 | Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request bo |
| CVE-2026-44248 | Modified | 未確認 | CWE-400, CWE-770 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the MQTT 5 header Properties section is parsed and buffered before an |
| CVE-2026-44257 | Deferred | 未確認 | CWE-77 | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, efw.file.FileManager.unZip writes zip entries to disk using new File(baseDir, zipEntry.getName()) with no canonical-pa |
| CVE-2026-44258 | Deferred | 未確認 | CWE-78 | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the elfinder_checkRisk function validates target and targets for path traversal and home containment, but does not val |
| CVE-2026-44259 | Deferred | 未確認 | CWE-80 | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the previewServlet serves files with their detected MIME type based on file extension, without any content sanitizatio |
| CVE-2026-44260 | Deferred | 未確認 | CWE-863 | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the readonly flag set on the <efw:elFinder> JSP tag is intended to prevent file modifications. When protected=true, el |
| CVE-2026-44262 | Deferred | 未確認 | CWE-94 | Scramble generates API documentation for Laravel project. From 0.13.2 to before 0.13.22, when documentation endpoints are publicly accessible and validation rules reference user-co |
| CVE-2026-44263 | Analyzed | 未確認 | CWE-203 | Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessi |
| CVE-2026-44264 | Analyzed | 未確認 | CWE-80 | Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attribu |
| CVE-2026-44277 | Modified | 未確認 | CWE-284 | A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.0 through 6.5 |
| CVE-2026-44278 | Analyzed | 未確認 | CWE-321 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclo |
| CVE-2026-44279 | Modified | 未確認 | CWE-926 | An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all ver |
| CVE-2026-44283 | Analyzed | 未確認 | CWE-863 | etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease att |
| CVE-2026-44284 | Deferred | 未確認 | CWE-918 | FastGPT is an AI Agent building platform. Prior to version 4.14.17, FastGPT had an inconsistent SSRF protection gap in MCP tool URL handling. The direct MCP preview/run endpoints a |
| CVE-2026-44285 | Deferred | 未確認 | CWE-918 | FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF) vulnerability allows an authenticated attacker to bypass the global isInternal |
| CVE-2026-44286 | Deferred | 未確認 | CWE-918 | FastGPT is an AI Agent building platform. Prior to version 4.14.17, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows attackers (or authenticated users wit |
| CVE-2026-44287 | Deferred | 未確認 | CWE-184, CWE-94 | FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/src/pool/worker.ts:356 blocks dynamic import() with the rege |
| CVE-2026-44288 | Analyzed | 未確認 | CWE-176 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte seq |
| CVE-2026-44289 | Modified | 未確認 | CWE-606, CWE-674 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf dat |
| CVE-2026-44290 | Analyzed | 未確認 | CWE-1321 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited obje |
| CVE-2026-44291 | Analyzed | 未確認 | CWE-94 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for internal type lookup |
| CVE-2026-44292 | Analyzed | 未確認 | CWE-1321 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a pro |
| CVE-2026-44293 | Modified | 未確認 | CWE-94 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe e |
| CVE-2026-44294 | Analyzed | 未確認 | CWE-20 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript property accessors from schema-controlled field a |
| CVE-2026-44295 | Analyzed | 未確認 | CWE-94 | protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbjs static code generation could emit unsafe JavaScript identifiers derived from schema-contro |
| CVE-2026-44296 | Deferred | 未確認 | CWE-400, CWE-405 | Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.167, a remote, unauthenticated denial of service (DoS) vulnerability affects Deskflow servers running with TLS enabled |
| CVE-2026-44298 | Analyzed | 未確認 | CWE-22 | Kimai is an open-source time tracking application. From version 2.32.0 to before version 2.56.0, users with the role System-Admin (ROLE_SYSTE_ADMIN) and the permission upload_invoi |
| CVE-2026-4430 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: fr |
| CVE-2026-44301 | Analyzed | 未確認 | CWE-22 | Hugo is a static site generator. From 0.43 to before 0.161.0, when building a Hugo site that uses Node-based asset pipelines (PostCSS, Babel, TailwindCSS), Hugo invoked the configu |
| CVE-2026-44302 | Deferred | 未確認 | CWE-835 | Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1, Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a |
| CVE-2026-44304 | Deferred | 未確認 | CWE-90 | Lemur manages TLS certificate creation. Prior to 1.9.0, Lemur's LDAP authentication module (lemur/auth/ldap.py) constructs LDAP search filters using unsanitized user input via Pyth |
| CVE-2026-44305 | Deferred | 未確認 | CWE-295 | Lemur manages TLS certificate creation. Prior to 1.9.0, when LDAP TLS is enabled (LDAP_USE_TLS = True), Lemur's LDAP authentication module unconditionally disables TLS certificate |
| CVE-2026-44306 | Deferred | 未確認 | CWE-204 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.21 and 6.15.0, responses from the forgot password forms hinted at whether an account existed fo |
| CVE-2026-44307 | Deferred | 未確認 | CWE-22 | Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypasses the directory traversal check in Templ |
| CVE-2026-44308 | Deferred | 未確認 | CWE-345 | Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint sup |
| CVE-2026-44309 | Deferred | 未確認 | CWE-295, CWE-347 | Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. Prior to 0.16.0, gitsign verify and gitsign verify-tag re-encode commit/tag object |
| CVE-2026-44310 | Deferred | 未確認 | CWE-129, CWE-390 | Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. From 0.4.0 to before 0.15.0, CertVerifier.Verify() in pkg/git/verifier.go uncondit |
| CVE-2026-44312 | Deferred | 未確認 | CWE-295, CWE-829 | css_parser is a Ruby CSS parser. Prior to 2.1.0 and 1.22.0, the CSS Parser gem does not validate HTTPS connections, allowing a Man-in-the-Middle (MITM) attacker to inject or modify |
| CVE-2026-44313 | Deferred | 未確認 | CWE-918 | Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. Prior to version 2.13.0, a Server-Side Request Forgery (SSRF) vul |
| CVE-2026-44314 | Analyzed | 未確認 | CWE-863 | Traccar is an open source GPS tracking system. Prior to 6.13.0, DeviceResource.uploadImage authorizes the target device only through Condition.Permission(User.class, getUserId(), D |
| CVE-2026-44315 | Analyzed | 未確認 | CWE-862 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-pfd-management API without inbound OAuth2/bearer-token authorization. |
| CVE-2026-44316 | Analyzed | 未確認 | CWE-476, CWE-754 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-smpolicycontrol/v1/sm-policies handler (HandleCreateSmPolicyRequest) panic |
| CVE-2026-44317 | Analyzed | 未確認 | CWE-476, CWE-754 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-policyauthorization/v1/app-sessions handler panics on a single authenticat |
| CVE-2026-44318 | Analyzed | 未確認 | CWE-362, CWE-820 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's BSF PUT /nbsf-management/v1/subscriptions/{subId} handler has an unsynchronized write on |
| CVE-2026-44319 | Analyzed | 未確認 | CWE-20, CWE-617, CWE-755 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF terminates the entire process when a stored PFD-subscription notifyUri cannot be reac |
| CVE-2026-44320 | Analyzed | 未確認 | CWE-306, CWE-862 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-callback route group without inbound OAuth2/bearer-token authorizatio |
| CVE-2026-44321 | Analyzed | 未確認 | CWE-306, CWE-617, CWE-862 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. The POST /up |
| CVE-2026-44322 | Analyzed | 未確認 | CWE-476, CWE-754 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF PATCH /3gpp-pfd-management/v1/{afId}/transactions/{transId}/applications/{appId} hand |
| CVE-2026-44323 | Analyzed | 未確認 | CWE-476 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/am |
| CVE-2026-44324 | Analyzed | 未確認 | CWE-704, CWE-754 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/am |
| CVE-2026-44325 | Analyzed | 未確認 | CWE-20, CWE-755, CWE-843 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /oauth2/token contains a parser-level type-confusion bug famil |
| CVE-2026-44326 | Analyzed | 未確認 | CWE-862 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-traffic-influence API without inbound OAuth2/bearer-token authorizati |
| CVE-2026-44327 | Analyzed | 未確認 | CWE-306, CWE-862 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-oam route group without inbound OAuth2/bearer-token authorization. A |
| CVE-2026-44328 | Analyzed | 未確認 | CWE-306, CWE-476, CWE-862 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. On top of th |
| CVE-2026-44329 | Analyzed | 未確認 | CWE-306, CWE-862 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without OAuth2/bearer-token authorization middl |
| CVE-2026-44330 | Analyzed | 未確認 | CWE-863 | free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-pfdmanagement route group without inbound OAuth2/bearer-token authori |
| CVE-2026-44331 | Awaiting Analysis | 未確認 | CWE-89 | In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap2_sql.c allows a remote attacker to inject arbitrary SQL com |
| CVE-2026-44334 | Analyzed | 未確認 | CWE-94 | PraisonAI is a multi-agent teams system. From version 4.5.139 to before version 4.6.32, CVE-2026-40287's fix gated tools.py auto-import behind PRAISONAI_ALLOW_LOCAL_TOOLS=true in t |
| CVE-2026-44335 | Analyzed | 未確認 | CWE-918 | PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attack |
| CVE-2026-44336 | Modified | 未確認 | CWE-20, CWE-22, CWE-829, CWE-913, CWE-94 | PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (praisonai mcp serve) registers four file-handling tools by defaul |
| CVE-2026-44337 | Analyzed | 未確認 | CWE-20, CWE-89 | PraisonAI is a multi-agent teams system. From version 2.4.1 to before version 4.6.34, PraisonAI exposes optional SQL/CQL-backed knowledge-store implementations that build table and |
| CVE-2026-44338 | Analyzed | 未確認 | CWE-1188, CWE-306, CWE-668 | PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that s |
| CVE-2026-44339 | Modified | 未確認 | CWE-470 | PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.37 and praisonaiagents version 1.6.37, praisonaiagents resolves unresolved tool names against module globals |
| CVE-2026-44340 | Analyzed | 未確認 | CWE-22, CWE-59 | PraisonAI is a multi-agent teams system. Prior to version 4.6.37, the _safe_extractall helper that all recipe pull, recipe publish, and recipe unpack flows route through validates |
| CVE-2026-44341 | Deferred | 未確認 | CWE-284, CWE-639 | GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval endpoint that allows unauthenticated users to access job details by directly manipulating obj |
| CVE-2026-44343 | Analyzed | 未確認 | CWE-20 | WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to acces |
| CVE-2026-44345 | Analyzed | 未確認 | CWE-78 | BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/_internal/container/frontend/dockerfile/temp |
| CVE-2026-44346 | Analyzed | 未確認 | CWE-78, CWE-94 | BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a newline-injected |
| CVE-2026-44347 | Analyzed | 未確認 | CWE-352 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.23.3, the SSO flow does not validate the state parameter, which makes it possible for an attacker |
| CVE-2026-44348 | Deferred | 未確認 | CWE-415 | PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in compute_hash_to_sign() in src/podofo/private/OpenSSLInternal_Ripped.cp |
| CVE-2026-44349 | Deferred | 未確認 | CWE-89 | Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.5, processFuzzySearch in server/resource/resource_findallpaginated.go:1484 splits the user-supplied column paramete |
| CVE-2026-44351 | Deferred | 未確認 | CWE-1391, CWE-287, CWE-326 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.4, a critical authentication-bypass vulnerability in fast-jwt's async key-resolver flow allows any unauthen |
| CVE-2026-44352 | Deferred | 未確認 | CWE-284 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, Broken Access Control allows readi |
| CVE-2026-44353 | Analyzed | 未確認 | CWE-22 | Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.4.0, Streamlink's HLS and DASH parsers do not validate the URI scheme of |
| CVE-2026-44358 | Awaiting Analysis | 未確認 | CWE-427, CWE-829 | Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects. Prior to 1.0.1, the action's entrypoint.sh invoked DangerJS from th |
| CVE-2026-44363 | Deferred | 未確認 | CWE-295, CWE-918 | MISP modules are autonomous modules that can be used to extend MISP for new services. Prior to 3.0.7, an unsafe remote resource fetching vulnerability existed in MISP Modules expan |
| CVE-2026-44364 | Deferred | 未確認 | CWE-352 | MISP modules are autonomous modules that can be used to extend MISP for new services. In 3.0.7 and earlier, a Cross-Site Request Forgery vulnerability in the MISP Modules website a |
| CVE-2026-44365 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-34429. Reason: This candidate is a duplicate of CVE-2026-34429. Notes: All CVE users should ref | |
| CVE-2026-44366 | Deferred | 未確認 | CWE-79 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting (XSS) vulnerability exists i |
| CVE-2026-44368 | Deferred | 未確認 | CWE-208 | PyQuorum is a cryptographic library for secret sharing and key management. Prior to 0.2.1, the mul_mod function implements multiplication via a binary expansion loop whose executio |
| CVE-2026-44369 | Deferred | 未確認 | CWE-80 | CVAT is an open source interactive video and image annotation tool for computer vision. From 2.5.0 to 2.63.0, an attacker who is able to create or edit an annotation guide on a tas |
| CVE-2026-44371 | Deferred | 未確認 | CWE-79 | Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This vu |
| CVE-2026-44372 | Analyzed | 未確認 | CWE-601 | Nitro is a next generation server toolkit. Prior to 3.0.260429-beta, an attacker could turn a redirect route rule using wildcards rewrite into a cross-host redirect by sliding an e |
| CVE-2026-44373 | Analyzed | 未確認 | CWE-22 | Nitro is a next generation server toolkit. Prior to 3.0.260429-beta, an attacker could bypass a proxy route rule by sending percent-encoded path traversal (..%2f) in the URL, causi |
| CVE-2026-44374 | Analyzed | 未確認 | CWE-863 | Backstage is an open framework for building developer portals. Prior to 0.6.11, the unprocessed entities read endpoints in @backstage/plugin-catalog-backend-module-unprocessed do n |
| CVE-2026-44375 | Deferred | 未確認 | CWE-789 | Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library. Prior to 1.1.62, Nerdbank.MessagePack contains an uncontrolled stack allocation vulnerability in D |
| CVE-2026-44376 | Deferred | 未確認 | CWE-79 | CubeCart is an ecommerce software solution. Prior to 6.7.0, an unauthenticated Reflected XSS vulnerability exists in the CubeCart v6.x search feature. Due to a logic flaw in classe |
| CVE-2026-44377 | Deferred | 未確認 | CWE-1336, CWE-94 | CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Server-Side Template Injection (SSTI) vulnerability exists in multiple modules of CubeCart (including E |
| CVE-2026-44378 | Analyzed | 未確認 | CWE-407 | Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denia |
| CVE-2026-44379 | Analyzed | 未確認 | CWE-20 | MISP is an open source threat intelligence and sharing platform. Prior to 2.5.37, MISP Collections did not enforce RFC 4122 UUID validation on the uuid field. As a result, a user a |
| CVE-2026-44380 | Analyzed | 未確認 | CWE-863 | MISP is an open source threat intelligence and sharing platform. Prior to 2.5.37, an improper access control vulnerability in the authentication key reset functionality allowed an |
| CVE-2026-44381 | Analyzed | 未確認 | CWE-89 | MISP is an open source threat intelligence and sharing platform. Prior to 2.5.37, a SQL injection vulnerability existed in the handling of user-controlled ordering parameters in th |
| CVE-2026-44390 | Modified | 未確認 | CWE-1050, CWE-407 | NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious |
| CVE-2026-44392 | Deferred | 未確認 | CWE-862 | Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update proces |
| CVE-2026-44394 | Analyzed | 未確認 | CWE-863 | An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original token's expiry to the newly issued tok |
| CVE-2026-44400 | Analyzed | 未確認 | CWE-639 | MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks |
| CVE-2026-44403 | Analyzed | 未確認 | CWE-94 | Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allows authenticated administrators to inject |
| CVE-2026-44405 | Awaiting Analysis | 未確認 | CWE-327 | In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm. |
| CVE-2026-44406 | Analyzed | 未確認 | CWE-427 | ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary co |
| CVE-2026-44407 | Analyzed | 未確認 | CWE-134 | A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service. |
| CVE-2026-44408 | Deferred | 未確認 | CWE-200 | There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify configuration through the |
| CVE-2026-44409 | Analyzed | 未確認 | CWE-200, CWE-862 | There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without authoriza |
| CVE-2026-44410 | Deferred | 未確認 | CWE-1240 | This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer's expectatio |
| CVE-2026-44411 | Analyzed | 未確認 | CWE-824 | A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected application is vulnerable to uninitialized pointer access while parsing spec |
| CVE-2026-44412 | Undergoing Analysis | 未確認 | CWE-121 | A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing spec |
| CVE-2026-44413 | Analyzed | 未確認 | CWE-306 | In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access |
| CVE-2026-44417 | Modified | 未確認 | CWE-15, CWE-20 | The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that another path in the code might lead to code execution capabilitie |
| CVE-2026-44418 | Deferred | 未確認 | CWE-89 | EcclesiaCRM is CRM Software for church management. In 8.0.0 and earlier, the ValidateInput() function's default case in EcclesiaCRM's query view passes user-supplied POST parameter |
| CVE-2026-44420 | Modified | 未確認 | CWE-122, CWE-131 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP's server-side clipboard |
| CVE-2026-44421 | Modified | 未確認 | CWE-122, CWE-787 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending c |
| CVE-2026-44422 | Modified | 未確認 | CWE-415, CWE-416, CWE-825 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id for multiple logical pointer f |
| CVE-2026-44423 | Analyzed | 未確認 | CWE-639 | ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. |
| CVE-2026-44424 | Analyzed | 未確認 | CWE-639 | ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/devices/:uid returns the full device object whenever the caller is authenticated, without verifying that the device |
| CVE-2026-44425 | Analyzed | 未確認 | CWE-1333, CWE-20, CWE-943 | ShellHub is a centralized SSH gateway. Prior to 0.24.2, the device list endpoint accepts user-controlled identifiers in the the name field of each filter property in the base64-enc |
| CVE-2026-44426 | Analyzed | 未確認 | CWE-639 | ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/namespaces/:tenant returns the full namespace object — including the members list (user IDs, e-mails, roles), setti |
| CVE-2026-44427 | Deferred | 未確認 | CWE-601 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. From 1.1.0 to 1.7.4, the TrailingSlashMiddleware in internal/api/server.go is v |
| CVE-2026-44428 | Analyzed | 未確認 | CWE-918 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only |
| CVE-2026-44429 | Analyzed | 未確認 | CWE-116, CWE-79 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the public catalogue UI served at GET / (file internal/api/hand |
| CVE-2026-44430 | Modified | 未確認 | CWE-918 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the Registry's HTTP-based namespace verification (POST /v0/auth |
| CVE-2026-44431 | Modified | 未確認 | CWE-200 | urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., |
| CVE-2026-44432 | Modified | 未確認 | CWE-409 | urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPRes |
| CVE-2026-44437 | Analyzed | 未確認 | CWE-22, CWE-601 | The Angular SSR is a server-rise rendering tool for Angular applications. From 19.0.0-next.0 to before 19.2.25, 20.3.25, 21.2.9, and 22.0.0-next.7, a vulnerability exists in the X- |
| CVE-2026-44439 | Analyzed | 未確認 | CWE-918 | PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated |
| CVE-2026-44440 | Analyzed | 未確認 | CWE-22 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.101.1 and 16.10.0, an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' |
| CVE-2026-44441 | Analyzed | 未確認 | CWE-918 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.106.0 and 16.16.0, a malicious user could send a crafted request to an endpoint, which would lead t |
| CVE-2026-44442 | Analyzed | 未確認 | CWE-862 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 16.9.1, certain endpoints failed to enforce proper authorization checks, allowing users to modify data |
| CVE-2026-44443 | Deferred | 未確認 | CWE-362 | Lumiverse is a full-featured AI chat application. Prior to 0.9.7, consumeNonce() only checks that the module-level variable is set and unexpired. It does not validate any value fro |
| CVE-2026-44444 | Deferred | 未確認 | CWE-78 | Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the Spindle extension build pipeline calls bun install without the --ignore-scripts flag before running the static |
| CVE-2026-44445 | Analyzed | 未確認 | CWE-611 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.104.3 and 16.12.0, an improper restriction of XML external entity (XXE) reference vulnerability in |
| CVE-2026-44446 | Analyzed | 未確認 | CWE-89 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.104.3 and 16.14.0, some endpoints were vulnerable to SQL injection through specially crafted reques |
| CVE-2026-44447 | Analyzed | 未確認 | CWE-89 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 16.9.0, some endpoints were vulnerable to SQL injection through specially crafted requests, which woul |
| CVE-2026-44448 | Analyzed | 未確認 | CWE-862 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.102.0 and 16.11.0, certain endpoints failed to enforce proper authorization checks, allowing users |
| CVE-2026-44449 | Deferred | 未確認 | CWE-88 | Lumiverse is a full-featured AI chat application. Prior to 0.9.7, when the primary toSmbPath(fullPath) call throws, the method falls back to a dirname/basename split and only valid |
| CVE-2026-44450 | Deferred | 未確認 | CWE-88 | Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the MCP server creation endpoint validates the command field against an allowlist of binary names but forwards the |
| CVE-2026-44451 | Deferred | 未確認 | CWE-693 | Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the component override system transpiles user-supplied TSX via Sucrase and evaluates it with new Function, shadowi |
| CVE-2026-44455 | Analyzed | 未確認 | CWE-74 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, Improper handling of JSX element tag names in hono/jsx allowed unvalidated t |
| CVE-2026-44456 | Analyzed | 未確認 | CWE-400 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, bodyLimit() does not reliably enforce maxSize for requests without a usable |
| CVE-2026-44457 | Analyzed | 未確認 | CWE-524 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, Cache Middleware does not skip caching for responses that declare per-user v |
| CVE-2026-44458 | Analyzed | 未確認 | CWE-116, CWE-74 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, the JSX renderer escapes style attribute object values for HTML but not for |
| CVE-2026-44459 | Analyzed | 未確認 | CWE-1284 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/ |
| CVE-2026-44460 | Deferred | 未確認 | CWE-200, CWE-287, CWE-306 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.12.0, /api/totp_setup.php is callable from a session that has onl |
| CVE-2026-44461 | Analyzed | 未確認 | CWE-78 | Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment variable keys are inserted witho |
| CVE-2026-44462 | Analyzed | 未確認 | CWE-184 | Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}), allowing arbitrary command execution |
| CVE-2026-44463 | Analyzed | 未確認 | CWE-184, CWE-78 | Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands, hijacking prog |
| CVE-2026-44465 | Analyzed | 未確認 | CWE-78 | Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration |
| CVE-2026-44466 | Analyzed | 未確認 | CWE-78 | Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowing execution of arbitrary commands neste |
| CVE-2026-44467 | Analyzed | 未確認 | CWE-297, CWE-322 | The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0, Claude Desktop's SSH rem |
| CVE-2026-44468 | Analyzed | 未確認 | CWE-276 | The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary fil |
| CVE-2026-44469 | Analyzed | 未確認 | CWE-276 | The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can |
| CVE-2026-44470 | Analyzed | 未確認 | CWE-269, CWE-59 | The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. Prior to 1.3834.0, the CoworkVMService component in Claude |
| CVE-2026-44471 | Analyzed | 未確認 | CWE-59 | gitoxide is an implementation of git written in Rust. Prior to 0.21.1, a malicious tree can be constructed that will, when checked out with gitoxide, permit writing an attacker-con |
| CVE-2026-44473 | Deferred | 未確認 | CWE-358, CWE-863 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup can send a forged PDUSessionResourceSetupResponse carrying any UE's AMF-UE-NGAP |
| CVE-2026-44474 | Deferred | 未確認 | CWE-358 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce security rules on concurrent running of security procedures defined in TS 33.501 §6. |
| CVE-2026-44475 | Deferred | 未確認 | CWE-358 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not verify the UE Security Capabilities received in NGAP PathSwitchRequest messages against it |
| CVE-2026-44477 | Modified | 未確認 | CWE-250, CWE-271, CWE-426 | CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its Postgre |
| CVE-2026-44478 | Deferred | 未確認 | CWE-284, CWE-287 | hoppscotch is an open source API development ecosystem. The fix for CVE-2026-28215 in version 2026.2.0 addresses the unauthenticated POST /v1/onboarding/config endpoint by checking |
| CVE-2026-44479 | Analyzed | 未確認 | CWE-200, CWE-532 | Vercel’s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI runs in non-interactive mode (--non-interactive or auto-detect |
| CVE-2026-44482 | Deferred | 未確認 | CWE-20, CWE-79, CWE-862, CWE-94 | soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support. Prior to 0.1.8, a track title containing an HTML payload executed locally |
| CVE-2026-44483 | Deferred | 未確認 | CWE-1321 | RVF (formerly Remix Validated Form) provides easy form validation and state management for React. From 6.0.0 to before 6.0.4 and 7.0.2, setPath in @rvf/set-get (used by @rvf/core t |
| CVE-2026-44484 | Modified | 未確認 | CWE-506, CWE-829 | PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting me |
| CVE-2026-44497 | Analyzed | 未確認 | CWE-347 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0 and prior to zebra-script version 6.0.0, the fix for CVE-2026-41583 introduced a separate issue due to |
| CVE-2026-44498 | Analyzed | 未確認 | CWE-682 | ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, Zebra's block validator undercounts transparent signature operations against the 20000-sigop block limit (MA |
| CVE-2026-44499 | Deferred | 未確認 | CWE-770 | ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a composite denial-of-service vulnerability in Zebra's block discovery pipeline allows an unauthenticated re |
| CVE-2026-44500 | Analyzed | 未確認 | CWE-770 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0, prior to zebra-chain version 7.0.0, and prior to zebra-network version 6.0.0, several inbound deseria |
| CVE-2026-44501 | Analyzed | 未確認 | CWE-502 | DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend (datahub-frontend-react) deserializes attacker-controlled Java objects from the REDIRECT_URL HTT |
| CVE-2026-44502 | Deferred | 未確認 | CWE-918 | Bugsink is a self-hosted error tracking tool. Prior to 2.1.3, Bugsink’s webhook URL validation could be (partially) bypassed because of a mismatch in URL parsing. The original vali |
| CVE-2026-44503 | Deferred | 未確認 | CWE-601 | The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when |
| CVE-2026-44504 | Deferred | 未確認 | CWE-285, CWE-639 | Aegra is a drop-in replacement for LangSmith Deployments. Prior to 0.9.7, with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenti |
| CVE-2026-44511 | Deferred | 未確認 | CWE-613 | Katalyst Koi is a framework for building Rails admin functionality. Prior to 4.20.0 and 5.6.0, admin session cookies were not invalidated when an admin user logged out. An attacker |
| CVE-2026-44513 | Modified | 未確認 | CWE-358, CWE-94 | Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, a trust_remote_code bypass in DiffusionPipeline.from_pretrained allows arbitrary remote code execution |
| CVE-2026-44514 | Deferred | 未確認 | CWE-1385 | Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail's dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on co |
| CVE-2026-44515 | Deferred | 未確認 | CWE-918 | Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows authenticated users to add feeds by providing a feed URL (via the web interface or the API) |
| CVE-2026-44516 | Deferred | 未確認 | CWE-532 | Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all o |
| CVE-2026-44518 | Analyzed | 未確認 | CWE-125, CWE-20 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in th |
| CVE-2026-44520 | Deferred | 未確認 | CWE-601, CWE-918 | Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships. Prior to 1.5.1, the URLInputHandler clas |
| CVE-2026-44521 | Deferred | 未確認 | CWE-89 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.68, an authenticated SQL injection vulnerability in the elFinder MySQL volume d |
| CVE-2026-44522 | Deferred | 未確認 | CWE-20, CWE-22 | Note Mark is an open-source note-taking application. From 0.13.0 to before 0.19.4, the Note Mark application allows authenticated users to upload assets to notes via POST /api/note |
| CVE-2026-44523 | Deferred | 未確認 | CWE-326, CWE-345 | Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or entropy is enforced on the JWT_SECRET configuration value. The application accepts any ba |
| CVE-2026-44542 | Analyzed | 未確認 | CWE-22 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-stable and 1.3.9-beta, attacker-controlled path input is joined with a trusted base path prior to |
| CVE-2026-44543 | Analyzed | 未確認 | CWE-269 | Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-c |
| CVE-2026-44544 | Deferred | 未確認 | CWE-639 | gittuf is a platform-agnostic Git security system. Prior to 0.14.0, an attacker with push access to gittuf's Reference State Log (RSL) can roll back the current policy to any previ |
| CVE-2026-44547 | Deferred | 未確認 | CWE-287, CWE-304 | ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE-2026-4058 is incomplete. The hardening commit was merged and then silently stripped from |
| CVE-2026-44548 | Deferred | 未確認 | CWE-352, CWE-650 | ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDele |
| CVE-2026-44549 | Analyzed | 未確認 | CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, Excel file attachments are previewed in an unsafe way. A crafted |
| CVE-2026-44550 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, FolderForm uses model_config = ConfigDict(extra='allow'), which p |
| CVE-2026-44551 | Analyzed | 未確認 | CWE-287 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submi |
| CVE-2026-44552 | Analyzed | 未確認 | CWE-668 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the tool_servers and terminal_servers keys in utils/tools.py do u |
| CVE-2026-44553 | Modified | 未確認 | CWE-613 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, administrative role changes and user deletions do not iterate SES |
| CVE-2026-44554 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/retrieval/process/web endpoint accepts a user-su |
| CVE-2026-44555 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI supports model composition via base_model_id: a user-d |
| CVE-2026-44556 | Analyzed | 未確認 | CWE-284, CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /responses endpoint in the OpenAI router accepts any authenti |
| CVE-2026-44557 | Analyzed | 未確認 | CWE-863 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the _validate_collection_access function uses an incomplete allow |
| CVE-2026-44558 | Modified | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the channel router does not call filter_allowed_access_grants on |
| CVE-2026-44559 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the GET /api/v1/channels/{id}/members endpoint only checks member |
| CVE-2026-44560 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the type: "file" (non-full-context), type: "text" with collection |
| CVE-2026-44561 | Analyzed | 未確認 | CWE-863 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the is_user_channel_member function checks whether a ChannelMembe |
| CVE-2026-44562 | Analyzed | 未確認 | CWE-283, CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/models/import endpoint allows users with the wor |
| CVE-2026-44563 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /api/generate, /api/embed, /api/embeddings, and /api/show end |
| CVE-2026-44564 | Analyzed | 未確認 | CWE-863 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the ydoc:document:update Socket.IO event handler checks whether t |
| CVE-2026-44565 | Analyzed | 未確認 | CWE-22 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.10, when uploading an audio file, the name of the file is derived fr |
| CVE-2026-44566 | Analyzed | 未確認 | CWE-22, CWE-434 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, when attaching files to a promp, the name of the file is derive |
| CVE-2026-44567 | Analyzed | 未確認 | CWE-602, CWE-863 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, the API does not properly validate that the user has an authori |
| CVE-2026-44568 | Analyzed | 未確認 | CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the AccountPending.svelte component renders the admin-configured |
| CVE-2026-44569 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, there's an IDOR in the channels message management system that a |
| CVE-2026-44570 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, authorization controls surrounding the memories API were inconsi |
| CVE-2026-44571 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is neithe |
| CVE-2026-44572 | Analyzed | 未確認 | CWE-349 | Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an external client could send a x-nextjs-data header on a normal re |
| CVE-2026-44573 | Modified | 未確認 | CWE-551, CWE-863 | Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middle |
| CVE-2026-44574 | Modified | 未確認 | CWE-288, CWE-551 | Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes can |
| CVE-2026-44575 | Modified | 未確認 | CWE-288, CWE-551 | Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based chec |
| CVE-2026-44576 | Analyzed | 未確認 | CWE-436 | Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can be vulnerable to cac |
| CVE-2026-44577 | Modified | 未確認 | CWE-770 | Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image |
| CVE-2026-44578 | Modified | 未確認 | CWE-918 | Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be |
| CVE-2026-44579 | Modified | 未確認 | CWE-770, CWE-833 | Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feat |
| CVE-2026-44580 | Analyzed | 未確認 | CWE-79 | Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untru |
| CVE-2026-44581 | Analyzed | 未確認 | CWE-79 | Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Router applications that rely on CSP nonces can be vulnerable t |
| CVE-2026-44582 | Analyzed | 未確認 | CWE-328 | Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoni |
| CVE-2026-44586 | Deferred | 未確認 | CWE-79, CWE-94 | SiYuan is an open-source personal knowledge management system. From 2.1.12 to before 3.7.0. SiYuan's Bazaar marketplace renders package author metadata from the public bazaar stage |
| CVE-2026-44588 | Deferred | 未確認 | CWE-116, CWE-1188, CWE-79 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, he tooltip mouseover handler in app/src/block/popover.ts reads aria-label via getAttribute and passe |
| CVE-2026-44589 | Deferred | 未確認 | CWE-918 | Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl() denylist introduced in [email protected] to remediate GHSA-pqhr-mp3f-hrpp (Dmitry Prokhorov / Pos |
| CVE-2026-44590 | Deferred | 未確認 | CWE-78 | Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validate_modified_targets.yml is vulnerable to command in |
| CVE-2026-44592 | Deferred | 未確認 | CWE-306, CWE-345, CWE-862 | Gradient is a nix-based continuous integration system. In 1.1.0, when GRADIENT_DISCOVERABLE=true (the default, and the NixOS module default), anyone who can reach /proto can regist |
| CVE-2026-44593 | Deferred | 未確認 | CWE-22 | esm.sh is a no-build content delivery network (CDN) for web development. In 137 and earlier, the legacy router first retrieves a response from legacyServer, parses the incoming req |
| CVE-2026-44594 | Deferred | 未確認 | CWE-22 | esm.sh is a no-build content delivery network (CDN) for web development. In 137 and earlier, a Local File Inclusion (LFI) vulnerability exists in the esbuild plugin's handling of t |
| CVE-2026-44597 | Analyzed | 未確認 | CWE-684 | Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011. |
| CVE-2026-44598 | Analyzed | 未確認 | CWE-601, CWE-918 | With valid login credentials, URL Redirection to Untrusted Site ('Open Redirect'), Server-Side Request Forgery (SSRF) vulnerability in Apache Shiro. This issue affects Apache S |
| CVE-2026-44599 | Analyzed | 未確認 | CWE-669 | Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. |
| CVE-2026-44600 | Analyzed | 未確認 | CWE-696 | Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010. |
| CVE-2026-44601 | Analyzed | 未確認 | CWE-837 | Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009. |
| CVE-2026-44602 | Analyzed | 未確認 | CWE-476 | Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006. |
| CVE-2026-44603 | Analyzed | 未確認 | CWE-193 | Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007. |
| CVE-2026-44604 | Awaiting Analysis | 未確認 | CWE-78 | A command injection vulnerability was discovered in the `rpmuncompress` utility of RPM. When extracting certain archive formats (ZIP, 7z, GEM) to a specified destination directory, |
| CVE-2026-44608 | Analyzed | 未確認 | CWE-413 | NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR reload, RPZ zon |
| CVE-2026-44611 | Analyzed | 未確認 | CWE-916 | Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks. |
| CVE-2026-44612 | Deferred | 未確認 | CWE-427 | Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the |
| CVE-2026-44618 | Modified | 未確認 | CWE-611 | Insecure XML parser configuration in Apache CXF's WS-Transfer module may allow attackers to perform XXE attacks. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11 |
| CVE-2026-44633 | Deferred | 未確認 | CWE-863 | Live Helper Chat is an open-source application that enables live support websites. In 4.84v, the Live Helper Chat REST API chat update endpoint allows a REST user with lhchat/use t |
| CVE-2026-44635 | Deferred | 未確認 | CWE-1284, CWE-22, CWE-89, CWE-915 | Kysely is a type-safe TypeScript SQL query builder. From 0.26.0 to 0.28.16, DefaultQueryCompiler.visitJSONPathLeg does not escape JSON-path metacharacters (., [, ], *, **, ?). When |
| CVE-2026-44636 | Modified | 未確認 | CWE-122, CWE-190 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, signed integer overflow in sixel_encode_highcolor's allocation size calculation ca |
| CVE-2026-44637 | Analyzed | 未確認 | CWE-190, CWE-787 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a signed integer overflow in the SIXEL parser's image-buffer doubling loop can lea |
| CVE-2026-44638 | Analyzed | 未確認 | CWE-476, CWE-690 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a wrong NULL check after an allocation call in sixel_decode_raw and sixel_decode c |
| CVE-2026-44640 | Deferred | 未確認 | CWE-843 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to 0.24.14, aio->prov_data is stored as nni_quic_conn* during dialing, but read as ex_quic_conn* during |
| CVE-2026-44641 | Deferred | 未確認 | CWE-22, CWE-73 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.8.12, Microsoft APM normalizes marketplace plugins by copying plugin components refer |
| CVE-2026-44643 | Analyzed | 未確認 | CWE-95 | Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that es |
| CVE-2026-44647 | Deferred | 未確認 | CWE-22 | OneDev is a Git server with CI/CD, kanban, and packages. Prior to 15.0.2, there is behavior that breaks the expected boundary between repository-controlled LFS metadata and server- |
| CVE-2026-44648 | Deferred | 未確認 | CWE-613 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-44649 | Deferred | 未確認 | CWE-290, CWE-306, CWE-346, CWE-807 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-44650 | Deferred | 未確認 | CWE-22 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-44651 | Deferred | 未確認 | CWE-79 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-44652 | Deferred | 未確認 | CWE-918 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-44655 | Deferred | 未確認 | CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.3.0 to 2.28.1, unescaped Project Name allows an attacker that can set it (which typically requires manager or |
| CVE-2026-44656 | Analyzed | 未確認 | CWE-78 | Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path optio |
| CVE-2026-44657 | Deferred | 未確認 | CWE-79 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, using show_inline=1 parameter and a valid file_show_inline_token CSRF token on file_download.php, an |
| CVE-2026-44658 | Deferred | 未確認 | CWE-20 | Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in promptForFeedUrl, but item links inside the feed are not su |
| CVE-2026-44659 | Deferred | 未確認 | CWE-451 | Zen is a firefox-based browser. Prior to 1.19.12b, the ZEN Browser incorrectly truncates long hostnames in the address bar and shows only the attacker-controlled prefix of the subd |
| CVE-2026-44660 | Analyzed | 未確認 | CWE-401 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-like object and the write operatio |
| CVE-2026-44661 | Deferred | 未確認 | CWE-918 | python-utcp is the python implementation of UTCP. Prior to 1.1.3, the utcp-http plugin is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundary incons |
| CVE-2026-44662 | Deferred | 未確認 | CWE-122 | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.0 to before 0.10.79, CipherCtxRef::cipher_update, CipherCtxRef::cipher_update_vec, and symm::Cry |
| CVE-2026-44664 | Deferred | 未確認 | CWE-91 | fast-xml-builder builds XML from JSON. In 1.1.5, the fix for CVE-2026-41650 in fast-xml-parser sanitizes -- sequences in XML comment content using .replace(/--/g, '- -'). This skip |
| CVE-2026-44665 | Deferred | 未確認 | CWE-91 | fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process entities is not enabled, it breaks the attribute value into mul |
| CVE-2026-44666 | Deferred | 未確認 | CWE-78 | HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool. Prior to 3.3.8, the sanitizeString() function in convertCore.php is missing backtick (`) and |
| CVE-2026-44667 | Deferred | 未確認 | CWE-79 | FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via attachment filenames in remedi |
| CVE-2026-44668 | Deferred | 未確認 | CWE-306 | FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, AccessControlInterceptor, the authentication gate for all Struts2 actions, unconditionally ca |
| CVE-2026-44669 | Deferred | 未確認 | CWE-79 | FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via attachment filenames in assess |
| CVE-2026-44670 | Deferred | 未確認 | CWE-1188, CWE-79, CWE-94 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the kernel stores Attribute View (AV / database) names without any HTML escape, then a render templat |
| CVE-2026-44671 | Analyzed | 未確認 | CWE-90 | ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discovered in Zitadel's LDAP identity provider implementation, |
| CVE-2026-44672 | Deferred | 未確認 | CWE-94 | mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbi |
| CVE-2026-44673 | Deferred | 未確認 | CWE-190 | libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when |
| CVE-2026-44678 | Deferred | 未確認 | CWE-639 | Tuist is a virtual platform team for Swift app devs. In 1.180.8 and earlier, the DELETE /api/projects/{account_handle}/{project_handle}/previews/{preview_id} endpoint loads the pre |
| CVE-2026-44679 | Deferred | 未確認 | CWE-770 | Tuist is a virtual platform team for Swift app devs. Prior to 1.180.10, the forgot password flow allows an unauthenticated attacker to repeatedly trigger password reset emails for |
| CVE-2026-44680 | Deferred | 未確認 | CWE-89 | MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to @mikro-orm/knex 6.6.14 and @mikro-orm/sql 7.0.14, MikroORM's identif |
| CVE-2026-44681 | Modified | 未確認 | CWE-601, CWE-863 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.12 and 1.7.1, an unauthenticated open redirect in Authlib's OpenIDImplicitGrant and OpenIDHy |
| CVE-2026-44694 | Analyzed | 未確認 | CWE-367, CWE-918 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. From version 2.18.7 to before version 2.50.2, there is an authent |
| CVE-2026-44695 | Analyzed | 未確認 | CWE-352 | Outline is a service that allows for collaborative documentation. Prior to 1.7.1, the Slack integration callback for GET /auth/slack.post accepts an unsigned, session-independent O |
| CVE-2026-44697 | Deferred | 未確認 | CWE-409, CWE-770 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress (data/batch/bat |
| CVE-2026-44698 | Awaiting Analysis | 未確認 | CWE-346, CWE-749, CWE-94, CWE-940 | Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.4.1 for iOS and 2026.4.4 for Android, he Home Assistant Companion ap |
| CVE-2026-44699 | Deferred | 未確認 | CWE-327, CWE-347 | LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. |
| CVE-2026-44700 | Deferred | 未確認 | CWE-295 | Elixir WebRTC is an Elixir implementation of the W3C WebRTC API. Prior to 0.15.1 and 0.16.1, missing DTLS peer certificate fingerprint validation in the DTLS client (active) role r |
| CVE-2026-44706 | Deferred | 未確認 | CWE-89 | Chatwoot is a customer engagement suite. From 2.2.0 to before 4.11.2, a SQL injection vulnerability exists in the conversation and contact filter APIs. When filtering by a custom a |
| CVE-2026-44707 | Deferred | 未確認 | CWE-283, CWE-287 | Chatwoot is a customer engagement suite. From 2.14.0 to before 4.13.0, a Pre-Account Takeover (Pre-ATO) vulnerability existed in Chatwoot's authentication flow. Because email confi |
| CVE-2026-44708 | Analyzed | 未確認 | CWE-79 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the mistune math plugin renders inline math ($...$) and block math ($$...$$) by concatenating the ra |
| CVE-2026-44709 | Deferred | 未確認 | CWE-78 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, pamusb-pinentry reads the PINENTRY_FALLBACK_APP environment variable and executes |
| CVE-2026-44710 | Deferred | 未確認 | CWE-476 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/device.c passed the return values of udisks_drive_get_serial(), udisks_drive_ |
| CVE-2026-44711 | Deferred | 未確認 | CWE-287, CWE-59 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass and r |
| CVE-2026-44712 | Deferred | 未確認 | CWE-78, CWE-88 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, a crafted UUID such as $(id>/tmp/rce) in the config causes root RCE when pamusb-c |
| CVE-2026-44713 | Deferred | 未確認 | CWE-116, CWE-78 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/tmux.c reads the user's $TMUX environment variable, splits it on commas, and |
| CVE-2026-44714 | Deferred | 未確認 | CWE-347 | The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends() contains two fast-path verification bugs for standard P2PK |
| CVE-2026-44717 | Deferred | 未確認 | CWE-94 | MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. Prior to 0.1.1, the use of eval() to evaluate mathematical expressions without p |
| CVE-2026-44718 | Deferred | 未確認 | CWE-639, CWE-862 | Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful. From 0.2.0 to before 0.10.0, explorations.get, explorations.replace, and explor |
| CVE-2026-44719 | Deferred | 未確認 | CWE-862 | Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful. From 0.2.0 to before 0.10.0, collaborators.list, tables.metadata.list, explorat |
| CVE-2026-44720 | Deferred | 未確認 | CWE-287, CWE-347 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow |
| CVE-2026-44721 | Modified | 未確認 | CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a stored cross-site scripting (XSS) vulnerability that allows any |
| CVE-2026-44723 | Analyzed | 未確認 | CWE-1336, CWE-78 | Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pull_request.title }} directly inside double-quoted bash string |
| CVE-2026-44724 | Deferred | 未確認 | CWE-78 | systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces() w |
| CVE-2026-44728 | Analyzed | 未確認 | CWE-843, CWE-94 | Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically crafted by an attacke |
| CVE-2026-44729 | Analyzed | 未確認 | CWE-79 | Twenty is an open source CRM. In 1.18.0 and earlier, the file serving endpoints in Twenty CRM at /files/* and /file/:fileFolder/:id serve uploaded files using fileStream.pipe(res) |
| CVE-2026-44730 | Analyzed | 未確認 | CWE-284 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a |
| CVE-2026-44737 | Deferred | 未確認 | CWE-79 | grav-plugin-admin is the admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.10.49.5, th |
| CVE-2026-44738 | Modified | 未確認 | CWE-200 | Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.pages role to call config.toArray() from within a page body, dum |
| CVE-2026-44742 | Modified | 未確認 | CWE-79 | Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026. |
| CVE-2026-44749 | Awaiting Analysis | 未確認 | CWE-497 | The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing underlying URI p |
| CVE-2026-44774 | Modified | 未確認 | CWE-15, CWE-284 | Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, and 3.7.1, Traefik's Kubernetes Gateway API provider allows a tenant with HTTPRoute creation permissio |
| CVE-2026-44775 | Deferred | 未確認 | CWE-306 | Kavita is a cross platform reading server. Prior to 0.9.0, the ReaderController.GetImage endpoint is decorated with [AllowAnonymous], allowing completely unauthenticated access to |
| CVE-2026-44776 | Deferred | 未確認 | CWE-639 | Kavita is a cross platform reading server. Prior to 0.9.0, the download, size-check, and chapter metadata endpoints do not enforce library-level authorization. A low-privileged use |
| CVE-2026-44777 | Analyzed | 未確認 | CWE-674 | jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other. |
| CVE-2026-44788 | Analyzed | 未確認 | CWE-22 | SharpCompress is a fully managed C# library to deal with many compression types and formats. In 0.47.4 and earlier, a path traversal vulnerability in IArchive.WriteToDirectory() al |
| CVE-2026-44794 | Analyzed | 未確認 | CWE-862 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, in the case of inter-object references via GenericForeignKey (a pattern allowing a |
| CVE-2026-44796 | Analyzed | 未確認 | CWE-1333, CWE-400 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bulk-rename endpoints (for example, /dcim/interfaces/rename/) w |
| CVE-2026-44797 | Analyzed | 未確認 | CWE-918 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot's Webhook data model and associated feature set could be configured by us |
| CVE-2026-44798 | Analyzed | 未確認 | CWE-471, CWE-749 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to add/change a GitRepository record could use the REST API to |
| CVE-2026-4480 | Modified | 未確認 | CWE-78 | A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" |
| CVE-2026-44826 | Deferred | 未確認 | CWE-1284 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.2, Vvveb CMS does not validate the sign of the quantity param |
| CVE-2026-44827 | Analyzed | 未確認 | CWE-94 | Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, diffusers 0.37.0 allows remote code execution without the trust_remote_code=True safeguard when loadin |
| CVE-2026-44830 | Deferred | 未確認 | CWE-306 | Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Prior to 2.4.1, when API_TOKEN is unset or empty, the BearerTokenAuthMiddleware b |
| CVE-2026-44831 | Analyzed | 未確認 | CWE-79 | Snipe-IT is an IT asset/license management system. Prior to 8.4.1, users with component view access could be impacted by an unescaped notes column, resulting in cross-site scriptin |
| CVE-2026-44832 | Modified | 未確認 | CWE-281, CWE-863 | Snipe-IT is an IT asset/license management system. Prior to 8.4.1, aAn authenticated user with only users.edit permission can escalate their own privileges to admin by sending a PA |
| CVE-2026-44833 | Analyzed | 未確認 | CWE-601 | Snipe-IT is an IT asset/license management system. Prior to 8.4.1, an open redirect vulnerability in Snipe-IT allows attackers to redirect users to malicious sites via unvalidated |
| CVE-2026-44836 | Deferred | 未確認 | CWE-749 | view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3.0.0 to 4.9.0, the preview route derives an example name fro |
| CVE-2026-44837 | Analyzed | 未確認 | CWE-187 | view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3.0.0 to 4.9.0, the system test entrypoint canonicalizes a us |
| CVE-2026-44838 | Analyzed | 未確認 | CWE-863 | RabbitMQ is a messaging and streaming broker. From 4.2.0 to before 4.2.4, RabbitMQ's MQTT plugin allows for topic-level authorization using regular expressions with variable substi |
| CVE-2026-44839 | Analyzed | 未確認 | CWE-80 | RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13. |
| CVE-2026-44843 | Analyzed | 未確認 | CWE-502 | LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run o |
| CVE-2026-44844 | Deferred | 未確認 | CWE-674 | eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.1, EmlParser.get_raw_ |
| CVE-2026-44847 | Deferred | 未確認 | CWE-287, CWE-306 | MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.0, MaxKB's webhook trigger endpoint (/api/trigger/v1/webhook/{trigger_id}) is accessible without authentication. T |
| CVE-2026-44848 | Modified | 未確認 | CWE-862 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro |
| CVE-2026-44849 | Analyzed | 未確認 | CWE-862 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro |
| CVE-2026-44850 | Analyzed | 未確認 | CWE-863 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro |
| CVE-2026-44852 | Modified | 未確認 | CWE-296 | An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface. A vulnerability in the certificate download functionality could |
| CVE-2026-44853 | Analyzed | 未確認 | CWE-77 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote att |
| CVE-2026-44854 | Analyzed | 未確認 | CWE-77 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote att |
| CVE-2026-44855 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating |
| CVE-2026-44856 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating |
| CVE-2026-44857 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating |
| CVE-2026-44858 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating |
| CVE-2026-44859 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating |
| CVE-2026-44860 | Analyzed | 未確認 | CWE-89 | SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticate |
| CVE-2026-44861 | Analyzed | 未確認 | CWE-89 | SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticate |
| CVE-2026-44862 | Analyzed | 未確認 | CWE-89 | SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticate |
| CVE-2026-44863 | Analyzed | 未確認 | CWE-89 | SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticate |
| CVE-2026-44864 | Analyzed | 未確認 | CWE-89 | SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticate |
| CVE-2026-44865 | Analyzed | 未確認 | CWE-77 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an |
| CVE-2026-44866 | Analyzed | 未確認 | CWE-77 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an |
| CVE-2026-44867 | Analyzed | 未確認 | CWE-77 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an |
| CVE-2026-44868 | Analyzed | 未確認 | CWE-77 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an |
| CVE-2026-44869 | Analyzed | 未確認 | CWE-77 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an |
| CVE-2026-44870 | Analyzed | 未確認 | CWE-77 | Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of |
| CVE-2026-44871 | Analyzed | 未確認 | CWE-77 | Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of |
| CVE-2026-44872 | Analyzed | 未確認 | CWE-77 | A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote at |
| CVE-2026-44873 | Analyzed | 未確認 | CWE-613 | A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled. Existing sessions are |
| CVE-2026-44874 | Analyzed | 未確認 | CWE-284 | A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying oper |
| CVE-2026-44881 | Analyzed | 未確認 | CWE-200, CWE-59 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro |
| CVE-2026-44882 | Analyzed | 未確認 | CWE-863 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro |
| CVE-2026-44883 | Modified | 未確認 | CWE-598 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro |
| CVE-2026-44884 | Analyzed | 未確認 | CWE-862 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro |
| CVE-2026-44885 | Analyzed | 未確認 | CWE-22 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro |
| CVE-2026-44886 | Deferred | 未確認 | CWE-89 | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. From 2024-06-29 to before 2026-05-07, the web application endpoint is vulnerable to SQL injection. The /pial |
| CVE-2026-44887 | Deferred | 未確認 | CWE-94 | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's web-based configuration editor allows arbitrary Python code to be injected i |
| CVE-2026-44888 | Deferred | 未確認 | CWE-94 | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's SaveConfigFile() endpoint writes user-supplied numeric config values (e.g., |
| CVE-2026-44895 | Deferred | 未確認 | CWE-306, CWE-942 | GitLab MCP Server lets an AI agent talk directly to GitLab. Prior to 0.6.0, the HTTP transport in src/transport.ts ships with no authentication layer at all and a wildcard Access-C |
| CVE-2026-44896 | Modified | 未確認 | CWE-79 | Mistune is a Python Markdown parser with renderers and plugins. In 3.2.0 and earlier, in src/mistune/directives/image.py, the render_figure() function concatenates figclass and fig |
| CVE-2026-44897 | Analyzed | 未確認 | CWE-79 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, HTMLRenderer.heading() builds the opening <hN> tag by string-concatenating the id attribute value di |
| CVE-2026-44898 | Analyzed | 未確認 | CWE-79 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_toc_ul() builds a <ul> table-of-contents tree from a list of (level, id, text) tuples. Both t |
| CVE-2026-44899 | Analyzed | 未確認 | CWE-79 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the Image directive plugin validates the :width: and :height: options with a regex compiled as _num_ |
| CVE-2026-44900 | Deferred | 未確認 | CWE-295 | epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted(), the ECDSA signature veri |
| CVE-2026-44902 | Analyzed | 未確認 | CWE-755 | opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus expor |
| CVE-2026-44903 | Analyzed | 未確認 | CWE-79 | Prometheus is an open-source monitoring system and time series database. From 2.49.0 to before 3.5.3 and 3.11.3, in the Prometheus server's legacy web UI (enabled via the command-l |
| CVE-2026-44905 | Deferred | 未確認 | CWE-248 | Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification |
| CVE-2026-44916 | Analyzed | 未確認 | CWE-1336 | In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing. |
| CVE-2026-44919 | Analyzed | 未確認 | CWE-696 | In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL. |
| CVE-2026-44923 | Analyzed | 未確認 | CWE-89 | SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges. |
| CVE-2026-44924 | Analyzed | 未確認 | CWE-79 | InfoScale VIOM 9.1.3 allows XSS. |
| CVE-2026-44925 | Analyzed | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malicious |
| CVE-2026-44926 | Awaiting Analysis | 未確認 | CWE-284 | InfoScale CmdServer before 7.4.2 mishandles access control. |
| CVE-2026-44927 | Analyzed | 未確認 | CWE-197 | In uriparser before 1.0.2, there is pointer difference truncation to int in various places. |
| CVE-2026-44928 | Analyzed | 未確認 | CWE-670 | In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal. |
| CVE-2026-44930 | Modified | 未確認 | CWE-90 | An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates from the repository. U |
| CVE-2026-44931 | Awaiting Analysis | 未確認 | CWE-770 | The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd all |
| CVE-2026-44933 | Deferred | 未確認 | CWE-35 | `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chr |
| CVE-2026-44962 | Awaiting Analysis | 未確認 | CWE-643 | Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries without proper san |
| CVE-2026-44966 | Analyzed | 未確認 | CWE-1321 | Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution vulnerability was discovered in velocityjs. This issu |
| CVE-2026-44971 | Deferred | 未確認 | CWE-918 | GuardDog is a CLI tool to identify malicious PyPI packages. From 1.0.0 to 2.9.0, the programmatic remote project scanning path rewrites attacker-controlled repository URLs using a |
| CVE-2026-44972 | Deferred | 未確認 | CWE-116 | GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its |
| CVE-2026-44973 | Deferred | 未確認 | CWE-22 | Billy is an interface filesystem abstraction for Go. Prior to 5.9.0, multiple path traversal issues exist across different components of go-billy. Insufficient path sanitization an |
| CVE-2026-44983 | Deferred | 未確認 | CWE-122, CWE-190 | smallbitvec is a growable bit-vector for Rust, optimized for size. From 1.0.1 to 2.6.0, an integer overflow in the internal capacity calculation of smallbitvec can lead to an under |
| CVE-2026-44985 | Analyzed | 未確認 | CWE-346 | Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, he WebSocket upgrader for the /exec and /attach endpoints uses CheckOrigin: func(r *http.Request) bool { ret |
| CVE-2026-44987 | Deferred | 未確認 | CWE-269 | SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" |
| CVE-2026-44988 | Awaiting Analysis | 未確認 | CWE-787 | LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the G |
| CVE-2026-44991 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.21 contains an authorization bypass vulnerability in command-auth.ts that allows non-owner senders to execute owner-enforced slash commands when wildcard inb |
| CVE-2026-44992 | Analyzed | 未確認 | CWE-441 | OpenClaw versions 2026.4.5 before 2026.4.20 contain an environment variable injection vulnerability allowing workspace dotenv to override MINIMAX_API_HOST. Attackers can redirect c |
| CVE-2026-44993 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.4.20 contains a message classification vulnerability in Feishu card-action callbacks that misclassifies direct messages as group conversations. Attackers can b |
| CVE-2026-44994 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.4.22 contains an authentication bypass vulnerability in the Control UI bootstrap config endpoint that allows unauthenticated attackers to read sensitive config |
| CVE-2026-44995 | Analyzed | 未確認 | CWE-829 | OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code. Mali |
| CVE-2026-44996 | Analyzed | 未確認 | CWE-22 | OpenClaw before 2026.4.15 contains an arbitrary local file read vulnerability in the webchat audio embedding helper that fails to apply local media root containment checks. Attacke |
| CVE-2026-44997 | Analyzed | 未確認 | CWE-266 | OpenClaw before 2026.4.22 contains a security envelope constraint bypass vulnerability allowing restricted subagents to spawn ACP child sessions that fail to inherit depth, child-c |
| CVE-2026-44998 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.20 contains a tool policy bypass vulnerability allowing bundled MCP and LSP tools to circumvent configured tool restrictions. Attackers with local agent acce |
| CVE-2026-44999 | Analyzed | 未確認 | CWE-345 | OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded as trusted sys |
| CVE-2026-45000 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create store |
| CVE-2026-45001 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trusted settings |
| CVE-2026-45002 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction. Attackers can re |
| CVE-2026-45003 | Analyzed | 未確認 | CWE-441 | OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors. Attackers with workspace access c |
| CVE-2026-45004 | Analyzed | 未確認 | CWE-427 | OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd() during provider setup m |
| CVE-2026-45005 | Analyzed | 未確認 | CWE-672 | OpenClaw before 2026.4.23 caches resolved webhook route secrets backed by SecretRef values, allowing stale secrets to remain valid after rotation and reload. Attackers with previou |
| CVE-2026-45006 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and config.patch operations that allows compromised models to write u |
| CVE-2026-45007 | Deferred | 未確認 | CWE-862 | phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php where 12 endpoints use userIsAuthenticated() instead of userHasPermission(CONFIGURATION_E |
| CVE-2026-45008 | Deferred | 未確認 | CWE-73 | phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that allows admins with INSTANCE_DELETE permission to delete arbitrary directories. Atta |
| CVE-2026-45009 | Deferred | 未確認 | CWE-863 | phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api routes that allows authenticated ordinary users to access administrative endpoints by only c |
| CVE-2026-45010 | Deferred | 未確認 | CWE-307 | phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/check endpoint, which accepts arbitrary user-id parameters w |
| CVE-2026-45017 | Analyzed | 未確認 | CWE-22 | Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outs |
| CVE-2026-45021 | Deferred | 未確認 | CWE-346, CWE-942 | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to 2.7.25, 2.9.15, 2.11.13, 2.12.10, and 2.13.5, the default kuma-cp con |
| CVE-2026-45022 | Analyzed | 未確認 | CWE-180, CWE-345 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-git may parse malformed Git objects in a way that differs from upstream |
| CVE-2026-45023 | Deferred | 未確認 | CWE-770, CWE-841 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/{block_id}/execute endp |
| CVE-2026-45025 | Deferred | 未確認 | CWE-79 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious J |
| CVE-2026-45026 | Deferred | 未確認 | CWE-79 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious J |
| CVE-2026-45027 | Deferred | 未確認 | CWE-759, CWE-916 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, html/login.php hashes the submitted password using PHP's hash() function with t |
| CVE-2026-45028 | Analyzed | 未確認 | CWE-323, CWE-79 | Astro is a web framework. Astro versions prior to 6.1.10 used AES-GCM encryption to protect the confidentiality and integrity of server island props and slots parameters, but did n |
| CVE-2026-45033 | Analyzed | 未確認 | CWE-696 | GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a m |
| CVE-2026-45035 | Analyzed | 未確認 | CWE-78 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all platforms. The URL |
| CVE-2026-45036 | Modified | 未確認 | CWE-78 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, Tabby before 1.0.233 automatically confirms ZMODEM protocol detection on all terminal sessio |
| CVE-2026-45037 | Analyzed | 未確認 | CWE-184, CWE-601 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.232, Tabby's terminal linkifier passes any detected URI directly to the operating system's protoc |
| CVE-2026-45038 | Modified | 未確認 | CWE-150 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, since Tabby does not escape control characters from file paths when dragging and dropping a |
| CVE-2026-45039 | Deferred | 未確認 | CWE-1392, CWE-798 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the internode RPC layer authenticates every request with an HMAC-SHA256 signature using a shared |
| CVE-2026-45040 | Deferred | 未確認 | CWE-312, CWE-532 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, RustFS suffers from sensitive information leakage in log outputs. When the server is run with RU |
| CVE-2026-45041 | Deferred | 未確認 | CWE-321 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, crates/appauth/src/token.rs ships a 2048-bit RSA private key as a string constant named TEST_PRI |
| CVE-2026-45042 | Deferred | 未確認 | CWE-863 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, improper authorization in the UploadPartCopy operation allows copying objects across buckets wit |
| CVE-2026-45043 | Deferred | 未確認 | CWE-269, CWE-284 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, improper validation in the PUT /rustfs/admin/v3/import-iam endpoint allows a user with ImportIAM |
| CVE-2026-45044 | Deferred | 未確認 | CWE-306 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the admin router explicitly whitelists /profile/cpu and /profile/memory from the authentication |
| CVE-2026-45046 | Deferred | 未確認 | CWE-212 | Gryph provides a security layer for AI coding agents. Prior to 0.7.0, Gryph implements logging levels that determine what content is logged to a local sqlite database. The README i |
| CVE-2026-45047 | Deferred | 未確認 | CWE-400 | bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, the apiHandler (and similarly webHandlerTelegramBot) processes user-provided JSON payloads by directly using json.NewDecod |
| CVE-2026-45053 | Deferred | 未確認 | CWE-434 | CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Arbitrary File Upload vulnerability exists in the REST API File Manager endpoint (POST /api/v1/files) o |
| CVE-2026-45054 | Deferred | 未確認 | CWE-89 | CubeCart is an ecommerce software solution. Prior to 6.7.0, the admin orders-transactions listing page (admin.php?_g=orders&node=transactions) builds a raw ORDER BY SQL fragment fr |
| CVE-2026-45055 | Deferred | 未確認 | CWE-20, CWE-345, CWE-601, CWE-784 | CubeCart is an ecommerce software solution. Prior to 6.7.2, CubeCart 6.6.x – 6.7.1 builds CC_STORE_URL directly from the Host request header at bootstrap, with no allowlist. The co |
| CVE-2026-45058 | Deferred | 未確認 | CWE-345, CWE-494, CWE-915, CWE-94 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is persistent local-pty code execution via imported bookmarks |
| CVE-2026-45061 | Deferred | 未確認 | CWE-918 | Budibase is an open-source low-code platform. Prior to 3.35.10, the Plugin URL upload endpoint (POST /api/plugin) validates the submitted URL with a single substring check: url.inc |
| CVE-2026-45076 | Analyzed | 未確認 | CWE-20 | Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse fr |
| CVE-2026-45078 | Analyzed | 未確認 | CWE-770 | Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users can cause Synapse to starve other requests of CPU and lead to other requests |
| CVE-2026-45081 | Deferred | 未確認 | CWE-863 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.5.0, authenticated employees could access other employees’ leave details due to improper authori |
| CVE-2026-45082 | Deferred | 未確認 | CWE-918 | Karakeep is a elf-hostable bookmark-everything app. A Server-Side Request Forgery (SSRF) protection bypass vulnerability was identified in versions prior to 0.32.0 affecting redire |
| CVE-2026-45083 | Deferred | 未確認 | CWE-306 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From 4.8.0 to before 26.04.1, the Goobi viewer REST endpoint POST /api/v1/ind |
| CVE-2026-45087 | Deferred | 未確認 | CWE-15, CWE-306, CWE-78 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode (dalfox server), the server binds to |
| CVE-2026-45088 | Deferred | 未確認 | CWE-306, CWE-552, CWE-73 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is run in REST API server mode, the custom-payload-file field in model. |
| CVE-2026-45089 | Deferred | 未確認 | CWE-306, CWE-434, CWE-73 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is run in REST API server mode, the output, output-all, and debug field |
| CVE-2026-45090 | Deferred | 未確認 | CWE-362, CWE-404 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, ParameterAnalysis in pkg/scanning/parameterAnalysis.go runs two sequential worker s |
| CVE-2026-45091 | Deferred | 未確認 | CWE-200, CWE-522 | sealed-env is a cross-stack, zero-trust secret management library for Node.js and Java/Spring Boot. In sealed-env enterprise mode, versions 0.1.0-alpha.1 through 0.1.0-alpha.3 embe |
| CVE-2026-45102 | Deferred | 未確認 | CWE-693 | OneUptime is an open-source monitoring and observability platform. Prior to 10.0.98, OneUptime uses the Node.js' vm module as an isolation primitive. This API was not designed for |
| CVE-2026-45104 | Analyzed | 未確認 | CWE-129, CWE-476 | MapServer is a system for developing web-based GIS applications. From 6.4.0 to before 8.6.3, msSLDParseUserStyle always calls _SLDApplyRuleValues(psRule, psLayer, 1); for any <Rule |
| CVE-2026-45108 | Deferred | 未確認 | CWE-863 | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 2.0.0 to before 3.1.5 and 2.3.11, Himmelblau contained an authentication bypass vulnerability |
| CVE-2026-45109 | Modified | 未確認 | CWE-288, CWE-358 | Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply t |
| CVE-2026-45130 | Analyzed | 未確認 | CWE-122, CWE-190 | Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file (. |
| CVE-2026-45134 | Awaiting Analysis | 未確認 | CWE-502 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_ |
| CVE-2026-45136 | Analyzed | 未確認 | CWE-78, CWE-94 | claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.sh (introduced in v3.5.0) interpolates Claude Code's hook st |
| CVE-2026-45137 | Analyzed | 未確認 | CWE-20 | Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to before 1.0.2, an logic error causes anchor programs to accept any prog |
| CVE-2026-45147 | Deferred | 未確認 | CWE-285, CWE-862 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, POST /api/tag/getTag is registered with model.CheckAuth only, omitting both model.CheckAdminRole and |
| CVE-2026-45148 | Deferred | 未確認 | CWE-863 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, broken access control in the searchAsset, searchTag, searchWidget, and searchTemplate publish-mode Re |
| CVE-2026-45149 | Analyzed | 未確認 | CWE-400 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max option was being applied too late. When expanding |
| CVE-2026-45151 | Deferred | 未確認 | CWE-476 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In 0.24.8 and earlier, quic_stream_recv can dereference a null substream pointer when a substream is in reopen |
| CVE-2026-45152 | Deferred | 未確認 | CWE-78 | uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command injection vulnerability exists in uniget due to unsafe execution of the check field fr |
| CVE-2026-45158 | Analyzed | 未確認 | CWE-88 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is process |
| CVE-2026-45179 | Deferred | 未確認 | CWE-319 | Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses. If the communication channel to the statsd daemon is not secured (for example, by sending UDP |
| CVE-2026-45180 | Deferred | 未確認 | CWE-319 | Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids. If the communication channel to the statsd daemon is not secured (for example, by sending UDP packe |
| CVE-2026-45181 | Deferred | 未確認 | CWE-88 | Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), which allows attackers to place their code into a plugins direc |
| CVE-2026-45182 | Deferred | 未確認 | CWE-441 | GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN user as a consequence of a registerQuicConnectionClosePayload optimization, because an applic |
| CVE-2026-45184 | Deferred | 未確認 | CWE-829 | Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used. |
| CVE-2026-45185 | Analyzed | 未確認 | CWE-416 | Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify |
| CVE-2026-45186 | Modified | 未確認 | CWE-407 | In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. |
| CVE-2026-45187 | Modified | 未確認 | CWE-285 | Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes |
| CVE-2026-45190 | Deferred | 未確認 | CWE-1289 | Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or no |
| CVE-2026-45191 | Deferred | 未確認 | CWE-1289 | Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and " |
| CVE-2026-45205 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with |
| CVE-2026-45206 | Analyzed | 未確認 | CWE-346 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but ex |
| CVE-2026-45207 | Analyzed | 未確認 | CWE-346 | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but ex |
| CVE-2026-45208 | Analyzed | 未確認 | CWE-367 | A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must fi |
| CVE-2026-45209 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyCryptoChecko |
| CVE-2026-45210 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstree |
| CVE-2026-45211 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Inject |
| CVE-2026-45212 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-45213 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR woo-bulk-editor allows Blind SQL Injection.This issue affects |
| CVE-2026-45214 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Blind SQL Injection.Th |
| CVE-2026-45215 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a |
| CVE-2026-45216 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in StoreApps Smart Manager allows Privilege Escalation. This issue affects Smart Manager: from n/a through 8.85.0. |
| CVE-2026-45217 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affect |
| CVE-2026-45218 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows Blind SQL Injection.This issue affects WP |
| CVE-2026-45222 | Deferred | 未確認 | CWE-732 | Summarize versions through 0.14.1, fixed in commit 0cfb0fb, creates the daemon configuration directory and file with default filesystem permissions that may be world-readable on Un |
| CVE-2026-45223 | Deferred | 未確認 | CWE-290 | Crabbox before 0.9.0 contains an authentication bypass vulnerability in the coordinator user-token verification path where the verifyUserToken() function fails to reject payloads c |
| CVE-2026-45224 | Deferred | 未確認 | CWE-22 | Crabbox before 0.9.0 contains a path traversal vulnerability in the Islo provider's workspace path resolution that allows attackers to supply absolute or relative paths that resolv |
| CVE-2026-45225 | Deferred | 未確認 | CWE-22 | Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that allows authenticated users to write attacker-controlled files to arbitrary locations by |
| CVE-2026-45226 | Deferred | 未確認 | CWE-863 | Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that allows authenticated users to execute arbitrary workflows by referencing victim workflo |
| CVE-2026-45227 | Deferred | 未確認 | CWE-693 | Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions by using obj |
| CVE-2026-45228 | Deferred | 未確認 | CWE-79 | Quark Drive before 0.8.5 contains a stored cross-site scripting vulnerability in the System Configuration page where the template renders push_config key names using Vue.js's v-htm |
| CVE-2026-45229 | Deferred | 未確認 | CWE-915 | Quark Drive before 0.8.5 contains a mass assignment vulnerability in the POST /update endpoint that allows authenticated attackers to overwrite administrator credentials by posting |
| CVE-2026-45230 | Deferred | 未確認 | CWE-22 | DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated attackers to |
| CVE-2026-45231 | Deferred | 未確認 | CWE-79 | DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that are stored with |
| CVE-2026-45232 | Analyzed | 未確認 | CWE-193 | Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network attackers to |
| CVE-2026-4524 | Analyzed | 未確認 | CWE-288 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authentic |
| CVE-2026-45242 | Analyzed | 未確認 | CWE-862 | Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary directories by |
| CVE-2026-45243 | Analyzed | 未確認 | CWE-862 | Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unauthorized operati |
| CVE-2026-45244 | Analyzed | 未確認 | CWE-862 | Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extensi |
| CVE-2026-45245 | Analyzed | 未確認 | CWE-918, CWE-940 | Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, c |
| CVE-2026-45246 | Analyzed | 未確認 | CWE-732 | Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive credentials by |
| CVE-2026-45247 | Analyzed | 掲載 | CWE-502 | Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code exec |
| CVE-2026-45248 | Analyzed | 未確認 | CWE-306 | Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers to retrieve se |
| CVE-2026-45249 | Analyzed | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic. This issue affects Apache ECharts: from before 6.1.0. In versi |
| CVE-2026-45250 | Modified | 未確認 | CWE-121 | The setcred(2) system call is only available to privileged users. However, before the privilege level of the caller is checked, the user-supplied list of supplementary groups is c |
| CVE-2026-45251 | Analyzed | 未確認 | CWE-416 | A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descriptor. Because the blocked thread does not hold a reference to the u |
| CVE-2026-45252 | Analyzed | 未確認 | CWE-122 | When a fusefs file system implements extended attributes, the kernel may send a FUSE_LISTXATTR message to the userspace daemon to retrieve the list of extended attributes for a giv |
| CVE-2026-45253 | Analyzed | 未確認 | CWE-787 | ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. As a result, a user with the ability to debug a process may trig |
| CVE-2026-45254 | Analyzed | 未確認 | CWE-269 | In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected. In ce |
| CVE-2026-45255 | Analyzed | 未確認 | CWE-78 | When bsdinstall or bsdconfig are prompted to scan for nearby Wi-Fi networks, they build up a list of network names and use bsddialog(1) to prompt the user to select a network. Thi |
| CVE-2026-45261 | Deferred | 未確認 | CWE-94 | GitButler is a modern Git-based version control interface for AI-powered workflows. Prior to 0.19.7, a emote code execution vulnerability exists in the Tauri-based GitButler deskto |
| CVE-2026-4527 | Analyzed | 未確認 | CWE-352 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenti |
| CVE-2026-45288 | Deferred | 未確認 | CWE-89 | Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. Prior to 8.36.1, Marten's full-text search APIs interpolated the user-supplied regConfig parameter directl |
| CVE-2026-45292 | Awaiting Analysis | 未確認 | CWE-770 | opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability |
| CVE-2026-45294 | Deferred | 未確認 | CWE-203, CWE-204 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.219, the password reset endpoint returns visually distinct responses depending on wh |
| CVE-2026-45296 | Deferred | 未確認 | CWE-284 | OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, OpenReplay's Python API exposes several app_apikey routes that trust a caller-provided projectKey after validatin |
| CVE-2026-45297 | Deferred | 未確認 | CWE-285, CWE-639, CWE-863 | OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, there is a cross-tenant IDOR on feature-flag and assist-stats routes via {project_id} case mismatch. ProjectAutho |
| CVE-2026-45298 | Analyzed | 未確認 | CWE-918 | Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy (the documented quickstart, no DOZZLE_AUTH_PROVIDER set), POST /api/notifications |
| CVE-2026-45299 | Analyzed | 未確認 | CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, the profile_image_url field on the user profile update form accep |
| CVE-2026-45301 | Modified | 未確認 | CWE-284 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.3.16, a missing permission check in all files related API endpoints al |
| CVE-2026-45303 | Modified | 未確認 | CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.5, through the HTML rendering view, scripts can be injected and exec |
| CVE-2026-45306 | Deferred | 未確認 | CWE-706 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the fix for CVE-2026-33509 prevents setting storage_folder inside PKGDIR or userdir, b |
| CVE-2026-45307 | Deferred | 未確認 | CWE-601 | Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.20-alpha, the is_safe_url() helper used to validate post-login redirect t |
| CVE-2026-45310 | Deferred | 未確認 | CWE-918 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.22, the fetch_url tool validates the initial URL's resolved IP address against a restricted-IP blocklist (is_r |
| CVE-2026-45311 | Deferred | 未確認 | CWE-94 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the run_tests tool executes cargo test in the workspace with ApprovalRequirement::Auto, meaning it ru |
| CVE-2026-45312 | Deferred | 未確認 | CWE-1336 | RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows |
| CVE-2026-45314 | Modified | 未確認 | CWE-87 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the channel webhook create/update flow accepts arbitrary profile_ |
| CVE-2026-45315 | Modified | 未確認 | CWE-434, CWE-646, CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the audio transcription upload endpoint takes the file extension |
| CVE-2026-45316 | Analyzed | 未確認 | CWE-863 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the POST /api/v1/notes/{id}/pin endpoint performs a write operati |
| CVE-2026-45317 | Analyzed | 未確認 | CWE-20, CWE-352 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, an application-wide Cross-Site Request Forgery (CSRF) vulnerabili |
| CVE-2026-45318 | Analyzed | 未確認 | CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, his advisory tracks a regression of the original Excel-preview XS |
| CVE-2026-45321 | Analyzed | 掲載 | CWE-506 | On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated |
| CVE-2026-45322 | Deferred | 未確認 | CWE-78 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injectio |
| CVE-2026-45323 | Analyzed | 未確認 | CWE-79 | MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within |
| CVE-2026-45324 | Deferred | 未確認 | CWE-415 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free in librz/core/cmd/cmd_search.c:byte_pattern_search() due wrong pointer ownership |
| CVE-2026-45331 | Analyzed | 未確認 | CWE-918 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, validate_url() in backend/open_webui/retrieval/web/utils.py calls |
| CVE-2026-45332 | Deferred | 未確認 | CWE-200, CWE-306 | Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 to 2.0.0-beta.27, a Broken Access Control vulnerability allows an unauthenticated attacker |
| CVE-2026-45335 | Deferred | 未確認 | CWE-601 | WeGIA is a web manager for charitable institutions. Prior to 3.7.3, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA applicati |
| CVE-2026-45338 | Analyzed | 未確認 | CWE-918 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in _pro |
| CVE-2026-45339 | Analyzed | 未確認 | CWE-863 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI allows admins to restrict which API endpoints an API k |
| CVE-2026-45342 | Deferred | 未確認 | CWE-639 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, LinkAce contains an Insecure Direct Object Reference vulnerability in the authorization policy layer that |
| CVE-2026-45343 | Deferred | 未確認 | CWE-79 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, LinkAce contains a stored cross-site scripting vulnerability that allows a low-privilege user to execute |
| CVE-2026-45344 | Deferred | 未確認 | CWE-74 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, the setup database configuration flow on uninitialized LinkAce instances accepts attacker-controlled data |
| CVE-2026-45345 | Analyzed | 未確認 | CWE-285 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.7, a user can modify another user's model even if its visibility is |
| CVE-2026-45346 | Analyzed | 未確認 | CWE-80 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG |
| CVE-2026-45347 | Analyzed | 未確認 | CWE-918 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.11, there is a blind server side request forgery (SSRF) via the PDF |
| CVE-2026-45348 | Deferred | 未確認 | CWE-79 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the packages.js template at src/pyload/webui/app/themes/modern/templates/js/packages.j |
| CVE-2026-45349 | Modified | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a user just needs to use the API endpoint: /api/chat/completions |
| CVE-2026-45350 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, there is a vulnerability in chat completion API, which allows att |
| CVE-2026-45351 | Modified | 未確認 | CWE-200 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.9, when a regular user [non-admin] logs into the application, a http |
| CVE-2026-45352 | Modified | 未確認 | CWE-1285, CWE-20, CWE-770 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.43.4, negative chunk-size in chunked Transfer-Encoding causes unbounded memory allocati |
| CVE-2026-45353 | Analyzed | 未確認 | CWE-732, CWE-94, CWE-940 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0. |
| CVE-2026-45361 | Modified | 未確認 | CWE-322 | Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in |
| CVE-2026-45362 | Deferred | 未確認 | CWE-312 | Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file. |
| CVE-2026-45364 | Deferred | 未確認 | CWE-307 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.4.17 and 1.5.0-beta.9, Better Auth's HTTP rate limiter keyed each request by the exact textual |
| CVE-2026-45365 | Modified | 未確認 | CWE-285 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, an internal-only bypass_filter parameter is exposed on the /open |
| CVE-2026-45366 | Deferred | 未確認 | CWE-918 | typescript-utcp is a typescript implementation of UTCP. Prior to 1.1.2, the @utcp/http package is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundar |
| CVE-2026-45369 | Deferred | 未確認 | CWE-78 | python-utcp is the python implementation of UTCP. Prior to 1.1.3, the _substitute_utcp_args method in cli_communication_protocol.py inserts user-controlled tool_args values directl |
| CVE-2026-45370 | Deferred | 未確認 | CWE-526 | python-utcp is the python implementation of UTCP. Prior to 1.1.3, _prepare_environment() in cli_communication_protocol.py passes a full copy of os.environ to every CLI subprocess. |
| CVE-2026-45371 | Deferred | 未確認 | CWE-285, CWE-862 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs. POST /api/graph/getGraph |
| CVE-2026-45372 | Modified | 未確認 | CWE-444, CWE-93 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.44.0, when cpp-httplib's server parses an incoming request, it applies percent-decoding |
| CVE-2026-45373 | Deferred | 未確認 | CWE-918 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IP |
| CVE-2026-45374 | Deferred | 未確認 | CWE-94 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, the task_create tool spawns durable sub-agents that inherit two insecure defaults, allow_shell defaults to |
| CVE-2026-45375 | Deferred | 未確認 | CWE-116, CWE-79 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan's Bazaar (community marketplace) renders the name and version fields of a package's plugin.jso |
| CVE-2026-45385 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, an IDOR vulnerability exists in the Channels feature of Open WebU |
| CVE-2026-45386 | Modified | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, Pin/Unpin is a write operation (modifies the message's is_pinned |
| CVE-2026-45387 | Analyzed | 未確認 | CWE-200 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, when setting model permissions so that a group has read access to |
| CVE-2026-45391 | Deferred | 未確認 | CWE-20, CWE-78 | A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivileged user to execute arbitrary commands in the context of the Cribl E |
| CVE-2026-45392 | Deferred | 未確認 | CWE-20, CWE-79 | DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated user who is tricked i |
| CVE-2026-45393 | Deferred | 未確認 | CWE-20, CWE-276, CWE-78 | A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM. Incorrect default permissions on the |
| CVE-2026-45395 | Analyzed | 未確認 | CWE-269, CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the tool update endpoint (POST /api/v1/tools/id/{id}/update) is m |
| CVE-2026-45396 | Analyzed | 未確認 | CWE-915 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the POST /api/v1/evaluations/feedback endpoint in Open WebUI v0.9 |
| CVE-2026-45397 | Analyzed | 未確認 | CWE-306 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, GET /api/v1/retrieval/ returns live RAG pipeline configuration to |
| CVE-2026-45398 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, _validate_collection_access() checks the user-memory-* and file-* |
| CVE-2026-45399 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user with low privileges can enumerate active b |
| CVE-2026-45400 | Analyzed | 未確認 | CWE-918 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, a parsing difference between the urlparse and requests libraries |
| CVE-2026-45401 | Analyzed | 未確認 | CWE-918 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in backend/open_webui/retrieval/web/u |
| CVE-2026-45402 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, multiple endpoints accept a user-supplied file_id and attach the |
| CVE-2026-45403 | Analyzed | 未確認 | CWE-59 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the AnythingLLM agent filesystem copy t |
| CVE-2026-45410 | Deferred | 未確認 | CWE-203, CWE-208 | TREK is a collaborative travel planner. Prior to 3.0.18, early return on missing user during login flow allowed an attacker to enumerate valid user accounts via response timing dis |
| CVE-2026-45411 | Modified | 未確認 | CWE-237, CWE-668 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield* expression inside an async generator. When the generator is |
| CVE-2026-45412 | Deferred | 未確認 | CWE-918 | MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.1, SSRF via work_flow_template Import. Authenticated users can supply arbitrary URLs in work_flow_template.downloa |
| CVE-2026-45413 | Deferred | 未確認 | CWE-328 | MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.1, user passwords are stored using unsalted MD5 hashes, making them trivially crackable via rainbow tables or GPU- |
| CVE-2026-45430 | Deferred | 未確認 | CWE-352 | The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks. |
| CVE-2026-45434 | Modified | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06. Users are |
| CVE-2026-45435 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS. This issue affects WP Activit |
| CVE-2026-45438 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Smart Co |
| CVE-2026-45442 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Presto Player: fr |
| CVE-2026-45443 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels. |
| CVE-2026-45444 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files. This issue affects Gift Cards For WooCommer |
| CVE-2026-45448 | Awaiting Analysis | 未確認 | CWE-601 | CWE-601 URL redirection to untrusted site ('open redirect') |
| CVE-2026-45492 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-45494 | Analyzed | 未確認 | CWE-79 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-45495 | Modified | 未確認 | CWE-119, CWE-20, CWE-35, CWE-94 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-45498 | Analyzed | 掲載 | CWE-400 | Microsoft Defender Denial of Service Vulnerability |
| CVE-2026-45539 | Deferred | 未確認 | CWE-200, CWE-59 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. From 0.5.4 to 0.12.4, two primitive integrators in apm-cli enumerate package files with bare Pat |
| CVE-2026-45548 | Deferred | 未確認 | CWE-918 | Budibase is an open-source low-code platform. Prior to 3.34.8, the processUrlFile function in packages/server/src/automations/steps/ai/extract.ts uses fetch(fileUrl) directly witho |
| CVE-2026-45551 | Deferred | 未確認 | CWE-639, CWE-79 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to 26.0.25, 25.0.100, and 6.8.165, GroupOffice allows authenticated users to persist arbitr |
| CVE-2026-45555 | Deferred | 未確認 | CWE-94 | Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases. From 0.0.9 to 1.17.0, the get_diagnostics MCP tool loads and execut |
| CVE-2026-45557 | Awaiting Analysis | 未確認 | CWE-405, CWE-406, CWE-770 | Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate e |
| CVE-2026-45570 | Analyzed | 未確認 | CWE-116 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the |
| CVE-2026-45571 | Analyzed | 未確認 | CWE-22 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to a |
| CVE-2026-45574 | Deferred | 未確認 | CWE-295 | epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on the network path between the ePA service and the Konnektor ca |
| CVE-2026-45575 | Deferred | 未確認 | CWE-347 | epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker who can MITM the TLS connection between the client and the IDP ( |
| CVE-2026-45577 | Deferred | 未確認 | CWE-288, CWE-306 | Neotoma provides versioned records that persist across agent runs. From 0.6.0 to before 0.11.1, Neotoma can treat public reverse-proxied requests as local when the app receives the |
| CVE-2026-45578 | Analyzed | 未確認 | CWE-78 | WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a classic shell-metacharacter injection. The YPTSocket notification branch in plugin/Live/on_publish.php |
| CVE-2026-45580 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a stored cross-site scripting vulnerability. The Live plugin's "YouTube-style" view renders the live tra |
| CVE-2026-45582 | Analyzed | 未確認 | CWE-201 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.51.3, the workflow telemetry sanitizer could retain pa |
| CVE-2026-45584 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network. |
| CVE-2026-45585 | Modified | 未確認 | CWE-77 | Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made pu |
| CVE-2026-45609 | Analyzed | 未確認 | CWE-918 | mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI. Prior to 0.1.9, the mcp-security framework fails to implement the mandatory SSRF m |
| CVE-2026-45610 | Analyzed | 未確認 | CWE-306, CWE-352 | WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a cross-site request forgery vulnerability on the 2FA toggle. plugin/LoginControl/set.json.php accepts P |
| CVE-2026-45611 | Rejected | 未確認 | Rejected reason: Further research determined the issue is not a vulnerability. | |
| CVE-2026-45613 | Deferred | 未確認 | CWE-125 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6 |
| CVE-2026-45615 | Deferred | 未確認 | CWE-125, CWE-130, CWE-20 | mouse07410/asn1c is an ASN.1 compiler. In 1.4 and earlier, a memory safety vulnerability was identified in the OER decoding skeleton files generated by asn1c (specifically INTEGER_ |
| CVE-2026-45616 | Deferred | 未確認 | CWE-79 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, This vulnerability is fixed in 1.0.8.3. |
| CVE-2026-45619 | Analyzed | 未確認 | CWE-367, CWE-918 | WWBN AVideo is an open source video platform. In 29.0 and earlier, EpgParser.php, plugin/AI/receiveAsync.json.php, and other locations do not use the $resolvedIP out-param of isSSR |
| CVE-2026-45620 | Analyzed | 未確認 | CWE-204, CWE-285 | WWBN AVideo is an open source video platform. In 29.0 and earlier, objects/mention.json.php has no User::loginCheck() or admin gate. It only has an entry guard: preg_match('/^@/', |
| CVE-2026-45622 | Deferred | 未確認 | CWE-79 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, there is an unauthenticated reflected cross-site scripting |
| CVE-2026-45625 | Deferred | 未確認 | CWE-862 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.0, Arcane's huma-based REST API exposes nine endpoints under /api/customize/git- |
| CVE-2026-45626 | Deferred | 未確認 | CWE-78 | Arcane is an interface for managing Docker containers, images, networks, and volumes. In 1.18.1 and earlier, GET /environments/{id}/volumes/{volumeName}/browse accepts a path query |
| CVE-2026-45627 | Deferred | 未確認 | CWE-79 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.0, the unauthenticated GET /api/app-images/logo endpoint reflects a user-supplie |
| CVE-2026-45628 | Deferred | 未確認 | CWE-20, CWE-77 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.2 and earlier, Dokploy constructs shell commands using JavaScript template literals and executes them via chi |
| CVE-2026-45629 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the /listen-deployment WebSocket endpoint allows any org |
| CVE-2026-45630 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the application.updateTraefikConfig tRPC endpoint allows |
| CVE-2026-45631 | Deferred | 未確認 | CWE-798 | Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.27.0 to before 0.29.3, a hardcoded BETTER_AUTH_SECRET fallback ("better-auth-secret-123456789") lets an unauth |
| CVE-2026-45632 | Deferred | 未確認 | CWE-269, CWE-78, CWE-862 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.7 and earlier, the schedule router does not enforce organization/role checks. As a result, any authenticated |
| CVE-2026-45633 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.6 and earlier, Dokploy contains a command injection vulnerability in the /docker-container-logs WebSocket end |
| CVE-2026-45659 | Analyzed | 掲載 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-45660 | Deferred | 未確認 | CWE-918 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.22 and 6.18.1, the Glide image proxy's URL validation could be bypassed using an IP representat |
| CVE-2026-45661 | Deferred | 未確認 | CWE-22, CWE-35 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerability exists in Dokploy v0.26.5 that allows authenticated us |
| CVE-2026-45662 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.0 and earlier, the deleteRegistry function in Dokploy (packages/server/src/services/registry.ts) executes doc |
| CVE-2026-45663 | Deferred | 未確認 | CWE-77 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.1 and earlier, a command injection vulnerability exists in the Docker file upload functionality. When an auth |
| CVE-2026-45665 | Analyzed | 未確認 | CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the B |
| CVE-2026-45666 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the API /api/v1/notes/{note_id} endpoint lacks proper authorizat |
| CVE-2026-45667 | Analyzed | 未確認 | CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, GET /api/v1/memories/ef is accessible without authentication and |
| CVE-2026-45668 | Deferred | 未確認 | CWE-22, CWE-79 | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Prior to 0.102.2, a malicious ZIP archive imported with |
| CVE-2026-45671 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user can permanently delete files owned by othe |
| CVE-2026-45672 | Analyzed | 未確認 | CWE-863 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.12, the /api/v1/utils/code/execute endpoint executes arbitrary Pytho |
| CVE-2026-45675 | Modified | 未確認 | CWE-269, CWE-362 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP and OAuth authentication flows use a TOCTOU (Time-of-Che |
| CVE-2026-45697 | Deferred | 未確認 | CWE-1336, CWE-693, CWE-94 | Formie is a Craft CMS plugin for creating forms. Prior to 2.2.20 and 3.1.24, unauthenticated users could submit crafted values into Hidden fields (with Default value → Custom) that |
| CVE-2026-45700 | Modified | 未確認 | CWE-787 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In |
| CVE-2026-45707 | Analyzed | 未確認 | CWE-284 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.51.2, when ENABLE_MULTI_TENANT=true, the HTTP transpor |
| CVE-2026-45708 | Deferred | 未確認 | CWE-94 | CubeCart is an ecommerce software solution. Prior to 6.7.3, an admin with documents edit permission can save raw <?php … ?> into the Invoice Editor. The next time any admin clicks |
| CVE-2026-45714 | Deferred | 未確認 | CWE-1336, CWE-94 | CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Server-Side Template Injection (SSTI) vulnerability exists in multiple modules of CubeCart (including E |
| CVE-2026-45715 | Deferred | 未確認 | CWE-918 | Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration (packages/server/src/integrations/rest.ts) follows HTTP redirects without re-checking |
| CVE-2026-45716 | Deferred | 未確認 | CWE-269 | Budibase is an open-source low-code platform. Prior to 3.38.1, the POST /api/global/users/onboard endpoint is protected by workspaceBuilderOrAdmin middleware, allowing any user wit |
| CVE-2026-45717 | Deferred | 未確認 | CWE-862 | Budibase is an open-source low-code platform. Prior to 3.38.1, Budibase exposes a REST API for datasource management. The route PUT /api/datasources/:datasourceId is registered in |
| CVE-2026-45718 | Deferred | 未確認 | CWE-863 | Budibase is an open-source low-code platform. Prior to 3.38.1, the row action trigger endpoint (POST /api/tables/:sourceId/actions/:actionId/trigger) fails to validate that the use |
| CVE-2026-45719 | Deferred | 未確認 | CWE-94 | Budibase is an open-source low-code platform. Prior to 3.38.1, the V1 Views API (POST /api/views) accepts a calculation parameter from the request body that is interpolated directl |
| CVE-2026-45721 | Deferred | 未確認 | CWE-20, CWE-426, CWE-552 | Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks up |
| CVE-2026-45728 | Deferred | 未確認 | CWE-1188, CWE-209, CWE-489, CWE-540 | Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is invoked with a single file path instead of a directory, singleFileMode is set to true and d |
| CVE-2026-45731 | Analyzed | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. In 29.0 and earlier, view/update.php reads $_POST['updateFile'] as a relative path under updatedb/ and passes it to PHP's file() for l |
| CVE-2026-45736 | Modified | 未確認 | CWE-824, CWE-908 | ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArr |
| CVE-2026-45740 | Analyzed | 未確認 | CWE-674 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descri |
| CVE-2026-45760 | Deferred | 未確認 | CWE-610, CWE-639 | (Externally Controlled Reference to a Resource in Another Sphere), (Authorization Bypass Through User-Controlled Key) vulnerability in Apache Camel K. Authorized users in a Kuberne |
| CVE-2026-45772 | Analyzed | 未確認 | CWE-426 | Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run |
| CVE-2026-45773 | Analyzed | 未確認 | CWE-352, CWE-384 | Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and SSO browser flows did not validate a CSRF s |
| CVE-2026-45781 | Deferred | 未確認 | CWE-636 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.9, OCI ownership validation skips label-match check when upstream |
| CVE-2026-45787 | Analyzed | 未確認 | CWE-326, CWE-329, CWE-353, CWE-759, CWE-916 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no |
| CVE-2026-45800 | Deferred | 未確認 | CWE-89 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, there is an authenticated SQL injection issue in the front |
| CVE-2026-45803 | Analyzed | 未確認 | CWE-150 | `gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence injec |
| CVE-2026-45829 | Awaiting Analysis | 未確認 | CWE-502, CWE-94 | A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server b |
| CVE-2026-45834 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the same NULL guard already present i |
| CVE-2026-45835 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() Add the same NULL guard already present |
| CVE-2026-45836 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() Add the same NULL guard already present i |
| CVE-2026-45837 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arena_vm_close on fork arena_vm_open() only bumps vml->mmap_count but never registe |
| CVE-2026-45838 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroup_storage_get_next_key() list_next_entry() never returns NULL -- when t |
| CVE-2026-45839 | Modified | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() CO-RE accessor strings are colon-separate |
| CVE-2026-45840 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: cap upcall PID array size and pre-size vport replies The vport netlink reply helpers allocate a f | |
| CVE-2026-45841 | Modified | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO nf_osf_match_one() computes ctx->window % f->ws |
| CVE-2026-45842 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: slip: reject VJ receive packets on instances with no rstate array slhc_init() accepts rslots == 0 as a valid c |
| CVE-2026-45843 | Modified | 未確認 | CWE-126 | In the Linux kernel, the following vulnerability has been resolved: slip: bound decode() reads against the compressed packet length slhc_uncompress() parses a VJ-compressed TCP h |
| CVE-2026-45844 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: arp_tables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arp_packet_match() unconditionally | |
| CVE-2026-45845 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix NULL pointer dereference in class dump When a TAPRIO child qdisc is deleted via RTM_DEL |
| CVE-2026-45846 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() bareudp_fill_metadata_dst() passes bareud |
| CVE-2026-45847 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE when accessing forward path array Although unlikely, recent support for IPIP tunnels |
| CVE-2026-45848 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL sock in aa_sock_file_perm Deal with the potential that sock and sock-sk can be NULL during |
| CVE-2026-45849 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() ocelot_port_xmit_inj() calls ocelot_c |
| CVE-2026-45850 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks Protocol checksum validation fails for IPv6 if there are ext | |
| CVE-2026-45851 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: efi: Fix reservation of unaccepted memory table The reserve_unaccepted() function incorrectly calculates the s |
| CVE-2026-45852 | Modified | 未確認 | CWE-1341, CWE-415 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(), the queue pointer 'q' is assigned to 's |
| CVE-2026-45853 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() amdgpu_discovery_get_nps_info() inte |
| CVE-2026-45854 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 - unregister only available algorithm EIP93 has an options register. This register | |
| CVE-2026-45855 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: avoid Non-NCQ command starvation When a non-NCQ command is issued while NCQ commands are bei | |
| CVE-2026-45856 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send ib_uverbs_post_send() uses cmd.wqe_size |
| CVE-2026-45857 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up deferencing the |
| CVE-2026-45858 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 When allocating initialized blocks from a l | |
| CVE-2026-45859 | Modified | 未確認 | CWE-400 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation Ulrich reports a regression with n |
| CVE-2026-45860 | Modified | 未確認 | CWE-400 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: increase the connection clean up limit to 64 After the optimization to only perform o |
| CVE-2026-45861 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix slab-use-after-free in qd_put Commit a475c5dd16e5 ("gfs2: Free quota data objects synchronously") st |
| CVE-2026-45862 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly allocated zero-i |
| CVE-2026-45863 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers() The dw_i3c_master_i2c_xfers() function allocates memory |
| CVE-2026-45864 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent infinite loops caused by the next valid being the same When processing valid within the rang |
| CVE-2026-45865 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mctp i2c: initialise event handler read bytes Set a 0xff value for i2c reads of an mctp-i2c device. Otherwise | |
| CVE-2026-45866 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: serial: caif: fix use-after-free in caif_serial ldisc_close() There is a use-after-free bug in caif_serial whe |
| CVE-2026-45867 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: act8945a: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting |
| CVE-2026-45868 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix refcount leak in pcs_add_gpio_func() of_parse_phandle_with_args() returns a device_node p | |
| CVE-2026-45869 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() In `probe()`, `request_irq()` is |
| CVE-2026-45870 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths The gssx_dec_ctx(), gssx_dec_status(), and gssx |
| CVE-2026-45871 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Fix missing cleanup on get_burstcount() error get_burstcount() can return -EBUSY on timeout. Wh | |
| CVE-2026-45872 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() pqi_report_phys_luns() fails to release the rpl_list |
| CVE-2026-45873 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets Userspace provides an optimized repres | |
| CVE-2026-45874 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: phy: freescale: imx8qm-hsio: fix NULL pointer dereference During the probe the refclk_pad pointer is set to NU |
| CVE-2026-45875 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure The wm5102_clear_write_seq |
| CVE-2026-45876 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in arch_set_shadow_stack_status() alloc_gcs() returns an error-encoded pointer o |
| CVE-2026-45877 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients During a warm reset flow, the cl->devic |
| CVE-2026-45878 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 The address watch clear code receives watch |
| CVE-2026-45879 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25980: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting |
| CVE-2026-45880 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails When vm_insert_page() fails in p2pmem_alloc_ | |
| CVE-2026-45881 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() In svs_enable_debug_write(), the buf allocated |
| CVE-2026-45882 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed() Using the `devm_` variant for reque |
| CVE-2026-45883 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: iio: sca3000: Fix a resource leak in sca3000_probe() spi->irq from request_threaded_irq() not released when ii |
| CVE-2026-45884 | Analyzed | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid per-cpu hold underflow in aa_get_buffer When aa_get_buffer() pulls from the per-cpu list it un |
| CVE-2026-45885 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() Using the `devm_` variant for reque |
| CVE-2026-45886 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_xdp_store_bytes proto for read-only arg While making some maps in Cilium read-only from the BPF s |
| CVE-2026-45887 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix memleak of newsk in unix_stream_connect(). When prepare_peercred() fails in unix_stream_connect() |
| CVE-2026-45888 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix memory leak in raid1_run() raid1_run() calls setup_conf() which registers a thread via md_regist |
| CVE-2026-45889 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: mptcp: do not account for OoO in mptcp_rcvbuf_grow() MPTCP-level OoOs are physiological when multiple subflows |
| CVE-2026-45890 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xen-netback: reject zero-queue configuration from guest A malicious or buggy Xen guest can write "0" to the xe | |
| CVE-2026-45891 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix double free issue for tx spare buffer In hns3_set_ringparam(), a temporary copy (tmp_rings) of |
| CVE-2026-45892 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: drop extent cache after doing PARTIAL_VALID1 zeroout When splitting an unwritten extent in the middle an | |
| CVE-2026-45893 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix & Optimize table creation from possibly unaligned memory Source blob may come from userspace and |
| CVE-2026-45894 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down PASID entry The Intel VT-d Scalable Mode PASID table entry c |
| CVE-2026-45895 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: quota: fix livelock between quotactl and freeze_super When a filesystem is frozen, quotactl_block() enters a r | |
| CVE-2026-45896 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: mtd: intel-dg: Fix accessing regions before setting nregions The regions array is counted by nregions, but it' |
| CVE-2026-45897 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_counter: serialize reset with spinlock Add a global static spinlock to serialize counter fetch+ | |
| CVE-2026-45898 | Modified | 未確認 | CWE-1341 | In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_eve |
| CVE-2026-45899 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: drop extent cache when splitting extent fails When the split extent fails, we might leave some extents s | |
| CVE-2026-45900 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix netdev memory leak in dpaa2_caam_probe When commit 0e1a4d427f58 ("crypto: caam: Unembed net |
| CVE-2026-45901 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: revert commit_mutex usage in reset path It causes circular lock dependency between commi | |
| CVE-2026-45902 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting |
| CVE-2026-45903 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory access flags in helper prototypes After commit 37cce22dbd51 ("bpf: verifier: Refactor helper a |
| CVE-2026-45904 | Undergoing Analysis | 未確認 | CWE-674 | In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling The recent commit 1010b4c012b0 |
| CVE-2026-45905 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path icmp_route_lookup() performs multiple route lookups |
| CVE-2026-45906 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: pf1550: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting I |
| CVE-2026-45907 | Undergoing Analysis | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix deadlocks between devlink and netdev instance locks In the mentioned "Fixes" commit, various wo |
| CVE-2026-45908 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix memory leak in amdxdna_ubuf_map The amdxdna_ubuf_map() function allocates memory for sg and |
| CVE-2026-45909 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: Drop __initconst from gates Since commit 8ceff24a754a ("clk: mediatek: clk-gate: Refactor mtk_c | |
| CVE-2026-45910 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race condition in QP timer handlers I encontered the following warning: WARNING: drivers/infini |
| CVE-2026-45911 | Undergoing Analysis | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix role switching during resume If the role change while we are suspended, the cdns3 driver switc |
| CVE-2026-45912 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: don't cache extent during splitting extent Caching extents during the splitting process is risky, as it | |
| CVE-2026-45913 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: always update mdb_n_entries for vlan contexts syzbot triggered a warning[1] about the numb | |
| CVE-2026-45914 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Revert "hwmon: (ibmpex) fix use-after-free in high/low store" This reverts commit 6946c726c3f4c36f0f049e6f97e8 |
| CVE-2026-45915 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fat: avoid parent link count underflow in rmdir Corrupted FAT images can leave a directory inode with an incor | |
| CVE-2026-45916 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: sbs-battery: Fix use-after-free in power_supply_changed() Using the `devm_` variant for request |
| CVE-2026-45917 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: do not keep dest_dst if dev is going down There is race between the netdev notifier ip_vs_dst_event() an | |
| CVE-2026-45918 | Undergoing Analysis | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - don't deref NULL sk_socket member after tcp_close() When deleting a peer in case of keepalive expi |
| CVE-2026-45919 | Undergoing Analysis | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: sched/rt: Skip currently executing CPU in rto_next_cpu() CPU0 becomes overloaded when hosting a CPU-bound RT t |
| CVE-2026-45920 | Undergoing Analysis | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double decrement on fs shutdown fstests test generic/388 occasionally reproduces a war |
| CVE-2026-45921 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() The function mtd_parser_tplink_safeloade |
| CVE-2026-45922 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler The UVERBS_HANDLER(MLX5_IB_METHOD_GET_DATA_DI |
| CVE-2026-45923 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: enable basic endpoint checking catc_probe() fills three URBs with hardcoded endpoint pipes wit | |
| CVE-2026-45924 | Undergoing Analysis | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths There are two places where ksmbd_vfs_kern_p |
| CVE-2026-45925 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fix reference leak in thermal_of_cm_lookup() In thermal_of_cm_lookup(), tr_np is obtained via of_p | |
| CVE-2026-45926 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: rust: pwm: Fix potential memory leak on init error When initializing a PWM chip using pwmchip_alloc(), the all |
| CVE-2026-45927 | Undergoing Analysis | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: bpf: Require frozen map for calculating map hash Currently, bpf_map_get_info_by_fd calculates and caches the h |
| CVE-2026-45928 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix memory leak on codec_info allocation failure In wave5_vpu_open_enc() and wave5_ |
| CVE-2026-45929 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ovpn: fix possible use-after-free in ovpn_net_xmit When building the skb_list in ovpn_net_xmit, skb_share_chec |
| CVE-2026-45930 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: ensure our nlmsg responses are initialised Syed Faraz Abrar (@farazsth98) from Zellic, and Pumpkin | |
| CVE-2026-45931 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Hold mm structure across iommu_sva_unbind_device() Some tests trigger a crash in iommu_sva_unbi | |
| CVE-2026-45932 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix tcx/netkit detach permissions when prog fd isn't given This commit fixes a security issue where BPF_P | |
| CVE-2026-45933 | Undergoing Analysis | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve id of register in sync_linked_regs() sync_linked_regs() copies the id of known_reg to reg when p |
| CVE-2026-45934 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation I have been observing a number of syst | |
| CVE-2026-45935 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot In the 'DeleteIndexEntryRoot' case of the 'do_ac |
| CVE-2026-45936 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: goldfish: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting |
| CVE-2026-45937 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 - fix kernel panic in driver detach During driver detach, the same hash algorithm | |
| CVE-2026-45938 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesti |
| CVE-2026-45939 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: gpib: Fix memory leak in ni_usb_init() In ni_usb_init(), if ni_usb_setup_init() fails, the function returns -E |
| CVE-2026-45940 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix oops when split header is enabled For GMAC4, when split header is enabled, in some rare cases | |
| CVE-2026-45941 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure get_burstcount() can return -EBUSY on tim |
| CVE-2026-45942 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix e4b bitmap inconsistency reports A bitmap inconsistency issue was observed during stress tests under |
| CVE-2026-45943 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix inline data read failure for ztailpacking pclusters Compressed folios for ztailpacking pclusters mu |
| CVE-2026-45944 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down context entry When tearing down a context entry, the current |
| CVE-2026-45945 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix race condition during PASID entry replacement The Intel VT-d PASID table entry is 512 bits (64 |
| CVE-2026-45946 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting I |
| CVE-2026-45947 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() In amdgpu_acpi_enumerate_xcc(), if amdgpu_acpi_dev_ |
| CVE-2026-45948 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4_ext_shift_extents() In ext4_ext_shift_extents(), if the extent is NULL in the wh |
| CVE-2026-45949 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: hwrng: core - use RCU and work_struct to fix race condition Currently, hwrng_fill is not cleared until the hwr |
| CVE-2026-45950 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req() The starfive_aes_aead_do_one_req() functi |
| CVE-2026-45951 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free of BTF object Refcounting in the check_pseudo_btf_id() function is incorre |
| CVE-2026-45952 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Add validation for MTU changes Increasing the MTU beyond the HDS threshold causes the hardware to | |
| CVE-2026-45953 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix IO hang with degraded array with llbitmap When llbitmap bit state is still unwritten, any new wr | |
| CVE-2026-45954 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() In au1200fb_drv_probe(), when platform_get_irq fail |
| CVE-2026-45955 | Modified | 未確認 | CWE-404 | In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout When llbitmap_suspend_timeout() times out wa |
| CVE-2026-45956 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() vidi_connection_ioctl() retriev |
| CVE-2026-45957 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: rcu: Fix rcu_read_unlock() deadloop due to softirq Commit 5f5fa7ea89dc ("rcu: Don't use negative nesting depth |
| CVE-2026-45958 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferencing user pointer In vidi_connection_ioctl(), vidi->edid(user |
| CVE-2026-45959 | Modified | 未確認 | CWE-476, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree Annotating a local pointer variable, which w |
| CVE-2026-45960 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: return error when node already exists in hfs_bnode_create When hfs_bnode_create() finds that a node i | |
| CVE-2026-45961 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: gfs2: fix memory leaks in gfs2_fill_super error path Fix two memory leaks in the gfs2_fill_super() error handl |
| CVE-2026-45962 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ublk: Validate SQE128 flag before accessing the cmd ublk_ctrl_cmd_dump() accesses (header *)sqe->cmd before IO | |
| CVE-2026-45963 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ASoC: nau8821: Cancel delayed work on component remove Attempting to unload the driver while a jack detection |
| CVE-2026-45964 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path Commit 5940d1cf9f42 ("SUNRPC: Rebalance a kref in a |
| CVE-2026-45965 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix invalid deref of rawdata when export_binary is unset If the export_binary parameter is disabled |
| CVE-2026-45966 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in __unix_needs_revalidation When receiving file descriptors via SCM_RI |
| CVE-2026-45967 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Return proper address for non-zero offsets in insn array The map_direct_value_addr() function of the inst | |
| CVE-2026-45968 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: cpuidle: Skip governor when only one idle state is available On certain platforms (PowerNV systems without a p |
| CVE-2026-45969 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Add missing check for input_ff_create_memless The ps_gamepad_create() function calls input_f |
| CVE-2026-45970 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix UAF in rlb_arp_recv during bond up/down The ALB RX path may access rx_hashtbl concurrently w |
| CVE-2026-45971 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Limit bpf program signature size Practical BPF signatures are significantly smaller than KMALLOC_MAX_CACH | |
| CVE-2026-45972 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before r |
| CVE-2026-45973 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR hang in LAG error state unload During firmware reset in LAG mode, a race condition causes t | |
| CVE-2026-45974 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found If btrfs_search_slot_for_read() re | |
| CVE-2026-45975 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd struct ublksrv_ctrl_cmd is part of the io_uring_sqe, whi | |
| CVE-2026-45976 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in amdgpu_ras_init() When amdgpu_nbio_ras_sw_init() fails in amdgpu_ras_init(), th |
| CVE-2026-45977 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbnic: close fw_log race between users and teardown Fixes a theoretical race on fw_log between the teardown pa | |
| CVE-2026-45978 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: staging: greybus: lights: avoid NULL deref gb_lights_light_config() stores channel_count before allocating the |
| CVE-2026-45979 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: clean up the amdgpu_cs_parser_bos In low memory conditions, kmalloc can fail. In such conditions u | |
| CVE-2026-45980 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Stop job scheduling across aie2_release_resource() Running jobs on a hardware context while it |
| CVE-2026-45981 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() `css_alloc_subchannel()` calls `device_initi |
| CVE-2026-45982 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() Cover a missed execution path with a |
| CVE-2026-45983 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: never defer requests during idmap lookup During v4 request compound arg decoding, some ops (e.g. SETATTR | |
| CVE-2026-45984 | Modified | 未確認 | CWE-416, CWE-826 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in iomap inline data write path The inline data buffer head (dibh) is being released |
| CVE-2026-45985 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O When allocating blocks during wit | |
| CVE-2026-45986 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccree - fix a memory leak in cc_mac_digest() Add cc_unmap_result() if cc_map_hash_request_final() fail |
| CVE-2026-45987 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 After VMRUN in guest mode, nested_sync_con | |
| CVE-2026-45988 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix re-decryption of RESPONSE packets If a RESPONSE packet gets a temporary failure during processing, |
| CVE-2026-45989 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in testdrv_probe() The function testdrv_probe() retrieves the device_node fro |
| CVE-2026-45990 | Analyzed | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: slub: fix data loss and overflow in krealloc() Commit 2cd8231796b5 ("mm/slub: allow to set node and align in k |
| CVE-2026-45991 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated partition descript |
| CVE-2026-45992 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45993 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add spectre boundry for syscall dispatch table The LoongArch syscall number is directly controlled | |
| CVE-2026-45994 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ibmasm: fix OOB reads in command_file_write due to missing size checks The command_file_write() handler alloca |
| CVE-2026-45995 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix user_struct uaf io_free_rbuf_ring() usees a struct user_struct, which io_zcrx_ifq_free() pu |
| CVE-2026-45996 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix use-after-free on unbind The SPI subsystem frees the controller and any subsystem allocated driv |
| CVE-2026-45997 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails If device_add(&sdkp->disk_dev) fails, put_de | |
| CVE-2026-45998 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential UAF after skb_unshare() failure If skb_unshare() fails to unshare a packet due to allocat |
| CVE-2026-45999 | Modified | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() Some crafted images can have illegal (!partial_d |
| CVE-2026-46000 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix conn-level packet handling to unshare RESPONSE packets The security operations that verify the RESP | |
| CVE-2026-46001 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() Fix two bugs in pt5161l_read_block_data(): 1. Buffer o |
| CVE-2026-46002 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() ext2_iget() already rejects inodes with i_ | |
| CVE-2026-46003 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the total number of nodes Currently, the nameserver doesn't limit the number of nodes it | |
| CVE-2026-46004 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Handle probe errors properly The probe procedure of setup_card() in caiaq driver doesn't treat th |
| CVE-2026-46005 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix a resource leak in xfs_alloc_buftarg() In the error path, call fs_put_dax() to drop the DAX device re |
| CVE-2026-46006 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix u32 overflow in pushbuf reloc bounds check nouveau_gem_pushbuf_reloc_apply() validates each r |
| CVE-2026-46007 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (powerz) Avoid cacheline sharing for DMA buffer Depending on the architecture the transfer buffer may s | |
| CVE-2026-46008 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix damos_walk() vs kdamond_fn() exit race When kdamond_fn() main loop is finished, the functio |
| CVE-2026-46009 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown epf_ntb_epc_destroy() duplicates the teardown t | |
| CVE-2026-46010 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix error handling in rxgk_extract_token() Fix a missing bit of error handling in rxgk_extract_token(): | |
| CVE-2026-46011 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: fix use-after-free in release path due to uncancelled work The mtk_jpeg_release() function fr |
| CVE-2026-46012 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix memory leaks in rxkad_verify_response() Fix rxkad_verify_response() to free the ticket and the serv |
| CVE-2026-46013 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/memfd_luo: fix physical address conversion in put_folios cleanup In memfd_luo_retrieve_folios()'s put_folio | |
| CVE-2026-46014 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Add missing save/restore handling of LBR MSRs MSR_IA32_DEBUGCTLMSR and LBR MSRs are currently not en |
| CVE-2026-46015 | Modified | 未確認 | CWE-408 | In the Linux kernel, the following vulnerability has been resolved: tcp: call sk_data_ready() after listener migration When inet_csk_listen_stop() migrates an established child s |
| CVE-2026-46016 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: xlnx: Only access buffer information if IPI is buffered In the receive callback check if message i |
| CVE-2026-46017 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mm: fix deferred split queue races during migration migrate_folio_move() records the deferred split queue stat |
| CVE-2026-46018 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES parse_uac2_sample_rate_range() caps the number of enu | |
| CVE-2026-46019 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup atmel_aes_buff_init() allocates 4 pages u |
| CVE-2026-46020 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate damos_quota_goal->nid for node_mem_{used,free}_bp Patch series "mm/damon/core: validat |
| CVE-2026-46021 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix thermal zone governor cleanup issues If thermal_zone_device_register_with_trips() fails aft |
| CVE-2026-46022 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() ibmasm_handle_mouse_interrupt() performs an |
| CVE-2026-46023 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: dm mirror: fix integer overflow in create_dirty_log() The argument count calculation in create_dirty_log() per |
| CVE-2026-46024 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() If a message of type CEPH_MSG_AUTH_REPLY |
| CVE-2026-46025 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix damon_call() vs kdamond_fn() exit race Patch series "mm/damon/core: fix damon_call()/damos_ |
| CVE-2026-46026 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum number of lookups Current code does no bound checking on the number of lookup | |
| CVE-2026-46027 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid early lgr access in smc_clc_wait_msg A CLC decline can be received while the handshake is still |
| CVE-2026-46028 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - snapshot IV for async AEAD requests AF_ALG AEAD AIO requests currently use the socket-wid | |
| CVE-2026-46029 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: return NULL early from kmalloc_nolock() in NMI on UP On UP kernels (!CONFIG_SMP), spin_trylock() is a | |
| CVE-2026-46030 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device_node leak in mc_probe() of_parse_phandle() returns a device_node reference that mus |
| CVE-2026-46031 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Reinstate disabling of BHs around IRQ handler If the driver executes ks8851_irq() AND a TX packet |
| CVE-2026-46032 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT If loading L1's CR3 fails on a nested #VME | |
| CVE-2026-46033 | Modified | 未確認 | CWE-125, CWE-1284 | In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject short ahash digests during instance creation authencesn requires either a zero aut |
| CVE-2026-46034 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path Add validation to ensure MSI is configured be |
| CVE-2026-46035 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: return NULL early from alloc_frozen_pages_nolock() in NMI on UP On UP kernels (!CONFIG_SMP), sp | |
| CVE-2026-46036 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex vfio_cdx_set_msi_trigger() reads vdev->config |
| CVE-2026-46037 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: validate reply type before using icmp_pointers Extended echo replies use ICMP_EXT_ECHOREPLY as the |
| CVE-2026-46038 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrl_cmd_bye() A node sends the BYE packet when it is about to go down. So |
| CVE-2026-46039 | Analyzed | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in rxgk_extract_token() wh |
| CVE-2026-46040 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails When fsnotify_add_inode_mark_locked( | |
| CVE-2026-46041 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames() hdlc_append() calls usleep_range() to | |
| CVE-2026-46042 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix memory leaks in weighted_interleave_auto_store() weighted_interleave_auto_store() fetches ol |
| CVE-2026-46043 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv rxe_rcv() currently checks only that the inco |
| CVE-2026-46044 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on errors If an error occurs after the ssif kthread is created, but before the mai | |
| CVE-2026-46045 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: skip reading rdevs that are not in_sync When reading bitmap pages from member disks, the code |
| CVE-2026-46046 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() The commit c8e008b60492 ("ext4: ignore xattrs pas | |
| CVE-2026-46047 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Fix use-after-free in driver remove() In the remove callback, if a packet arrives after destroy |
| CVE-2026-46048 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix usb_dev refcount leak on probe failure create_card() takes a reference on the USB device with | |
| CVE-2026-46049 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Add fallback to default RSR for S/PDIF spdif_passthru_playback_get_resources() uses atc->pll_rate | |
| CVE-2026-46050 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix deadlock with check operation and nowait requests When an array check is running it will raise |
| CVE-2026-46051 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix soft lockup in retry_aligned_read() When retry_aligned_read() encounters an overlapped stripe, i |
| CVE-2026-46052 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: ceph: only d_add() negative dentries when they are unhashed Ceph can call d_add(dentry, NULL) on a negative de |
| CVE-2026-46053 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: rds: fix MR cleanup on copy error __rds_rdma_map() hands sg/pages ownership to the transport after get_mr | |
| CVE-2026-46054 | Modified | 未確認 | CWE-280, CWE-862 | In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs i |
| CVE-2026-46055 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix string overrun due to missing termination When booting Ubuntu 26.04 with Linux 7.0-rc4 on an ARM | |
| CVE-2026-46056 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be cover |
| CVE-2026-46057 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() hook_cred_transfer() only copies the Landlock secur | |
| CVE-2026-46058 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: media: amphion: Fix race between m2m job_abort and device_run Fix kernel panic caused by race condition where |
| CVE-2026-46059 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN For guests with NRIPS disabled, L1 does | |
| CVE-2026-46060 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix IRQ cleanup on 6xxx probe failure When adf_dev_up() partially completes and then fails, the | |
| CVE-2026-46061 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: jbd2: fix deadlock in jbd2_journal_cancel_revoke() Commit f76d4c28a46a ("fs/jbd2: use sleeping version of __fi |
| CVE-2026-46062 | Analyzed | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix integer overflow in run_unpack() volume boundary check The volume boundary check `lcn + len > sbi-> |
| CVE-2026-46063 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: x86/shstk: Prevent deadlock during shstk sigreturn During sigreturn the shadow stack signal frame is popped. T |
| CVE-2026-46064 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ibmasm: fix heap over-read in ibmasm_send_i2o_message() The ibmasm_send_i2o_message() function uses get_dot_co |
| CVE-2026-46065 | Undergoing Analysis | 未確認 | CWE-401, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info Hold state of deferred I/O in struct |
| CVE-2026-46066 | Undergoing Analysis | 未確認 | CWE-193 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix num_ops off-by-one when crypto allocation fails move_dirty_folio_in_page_array() may fail if the fil |
| CVE-2026-46067 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate damos_quota_goal->nid for node_memcg_{used,free}_bp Users can set damos_quota_goal->ni |
| CVE-2026-46068 | Undergoing Analysis | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx The bounce buffers are allocated with __ |
| CVE-2026-46069 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() The mwifiex_adapter_cleanup() function uses tim |
| CVE-2026-4607 | Deferred | 未確認 | CWE-862 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.9.8.4. This is due to the |
| CVE-2026-46070 | Undergoing Analysis | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: validate payload size before accessing journal metadata r5c_recovery_analyze_meta_block() and r5l_re |
| CVE-2026-46071 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 svm_copy_lbrs() always marks VMCB_LBR dirty in the destination VM | |
| CVE-2026-46072 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: add buffer boundary checks to run_unpack() run_unpack() checks `run_buf < run_last` at the top of the w | |
| CVE-2026-46073 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt wait_for_completion_interruptible_timeout() ret | |
| CVE-2026-46074 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix memory leaks on probe failures Make sure to deregister the controller, disable pins, and kill |
| CVE-2026-46075 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Unregister the hwrng to prevent new - |
| CVE-2026-46076 | Undergoing Analysis | 未確認 | CWE-863 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 Explicitly synthesize a #UD for VMMCALL if L |
| CVE-2026-46077 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-tdes - fix DMA sync direction Before DMA output is consumed by the CPU, ->dma_addr_out must be s | |
| CVE-2026-46078 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary-checks f |
| CVE-2026-46079 | Undergoing Analysis | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: rbd: fix null-ptr-deref when device_add_disk() fails do_rbd_add() publishes the device with device_add() befor |
| CVE-2026-4608 | Deferred | 未確認 | CWE-89 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9. |
| CVE-2026-46080 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: split transactions in dio completion to avoid credit exhaustion During ocfs2 dio operations, JBD2 may r | |
| CVE-2026-46081 | Undergoing Analysis | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - fix wrong pointer stored by acomp_save_req() acomp_save_req() stores &req->chain in req->base. |
| CVE-2026-46082 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 INVLPGA should cause a #UD when EFER.SVME is not set. Add a ch | |
| CVE-2026-46083 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on device setup failure Make sure to call controller cleanup() if spi_setup() fails wh |
| CVE-2026-46084 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: Disable RX steering on RSS QP destroy When an RSS QP is destroyed (e.g. DPDK exit), mana_ib_dest |
| CVE-2026-46085 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxkad crypto unalignment handling Fix handling of a packet with a misaligned crypto length. Also h | |
| CVE-2026-46086 | Undergoing Analysis | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in place by `fdb_ |
| CVE-2026-46087 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start() Destroy the DAMON context and re |
| CVE-2026-46088 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() snd_ctl_elem_init_enum_name | |
| CVE-2026-46089 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: zram: do not forget to endio for partial discard requests As reported by Qu Wenruo and Avinesh Kumar, the foll | |
| CVE-2026-4609 | Deferred | 未確認 | CWE-862 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the pm_invite_user function i |
| CVE-2026-46090 | Modified | 未確認 | CWE-364, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_check_format() may stop the capture side |
| CVE-2026-46091 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: heed coherency rules In a control request, the USB request structure can be subject to | |
| CVE-2026-46092 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: check for PCI upstream bridge existence pci_upstream_bridge() returns NULL if the device is on a |
| CVE-2026-46093 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker decay_va_pool_node() can be invoked concurrently from two paths: | |
| CVE-2026-46094 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access The bounds check for the next xattr e |
| CVE-2026-46095 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: raise barrier before state machine transition Move the barrier raise operation before calling | |
| CVE-2026-46096 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public() tpm2_read_public() calls tpm_buf_init() but | |
| CVE-2026-46097 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Input: edt-ft5x06 - fix use-after-free in debugfs teardown The commit 68743c500c6e ("Input: edt-ft5x06 - use p |
| CVE-2026-46098 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: caif: clear client service pointer on teardown `caif_connect()` can tear down an existing client after re |
| CVE-2026-46099 | Modified | 未確認 | CWE-416, CWE-911 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels seg6_input_core() and rpl_input() call ip6_route_input( |
| CVE-2026-46100 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs: afs: revert mmap_prepare() change Partially reverts commit 9d5403b1036c ("fs: convert most other generic_f | |
| CVE-2026-46101 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in nft_bitwise Reject zero shift operands for nft_bitwise left and right shift ex | |
| CVE-2026-46102 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a |
| CVE-2026-46103 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have |
| CVE-2026-46104 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: use sk blob accessor in socket permission helpers SELinux socket state lives in the composite LSM soc | |
| CVE-2026-46105 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Limit NVMe request size to 2 MiB The HBA firmware reports NVMe MDTS values based on the underly | |
| CVE-2026-46106 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eventfs: Hold eventfs_mutex and SRCU when remount walks events Commit 340f0c7067a9 ("eventfs: Update all the e | |
| CVE-2026-46107 | Modified | 未確認 | CWE-191, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: dm-thin: fix metadata refcount underflow There's a bug in dm-thin in the function rebalance_children. If the i |
| CVE-2026-46108 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi:si: Return state to normal if message allocation fails There were places where nothing would get started | |
| CVE-2026-46109 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 ("usb: ulpi: fix double free in |
| CVE-2026-46110 | Undergoing Analysis | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Prevent NULL deref when RX memory exhausted The CPU receives frames from the MAC through conventi |
| CVE-2026-46111 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix potential UAF in create_big_sync Add hci_conn_valid() check in create_big_sync() to d |
| CVE-2026-46112 | Undergoing Analysis | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix unlocked call to hns_roce_qp_remove() Sashiko points out that hns_roce_qp_remove() requires the |
| CVE-2026-46113 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct shado |
| CVE-2026-46114 | Undergoing Analysis | 未確認 | CWE-125, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads atomic_write_reply() at drivers/infiniband/sw/rxe/rxe_resp.c |
| CVE-2026-46115 | Undergoing Analysis | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: block: add pgmap check to biovec_phys_mergeable biovec_phys_mergeable() is used by the request merge, DMA mapp |
| CVE-2026-46116 | Undergoing Analysis | 未確認 | CWE-416, CWE-763 | In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KASAN reproduces a slab-use-after-free in __x |
| CVE-2026-46117 | Undergoing Analysis | 未確認 | CWE-1288, CWE-20, CWE-617 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can s |
| CVE-2026-46118 | Undergoing Analysis | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle() commit 6d3789d347a7 ("papr-hvpipe: |
| CVE-2026-46119 | Undergoing Analysis | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a (potentially corrupted) message of type |
| CVE-2026-46120 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ip6_gre: Use cached t->net in ip6erspan_changelink(). After commit 5e72ce3e3980 ("net: ipv6: Use link netns in |
| CVE-2026-46121 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock Patch series "mm/damon/sysfs-schemes: |
| CVE-2026-46122 | Undergoing Analysis | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: wifi: b43: enforce bounds check on firmware key index in b43_rx() The firmware-controlled key index in b43_rx( |
| CVE-2026-46123 | Undergoing Analysis | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtio_bt: clamp rx length before skb_put virtbt_rx_work() calls skb_put(skb, len) where len comes |
| CVE-2026-46124 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handle in isofs_export_iget isofs_fh_to_dentry() and isofs_fh_to_pa |
| CVE-2026-46125 | Undergoing Analysis | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO connections, t |
| CVE-2026-46126 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() Sashiko points out there are two bugs | |
| CVE-2026-46127 | Undergoing Analysis | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() Sashiko points out that pd->uctx isn't |
| CVE-2026-46128 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data size got checked | |
| CVE-2026-46129 | Undergoing Analysis | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in create_space_info() error path When kobject_init_and_add() fails, the call chain is: |
| CVE-2026-46130 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split across blocks (take 3) fec_decode_bufs() assumes that the parity |
| CVE-2026-46131 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: check for nEPT/nNPT in slow flush hypercalls Checking is_guest_mode(vcpu) is incorrect, because tran | |
| CVE-2026-46132 | Undergoing Analysis | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo rtnl_fill_vfinfo() declares |
| CVE-2026-46133 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject unknown opcodes before ICRC processing Even after applying commit 7244491dab34 ("RDMA/rxe: Va |
| CVE-2026-46134 | Undergoing Analysis | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration cros_typec_register_thunderbolt() misse |
| CVE-2026-46135 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix race between ICReq handling and queue teardown nvmet_tcp_handle_icreq() updates queue->state af |
| CVE-2026-46136 | Undergoing Analysis | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer length underflow The buf_len is used to limit the iterations fo |
| CVE-2026-46137 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-race This mptcp_pm_add_timer() helper is executed as a timer callb |
| CVE-2026-46138 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt hci_le_create_big_compl |
| CVE-2026-46139 | Undergoing Analysis | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: smb: client: use kzalloc to zero-initialize security descriptor buffer Commit 62e7dd0a39c2d ("smb: common: cha |
| CVE-2026-46140 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: validate WMT event SKB length before struct access btmtk_usb_hci_wmt_sync() casts the WMT ev |
| CVE-2026-46141 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: fix kmemleak caused by incorrect chip_data lookup The kmemleak reports the following memory leak |
| CVE-2026-46142 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WX_CFG_PORT_ST is a PF restricted register. When a VF is i | |
| CVE-2026-46143 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens As prepare can be called mulitple times, this can result |
| CVE-2026-46144 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() Sashiko points out that mana_ib_cfg_vport_steering() is | |
| CVE-2026-46145 | Modified | 未確認 | CWE-120, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points out that rx_hash_key_len comes from a uAPI structure and is |
| CVE-2026-46146 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() The convert_chmap_v3() has a loop with its |
| CVE-2026-46147 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() Two bugs exist in the vCPU initialisat |
| CVE-2026-46148 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: control built-in cs manually The coreQSPI IP supports only a single chip select, whi | |
| CVE-2026-46149 | Modified | 未確認 | CWE-126, CWE-674 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() target_tg_pt_gp_members_show() form |
| CVE-2026-46150 | Modified | 未確認 | CWE-863 | In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an u |
| CVE-2026-46151 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblp_ctrl_msg() collapses the usb_control |
| CVE-2026-46152 | Modified | 未確認 | CWE-1058, CWE-362 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_invoke_fast_rx() is documented as safe fo |
| CVE-2026-46153 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: 8021q: delete cleared egress QoS mappings vlan_dev_set_egress_priority() currently keeps cleared egress priori | |
| CVE-2026-46154 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters scx_group_set_{weight,idle,bandwidth}() |
| CVE-2026-46155 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2_compound_op() If a server sends a truncated response but a large Ou |
| CVE-2026-46156 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() The switch case in loongson_gpu_fixup_dma_hang() |
| CVE-2026-46157 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger Currently the runtime.oss.trigger field may be |
| CVE-2026-46158 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount When an ADD_ADDR is retransmitted, the sk is held in sk_r | |
| CVE-2026-46159 | Modified | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak btrfs_ioctl_space_info() has |
| CVE-2026-46160 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix missing last_unlink_trans update when removing a directory When removing a directory we are not upd | |
| CVE-2026-46161 | Modified | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies setup_geo() extracts near_copies (nc) and fa |
| CVE-2026-46162 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: ice: fix double free in ice_sf_eth_activate() error path When auxiliary_device_add() fails, ice_sf_eth_activat |
| CVE-2026-46163 | Modified | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX path Same fix as b43: the firmware-controlle |
| CVE-2026-46164 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in create_space_info_sub_group() error path When kobject_init_and_add() fails, the call |
| CVE-2026-46165 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by |
| CVE-2026-46166 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The call to ieee80211_dfs_cac_cancel can cause th |
| CVE-2026-46167 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl Just like in a previous problem in this driver, |
| CVE-2026-46168 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix scheduling with atomic in timestamp sockopt Using lock_sock_fast() (atomic context) around sock_set | |
| CVE-2026-46169 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value by validating catalog record size Syzbot reported a KMSAN uninit-value issue in hfsp |
| CVE-2026-46170 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: free sk if last When an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer() | |
| CVE-2026-46171 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: fix vector context allocation leak When the second kzalloc (host_context.vector.datap) fails in kv |
| CVE-2026-46172 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() xfrm6_rcv_encap() performs an IPv6 route lookup when th | |
| CVE-2026-46173 | Modified | 未確認 | CWE-416, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: exit: prevent preemption of oopsing TASK_DEAD task When an already-exiting task oopses, make_task_dead() curre |
| CVE-2026-46174 | Modified | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resources are not imp |
| CVE-2026-46175 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by FGGC of node block During FGGC node block migration, fsck may incorrect | |
| CVE-2026-46176 | Modified | 未確認 | CWE-825 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() mlx5_ib_dev_res_srq_init() allocates two |
| CVE-2026-46177 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events and receive messages | |
| CVE-2026-46178 | Modified | 未確認 | CWE-401, CWE-772 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() Sashiko points out that mlx4_srq_alloc() was not |
| CVE-2026-46179 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Don't allow pointer operations on unconfigured streams When reporting the pointer for a compressed | |
| CVE-2026-46180 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might end between |
| CVE-2026-46181 | Modified | 未確認 | CWE-366 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points out the radix_tree itself is RCU safe, but no |
| CVE-2026-46182 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace The hdr variable is allocated on the stack |
| CVE-2026-46183 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock damon_sysfs_quot_goal->path can be read and |
| CVE-2026-46184 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: sound: ua101: fix division by zero at probe Add a missing sanity check for bNrChannels in detect_usb_format() |
| CVE-2026-46185 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in symlink_data() Since smb2_check_message() returns success without length |
| CVE-2026-46186 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtio_bt: validate rx pkt_type header length virtbt_rx_handle() reads the leading pkt_type byte fr |
| CVE-2026-46187 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix kthread lifetime race between self-exit and external-stop RSI driver use both self-exit(kthread |
| CVE-2026-46188 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep_vf: add NULL check for napi_build_skb() napi_build_skb() can return NULL on allocation failure. In _ |
| CVE-2026-46189 | Modified | 未確認 | CWE-415, CWE-763 | In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Sashiko points out that pvrdma_uar_free |
| CVE-2026-46190 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() Sashiko noticed an out-of-bounds read [ |
| CVE-2026-46191 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the font buffer if the reallocation during consol |
| CVE-2026-46192 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: don't attempt to transmit during emulated read-only dual/quad operations The core wi | |
| CVE-2026-46193 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks AH allocates its temporary auth/ICV layout differently | |
| CVE-2026-46194 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-46195 | Modified | 未確認 | CWE-190, CWE-476, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: smb: client: validate dacloffset before building DACL pointers parse_sec_desc(), build_sec_desc(), and the cho |
| CVE-2026-46196 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() When a tracepoint goes through th | |
| CVE-2026-46197 | Modified | 未確認 | CWE-120, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: validate SVM ioctl nattr against buffer size Validate nattr field against the buffer size, prevent |
| CVE-2026-46198 | Analyzed | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix integer overflow on buff_pos Fixing an integer overflow present in batadv_iv_ogm_send_to_if. T |
| CVE-2026-46199 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg Check bounds against the end of the BO whenever we acc |
| CVE-2026-46200 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix controller deregistration Make sure to deregister the controller before disabling and releas | |
| CVE-2026-46201 | Modified | 未確認 | CWE-401, CWE-772 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() When xe_dma_buf_init_obj() fails, the attachment |
| CVE-2026-46202 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: run inactivity autodim from workqueues The autodim code in hid-appletb-kbd takes backlight_d | |
| CVE-2026-46203 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: fix unclocked access on unbind Make sure that the controller is runtime resumed before d |
| CVE-2026-46204 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB Rewrite the IB parsing to use amdgpu_ib_get_value() which h |
| CVE-2026-46205 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Disallow all private IOCTLs Disallow all private IOCTLs. These aren't quite as safe a | |
| CVE-2026-46206 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject new tp_meter sessions during teardown Prevent tp_meter from starting new sender or receiver | |
| CVE-2026-46207 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix empty payload in tap skb for non-linear buffers For non-linear skbs, virtio_transport_build_ |
| CVE-2026-46208 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop tp_meter sessions during mesh teardown TP meter sessions remain linked on bat_priv->tp_list a | |
| CVE-2026-46209 | Modified | 未確認 | CWE-190, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() drm_gem_fb_init_with_fun |
| CVE-2026-46210 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmt_src during MBPF check During concurrency testing, multiple instances ca |
| CVE-2026-46211 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() msm_ioctl_gem_info_get_metadata() always |
| CVE-2026-46212 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: prevent use-after-free when deleting claims When batadv_bla_del_backbone_claims() removes all |
| CVE-2026-46213 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix UAF in inactivity-timer cleanup path Commit 38224c472a03 ("HID: appletb-kbd: fix slab us |
| CVE-2026-46214 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtio_transport_recv_listen() calls sk_accept | |
| CVE-2026-46215 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in change_handle There was a potential race condition in change_ |
| CVE-2026-46216 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() When media GT is disabled via config |
| CVE-2026-46217 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-46218 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_value The uvd/vce/vcn code accesses the IB at predefined offse | |
| CVE-2026-46219 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on unbind The state machine work is scheduled by the interrupt handler and th |
| CVE-2026-46220 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission sdma_v4_0_ring_emit_fence() contains two BUG_O |
| CVE-2026-46221 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device name memory leak The device name allocated via kzalloc() in init_one_mc() is assign |
| CVE-2026-46222 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads The pads missed checks for connected devices whi |
| CVE-2026-46223 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated A chain of commits going back to v7.0 r |
| CVE-2026-46224 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure When drm_gpuvm_resv_object_alloc() fails, t |
| CVE-2026-46225 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: rspi: fix controller deregistration Make sure to deregister the controller before releasing underlying re | |
| CVE-2026-46226 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: fsl: fix controller deregistration Make sure to deregister the controller before releasing underlying res | |
| CVE-2026-46227 | Modified | 未確認 | CWE-362, CWE-367, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL The SCTP_SENDALL path in sctp_sendms |
| CVE-2026-46228 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should hav |
| CVE-2026-46229 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure KFD VRAM allocations set AMDGPU_GEM_CREATE | |
| CVE-2026-46230 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg Check bounds against the end of the BO whenever we acc |
| CVE-2026-46231 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: put backbone reference on failed claim hash insert When batadv_bla_add_claim() fails to inser | |
| CVE-2026-46232 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Clamp num_touch_reports A device would never lie about the number of touch reports would it? | |
| CVE-2026-46233 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: only purge non-released claims When batadv_bla_purge_claims() goes through the list of claims |
| CVE-2026-46234 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: vsock: fix buffer size clamping order In vsock_update_buffer_size(), the buffer size was being clamped to the |
| CVE-2026-46235 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: saa7164: add ioremap return checks and cleanups Add checks for ioremap return values in saa7164_dev_set |
| CVE-2026-46236 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: rc: xbox_remote: heed DMA restrictions The buffer for IO must not be part of the device structure becau | |
| CVE-2026-46237 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-46238 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop caching unowned originator pointers in BAT IV BAT IV keeps the last-hop neighbor address in e | |
| CVE-2026-46239 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl Three control cases (AUTOGAIN, EXPOSURE_AUTO, ANALO | |
| CVE-2026-46240 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix use-after-free in iris_release_internal_buffers() The recent change in commit 1dabf00ee206 (" |
| CVE-2026-46241 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registration failure Make sure to disable and free the interrupts in case |
| CVE-2026-46242 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f |
| CVE-2026-4630 | Analyzed | 未確認 | CWE-639 | A flaw was found in Keycloak. An authenticated client could exploit an Insecure Direct Object Reference (IDOR) vulnerability in the Authorization Services Protection API endpoint. |
| CVE-2026-46300 | Modified | 未確認 | CWE-123, CWE-456, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @fro |
| CVE-2026-46333 | Modified | 未確認 | CWE-269 | In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory im |
| CVE-2026-46337 | Analyzed | 未確認 | CWE-22 | WWBN AVideo is an open source video platform. In 29.0 and earlier, an unauthenticated remote attacker can read arbitrary image files anywhere on disk that the PHP user can open — i |
| CVE-2026-46344 | Analyzed | 未確認 | CWE-125 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in th |
| CVE-2026-4635 | Analyzed | 未確認 | CWE-362 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to archive the channel before removing persistent notifications which allows auth |
| CVE-2026-46356 | Analyzed | 未確認 | CWE-290 | Fleet is open source device management software. Prior to version 4.80.1, a vulnerability in Fleet's IP extraction logic allows unauthenticated attackers to bypass API rate limitin |
| CVE-2026-46359 | Deferred | 未確認 | CWE-89 | phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that allows authenticated attackers to execute arbitrary SQL by injecting malicious OAuth |
| CVE-2026-46360 | Deferred | 未確認 | CWE-79 | phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities() that limits recursive entity decoding to 5 iterations, allowing atta |
| CVE-2026-46361 | Deferred | 未確認 | CWE-79 | phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where result.question and result.answerPreview are rendered with the raw filter, disabling |
| CVE-2026-46362 | Deferred | 未確認 | CWE-863 | phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministrationController::userHasPermission() that fails to terminate execution after sending a forb |
| CVE-2026-46363 | Deferred | 未確認 | CWE-79 | phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that bypass sanitization through encode-decode cycles. The vulnerabi |
| CVE-2026-46364 | Deferred | 未確認 | CWE-89 | phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and BuiltinCaptcha::saveCaptcha() methods that interpolate unsan |
| CVE-2026-46365 | Deferred | 未確認 | CWE-862 | phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint that allows any authenticated user to delete tags. Any l |
| CVE-2026-46366 | Deferred | 未確認 | CWE-863 | phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks permission filtering, allowing unauthenticated attackers to en |
| CVE-2026-46367 | Deferred | 未確認 | CWE-79 | phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticated users to inject JavaScript via malformed URLs in comments. |
| CVE-2026-46368 | Deferred | 未確認 | CWE-77 | luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the https-dns-proxy package, distributed through the OpenWrt community packages feed and not inst |
| CVE-2026-46372 | Deferred | 未確認 | CWE-918 | SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice model |
| CVE-2026-46376 | Analyzed | 未確認 | CWE-798 | FreePBX is an open source IP PBX. From 15.0.42 to before 16.0.45 and 17.0.7, unauthenticated users may be able to access the User Control Panel (UCP) using hard-coded initial templ |
| CVE-2026-46383 | Deferred | 未確認 | CWE-22, CWE-73 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure i |
| CVE-2026-46384 | Deferred | 未確認 | CWE-190 | iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platfor |
| CVE-2026-46385 | Deferred | 未確認 | CWE-400, CWE-835 | iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reade |
| CVE-2026-46402 | Deferred | 未確認 | CWE-22, CWE-73 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO uses the user-controlled task_name value directly w |
| CVE-2026-46407 | Deferred | 未確認 | CWE-639 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the backend admin/auth-token endpoint allows an authentica |
| CVE-2026-46408 | Deferred | 未確認 | CWE-639 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the checkout endpoint accepts a user-controlled cart_id an |
| CVE-2026-46414 | Deferred | 未確認 | CWE-290, CWE-639, CWE-862 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO's WebSocket control plane trusts client-supplied id |
| CVE-2026-46416 | Deferred | 未確認 | CWE-284, CWE-488 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO creates one shared UFOWebSocketHandler instance and |
| CVE-2026-46419 | Deferred | 未確認 | CWE-253 | Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation. |
| CVE-2026-46424 | Deferred | 未確認 | CWE-269 | Budibase is an open-source low-code platform. Prior to 3.38.2, the public API role unassignment endpoint (POST /api/public/v1/roles/unassign) updates user documents in CouchDB but |
| CVE-2026-46425 | Deferred | 未確認 | CWE-862 | Budibase is an open-source low-code platform. Prior to 3.38.2, packages/worker/src/api/routes/global/scim.ts attaches only two middlewares to the SCIM router: requireSCIM (checks t |
| CVE-2026-46426 | Deferred | 未確認 | CWE-434, CWE-79 | Budibase is an open-source low-code platform. Prior to 3.38.2, the file upload endpoint POST /api/attachments/process does not enforce active-content restrictions for authenticated |
| CVE-2026-46427 | Deferred | 未確認 | CWE-200 | Budibase is an open-source low-code platform. Prior to 3.38.3, removeSecrets at packages/server/src/sdk/workspace/datasources/datasources.ts masks only datasource config fields who |
| CVE-2026-4643 | Analyzed | 未確認 | CWE-754 | Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from closing an underlying application view in the Mattermost Desktop App which allows |
| CVE-2026-46430 | Deferred | 未確認 | CWE-1188, CWE-668 | Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server bound to 0.0.0.0:5553 on Linux/macOS by default because the platform-dependent host def |
| CVE-2026-46431 | Deferred | 未確認 | CWE-942 | Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server's Access-Control-Allow-Origin response header was hardcoded to the wildcard * regardles |
| CVE-2026-46445 | Deferred | 未確認 | CWE-89 | SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection. |
| CVE-2026-46446 | Deferred | 未確認 | CWE-89 | SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related to c_password = '%@' in changePasswordForLogin. |
| CVE-2026-4646 | Analyzed | 未確認 | CWE-1287 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate user-supplied input in API request handlers which allows an authentic |
| CVE-2026-46469 | Analyzed | 未確認 | CWE-369 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate a |
| CVE-2026-46470 | Analyzed | 未確認 | CWE-369 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate a |
| CVE-2026-46473 | Deferred | 未確認 | CWE-331 | Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for securi |
| CVE-2026-46474 | Deferred | 未確認 | CWE-331 | Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security |
| CVE-2026-46483 | Analyzed | 未確認 | CWE-78, CWE-88 | Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz a |
| CVE-2026-4650 | Deferred | 未確認 | CWE-862 | The FundPress – WordPress Donation Plugin for WordPress is vulnerable to authorization bypass in versions up to and including 2.0.8. This is due to missing authorization and nonce |
| CVE-2026-46508 | Analyzed | 未確認 | CWE-77 | Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derived f |
| CVE-2026-46509 | Deferred | 未確認 | CWE-1321 | deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain __proto__/constructor/prototype. The prope |
| CVE-2026-46510 | Deferred | 未確認 | CWE-1321 | form-data-objectizer converts FormData to object. Prior to 1.0.1, form-data-objectizer walks bracket-notation form keys (e.g. name[sub]) into nested objects without filtering __pro |
| CVE-2026-46526 | Deferred | 未確認 | CWE-918 | Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.10, the URL checking logic in local-deep-research has a logical flaw that could b |
| CVE-2026-46527 | Analyzed | 未確認 | CWE-476 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.44.0, When the server has called Server::set_trusted_proxies() with a non-empty trusted |
| CVE-2026-46538 | Deferred | 未確認 | CWE-294, CWE-345 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO's constellation client tracks pending task response |
| CVE-2026-46544 | Deferred | 未確認 | CWE-639 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO accepts client-supplied session_id values in WebSoc |
| CVE-2026-46561 | Deferred | 未確認 | CWE-918 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the PREREQFUNCTION-based private IP check was not applied to HTTPRequest (used by the |
| CVE-2026-46579 | Modified | 未確認 | CWE-287 | A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming re |
| CVE-2026-4658 | Deferred | 未確認 | CWE-79 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the className, classHook, and block |
| CVE-2026-46586 | Modified | 未確認 | CWE-94, CWE-95 | Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz. Th |
| CVE-2026-46595 | Modified | 未確認 | CWE-303, CWE-863 | Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-addre |
| CVE-2026-46597 | Analyzed | 未確認 | CWE-704 | An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. |
| CVE-2026-46598 | Analyzed | 未確認 | CWE-129 | For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used. |
| CVE-2026-46599 | Deferred | 未確認 | CWE-770 | The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/h |
| CVE-2026-46620 | Deferred | 未確認 | CWE-285, CWE-352 | e107 is a content management system (CMS). Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem comes down to how ses |
| CVE-2026-46624 | Analyzed | 未確認 | CWE-78, CWE-89 | Twenty is an open source CRM. From 1.7.7 through 1.16.7, a critical Remote Code Execution (RCE) vulnerability exists in Twenty CRM via a chained SQL Injection and PostgreSQL COPY T |
| CVE-2026-4663 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-39608. Reason: This candidate is a reservation duplicate of CVE-2026-39608. Notes: All CVE user | |
| CVE-2026-4665 | Deferred | 未確認 | CWE-79 | The WP Carousel Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted fancybox `data-caption` attributes in all versions up to, and including, 2.7.10. |
| CVE-2026-46685 | Deferred | 未確認 | CWE-306, CWE-346, CWE-942 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, when RUSTFS_CORS_ALLOWED_ORIGINS is unset, the RustFS S3 listener's ConditionalCorsLayer reflect |
| CVE-2026-46719 | Deferred | 未確認 | CWE-150, CWE-93 | Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sourc |
| CVE-2026-46720 | Deferred | 未確認 | CWE-150, CWE-93 | Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from |
| CVE-2026-46721 | Deferred | 未確認 | CWE-639, CWE-915 | The create and edit flows do not restrict which user properties may be submitted and do not enforce access control on the frontend user group assignment. As a result, an attacker c |
| CVE-2026-46722 | Deferred | 未確認 | CWE-611 | The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read o |
| CVE-2026-46723 | Deferred | 未確認 | CWE-668 | The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can c |
| CVE-2026-46724 | Deferred | 未確認 | CWE-22 | The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the |
| CVE-2026-46725 | Deferred | 未確認 | CWE-502 | The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input. A remote, unauthenticated attacker can supply a crafted seri |
| CVE-2026-46727 | Analyzed | 未確認 | CWE-362 | An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the pthread-based getaddrinfo timeout handler (rb_getaddrinfo in ext/socket/raddrinf |
| CVE-2026-46728 | Analyzed | 未確認 | CWE-346 | Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash. |
| CVE-2026-46740 | Deferred | 未確認 | CWE-150, CWE-93 | Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics gener |
| CVE-2026-46745 | Analyzed | 未確認 | CWE-90 | Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass authentication |
| CVE-2026-46775 | Analyzed | 未確認 | CWE-284, CWE-400 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attack |
| CVE-2026-46817 | Analyzed | 掲載 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-46818 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to explo |
| CVE-2026-46819 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-46820 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-46821 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-46822 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-46823 | Analyzed | 未確認 | CWE-863 | Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.6 |
| CVE-2026-46824 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are |
| CVE-2026-46826 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-46827 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-46828 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-46829 | Analyzed | 未確認 | CWE-400 | Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated a |
| CVE-2026-4683 | Deferred | 未確認 | CWE-862 | The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'routeData' REST endpoint in all v |
| CVE-2026-46830 | Analyzed | 未確認 | CWE-200 | Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated a |
| CVE-2026-46833 | Analyzed | 未確認 | Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenti | |
| CVE-2026-46834 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthentica |
| CVE-2026-46835 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthentica |
| CVE-2026-46837 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitabl |
| CVE-2026-46839 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attack |
| CVE-2026-46840 | Analyzed | 未確認 | CWE-284, CWE-287, CWE-306 | Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unaut |
| CVE-2026-46841 | Analyzed | 未確認 | CWE-200 | Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated at |
| CVE-2026-46842 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attac |
| CVE-2026-46843 | Analyzed | 未確認 | CWE-400 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attac |
| CVE-2026-47066 | Analyzed | 未確認 | CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in benoitc hackney allows Excessive Allocation. The Alt-Svc response header parser in src/hackney_altsvc.erl do |
| CVE-2026-47067 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. The URL parser in src/hackney_url.erl converts every unrecognized URL scheme |
| CVE-2026-47068 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix_storybook allows cross-session PubSub topic injection via a URL query parameter. 'Elixir.Ph |
| CVE-2026-47069 | Analyzed | 未確認 | CWE-93 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Response Splitting. The hackney_cookie:setcookie/3 function in src/hackney |
| CVE-2026-47070 | Analyzed | 未確認 | CWE-601 | Sensitive Data Exposure vulnerability in benoitc hackney allows Retrieve Embedded Sensitive Data. The HTTP/3 redirect handler in src/hackney_h3.erl passes the original request head |
| CVE-2026-47071 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in benoitc hackney allows Flooding. The SOCKS5 transport in src/hackney_socks5.erl correctly applies the caller-supplied timeout to |
| CVE-2026-47072 | Analyzed | 未確認 | CWE-93 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Request/Response Splitting. The WebSocket upgrade code in src/hackney_ws.e |
| CVE-2026-47073 | Analyzed | 未確認 | CWE-400 | Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. The WebSocket client in src/hackney_ws.erl imposes no upper bound on memory c |
| CVE-2026-47074 | Deferred | 未確認 | CWE-295 | Improper Certificate Validation vulnerability in ex-aws ex_aws_sns (ExAws.SNS, ExAws.SNS.PublicKeyCache modules) allows Signature Spoofing by Improper Validation. This vulnerabili |
| CVE-2026-47075 | Modified | 未確認 | CWE-93 | Improper Neutralization of CRLF Sequences vulnerability in benoitc hackney allows HTTP Request Splitting. hackney does not percent-encode carriage return (\r) or line feed (\n) cha |
| CVE-2026-47076 | Analyzed | 未確認 | CWE-436, CWE-918 | Interpretation Conflict vulnerability in benoitc hackney allows Server Side Request Forgery. hackney_url:normalize/2 URL-decodes the host component after the URL has been parsed in |
| CVE-2026-47077 | Analyzed | 未確認 | CWE-400 | Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. hackney_h3:await_response_loop/6 accumulates the HTTP/3 response body in memo |
| CVE-2026-47090 | Analyzed | 未確認 | CWE-150 | Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control characters o |
| CVE-2026-47091 | Analyzed | 未確認 | CWE-22 | Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_p |
| CVE-2026-47092 | Analyzed | 未確認 | CWE-427 | Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSP |
| CVE-2026-47099 | Deferred | 未確認 | CWE-79 | TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse() function that allows attackers to execute arbitrary JavaScript by delivering a crafte |
| CVE-2026-47100 | Deferred | 未確認 | CWE-862 | Funnel Builder for WooCommerce Checkout prior to 3.15.0.3 contains a missing authorization vulnerability in the public checkout endpoint that allows unauthenticated attackers to in |
| CVE-2026-47101 | Modified | 未確認 | CWE-639, CWE-863 | LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes f |
| CVE-2026-47102 | Modified | 未確認 | CWE-863, CWE-915 | LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, |
| CVE-2026-47104 | Analyzed | 未確認 | CWE-125 | libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by suppl |
| CVE-2026-47107 | Deferred | 未確認 | CWE-276 | Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write restrictions, |
| CVE-2026-47114 | Deferred | 未確認 | CWE-88 | IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote attackers to execute arbitrary commands by supplying malicious mpv_-prefixed query par |
| CVE-2026-47118 | Deferred | 未確認 | CWE-22 | Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file se |
| CVE-2026-47119 | Deferred | 未確認 | CWE-79 | Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SVG f |
| CVE-2026-47123 | Deferred | 未確認 | CWE-290, CWE-345 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.220, the email processing pipeline in FreeScout's FetchEmails command has two code p |
| CVE-2026-47125 | Deferred | 未確認 | CWE-862 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environments/{id}/templates/variables endpoint, which writes the |
| CVE-2026-47136 | Deferred | 未確認 | CWE-200, CWE-306 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the RustFS console endpoint GET /rustfs/console/license returns parsed license metadata without |
| CVE-2026-47161 | Deferred | 未確認 | CWE-502 | RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pi |
| CVE-2026-47179 | Deferred | 未確認 | CWE-22 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.4, ProjectService.GetProjectFileContent returns the contents of any Docker Compo |
| CVE-2026-47202 | Deferred | 未確認 | CWE-287, CWE-345, CWE-697 | Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated threat actor to request a JWT for any user inclu |
| CVE-2026-47266 | Deferred | 未確認 | CWE-639 | Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21 and 3.1.26, unauthenticated users could modify existing submissions by posting a known or guessed submission ID to |
| CVE-2026-47269 | Deferred | 未確認 | CWE-284 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb's deny_remote feature checks utmpx ut_addr_v6 to detect whether an authe |
| CVE-2026-47270 | Deferred | 未確認 | CWE-362 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM module loaded into the host process (sudo, login, GDM, GNOME She |
| CVE-2026-47271 | Deferred | 未確認 | CWE-476 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, src/mem.c implemented out-of-memory guards for xmalloc(), xrealloc(), and xstrdup |
| CVE-2026-47272 | Deferred | 未確認 | CWE-287, CWE-908 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, the pusb_pad_compare() function in src/pad.c only verified that the user-side pad |
| CVE-2026-47273 | Deferred | 未確認 | CWE-91 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb builds XPath expressions from user-supplied identifiers (PAM username, se |
| CVE-2026-47274 | Deferred | 未確認 | CWE-427 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, multiple pam_usb helper tools resolved external binaries through the PATH environ |
| CVE-2026-47280 | Analyzed | 未確認 | CWE-287 | Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-4730 | Deferred | 未確認 | CWE-79 | The Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'chartid' shortcode |
| CVE-2026-47307 | Analyzed | 未確認 | CWE-476 | NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instr |
| CVE-2026-47308 | Analyzed | 未確認 | CWE-476 | NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9. |
| CVE-2026-47309 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2 |
| CVE-2026-47310 | Analyzed | 未確認 | CWE-416 | Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. |
| CVE-2026-47311 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. |
| CVE-2026-47312 | Analyzed | 未確認 | CWE-763 | Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2af |
| CVE-2026-47313 | Analyzed | 未確認 | CWE-789 | Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Escargot: 590345cc6258317c5da850d846ce6ba |
| CVE-2026-47314 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. |
| CVE-2026-47315 | Analyzed | 未確認 | CWE-754 | Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da |
| CVE-2026-47316 | Analyzed | 未確認 | CWE-703 | Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da |
| CVE-2026-47317 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. |
| CVE-2026-47323 | Modified | 未確認 | CWE-178, CWE-791 | Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in camel-cxf |
| CVE-2026-47326 | Analyzed | 未確認 | CWE-401 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be triggered by an unprivileged loca |
| CVE-2026-47327 | Analyzed | 未確認 | CWE-476 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notifications. The bug can be triggered by an unprivileged |
| CVE-2026-47328 | Analyzed | 未確認 | CWE-590 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking alloca |
| CVE-2026-47329 | Analyzed | 未確認 | CWE-1284 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unpriv |
| CVE-2026-47330 | Analyzed | 未確認 | CWE-457 | Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be tr |
| CVE-2026-47331 | Analyzed | 未確認 | CWE-416 | Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An unprivileged local user could trigger the race condition that can lea |
| CVE-2026-47332 | Analyzed | 未確認 | CWE-125 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handlin |
| CVE-2026-47333 | Analyzed | 未確認 | CWE-125 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read |
| CVE-2026-47334 | Analyzed | 未確認 | CWE-833 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in notification handling code. The bug can be triggered by an unprivi |
| CVE-2026-47335 | Analyzed | 未確認 | CWE-476 | Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notifications. The bug can be triggered by an unprivileged local user. |
| CVE-2026-47336 | Analyzed | 未確認 | CWE-457 | Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6 socket mediation code. The bug can be triggered by an unprivil |
| CVE-2026-47337 | Analyzed | 未確認 | CWE-476 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation. The bug can be triggered by an u |
| CVE-2026-47356 | Analyzed | 未確認 | CWE-918 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVersion}/{cloud}/local/ |
| CVE-2026-47357 | Analyzed | 未確認 | CWE-610, CWE-73, CWE-918 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST /v1/{iac}/{iacVersion}/{cl |
| CVE-2026-47358 | Analyzed | 未確認 | CWE-610, CWE-73, CWE-918 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan p |
| CVE-2026-47372 | Deferred | 未確認 | CWE-338 | Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for |
| CVE-2026-47373 | Deferred | 未確認 | CWE-208 | Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess |
| CVE-2026-47672 | Deferred | 未確認 | CWE-306 | epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any network-reachable caller can write arbitrary documents to any pati |
| CVE-2026-47673 | Analyzed | 未確認 | CWE-285 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk middlewares do not verify that the Authorization header valu |
| CVE-2026-47674 | Analyzed | 未確認 | CWE-1289, CWE-185 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the ip-restriction middleware (hono/ip-restriction) compares incoming IP add |
| CVE-2026-47675 | Analyzed | 未確認 | CWE-113, CWE-1287 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize() function in hono/cookie validates domain and path options ag |
| CVE-2026-47676 | Analyzed | 未確認 | CWE-444, CWE-693 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount() strips the mount prefix from the incoming request path using the |
| CVE-2026-47694 | Analyzed | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. In 29.0 and earlier, AVideo stores category descriptions from user input and later renders category_description as raw HTML in the Gal |
| CVE-2026-47696 | Analyzed | 未確認 | CWE-345 | WWBN AVideo is an open source video platform. In 29.0 and earlier, plugin/AuthorizeNet/processPayment.json.php credits the logged-in user's wallet based only on the attacker-contro |
| CVE-2026-47713 | Analyzed | 未確認 | CWE-285, CWE-639 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, an approved mobile device token created |
| CVE-2026-47715 | Deferred | 未確認 | CWE-639 | Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event |
| CVE-2026-47716 | Deferred | 未確認 | CWE-639 | Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, In affected versions, the issue list view authorizes access through the project in the URL, but applies the requested |
| CVE-2026-47728 | Deferred | 未確認 | CWE-862 | Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink resolved sourcemaps and debug files by debug ID without scoping that lookup to the project that owned the uplo |
| CVE-2026-47740 | Deferred | 未確認 | CWE-285, CWE-862 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Multiple Filament actions on the admin Order detail and Order shipments table were callable by an authenticated low-pr |
| CVE-2026-47741 | Deferred | 未確認 | CWE-362 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount's to |
| CVE-2026-47742 | Deferred | 未確認 | CWE-862 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Sub-form Livewire components used in the product editor (Edit, Inventory, Seo, Shipping, Files) had no authorization o |
| CVE-2026-47744 | Deferred | 未確認 | CWE-269, CWE-285 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, two distinct authorization defects in the team settings allowed any authenticated panel user to take over the RBAC sys |
| CVE-2026-47745 | Deferred | 未確認 | CWE-862 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, the admin tables for PaymentMethods, Currencies and Carriers exposed inline toggles and per-record actions (enable, di |
| CVE-2026-47759 | Analyzed | 未確認 | CWE-79 | TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via unsanitized data-mce-* attributes (data-mce-href, data-mce-sr |
| CVE-2026-4776 | Deferred | 未確認 | CWE-89 | An SQL injection vulnerability exists in Mautic's API contact filtering mechanism. Due to insufficient recursive sanitization of nested query parameters, an authenticated API user |
| CVE-2026-47760 | Analyzed | 未確認 | CWE-79 | TinyMCE is an open source rich text editor. From 6.8.0 to before 7.1.0, TinyMCE contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer. A cr |
| CVE-2026-47761 | Analyzed | 未確認 | CWE-79 | TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via c |
| CVE-2026-47762 | Analyzed | 未確認 | CWE-79 | TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass san |
| CVE-2026-47782 | Deferred | 未確認 | CWE-357 | Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to s |
| CVE-2026-47783 | Modified | 未確認 | CWE-208 | In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_serv |
| CVE-2026-47784 | Analyzed | 未確認 | CWE-208 | In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass. |
| CVE-2026-4782 | Deferred | 未確認 | CWE-36 | The Avada Builder plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.15.2 via the 'fusion_get_svg_from_file' function with the 'custo |
| CVE-2026-4790 | Deferred | 未確認 | CWE-79 | The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_svg' parameter in versio |
| CVE-2026-4795 | Deferred | 未確認 | CWE-862 | A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0, GS1200-5HPv3 firmware vers |
| CVE-2026-4798 | Deferred | 未確認 | CWE-89 | The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘product_order’ parameter in all versions up to, and including, 3.15.1 due to insufficient |
| CVE-2026-4802 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters wit |
| CVE-2026-48027 | Analyzed | 掲載 | CWE-506 | Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, l |
| CVE-2026-4803 | Deferred | 未確認 | CWE-79 | The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in the wpr_update_form_action_meta AJAX action in all versio |
| CVE-2026-48064 | Deferred | 未確認 | CWE-863 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, when a PAM service is configured with deny_remote=false in pam_usb (commonly done |
| CVE-2026-48065 | Deferred | 未確認 | CWE-122, CWE-190 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/conf.c allocates heap memory proportional to n_devices, a count derived from |
| CVE-2026-48066 | Deferred | 未確認 | CWE-362, CWE-476 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/log.c contains a process-wide static pointer that is written on every PAM inv |
| CVE-2026-4807 | Deferred | 未確認 | CWE-862 | The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.6.10.6. This is due to a flawed authorization logic i |
| CVE-2026-48091 | Rejected | 未確認 | Rejected reason: Further research determined the issue is not a vulnerability. | |
| CVE-2026-4811 | Deferred | 未確認 | CWE-79 | The WPB Floating Menu & Categories for WordPress – Sticky Side Menu with Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Icon CSS Class' category f |
| CVE-2026-48116 | Modified | 未確認 | CWE-77, CWE-88 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the filesystem-search-files agent skill |
| CVE-2026-48126 | Deferred | 未確認 | CWE-22, CWE-23, CWE-644 | Algernon is a small self-contained pure-Go web server. Prior to 1.17.8, when algernon is started with --domain (or --letsencrypt, which silently turns on --domain at engine/flags.g |
| CVE-2026-48128 | Deferred | 未確認 | CWE-918 | Budibase is an open-source low-code platform. Prior to 3.39.0, the executeQuery automation step in Budibase accepts a queryId from automation step inputs and passes it directly to |
| CVE-2026-48131 | Awaiting Analysis | 未確認 | CWE-122 | The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to termin |
| CVE-2026-48132 | Awaiting Analysis | 未確認 | CWE-125 | The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As a result, a specially crafted or malformed packet can cause |
| CVE-2026-48133 | Awaiting Analysis | 未確認 | CWE-98 | When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway. |
| CVE-2026-48134 | Awaiting Analysis | 未確認 | CWE-89 | When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask pa |
| CVE-2026-48135 | Awaiting Analysis | 未確認 | CWE-122 | A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation. |
| CVE-2026-48136 | Awaiting Analysis | 未確認 | CWE-89 | When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata a |
| CVE-2026-48146 | Deferred | 未確認 | CWE-918 | Budibase is an open-source low-code platform. Prior to 3.39.0, the OAuth2 token fetch function in packages/server/src/sdk/workspace/oauth2/utils.ts uses raw fetch(config.url) with |
| CVE-2026-48147 | Deferred | 未確認 | CWE-185, CWE-352 | Budibase is an open-source low-code platform. Prior to 3.35.4, the buildMatcherRegex() / matches() functions in packages/backend-core/src/middleware/matchers.ts route patterns are |
| CVE-2026-48148 | Deferred | 未確認 | CWE-918 | Budibase is an open-source low-code platform. Prior to 3.35.3, the VectorDB configuration endpoint in Budibase accepts a host parameter that undergoes no validation against intern |
| CVE-2026-48149 | Deferred | 未確認 | CWE-79 | Budibase is an open-source low-code platform. Prior to 3.39.0, the Budibase Text component renders markdown by assigning marked.parse(markdown) straight to innerHTML with no saniti |
| CVE-2026-48150 | Deferred | 未確認 | CWE-915 | Budibase is an open-source low-code platform. Prior to 3.39.0, /api/public/v1/roles/assign is guarded by the builderOrAdmin middleware, which passes any user who is a builder for t |
| CVE-2026-48151 | Deferred | 未確認 | CWE-862 | Budibase is an open-source low-code platform. Prior to 3.39.0, the webhook schema-building endpoint is registered under builderRoutes, but the generic authorization middleware skip |
| CVE-2026-48152 | Deferred | 未確認 | CWE-863 | Budibase is an open-source low-code platform. Prior to 3.39.0, the single-datasource GET and PUT routes are guarded by generic TABLE READ, not by Builder/Admin permission or dataso |
| CVE-2026-48153 | Deferred | 未確認 | CWE-918 | Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes a POST to a builder-supplied URL with plain node-fetch, skipping the blacklist.isB |
| CVE-2026-48155 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires e |
| CVE-2026-48156 | Analyzed | 未確認 | CWE-834 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross- |
| CVE-2026-48172 | Analyzed | 掲載 | CWE-266 | LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of gre |
| CVE-2026-48207 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented DeserializationPolicy validation hooks during reduce-state restoration an |
| CVE-2026-48210 | Analyzed | 未確認 | CWE-200, CWE-269 | An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disablin |
| CVE-2026-48213 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add.php that allows authenticated attackers to inject arbitrary JavaScript by passing an |
| CVE-2026-48214 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing |
| CVE-2026-48215 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in circle.php that allows authenticated attackers to inject arbitrary JavaScript by passing |
| CVE-2026-48216 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in db_loader.php that allows authenticated attackers to inject arbitrary JavaScript by passi |
| CVE-2026-48217 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in delete_module.php that allows authenticated attackers to inject arbitrary JavaScript by p |
| CVE-2026-48218 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in icons/buttons/landb.php that allows authenticated attackers to inject arbitrary JavaScrip |
| CVE-2026-48219 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics202.php that allows authenticated attackers to inject arbitrary JavaScript by passing |
| CVE-2026-48220 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205.php that allows authenticated attackers to inject arbitrary JavaScript by passing |
| CVE-2026-48221 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205a.php that allows authenticated attackers to inject arbitrary JavaScript by passing |
| CVE-2026-48222 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213.php that allows authenticated attackers to inject arbitrary JavaScript by passing |
| CVE-2026-48223 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213rr.php that allows authenticated attackers to inject arbitrary JavaScript by passin |
| CVE-2026-48224 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics214.php that allows authenticated attackers to inject arbitrary JavaScript by passing |
| CVE-2026-48225 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in landb.php that allows authenticated attackers to inject arbitrary JavaScript by passing a |
| CVE-2026-48226 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in os_watch.php that allows authenticated attackers to inject arbitrary JavaScript by passin |
| CVE-2026-48227 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient.php that allows authenticated attackers to inject arbitrary JavaScript by passing |
| CVE-2026-48228 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_w.php that allows authenticated attackers to inject arbitrary JavaScript by passi |
| CVE-2026-48229 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_i.php that allows authenticated attackers to inject arbitrary JavaScript by passin |
| CVE-2026-48230 | Deferred | 未確認 | CWE-79 | Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ticketsmdb_import.php that allows authenticated attackers to inject arbitrary JavaScript |
| CVE-2026-48231 | Deferred | 未確認 | CWE-89 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in tables.php where the multiple POST parameters (tablename, indexname, sortby) are concatenated into table/c |
| CVE-2026-48232 | Deferred | 未確認 | CWE-89 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/fullsit_incidents.php where the offset GET parameter is concatenated into the LIMIT clause of a SELEC |
| CVE-2026-48233 | Deferred | 未確認 | CWE-89 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/sit_incidents.php where the offset GET parameter is concatenated into the LIMIT clause of a SELECT st |
| CVE-2026-48234 | Deferred | 未確認 | CWE-89 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in portal/ajax/list_requests.php where the sort and dir GET parameters are concatenated into the ORDER BY cla |
| CVE-2026-48235 | Deferred | 未確認 | CWE-89 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in incs/remotes.inc.php where latitude, longitude, callsign, mph, altitude, and timestamp values parsed from |
| CVE-2026-48236 | Deferred | 未確認 | CWE-89 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in db_loader.php where the multiple POST parameters (ticketsdb, ticketshost, ticketsuser, ticketspassword) ar |
| CVE-2026-48237 | Deferred | 未確認 | CWE-89 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in message.php where the frm_ticket_id and frm_resp_id POST parameters are concatenated into WHERE clauses of |
| CVE-2026-48238 | Deferred | 未確認 | CWE-89 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/mobile_main.php where the id GET parameter is concatenated into the WHERE clause of a SELECT statemen |
| CVE-2026-48239 | Deferred | 未確認 | CWE-89 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/reports.php where the tick_id POST parameter is concatenated into the WHERE clause of SELECT statemen |
| CVE-2026-48240 | Deferred | 未確認 | CWE-89 | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/statistics.php where the tick_id and f_tick_id POST parameters are concatenated into WHERE clauses of |
| CVE-2026-48241 | Deferred | 未確認 | CWE-798 | Open ISES Tickets before 3.44.2 contains hardcoded MySQL database credentials in loader.php (a public-facing database utility) that are committed to the source repository. Any acto |
| CVE-2026-48242 | Deferred | 未確認 | CWE-798 | Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php. The credentials are embedded i |
| CVE-2026-48243 | Deferred | 未確認 | CWE-798 | Open ISES Tickets before 3.44.2 embeds a hardcoded WhitePages reverse-phone API key in wp1.php that is committed to the public source repository. Any actor with read access to the |
| CVE-2026-48244 | Deferred | 未確認 | CWE-798 | Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed to the public source repository. The key can be extracted by anyone wit |
| CVE-2026-48245 | Deferred | 未確認 | CWE-798 | Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the public source repository. The key can be extracted by anyone with read |
| CVE-2026-48246 | Deferred | 未確認 | CWE-295 | Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when i |
| CVE-2026-48247 | Deferred | 未確認 | CWE-295 | Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/functions.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) |
| CVE-2026-48248 | Deferred | 未確認 | CWE-295 | Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when |
| CVE-2026-48249 | Deferred | 未確認 | CWE-295 | Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFY |
| CVE-2026-4827 | Awaiting Analysis | 未確認 | CWE-331 | CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections. |
| CVE-2026-4834 | Deferred | 未確認 | CWE-89 | The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping |
| CVE-2026-4843 | Deferred | 未確認 | CWE-862 | The GSheet For Woo Importer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the process_ajax_restore_action() function in all v |
| CVE-2026-48501 | Analyzed | 未確認 | CWE-863 | GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization header in API requests to TUF repository mirrors via gh attes |
| CVE-2026-48522 | Modified | 未確認 | CWE-441, CWE-918 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient passes its uri argument directly to urllib.request.urlopen() which uses Python stdlib's default Ope |
| CVE-2026-48523 | Analyzed | 未確認 | CWE-347 | PyJWT is a JSON Web Token implementation in Python. From 2.9.0 to 2.12.1, there is a verifier-side algorithm allow-list bypass when jwt.decode() or jwt.decode_complete() are called |
| CVE-2026-48524 | Analyzed | 未確認 | CWE-460, CWE-755 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.get_signing_key() forces a fresh HTTP request to the JWKS endpoint for every JWT with an unknown ki |
| CVE-2026-48525 | Analyzed | 未確認 | CWE-400 | PyJWT is a JSON Web Token implementation in Python. From 2.8.0 to 2.12.1, when verifying detached JWS tokens using the unencoded-payload option ("b64": false, RFC 7797), PyJWT perf |
| CVE-2026-48526 | Modified | 未確認 | CWE-287, CWE-347 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the librar |
| CVE-2026-48527 | Deferred | 未確認 | CWE-79 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions up to and including 26.0.0 are affected by a stored cross-site scripting (XSS) vulnerability in the `/ |
| CVE-2026-48544 | Deferred | 未確認 | CWE-22 | Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibrary.get_resource() method in taipy/gui/extension/library.py that allows unauthentica |
| CVE-2026-48545 | Analyzed | 未確認 | CWE-384 | Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP |
| CVE-2026-48555 | Deferred | 未確認 | CWE-918 | Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbitrary outboun |
| CVE-2026-48557 | Deferred | 未確認 | CWE-184 | Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanitizer(). The sanitizer checks only the final filename suffix, |
| CVE-2026-4858 | Analyzed | 未確認 | CWE-22 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticat |
| CVE-2026-48589 | Analyzed | 未確認 | CWE-601 | Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login. In affected versions, insufficient validation of this client-co |
| CVE-2026-4859 | Deferred | 未確認 | CWE-79 | The SP Blog Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'design' attribute of the `wpsbd_post_carousel` shortcode in all versions up to, and |
| CVE-2026-48592 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in oban-bg oban_web ('Elixir.Oban.Web.Jobs.DetailComponent' modules) allows unauthorized job worker substitution. The handle_event("save-job", |
| CVE-2026-48593 | Deferred | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion. An attacker w |
| CVE-2026-4868 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain conditions, could have |
| CVE-2026-48683 | Deferred | 未確認 | CWE-125 | FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. In src/netflow_plugin/netflow_v9_collector.cpp, th |
| CVE-2026-48684 | Analyzed | 未確認 | CWE-125 | FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the NetFlow v9 options template parser. In process_netflow_v9_options_template() (src/netflow_plugin/ne |
| CVE-2026-48685 | Analyzed | 未確認 | CWE-130 | FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extended length flag set. In src/bgp_protocol. |
| CVE-2026-48686 | Analyzed | 未確認 | CWE-120, CWE-787 | FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The function decode_bgp_subnet_e |
| CVE-2026-48687 | Modified | 未確認 | CWE-78 | FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. The _log() function in src/juniper_plugin/fastne |
| CVE-2026-48688 | Analyzed | 未確認 | CWE-125 | FastNetMon Community Edition through 1.2.9 contains multiple out-of-bounds reads in the BGP MP_REACH_NLRI IPv6 attribute decoder. The function decode_mp_reach_ipv6() in src/bgp_pro |
| CVE-2026-48689 | Modified | 未確認 | CWE-122, CWE-193, CWE-787 | FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dynamic_binary_buffer.hpp). Five methods (app |
| CVE-2026-48690 | Analyzed | 未確認 | CWE-122, CWE-190 | FastNetMon Community Edition through 1.2.9 contains an integer overflow vulnerability in the packet capture buffer allocation. In src/packet_storage.hpp, the allocate_buffer() func |
| CVE-2026-48691 | Modified | 未確認 | CWE-122, CWE-190 | FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP AS_PATH attribute encoder. In src/bgp_protocol.hpp, the IPv4UnicastAnnounce::get_attributes() fun |
| CVE-2026-48692 | Analyzed | 未確認 | CWE-306 | FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism. The server is initialized with grpc::InsecureServerCredentials( |
| CVE-2026-48693 | Analyzed | 未確認 | CWE-59 | FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via predictable file paths in /tmp. The statistics file path defaults to '/tmp/fastnetmon.dat' (s |
| CVE-2026-48694 | Analyzed | 未確認 | CWE-77, CWE-78 | FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin. In src/juniper_plugin/fastnetmon_juniper.php, |
| CVE-2026-48695 | Analyzed | 未確認 | CWE-78 | FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/fast |
| CVE-2026-48696 | Analyzed | 未確認 | CWE-120, CWE-676 | FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different vulnerability than CVE-2026-48686 and CVE-2026-48689. |
| CVE-2026-48697 | Analyzed | 未確認 | CWE-295 | FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_web_request_secure() function in src/fast_library.cpp creates |
| CVE-2026-48700 | Deferred | 未確認 | CWE-913 | An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0. When a regular file's path is passed as a URI in an org.freedesktop.FileManager1.ShowFolders D-Bus method |
| CVE-2026-48710 | Analyzed | 掲載 | CWE-1289, CWE-444 | Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because |
| CVE-2026-4873 | Modified | 未確認 | CWE-295, CWE-319 | A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear |
| CVE-2026-48735 | Analyzed | 未確認 | CWE-770 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires p |
| CVE-2026-48792 | Deferred | 未確認 | CWE-390, CWE-693 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/evdev.c silently ignores EACCES errors when opening /dev/input/event* nodes, |
| CVE-2026-48810 | Deferred | 未確認 | CWE-285 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, while investigating the ThreadPolicy::delete issue reported previously, the sam |
| CVE-2026-48811 | Deferred | 未確認 | CWE-862 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, FreeScout allows a non-admin user to permanently delete an internal note (priva |
| CVE-2026-4882 | Deferred | 未確認 | CWE-434 | The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'URAF_AJAX::method_upload' function in |
| CVE-2026-48829 | Deferred | 未確認 | CWE-476 | In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/diges |
| CVE-2026-4883 | Deferred | 未確認 | CWE-434 | The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetforms_ajax_form_builder' function in all versions u |
| CVE-2026-48831 | Deferred | 未確認 | CWE-669 | Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file ca |
| CVE-2026-48832 | Deferred | 未確認 | CWE-601 | action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability. |
| CVE-2026-48837 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affec |
| CVE-2026-48840 | Modified | 未確認 | CWE-839 | Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client. |
| CVE-2026-48842 | Deferred | 未確認 | CWE-89 | Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass. |
| CVE-2026-48843 | Deferred | 未確認 | CWE-918 | Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Info |
| CVE-2026-48844 | Deferred | 未確認 | CWE-670 | Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection. (Support for code e |
| CVE-2026-48845 | Deferred | 未確認 | CWE-669 | In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image blocking was not honored for URLs pointing to local/private destinations, which may lead t |
| CVE-2026-48846 | Deferred | 未確認 | CWE-669 | In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lea |
| CVE-2026-48847 | Deferred | 未確認 | CWE-669 | Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass. |
| CVE-2026-48848 | Deferred | 未確認 | CWE-79 | Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has |
| CVE-2026-48849 | Deferred | 未確認 | CWE-79 | In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stored XSS/HTML/CSS injection on shared mail |
| CVE-2026-4885 | Deferred | 未確認 | CWE-434 | The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafe_ajax_form_builder' function in all |
| CVE-2026-48850 | Analyzed | 未確認 | CWE-415 | PuTTY 0.72 before 0.84 has a double free in RSA KEX. |
| CVE-2026-48851 | Analyzed | 未確認 | CWE-451 | PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session. |
| CVE-2026-48852 | Analyzed | 未確認 | CWE-617 | PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification. |
| CVE-2026-48864 | Modified | 未確認 | CWE-787 | A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validat |
| CVE-2026-48877 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Tom GenerateBlocks allows Retrieve Embedded Sensitive Data. This issue affects GenerateBlocks: from n/a through |
| CVE-2026-4888 | Deferred | 未確認 | CWE-862 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability chec |
| CVE-2026-48896 | Analyzed | 未確認 | CWE-287 | Insufficient state checks lead to a vector that allows to bypass 2FA checks. |
| CVE-2026-48897 | Analyzed | 未確認 | CWE-287 | Insufficient state checks lead to a vector that allows to bypass 2FA checks. |
| CVE-2026-48898 | Analyzed | 未確認 | CWE-284 | An improper access check allows privilege escalation through the com_users batch task. |
| CVE-2026-48899 | Analyzed | 未確認 | CWE-284 | An improper access check allows privilege escalation through the com_users batch task. |
| CVE-2026-4890 | Awaiting Analysis | 未確認 | CWE-835 | A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet. |
| CVE-2026-48900 | Analyzed | 未確認 | CWE-284 | An improper access check allowed low privileged users to edit the task types of existing scheduler tasks. |
| CVE-2026-48901 | Analyzed | 未確認 | CWE-524 | The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key. |
| CVE-2026-48902 | Modified | 未確認 | CWE-319 | The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set. |
| CVE-2026-48903 | Analyzed | 未確認 | CWE-79 | Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in various components. |
| CVE-2026-48904 | Analyzed | 未確認 | CWE-284 | An improper access check allows privelege escalation through the com_users group editing webservice endpoint. |
| CVE-2026-48905 | Analyzed | 未確認 | CWE-79 | Lack of input filtering leads to an XSS vector in the HTML filter code. |
| CVE-2026-48906 | Analyzed | 未確認 | CWE-284 | The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites. |
| CVE-2026-4891 | Awaiting Analysis | 未確認 | CWE-125 | A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet. |
| CVE-2026-48916 | Analyzed | 未確認 | CWE-918 | Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals. |
| CVE-2026-48917 | Analyzed | 未確認 | CWE-502 | Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation. |
| CVE-2026-48918 | Analyzed | 未確認 | CWE-918 | Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default. |
| CVE-2026-48919 | Analyzed | 未確認 | CWE-502 | Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation. |
| CVE-2026-4892 | Awaiting Analysis | 未確認 | CWE-122 | A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 pa |
| CVE-2026-48920 | Analyzed | 未確認 | CWE-73 | Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email content by setting the `data-inline` attribute, without restrictions on th |
| CVE-2026-48921 | Analyzed | 未確認 | CWE-59 | Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of |
| CVE-2026-48922 | Analyzed | 未確認 | CWE-20 | Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide creden |
| CVE-2026-48923 | Analyzed | 未確認 | CWE-269 | Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect |
| CVE-2026-48924 | Analyzed | 未確認 | CWE-601 | Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks. |
| CVE-2026-48925 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request. |
| CVE-2026-48926 | Analyzed | 未確認 | CWE-269 | Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate cred |
| CVE-2026-48927 | Analyzed | 未確認 | CWE-79 | Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to config |
| CVE-2026-4893 | Awaiting Analysis | 未確認 | An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information. | |
| CVE-2026-48959 | Deferred | 未確認 | CWE-407 | IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. fastForward() compares length $offset (the digit count of the offs |
| CVE-2026-48961 | Deferred | 未確認 | CWE-755 | IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When |
| CVE-2026-48962 | Deferred | 未確認 | CWE-94, CWE-95 | IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied out |
| CVE-2026-48968 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider allows DOM-Based XSS. This issue affects Master Slider: |
| CVE-2026-48971 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WebToffee Product Import Export for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects |
| CVE-2026-48972 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SeedProd LLC SeedProd Pro allows PHP Local File Inclusion. |
| CVE-2026-48973 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Benbodhi SVG Support allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SVG Support: from n/a throu |
| CVE-2026-48999 | Deferred | 未確認 | CWE-79 | Attackers carefully craft malicious scripts, such as JavaScript, and inject them into target systems; when other users access pages containing such malicious content, the scripts a |
| CVE-2026-49000 | Deferred | 未確認 | CWE-310 | An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code implementation, which may |
| CVE-2026-49001 | Deferred | 未確認 | CWE-352 | Cross-site request forgery (CSRF) vulnerabilities allow attackers to exploit a user's authenticated session to forge cross-site requests, inducing the execution of unintended opera |
| CVE-2026-49002 | Deferred | 未確認 | CWE-284 | Access control failure means that an application does not effectively check user access permissions, so that unauthorized users can access system data beyond their permissions, suc |
| CVE-2026-49009 | Deferred | 未確認 | CWE-22 | Northern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows Directory Traversal. |
| CVE-2026-49014 | Analyzed | 未確認 | CWE-121 | In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-siz |
| CVE-2026-49017 | Analyzed | 未確認 | CWE-835 | In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly |
| CVE-2026-49044 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Kruit Advanced Custom Fields: Font Awesome Field allows Stored XSS. Th |
| CVE-2026-49045 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Media Adminimize allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Adminimize: from n/a through |
| CVE-2026-49046 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arjun Thakur Duplicate Page and Post allows Blind SQL Injection. This issue a |
| CVE-2026-49047 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in DearHive DearFlip allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects DearFlip: from n/a through 2.4 |
| CVE-2026-49051 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Prasad Kirpekar WP Meta and Date Remover allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Meta |
| CVE-2026-49052 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elements |
| CVE-2026-49053 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elements |
| CVE-2026-49054 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from |
| CVE-2026-49059 | Deferred | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Facebook Facebook for WooCommerce allows Phishing. This issue affects Facebook for WooCommerce: from n/a throu |
| CVE-2026-49093 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing |
| CVE-2026-49094 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can submit |
| CVE-2026-49095 | Analyzed | 未確認 | CWE-20 | Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation. An authenticated user with Fleet management privileges can |
| CVE-2026-49102 | Deferred | 未確認 | CWE-79 | Webmin before 2.640 allows mailboxes/detach.cgi XSS via an SVG document attachment that is viewed in the mailboxes component, because image/svg+xml is used instead of a safe type ( |
| CVE-2026-49103 | Deferred | 未確認 | CWE-24 | Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. This occurs in mailboxes/detachall.cgi. |
| CVE-2026-49127 | Deferred | 未確認 | CWE-193 | Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated atta |
| CVE-2026-49128 | Deferred | 未確認 | CWE-22 | Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow and LocalStorage::MapUTF8 within the local storage plugin, wh |
| CVE-2026-49129 | Deferred | 未確認 | CWE-918 | Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLOCATION is set without CURLOPT_REDIR_P |
| CVE-2026-49130 | Deferred | 未確認 | CWE-93 | Music Player Daemon (MPD) before version 0.24.11 contains a CRLF injection vulnerability in the xspf_char_data function within the XSPF playlist plugin that allows attackers to emb |
| CVE-2026-4915 | Analyzed | 未確認 | CWE-754 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to filter nil elements from outgoing webhook attachment payloads before processin |
| CVE-2026-49195 | Analyzed | 未確認 | CWE-306 | Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands. |
| CVE-2026-49196 | Analyzed | 未確認 | CWE-77 | The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands. |
| CVE-2026-49197 | Analyzed | 未確認 | CWE-287 | Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails. |
| CVE-2026-49198 | Analyzed | 未確認 | CWE-284 | Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors. |
| CVE-2026-49199 | Analyzed | 未確認 | CWE-77 | Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device. |
| CVE-2026-4920 | Deferred | 未確認 | CWE-79 | The Next Date plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'default' shortcode attribute in all versions up to, and including, 1.0 due to insufficient |
| CVE-2026-49200 | Analyzed | 未確認 | CWE-532 | The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leadin |
| CVE-2026-49201 | Analyzed | 未確認 | CWE-798 | The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key. This allows an attacker to decrypt, modify, and re-encrypt system backups |
| CVE-2026-49237 | Analyzed | 未確認 | CWE-276 | An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199. While the patch in version 1.16.0 updated the ownership o |
| CVE-2026-49238 | Analyzed | 未確認 | CWE-22 | An issue was discovered in Canonical Multipass before version 1.16.3. The host-side SFTP server component (sshfs_server), which executes with root privileges on the host, contains |
| CVE-2026-4928 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-4929 | Analyzed | 未確認 | CWE-79 | Simple Hierarchical Select (SHS) for Drupal 7 contains cross-site scripting risk due to improper output escaping of term-derived text. Confirmed affected paths include field format |
| CVE-2026-49299 | Deferred | 未確認 | CWE-863 | In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The |
| CVE-2026-49316 | Deferred | 未確認 | CWE-440, CWE-693, CWE-754 | Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the motorcycle's an |
| CVE-2026-49317 | Deferred | 未確認 | CWE-636, CWE-696, CWE-754 | Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the |
| CVE-2026-49318 | Deferred | 未確認 | CWE-636, CWE-696, CWE-754 | Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the |
| CVE-2026-49322 | Deferred | 未確認 | CWE-1390, CWE-294, CWE-327 | Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read access to the in |
| CVE-2026-49323 | Deferred | 未確認 | CWE-1390, CWE-327, CWE-798 | Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-ne |
| CVE-2026-49324 | Deferred | 未確認 | CWE-307, CWE-400, CWE-770 | Uncontrolled resource consumption in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with write a |
| CVE-2026-49325 | Deferred | 未確認 | CWE-1384, CWE-693, CWE-754 | Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with access to the Wir |
| CVE-2026-4935 | Deferred | 未確認 | CWE-89 | The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticat |
| CVE-2026-49366 | Analyzed | 未確認 | CWE-78 | In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion |
| CVE-2026-49367 | Analyzed | 未確認 | CWE-862 | In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account |
| CVE-2026-49368 | Analyzed | 未確認 | CWE-79 | In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible |
| CVE-2026-49369 | Analyzed | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages |
| CVE-2026-49370 | Analyzed | 未確認 | CWE-201 | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests |
| CVE-2026-49371 | Analyzed | 未確認 | CWE-79 | In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible |
| CVE-2026-49372 | Analyzed | 未確認 | CWE-918 | In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible |
| CVE-2026-49373 | Analyzed | 未確認 | CWE-88 | In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings |
| CVE-2026-49374 | Analyzed | 未確認 | CWE-862 | In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters |
| CVE-2026-49375 | Analyzed | 未確認 | CWE-79 | In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page |
| CVE-2026-49376 | Analyzed | 未確認 | CWE-863 | In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin |
| CVE-2026-49377 | Analyzed | 未確認 | CWE-526 | In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters |
| CVE-2026-49378 | Analyzed | 未確認 | CWE-862 | In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion |
| CVE-2026-49379 | Analyzed | 未確認 | CWE-522 | In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names |
| CVE-2026-49380 | Analyzed | 未確認 | CWE-601 | In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible |
| CVE-2026-49381 | Analyzed | 未確認 | CWE-79 | In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible |
| CVE-2026-49382 | Analyzed | 未確認 | CWE-1336 | In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin |
| CVE-2026-49383 | Analyzed | 未確認 | CWE-611 | In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible |
| CVE-2026-49384 | Analyzed | 未確認 | CWE-79 | In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible |
| CVE-2026-49385 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts |
| CVE-2026-49386 | Analyzed | 未確認 | CWE-639 | In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles on Planning Canvas |
| CVE-2026-4944 | Deferred | 未確認 | CWE-22 | vllm-project/vllm version 0.14.1 contains a vulnerability where the `trust_remote_code=True` parameter is hardcoded in two model implementation files (`vllm/model_executor/models/n |
| CVE-2026-49489 | Deferred | 未確認 | CWE-89 | OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of the DataGrid component that allows authenticated users to extract database content |
| CVE-2026-49490 | Deferred | 未確認 | CWE-89 | OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling that allows authenticated attackers to inject SQL through crafted filters targeting |
| CVE-2026-5028 | Deferred | 未確認 | CWE-89 | The Eight Day Week Print Workflow plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'title' parameter in the `pp-get-articles` AJAX action in all version |
| CVE-2026-5029 | Awaiting Analysis | 未確認 | CWE-306 | A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on |
| CVE-2026-5061 | Deferred | 未確認 | CWE-59 | The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerabili |
| CVE-2026-5063 | Deferred | 未確認 | CWE-79 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via POST parameter key names in the submit_nex_form() function |
| CVE-2026-5065 | Analyzed | 未確認 | CWE-798 | IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbou |
| CVE-2026-5071 | Analyzed | 未確認 | CWE-125 | The SocketCAN implementation validates the length of a user-provided buffer containing a socketcan_frame object using only a NET_ASSERT statement in zcan_sendto_ctx() before derefe |
| CVE-2026-5072 | Analyzed | 未確認 | CWE-1335 | A bitwise shift vulnerability in Zephyr's PTP subsystem allows a remote attacker to cause undefined behavior and potential system crashes. An attacker sends a crafted PTP_MSG_MANAG |
| CVE-2026-5075 | Deferred | 未確認 | CWE-200 | The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'internalOptions' localized script data in versions up to, and including, 4.9.7 due to s |
| CVE-2026-5077 | Deferred | 未確認 | CWE-79 | The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.2.1 due to insufficient output escaping when renderin |
| CVE-2026-5081 | Modified | 未確認 | CWE-340, CWE-341 | Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId (added in version 1.54) uses the v |
| CVE-2026-5084 | Deferred | 未確認 | CWE-338, CWE-340 | WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely. The session handler generates the session id from an MD5 hash seeded with a call to the bui |
| CVE-2026-5089 | Deferred | 未確認 | CWE-124 | YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#b |
| CVE-2026-5090 | Deferred | 未確認 | CWE-79 | Template::Plugin::HTML versions before 3.103 for Perl allows HTML and JavaScript to be injected. The html_filter function did not escape single quotes. HTML attributes inside of s |
| CVE-2026-5091 | Deferred | 未確認 | CWE-208 | Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing cou |
| CVE-2026-5100 | Deferred | 未確認 | CWE-89 | The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions' parameter array keys in versions up to, and including, 4.4.5 due to insufficient escaping |
| CVE-2026-5109 | Deferred | 未確認 | CWE-79 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient validation and output escapi |
| CVE-2026-5110 | Deferred | 未確認 | CWE-79 | The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient input valida |
| CVE-2026-5111 | Deferred | 未確認 | CWE-79 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient input validation and output |
| CVE-2026-5112 | Deferred | 未確認 | CWE-79 | The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient input valida |
| CVE-2026-5113 | Deferred | 未確認 | CWE-79 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Consent field hidden inputs in versions up to and including 2.10.0. This is due to a flawed |
| CVE-2026-5118 | Deferred | 未確認 | CWE-269 | The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'rol |
| CVE-2026-5127 | Deferred | 未確認 | CWE-502 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Deserialization of Untrusted Data in v |
| CVE-2026-5146 | Analyzed | 未確認 | CWE-862 | Improper access control in the notification management endpoints in Devolutions Server allows an unauthenticated attacker to modify or delete arbitrary user notification records vi |
| CVE-2026-5159 | Deferred | 未確認 | CWE-79 | The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagram_follow_text' setting in all versions up |
| CVE-2026-5163 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.5.x <= 11.5.1 fail to verify channel membership when processing AI-assisted message rewrites which allows an authenticated attacker to read the content of th |
| CVE-2026-5171 | Analyzed | 未確認 | CWE-284 | Improper access control in the entry activity log feature in Devolutions Server allows an authenticated user with access to an entry but without the required permission to retrieve |
| CVE-2026-5172 | Awaiting Analysis | 未確認 | CWE-125 | A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extra |
| CVE-2026-5192 | Deferred | 未確認 | CWE-22 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.52.1 via the 'uploa |
| CVE-2026-5193 | Deferred | 未確認 | CWE-269 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.5.13. |
| CVE-2026-5200 | Deferred | 未確認 | CWE-862 | The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and in |
| CVE-2026-5222 | Analyzed | 未確認 | CWE-647 | Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hoste |
| CVE-2026-5223 | Analyzed | 未確認 | CWE-61 | Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the |
| CVE-2026-5229 | Deferred | 未確認 | CWE-287 | The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.1.10. This is due to the plugin trusting user-controlled cookie data t |
| CVE-2026-5243 | Deferred | 未確認 | CWE-79 | The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to stored cross-site scripting via the |
| CVE-2026-5247 | Deferred | 未確認 | CWE-79 | The Schedule Post Changes With PublishPress Future plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wrapper' attribute of the [futureaction] shortcode in |
| CVE-2026-5260 | Awaiting Analysis | 未確認 | CWE-126 | A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, |
| CVE-2026-5266 | Awaiting Analysis | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo. This vulnerability is associated with program files includes/Api/ApiEchoNot |
| CVE-2026-5293 | Deferred | 未確認 | CWE-79 | The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'js' parameter in versions up to and including 1.4.16. This is d |
| CVE-2026-5294 | Deferred | 未確認 | CWE-862 | The Geeky Bot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.2.2. This is due to a nopriv AJAX route allowing attacker-controlled m |
| CVE-2026-5296 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that when foundational flows were enabled |
| CVE-2026-5297 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-5308 | Analyzed | 未確認 | CWE-400 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to enforce request body size limits on plugin HTTP endpoints which allows an atta |
| CVE-2026-5324 | Deferred | 未確認 | CWE-79 | The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to, and including, 2.8.11 This is due to a combination |
| CVE-2026-5335 | Deferred | 未確認 | CWE-552 | The Magic Export & Import WordPress plugin before 1.2.0 stores exported CSV files at a publicly accessible location, making it possible for any visitors to leak sensitive user info |
| CVE-2026-5337 | Deferred | 未確認 | CWE-639 | During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure Direct Object Reference (IDOR) attack. Th |
| CVE-2026-5340 | Deferred | 未確認 | CWE-79 | The Fancy Image Show plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `fancy-img-show` shortcode in all versions up to, and including, 9.1 due to |
| CVE-2026-5341 | Deferred | 未確認 | CWE-79 | The NMR Strava activities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `strava_nmr_connect` shortcode in all versions up to, and including, 1. |
| CVE-2026-5343 | Analyzed | 未確認 | CWE-754 | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation. This issue affects SAML SSO - Service Provide |
| CVE-2026-5361 | Deferred | 未確認 | CWE-79 | The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4. This is due to insufficient input |
| CVE-2026-5365 | Deferred | 未確認 | CWE-352 | The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 5.3.2. This is due to missing nonce verification on the request_c |
| CVE-2026-5371 | Deferred | 未確認 | CWE-862 | The MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) plugin for WordPress is vulnerable to unauthorized access and modification of data due to a |
| CVE-2026-5386 | Deferred | 未確認 | CWE-620 | The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a k |
| CVE-2026-5395 | Deferred | 未確認 | CWE-639 | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up |
| CVE-2026-5396 | Deferred | 未確認 | CWE-639 | The Fluent Forms plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 6.1.21. This is due to the SubmissionP |
| CVE-2026-5403 | Modified | 未確認 | CWE-122, CWE-787 | SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution |
| CVE-2026-5404 | Analyzed | 未確認 | CWE-120 | K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5405 | Modified | 未確認 | CWE-122, CWE-787 | RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution |
| CVE-2026-5433 | Undergoing Analysis | 未確認 | CWE-77 | Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnerability via command delimiters, potential |
| CVE-2026-5434 | Undergoing Analysis | 未確認 | CWE-538 | Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system |
| CVE-2026-5486 | Deferred | 未確認 | CWE-89 | The Unlimited Elements for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'data[filter_search]' parameter in the get_cat_addons AJAX action in versions up to |
| CVE-2026-5505 | Deferred | 未確認 | CWE-79 | The WP-Clippy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `clippy` shortcode in all versions up to, and including, 1.0.0. This is due to insu |
| CVE-2026-5509 | Modified | 未確認 | CWE-20, CWE-77 | An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router that allows an administrator to execute arbitrary system commands through the we |
| CVE-2026-5511 | Analyzed | 未確認 | CWE-209 | In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnostic command us |
| CVE-2026-5515 | Modified | 未確認 | CWE-532, CWE-922 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user. |
| CVE-2026-5516 | Modified | 未確認 | CWE-362 | IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited condit |
| CVE-2026-5545 | Modified | 未確認 | CWE-305, CWE-613 | libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host. |
| CVE-2026-5656 | Modified | 未確認 | CWE-22 | Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution |
| CVE-2026-5693 | Deferred | 未確認 | CWE-862 | The Smart Appointment & Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and a nonce validation logic flaw in the s |
| CVE-2026-5715 | Deferred | 未確認 | CWE-79 | The Voyage Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' attribute of the 'post-content' shortcode in all versions up to, and including, 1. |
| CVE-2026-5722 | Deferred | 未確認 | CWE-287 | The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14. This is due to the guest waitlist verification flow no |
| CVE-2026-5737 | Deferred | 未確認 | CWE-918 | The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.14.9. This is due to a public tracking route at |
| CVE-2026-5740 | Analyzed | 未確認 | CWE-789 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to properly validate msgpack-encoded WebSocket frames before memory allocation wh |
| CVE-2026-5753 | Deferred | 未確認 | CWE-862 | The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83. This is due to the 'Ai1wmve_Sche |
| CVE-2026-5755 | Analyzed | 未確認 | CWE-400 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.2, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the TIFF IFD offset in the image header before allo |
| CVE-2026-5766 | Analyzed | 未確認 | CWE-130 | An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated `Content-Length` header can bypass the `FILE_UPLOAD_MAX_MEMORY_SIZE` |
| CVE-2026-5768 | Deferred | 未確認 | CWE-306 | The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing pairing authentication or authorization. This allows attacker |
| CVE-2026-5773 | Modified | 未確認 | CWE-488, CWE-918 | libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. libcurl features a pool of recent connections so that subsequent requests can reuse an existin |
| CVE-2026-5776 | Deferred | 未確認 | The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored XSS attacks | |
| CVE-2026-5783 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Software Design Industry and Trade Ltd. Co. CityPLus allows Ref |
| CVE-2026-5784 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS. This i |
| CVE-2026-5786 | Analyzed | 未確認 | CWE-284 | An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access. |
| CVE-2026-5787 | Analyzed | 未確認 | CWE-295 | An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts a |
| CVE-2026-5788 | Analyzed | 未確認 | CWE-284 | An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods. |
| CVE-2026-5790 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) in Stel Order v3.25.1 and earlier, located at the ‘/app/FrontController’ endpoint via the ‘legalName’ and ‘employeeID’ parameters. The lack of pro |
| CVE-2026-5791 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross Site Request Forgery. This issue affects DivvyDrive: from 4.8.2 |
| CVE-2026-5798 | Deferred | 未確認 | CWE-639 | Unsafe object reference (IDOR) in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter. |
| CVE-2026-5804 | Awaiting Analysis | 未確認 | An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file desc | |
| CVE-2026-5817 | Analyzed | 未確認 | CWE-829 | The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing. This causes |
| CVE-2026-5843 | Analyzed | 未確認 | CWE-829 | The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the |
| CVE-2026-5946 | Modified | 未確認 | CWE-125, CWE-1287, CWE-20, CWE-617, CWE-754, CWE-843 | Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that s |
| CVE-2026-5947 | Modified | 未確認 | CWE-362, CWE-367, CWE-416 | Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it begins work to validat |
| CVE-2026-5950 | Analyzed | 未確認 | CWE-606 | An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause severe resource e |
| CVE-2026-5957 | Deferred | 未確認 | CWE-22 | The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to and including 1.6.5. This is due to a flawed path traversal validation in the create_te |
| CVE-2026-6001 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd. Co. BAPSİS allows Exploitation of Trusted Identifiers. This issue affects BAPSİS: before v.2 |
| CVE-2026-6002 | Deferred | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross-Site Scripting (XSS) |
| CVE-2026-6008 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows |
| CVE-2026-6009 | Awaiting Analysis | 未確認 | CWE-502 | Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system |
| CVE-2026-6050 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6051 | Analyzed | 未確認 | CWE-400 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap. |
| CVE-2026-6052 | Analyzed | 未確認 | CWE-400 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables. |
| CVE-2026-6053 | Analyzed | 未確認 | CWE-770 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables. |
| CVE-2026-6059 | Deferred | 未確認 | CWE-79 | A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network. |
| CVE-2026-6063 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that under certain conditions could have |
| CVE-2026-6072 | Deferred | 未確認 | CWE-639 | The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.4.2. |
| CVE-2026-6073 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated |
| CVE-2026-6075 | Deferred | 未確認 | CWE-352 | The Media Library Assistant plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.35 This is due to missing nonce verification on the |
| CVE-2026-6093 | Deferred | 未確認 | CWE-89 | Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8. |
| CVE-2026-6095 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Orejime allows Cross-Site Scripting (XSS). This issue affects Orejime: |
| CVE-2026-6104 | Modified | 未確認 | CWE-125 | In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is passed to mb_convert_encoding() or related mbstring functions, |
| CVE-2026-6127 | Deferred | 未確認 | CWE-79 | The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _elementor_data meta field in versions up to, and including, 4.0.4. This is |
| CVE-2026-6145 | Deferred | 未確認 | CWE-862 | The User Registration & Membership plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.1.5. This is due to the is_admin_creation_pro |
| CVE-2026-6146 | Deferred | 未確認 | CWE-338 | Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys. Amazon::Credentials stores credentials in an obfuscated form to prevent access to the se |
| CVE-2026-6169 | Deferred | 未確認 | CWE-94 | The affiliate-toolkit plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 3.8.5. This is due to the plugin using the BladeOne templati |
| CVE-2026-6174 | Deferred | 未確認 | CWE-79 | The CC Child Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'more' parameter in all versions up to, and including, 2.1.1 due to insufficient input |
| CVE-2026-6177 | Deferred | 未確認 | CWE-79 | The Custom Twitter Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.5.4. This is due to insufficient output escaping in the |
| CVE-2026-6180 | Analyzed | 未確認 | CWE-20, CWE-367 | A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-o |
| CVE-2026-6206 | Deferred | 未確認 | CWE-639 | The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the _get_post_property_from_querystring() function due to |
| CVE-2026-6210 | Awaiting Analysis | 未確認 | CWE-122, CWE-843 | A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image. When processing SVG marker references, the renderer retrieves |
| CVE-2026-6213 | Deferred | 未確認 | CWE-290, CWE-807 | A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server sid |
| CVE-2026-6214 | Deferred | 未確認 | CWE-862 | The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.53.0. This is due to the listen_for_saving_export_schedule() func |
| CVE-2026-6222 | Deferred | 未確認 | CWE-862 | The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.51.1. This is due to the `processRequest()` method in `Forminator |
| CVE-2026-6225 | Deferred | 未確認 | CWE-89 | The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'project_search' paramete |
| CVE-2026-6226 | Deferred | 未確認 | CWE-269 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthenticated privilege escalation in versions up to and including 3.29.2. This is due to insecure form sub |
| CVE-2026-6228 | Deferred | 未確認 | CWE-269 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 3.28.36. This is due to insufficient authorization check |
| CVE-2026-6229 | Deferred | 未確認 | CWE-918 | The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057. This is due to insufficient validation of u |
| CVE-2026-6237 | Deferred | 未確認 | CWE-79 | The Quick Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' attribute of the 'qtbl' shortcode in all versions up to, and including, 1.0.0 due |
| CVE-2026-6247 | Deferred | 未確認 | CWE-79 | The scratchblocks for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'element' attribute of the 'scratchblocks' shortcode in all versions up to, and i |
| CVE-2026-6252 | Deferred | 未確認 | CWE-79 | The Meta Field Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' block attribute in all versions up to, and including, 1.5.2 due to insuffic |
| CVE-2026-6253 | Modified | 未確認 | CWE-522 | curl might erroneously pass on credentials for a first proxy to a second proxy. This can happen when the following conditions are true: 1. curl is setup to use specific different |
| CVE-2026-6255 | Deferred | 未確認 | CWE-79 | The Simple Owl Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'num' attribute of the 'owls_wrapper' shortcode in all versions up to, and inclu |
| CVE-2026-6256 | Deferred | 未確認 | CWE-79 | The Credits Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the 'credits' shortcode in all versions up to, and including, 1. |
| CVE-2026-6261 | Deferred | 未確認 | CWE-434 | The Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 28.4. This is due to the upload_icons() function workflow moving and unzipp |
| CVE-2026-6262 | Deferred | 未確認 | CWE-22 | The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4. This is due to the upload_icons() function workflow using a user-co |
| CVE-2026-6266 | Awaiting Analysis | 未確認 | CWE-305 | A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (IDP) identity to an existing AAP user ac |
| CVE-2026-6268 | Deferred | 未確認 | CWE-79 | The EventPress WordPress theme before 22.2 does not sanitize or escape the 'id' parameter in the eventpress_customizer_notify_dismiss_action AJAX handler before outputting it back |
| CVE-2026-6271 | Deferred | 未確認 | CWE-434 | The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type |
| CVE-2026-6275 | Deferred | 未確認 | CWE-79 | The StatCounter – Free Real Time Visitor Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.1.1 This is due to insufficient |
| CVE-2026-6276 | Modified | 未確認 | CWE-319, CWE-346 | Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` h |
| CVE-2026-6278 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6279 | Deferred | 未確認 | CWE-74 | The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2. Th |
| CVE-2026-6281 | Awaiting Analysis | 未確認 | CWE-78 | A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary commands |
| CVE-2026-6282 | Awaiting Analysis | 未確認 | CWE-22 | A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access fi |
| CVE-2026-6287 | Deferred | 未確認 | CWE-79 | The ShopLentor - WooCommerce Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blockUniqId' block attribute in multiple P |
| CVE-2026-6320 | Deferred | 未確認 | CWE-22 | The Salon Booking System – Free Version plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 10.30.25. This is due to the public booking flow |
| CVE-2026-6321 | Modified | 未確認 | CWE-22 | fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like r |
| CVE-2026-6322 | Modified | 未確認 | CWE-140, CWE-436 | fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an |
| CVE-2026-6324 | Awaiting Analysis | 未確認 | CWE-444 | A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the `soup_body_input_stream_read_chunked()` function by sending a malicious H |
| CVE-2026-6332 | Analyzed | 未確認 | CWE-312 | CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected sourc |
| CVE-2026-6333 | Analyzed | 未確認 | CWE-918 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate the Host header when constructing response URLs for custom slash commands which allows an authenticated a |
| CVE-2026-6334 | Analyzed | 未確認 | CWE-305 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an authenticated |
| CVE-2026-6335 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.3 that under certain conditions could have allowed an authenticated user to execute ar |
| CVE-2026-6339 | Analyzed | 未確認 | CWE-346 | Mattermost versions 11.5.x <= 11.5.1, 11.4.x <= 11.4.3 fail to validate the X-Requested-With header on the burn-on-read reveal endpoint which allows an authenticated channel member |
| CVE-2026-6340 | Analyzed | 未確認 | CWE-789 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to validate 7zip archive structure before processing which allows an authenticated attacker to caus |
| CVE-2026-6341 | Analyzed | 未確認 | CWE-863 | Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to have API-level checks on which groups the user can create issues or attach comments to which allows a user that |
| CVE-2026-6342 | Analyzed | 未確認 | CWE-863 | Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to appropriately check for valid namespaces which allows plugin users to create subscriptions to groups that were n |
| CVE-2026-6343 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to check public/private permissions which allows members without these permissions to access public |
| CVE-2026-6344 | Deferred | 未確認 | CWE-22 | The Fluent Forms plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 6.2.1. This is due to insufficient path validation in the getAttachments( |
| CVE-2026-6345 | Analyzed | 未確認 | CWE-522 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail prevent disclosure of created user password which allows a malicious attacker to impersonate a user |
| CVE-2026-6346 | Analyzed | 未確認 | CWE-200 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet generation, whic |
| CVE-2026-6347 | Analyzed | 未確認 | CWE-200 | Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin which allows an attacker |
| CVE-2026-6354 | Rejected | 未確認 | Rejected reason: Voluntarily withdrawn | |
| CVE-2026-6365 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drup |
| CVE-2026-6366 | Analyzed | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection. This issue affects Drupal core: from 8. |
| CVE-2026-6367 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drup |
| CVE-2026-6378 | Deferred | 未確認 | CWE-79 | The Maxi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `/wp-json/maxi-blocks/v1.0/style-card` REST API endpoint in all versions up to, and includ |
| CVE-2026-6379 | Deferred | 未確認 | CWE-89 | The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perfo |
| CVE-2026-6381 | Deferred | 未確認 | CWE-22 | The WP Maps WordPress plugin before 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local File Inclusion attac |
| CVE-2026-6391 | Deferred | 未確認 | CWE-352 | The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to miss |
| CVE-2026-6394 | Deferred | 未確認 | CWE-918 | The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in versions up to and including |
| CVE-2026-6395 | Deferred | 未確認 | CWE-352 | The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in versions up to and including 0.9.2. This is due to the co |
| CVE-2026-6397 | Deferred | 未確認 | CWE-79 | The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `cvmh-sticky` shortcode `readmoretext` attribute in versions up to and including 2.5.6. This is |
| CVE-2026-6399 | Deferred | 未確認 | CWE-79 | The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.1.0. This is due to the use of sanitize_text_field() for out |
| CVE-2026-6400 | Deferred | 未確認 | CWE-352 | The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.3. This is due to missing nonce verif |
| CVE-2026-6401 | Deferred | 未確認 | CWE-352 | The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.1.7. This is due to missing nonce verification on the plugin's |
| CVE-2026-6402 | Analyzed | 未確認 | CWE-749 | webpack-dev-server versions up to and including 5.2.3 are vulnerable to cross-origin source code exposure when serving over a non-potentially trustworthy origin such as plain HTTP. |
| CVE-2026-6403 | Deferred | 未確認 | CWE-22 | The Quick Playground plugin for WordPress is vulnerable to Path Traversal in versions up to and including 1.3.3. This is due to insufficient path validation in the qckply_zip_theme |
| CVE-2026-6404 | Deferred | 未確認 | CWE-79 | The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'anomify_api_key' parameter in versions up to and includin |
| CVE-2026-6405 | Deferred | 未確認 | CWE-352 | The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in versions up |
| CVE-2026-6406 | Analyzed | 未確認 | CWE-863 | The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denie |
| CVE-2026-6411 | Awaiting Analysis | 未確認 | CWE-327 | This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related metadata from a |
| CVE-2026-6415 | Deferred | 未確認 | CWE-79 | The Advanced Custom Fields: Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.0.2. This is due to insufficient input |
| CVE-2026-6417 | Deferred | 未確認 | CWE-79 | The GLS Shipping for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failed_orders' parameter in all versions up to, and including, 1.4.0 |
| CVE-2026-6418 | Analyzed | 未確認 | CWE-36, CWE-552 | An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25.0.4). The application allows administrative users to configure a source path for |
| CVE-2026-6419 | Deferred | 未確認 | CWE-269 | The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up to and including 3.30.1. This is due to the missing capabili |
| CVE-2026-6420 | Awaiting Analysis | 未確認 | CWE-1241 | A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The v |
| CVE-2026-6427 | Deferred | 未確認 | CWE-79 | The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.7.6 This is due to a regex bug in the _filter_videos() me |
| CVE-2026-6429 | Modified | 未確認 | CWE-200 | When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain c |
| CVE-2026-6433 | Deferred | 未確認 | The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL query, and the result is passed to eval(), allowing unauthentica | |
| CVE-2026-6446 | Deferred | 未確認 | CWE-522 | The My Social Feeds – Social Feeds Embedder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 1.0.4 via the 'ttp_get_accounts |
| CVE-2026-6447 | Deferred | 未確認 | CWE-79 | The Call for Price for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2.0 due to insuffici |
| CVE-2026-6449 | Deferred | 未確認 | CWE-285 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2. This is due to a |
| CVE-2026-6452 | Deferred | 未確認 | CWE-352 | The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce val |
| CVE-2026-6455 | Deferred | 未確認 | CWE-352 | The WP Contact Form 7 DB Handler plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Deletion via SQL Injection and PHP Object Injection in v |
| CVE-2026-6456 | Deferred | 未確認 | CWE-287 | The Account Switcher plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.2. This is due to the `rememberLogin` REST API endpoint us |
| CVE-2026-6457 | Deferred | 未確認 | CWE-89 | The Geo Mashup plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geo_mashup_null_fields' parameter in all versions up to, and including, 1.13.19 due to |
| CVE-2026-6472 | Analyzed | 未確認 | CWE-862 | Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. |
| CVE-2026-6473 | Modified | 未確認 | CWE-190 | Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may exe |
| CVE-2026-6474 | Analyzed | 未確認 | CWE-134 | Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before Postgr |
| CVE-2026-6475 | Analyzed | 未確認 | CWE-61 | Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the ope |
| CVE-2026-6476 | Analyzed | 未確認 | CWE-89 | SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_crea |
| CVE-2026-6477 | Modified | 未確認 | CWE-120, CWE-242 | Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser |
| CVE-2026-6478 | Modified | 未確認 | CWE-385 | Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not af |
| CVE-2026-6479 | Analyzed | 未確認 | CWE-674 | Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service. If SSL and G |
| CVE-2026-6481 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6495 | Deferred | 未確認 | CWE-79 | The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which |
| CVE-2026-6499 | Deferred | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5. |
| CVE-2026-6500 | Deferred | 未確認 | CWE-256 | Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5. |
| CVE-2026-6501 | Deferred | 未確認 | CWE-611 | Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenD |
| CVE-2026-6504 | Deferred | 未確認 | CWE-79 | The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title_tag' parameter in all versions up to, and including, 1.7.1 |
| CVE-2026-6506 | Deferred | 未確認 | CWE-862 | The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.1.2. This is due to the infusedwoo_gdpr_upddata() function mis |
| CVE-2026-6508 | Deferred | 未確認 | CWE-346 | Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs. This i |
| CVE-2026-6510 | Deferred | 未確認 | CWE-862 | The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing authorization in all versions up to, and including, 5.1.2. This is due to missing nonce ve |
| CVE-2026-6512 | Deferred | 未確認 | CWE-862 | The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2. This is due to the plugin not properly verifying that a u |
| CVE-2026-6514 | Deferred | 未確認 | CWE-918 | The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popup_submit. This makes it possible for unauthenti |
| CVE-2026-6525 | Analyzed | 未確認 | CWE-476 | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 |
| CVE-2026-6549 | Deferred | 未確認 | CWE-79 | The Logo Manager For Enamad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' attribute of the `vc_enamad_namad`, `vc_enamad_shamed`, and `vc_enamad |
| CVE-2026-6555 | Deferred | 未確認 | CWE-434 | The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where onl |
| CVE-2026-6565 | Deferred | 未確認 | CWE-79 | The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v |
| CVE-2026-6566 | Deferred | 未確認 | CWE-639 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 4.2.0. This |
| CVE-2026-6575 | Analyzed | 未確認 | CWE-126 | Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allo |
| CVE-2026-6637 | Analyzed | 未確認 | CWE-121, CWE-89 | Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database. A distinct at |
| CVE-2026-6638 | Analyzed | 未確認 | CWE-89 | SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ... REFRESH PUBLICATION allows a subscriber table creator to execute arbitrary SQL with the subscription's public |
| CVE-2026-6646 | Deferred | 未確認 | CWE-79 | The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dt_default_button' shortcode in all versions up to, and including, 14.3.2. This is due to insuffi |
| CVE-2026-6659 | Deferred | 未確認 | CWE-338 | Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography. |
| CVE-2026-6663 | Deferred | 未確認 | CWE-862 | The GWD Connect plugin for WordPress is vulnerable to missing authorization to limited code execution in all versions up to, and including, 2.9. This is due to the plugin's standal |
| CVE-2026-6664 | Analyzed | 未確認 | CWE-190 | An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBoun |
| CVE-2026-6665 | Analyzed | 未確認 | CWE-121 | The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend th |
| CVE-2026-6666 | Analyzed | 未確認 | CWE-476 | A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field. |
| CVE-2026-6667 | Analyzed | 未確認 | CWE-862 | PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requ |
| CVE-2026-6670 | Deferred | 未確認 | CWE-22 | The Media Sync plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.9 via the 'sub_dir' and 'media_items' parameters. This is due to insuf |
| CVE-2026-6672 | Deferred | 未確認 | CWE-79 | The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and including, 1. |
| CVE-2026-6690 | Deferred | 未確認 | CWE-79 | The LifePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'n' parameter of the lp_update_mds AJAX action in all versions up to, and including, 2.2.2. |
| CVE-2026-6691 | Analyzed | 未確認 | CWE-120, CWE-787 | The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network |
| CVE-2026-6692 | Deferred | 未確認 | CWE-434 | The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_url' and '_check_file_path' function. This is due |
| CVE-2026-6696 | Deferred | 未確認 | CWE-79 | The Zingaya Click-to-Call plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email', 'first_name', 'last_name', and 'phone' parameters on the plugin's si |
| CVE-2026-6700 | Deferred | 未確認 | CWE-352 | The DX Sources plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.1. This is due to missing or incorrect nonce validation on |
| CVE-2026-6701 | Deferred | 未確認 | CWE-352 | The addfreespace plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.3. This is due to missing or incorrect nonce validation |
| CVE-2026-6702 | Deferred | 未確認 | CWE-352 | The Publish 2 Ping.fm plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validati |
| CVE-2026-6704 | Deferred | 未確認 | CWE-79 | The Blog Settings plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0. This is due to insufficie |
| CVE-2026-6708 | Deferred | 未確認 | CWE-862 | The HEL Online Classroom: AI-powered Online Classrooms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.3. This is due to a mis |
| CVE-2026-6709 | Deferred | 未確認 | CWE-862 | The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2. This is due to a missing capability chec |
| CVE-2026-6710 | Deferred | 未確認 | CWE-352 | The Skysa Text Ticker App plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce vali |
| CVE-2026-6713 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could hav |
| CVE-2026-6720 | Deferred | 未確認 | CWE-532 | When calicoctl is invoked with --log-level=info or --log-level=debug, the client prints the full contents of its loaded connection-configuration struct to stderr in a single log li |
| CVE-2026-6722 | Modified | 未確認 | CWE-416, CWE-825 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP ob |
| CVE-2026-6728 | Deferred | 未確認 | CWE-200 | The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.0.9 via the 'get_stream_data()' function. This makes |
| CVE-2026-6735 | Analyzed | 未確認 | CWE-79 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, |
| CVE-2026-6736 | Analyzed | 未確認 | CWE-306 | An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured |
| CVE-2026-6737 | Awaiting Analysis | 未確認 | CWE-782 | An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user to bypass driver security mechanisms and obtain restricted touchpad information |
| CVE-2026-6787 | Modified | 未確認 | CWE-321 | Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process. |
| CVE-2026-6788 | Modified | 未確認 | CWE-427 | Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files. |
| CVE-2026-6795 | Deferred | 未確認 | CWE-601 | URL redirection to untrusted site ('open redirect') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Parameter Injection. This issue affects DivvyDrive: |
| CVE-2026-6800 | Deferred | 未確認 | CWE-79 | The FastBots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.12 due to insufficient input sanitizatio |
| CVE-2026-6805 | Analyzed | 未確認 | CWE-280 | Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force att |
| CVE-2026-6808 | Deferred | 未確認 | CWE-79 | The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0. This is due to |
| CVE-2026-6811 | Analyzed | 未確認 | CWE-674 | Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of thes |
| CVE-2026-6812 | Deferred | 未確認 | CWE-918 | The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26 via the ona_activate_child_theme. This makes it possible for aut |
| CVE-2026-6813 | Deferred | 未確認 | CWE-79 | The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.1 due to insufficient input sanitizat |
| CVE-2026-6815 | Analyzed | 未確認 | CWE-22 | An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative p |
| CVE-2026-6816 | Analyzed | 未確認 | CWE-267 | An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users. This issue affect |
| CVE-2026-6817 | Deferred | 未確認 | CWE-79 | The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rate_reason' parameter in all versions up to, and including, 6.7.1.29 due to insuff |
| CVE-2026-6824 | Awaiting Analysis | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. |
| CVE-2026-6826 | Analyzed | 未確認 | CWE-200 | Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller. Any unauthenticated visitor can request |
| CVE-2026-6828 | Deferred | 未確認 | CWE-79 | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permission_mes |
| CVE-2026-6841 | Analyzed | 未確認 | CWE-79 | Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL that, when opened, resul |
| CVE-2026-6860 | Analyzed | 未確認 | CWE-295, CWE-770 | A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g. if the server is configured with |
| CVE-2026-6863 | Awaiting Analysis | 未確認 | CWE-863 | Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organization (the lowest authe |
| CVE-2026-6864 | Deferred | 未確認 | CWE-79 | The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.7 due to insu |
| CVE-2026-6865 | Awaiting Analysis | 未確認 | CWE-22 | CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied inpu |
| CVE-2026-6866 | Analyzed | 未確認 | CWE-1188 | CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to ini |
| CVE-2026-6871 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Obfuscate allows Cross-Site Scripting (XSS). This issue affects Obfusc |
| CVE-2026-6883 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 15.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated |
| CVE-2026-6888 | Awaiting Analysis | 未確認 | CWE-89 | Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling |
| CVE-2026-6891 | Awaiting Analysis | 未確認 | CWE-59 | Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially c |
| CVE-2026-6892 | Awaiting Analysis | 未確認 | CWE-59 | Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges to exploit a specially crafted symbolic li |
| CVE-2026-6895 | Deferred | 未確認 | CWE-269 | The WishList Member plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Disclosure and Privilege Escalation in versions up to and including |
| CVE-2026-6897 | Deferred | 未確認 | CWE-269 | The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember\Features\Team_Accounts::save_se |
| CVE-2026-6898 | Deferred | 未確認 | CWE-269 | The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember3_Hooks::generate_api_key' funct |
| CVE-2026-6902 | Awaiting Analysis | 未確認 | CWE-94 | A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks. |
| CVE-2026-6907 | Analyzed | 未確認 | CWE-524 | An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. `django.middleware.cache.UpdateCacheMiddleware` erroneously caches requests where the `Vary` header contained an |
| CVE-2026-6909 | Deferred | 未確認 | CWE-79 | ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution |
| CVE-2026-6913 | Deferred | 未確認 | CWE-79 | The Shortcodely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'widget_area' parameter in all versions up to, and including, 1.0.1 due to insufficient in |
| CVE-2026-6916 | Deferred | 未確認 | CWE-79 | The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sg_content_n |
| CVE-2026-6918 | Modified | 未確認 | CWE-125, CWE-1286 | In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message. |
| CVE-2026-6923 | Awaiting Analysis | 未確認 | CWE-1300 | A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key. |
| CVE-2026-6929 | Deferred | 未確認 | CWE-89 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'sortf' parameter in all versions up |
| CVE-2026-6932 | Deferred | 未確認 | CWE-352 | The Woo Commerce Minimum Weight plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.0.1. This is due to missing nonce verificatio |
| CVE-2026-6936 | Analyzed | 未確認 | CWE-674 | IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attack |
| CVE-2026-6937 | Deferred | 未確認 | CWE-862 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.6 |
| CVE-2026-6938 | Analyzed | 未確認 | CWE-285 | IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query. |
| CVE-2026-6948 | Awaiting Analysis | 未確認 | CWE-770 | Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel. This allows a compromised or rogue Velociraptor client t |
| CVE-2026-6956 | Deferred | 未確認 | CWE-79 | ATutor is vulnerable to Reflected XSS in /install/install.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution |
| CVE-2026-6957 | Analyzed | 未確認 | CWE-22 | Mattermost Plugins versions <=1.1.5 fail to sanitize filenames received from federated peers before using them to construct export destination paths, which allows an administrator |
| CVE-2026-6959 | Deferred | 未確認 | CWE-59 | HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vuln |
| CVE-2026-6960 | Deferred | 未確認 | CWE-434 | The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' fun |
| CVE-2026-6962 | Deferred | 未確認 | CWE-79 | The Cost of Goods: Product Cost & Profit Calculator for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_cog_product_cost' and |
| CVE-2026-6963 | Deferred | 未確認 | CWE-862 | The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmg_save_provider_config AJAX action in all versions up to, a |
| CVE-2026-6965 | Deferred | 未確認 | CWE-639 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.9.9. This is due to th |
| CVE-2026-6973 | Analyzed | 掲載 | CWE-20 | An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code |
| CVE-2026-7009 | Analyzed | 未確認 | CWE-295 | When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server certificate is valid, it fails to detect OCSP |
| CVE-2026-7010 | Deferred | 未確認 | CWE-113 | HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. The unvalidated inputs are the method and URI in the request l |
| CVE-2026-7046 | Deferred | 未確認 | CWE-89 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'table' parameter in all versions up to, and includ |
| CVE-2026-7048 | Deferred | 未確認 | CWE-89 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order_by' parameter in all versions up to, |
| CVE-2026-7049 | Deferred | 未確認 | CWE-918 | The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 12.5.0.1 via the scan |
| CVE-2026-7050 | Deferred | 未確認 | CWE-862 | The Forms Rb plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9. This is due to the plugin not properly verifying that a user is |
| CVE-2026-7051 | Deferred | 未確認 | CWE-862 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 8.9.0. This is due to a missin |
| CVE-2026-7052 | Deferred | 未確認 | CWE-79 | The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'file_upload' parameter in all versions up to |
| CVE-2026-7161 | Modified | 未確認 | CWE-656 | An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to crede |
| CVE-2026-7168 | Modified | 未確認 | CWE-294 | Successfully using libcurl to do a transfer over a specific HTTP proxy (`proxyA`) with **Digest** authentication and then changing the proxy host to a second one (`proxyB`) for a s |
| CVE-2026-7182 | Awaiting Analysis | 未確認 | CWE-22 | Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include |
| CVE-2026-7209 | Deferred | 未確認 | CWE-79 | The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `qcopd-directory` shortcode in all versions up to, and including, 8.9.2 |
| CVE-2026-7210 | Modified | 未確認 | CWE-331 | `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFu |
| CVE-2026-7249 | Deferred | 未確認 | CWE-862 | The Location Weather plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the `splw_update_block_options()` and `lwp_clean_we |
| CVE-2026-7251 | Awaiting Analysis | 未確認 | CWE-259 | Eppendorf BioFlo 320 is vulnerable due to VNC server using a hard-coded password. If a remote attacker knows the network address of any BioFlo 320 model with remote access enabled, |
| CVE-2026-7252 | Deferred | 未確認 | CWE-22 | The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due to insufficien |
| CVE-2026-7254 | Analyzed | 未確認 | CWE-1284 | IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users. |
| CVE-2026-7255 | Analyzed | 未確認 | CWE-307 | ** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.0 |
| CVE-2026-7256 | Analyzed | 未確認 | CWE-78 | ** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LA |
| CVE-2026-7257 | Analyzed | 未確認 | CWE-922 | ** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allo |
| CVE-2026-7258 | Analyzed | 未確認 | CWE-125 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype functions (l |
| CVE-2026-7259 | Analyzed | 未確認 | CWE-476 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl leads to a NULL poin |
| CVE-2026-7261 | Analyzed | 未確認 | CWE-416 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer is configured with SOAP_PERSISTENCE_SESSION, the handler obje |
| CVE-2026-7262 | Modified | 未確認 | CWE-476 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a |
| CVE-2026-7263 | Modified | 未確認 | CWE-404, CWE-835 | In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly, causing a circular linked list in the data structure repres |
| CVE-2026-7284 | Deferred | 未確認 | CWE-269 | The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via user registration in all versions up to, and including, |
| CVE-2026-7287 | Analyzed | 未確認 | CWE-120 | ** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert() functions of the “webs” bina |
| CVE-2026-7301 | Analyzed | 未確認 | CWE-502 | SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when ex |
| CVE-2026-7302 | Analyzed | 未確認 | CWE-35 | SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process ha |
| CVE-2026-7304 | Analyzed | 未確認 | CWE-502 | SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded vi |
| CVE-2026-7307 | Modified | 未確認 | CWE-1286 | A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language (SAML) endpoint. This malicious in |
| CVE-2026-7308 | Analyzed | 未確認 | CWE-79 | An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that reposi |
| CVE-2026-7310 | Deferred | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. An authenticated malicious user with local access can exploit this vulnerability using |
| CVE-2026-7325 | Analyzed | 未確認 | CWE-918 | Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a |
| CVE-2026-7330 | Deferred | 未確認 | CWE-79 | The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This is due to insufficient input sanitization on |
| CVE-2026-7332 | Deferred | 未確認 | CWE-79 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_form_page_url' parameter in a |
| CVE-2026-7365 | Analyzed | 未確認 | CWE-1392 | IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the inst |
| CVE-2026-7371 | Analyzed | 未確認 | CWE-79 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious ur |
| CVE-2026-7372 | Analyzed | 未確認 | CWE-787 | A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execut |
| CVE-2026-7373 | Awaiting Analysis | 未確認 | CWE-284, CWE-427, CWE-829 | Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows host. When started the metasploitPostgreSQL |
| CVE-2026-7374 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper sym |
| CVE-2026-7377 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that, in customizable analytics dashboard |
| CVE-2026-7385 | Deferred | 未確認 | The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing una | |
| CVE-2026-7411 | Awaiting Analysis | 未確認 | CWE-22 | In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker to perform a |
| CVE-2026-7412 | Awaiting Analysis | 未確認 | CWE-918 | In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthentica |
| CVE-2026-7413 | Analyzed | 未確認 | CWE-912 | A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authenticated) access to privileged functionality. The backdoor is |
| CVE-2026-7414 | Analyzed | 未確認 | CWE-798 | Yarbo firmware v2.3.9 contains hardcoded administrative credentials embedded in the firmware image. These credentials are identical across all devices running this firmware and can |
| CVE-2026-7415 | Analyzed | 未確認 | CWE-306 | The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs. Any host on the same network can subscribe to |
| CVE-2026-7428 | Awaiting Analysis | 未確認 | CWE-1392 | Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have created clusters with an insecure default password which could |
| CVE-2026-7430 | Deferred | 未確認 | CWE-79 | The Post Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.0.19. This is due to insufficient output escaping of imp |
| CVE-2026-7431 | Analyzed | 未確認 | CWE-732 | An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via w |
| CVE-2026-7432 | Analyzed | 未確認 | CWE-362 | A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM |
| CVE-2026-7437 | Deferred | 未確認 | CWE-79 | The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `editpos_hidden` parameter in all versions up to, and including, 1.3. This is due to insuf |
| CVE-2026-7448 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-7450 | Modified | 未確認 | CWE-476 | A maliciously crafted PAR file, when parsed through Autodesk 3ds Max, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash |
| CVE-2026-7451 | Analyzed | 未確認 | CWE-787 | A maliciously crafted TIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a c |
| CVE-2026-7452 | Analyzed | 未確認 | CWE-120 | A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbi |
| CVE-2026-7453 | Modified | 未確認 | CWE-674 | A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion vulnerability, leading to a denial-of-service condition. |
| CVE-2026-7454 | Analyzed | 未確認 | CWE-120 | A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbi |
| CVE-2026-7457 | Deferred | 未確認 | CWE-79 | The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the cus |
| CVE-2026-7458 | Deferred | 未確認 | CWE-288 | The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.46. This is due to the use of a loose PHP |
| CVE-2026-7459 | Deferred | 未確認 | CWE-640 | The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscriber+) account takeover in all versions up to, and including |
| CVE-2026-7460 | Deferred | 未確認 | CWE-79 | mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, |
| CVE-2026-7462 | Deferred | 未確認 | CWE-79 | The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `page` parameter in all versions up to, and including, 1.01. This is due to insuffi |
| CVE-2026-7464 | Deferred | 未確認 | CWE-79 | The WP Google Maps Integration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `page` parameter in all versions up to, and including, 1.2. This is due |
| CVE-2026-7465 | Deferred | 未確認 | CWE-269 | The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This |
| CVE-2026-7467 | Deferred | 未確認 | CWE-269 | The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.7. This is due to the 'RadMoreAjax::importData' funct |
| CVE-2026-7471 | Analyzed | 未確認 | CWE-918 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated |
| CVE-2026-7472 | Deferred | 未確認 | CWE-89 | The Read More & Accordion plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.5.7. This is due |
| CVE-2026-7474 | Deferred | 未確認 | CWE-22 | HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path traversal attack. This vulnerability (CVE-2026-7474) is fixed |
| CVE-2026-7475 | Deferred | 未確認 | CWE-79 | The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `sky-custom-scripts` custom post type in all versions up to, and including, 3.3.2. This is |
| CVE-2026-7480 | Awaiting Analysis | 未確認 | CWE-732 | An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary co |
| CVE-2026-7481 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated |
| CVE-2026-7482 | Analyzed | 未確認 | CWE-125 | Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declare |
| CVE-2026-7489 | Analyzed | 未確認 | CWE-89 | CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. |
| CVE-2026-7490 | Analyzed | 未確認 | CWE-434 | CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbit |
| CVE-2026-7491 | Deferred | 未確認 | CWE-639 | School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read and modify oth |
| CVE-2026-7493 | Deferred | 未確認 | CWE-400 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to denial of service in all versions up to, and including, 1.6.11. |
| CVE-2026-7498 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Basamak Information Technology Consulting and Organization Trade Ltd. Co. Dern |
| CVE-2026-7504 | Modified | 未確認 | CWE-601 | A flaw was found in Keycloak's URL validation logic during redirect operations. By crafting a malicious request, an attacker could bypass validation to redirect users to unauthoriz |
| CVE-2026-7507 | Modified | 未確認 | CWE-290 | A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated attacker could exploit this flaw by pre-creating an authentication session and |
| CVE-2026-7509 | Deferred | 未確認 | CWE-79 | The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `the-subtitle` shortcode `before` and `after` attributes in all versions up to, |
| CVE-2026-7512 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in UTT HiPER 1200GW up to 2.5.3-1703. The affected element is the function strcpy of the file /goform/formUser. Executing a manipulation can lead to buffer ov |
| CVE-2026-7513 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in UTT HiPER 1200GW up to 2.5.3-170306. The impacted element is the function strcpy of the file /goform/formRemoteControl. The manipulation leads to |
| CVE-2026-7518 | Deferred | 未確認 | CWE-404 | A flaw has been found in Open5GS up to 2.7.7. This issue affects the function amf_namf_callback_handle_sdm_data_change_notify of the file /namf-callback/v1/{id}/sdmsubscription-not |
| CVE-2026-7519 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/UploadImage.do of the component Endpoint. Such manipulation of th |
| CVE-2026-7522 | Deferred | 未確認 | CWE-98 | The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.1.0 via the 'template' parameter. This makes |
| CVE-2026-7524 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction. |
| CVE-2026-7525 | Deferred | 未確認 | CWE-862 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.9. This is due to the plugin not pro |
| CVE-2026-7526 | Deferred | 未確認 | CWE-200 | The PDF Embedder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.9.3 via the enqueue_block_assets. This makes it possib |
| CVE-2026-7528 | Analyzed | 未確認 | CWE-400 | IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption. |
| CVE-2026-7533 | Deferred | 未確認 | CWE-352 | The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7. This is due to missing nonce verification i |
| CVE-2026-7535 | Deferred | 未確認 | CWE-404 | A vulnerability was found in Open5GS up to 2.7.7. This affects the function amf_namf_comm_handle_registration_status_update_request in the library /lib/app/ogs-init.c of the file / |
| CVE-2026-7536 | Deferred | 未確認 | CWE-404 | A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function bsf_sess_add_by_ip_address of the file /nbsf-management/v1/pcfBindings of the compone |
| CVE-2026-7538 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function Vulnerability of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. |
| CVE-2026-7541 | Analyzed | 未確認 | CWE-770 | A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with d |
| CVE-2026-7545 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Advanced School Management System 1.0. The affected element is an unknown function of the file commonController.php of the componen |
| CVE-2026-7546 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. The impacted element is the function find_host_ip of the component lighttpd. Such manipulation |
| CVE-2026-7548 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function sub_41A68C of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argu |
| CVE-2026-7549 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=delete_customer. Executing a manipula |
| CVE-2026-7550 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=save_customer. The manipulati |
| CVE-2026-7552 | Deferred | 未確認 | CWE-862 | The Geo Mashup plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.13.19. This is due to the plugin not properly verifying that a use |
| CVE-2026-7553 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit_exercises.php. The manipula |
| CVE-2026-7554 | Analyzed | 未確認 | CWE-640 | A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password |
| CVE-2026-7555 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/login.php. Such manipulation of the argument Usernam |
| CVE-2026-7561 | Deferred | 未確認 | CWE-352 | The Tm – WordPress Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce |
| CVE-2026-7562 | Deferred | 未確認 | CWE-352 | The WP-Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.3. This is due to the absence of a nonce field in the ad |
| CVE-2026-7563 | Deferred | 未確認 | CWE-862 | The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 5.3.1 |
| CVE-2026-7567 | Deferred | 未確認 | CWE-288 | The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. This is due to improper input validation in the maybe_login_t |
| CVE-2026-7568 | Modified | 未確認 | CWE-125, CWE-190 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int variab |
| CVE-2026-7571 | Analyzed | 未確認 | CWE-472 | A flaw was found in Keycloak. A low-privilege user, with knowledge of user credentials and client ID, can bypass a security control intended to disable the implicit flow in OpenID |
| CVE-2026-7572 | Analyzed | 未確認 | CWE-193 | An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacke |
| CVE-2026-7573 | Analyzed | 未確認 | CWE-639 | An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the c |
| CVE-2026-7578 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in MacCMS Pro up to 2022.1.3. This vulnerability affects the function install of the file /admi.php/admin/addon/add.html of the component Plugin Inst |
| CVE-2026-7579 | Deferred | 未確認 | CWE-259, CWE-798 | A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the compo |
| CVE-2026-7580 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was detected in Exiftool up to 13.53. Impacted is the function Process_mrld of the file lib/Image/ExifTool/GM.pm of the component JPEG/QuickTime/MOV/MP4. The manipu |
| CVE-2026-7581 | Deferred | 未確認 | CWE-346, CWE-942 | A security vulnerability has been detected in alexta69 MeTube up to 2026.04.09. This affects the function on_prepare of the file app/main.py of the component CORS Policy. The manip |
| CVE-2026-7582 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulnerability affects unknown code of the file src/dds.imageio/ddsinput.cpp of the com |
| CVE-2026-7583 | Deferred | 未確認 | CWE-404 | A flaw has been found in Open5GS up to 2.7.7. This issue affects the function bsf_sess_find_by_ipv6prefix of the file /src/bsf/context.c of the component BSF. This manipulation of |
| CVE-2026-7584 | Analyzed | 未確認 | CWE-502 | The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization. Prior to the fix, this |
| CVE-2026-7585 | Analyzed | 未確認 | CWE-404 | A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amf_nudm_sdm_handle_provisioned of the file /src/amf/nudm-handler.c of the component AMF |
| CVE-2026-7586 | Analyzed | 未確認 | CWE-404 | A weakness has been identified in Open5GS up to 2.7.7. Affected is the function ogs_id_get_value of the file /src/amf/nudm-handler.c of the component AMF. This manipulation causes |
| CVE-2026-7587 | Analyzed | 未確認 | CWE-404 | A vulnerability has been found in Open5GS up to 2.7.7. This vulnerability affects the function amf_nsmf_pdusession_handle_update_sm_context of the file /src/amf/nsmf-handler.c of t |
| CVE-2026-7588 | Deferred | 未確認 | CWE-22 | A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function get_style_guide/get_best_practices of the file server.py. The manipulation of the argument |
| CVE-2026-7589 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function create_csv_export of the file services |
| CVE-2026-7590 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to 69bc71874ce40050ef45fde5a435855f18af3373. The affected element is an unknown function of the file branch_mon |
| CVE-2026-7591 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in TimBroddin astro-mcp-server up to 1.1.1. The impacted element is an unknown function of the file src/index.ts of the component MCP Tool Query |
| CVE-2026-7592 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Courier Management System 1.0. This affects an unknown function of the file /edit_staff.php. Executing a manipulation of the argument |
| CVE-2026-7593 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server up to 0.1.0. This impacts the function execute_command of the file src/index.ts of the com |
| CVE-2026-7594 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0. Affected is the function image_to_3d_async of the file src/index.ts of the component MCP Interface. The manipulati |
| CVE-2026-7595 | Deferred | 未確認 | CWE-74, CWE-94 | A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this vulnerability is the function _format_plugins of the file .claude/skills/ui-styling/scri |
| CVE-2026-7596 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this issue is the function data.get of the file .claude/skills/design-system/scripts |
| CVE-2026-7597 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vector_stores/faiss.py. Performing a manipulation results |
| CVE-2026-7598 | Modified | 未確認 | CWE-189, CWE-190 | A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argu |
| CVE-2026-7599 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in Dayoooun hwpx-mcp 0.2.0. This affects the function save_document/export_to_text/export_to_html of the file mcp-server/src/index.ts of the component |
| CVE-2026-7600 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command of the file src/index.ts of the component MCP Interface. Exe |
| CVE-2026-7601 | Deferred | 未確認 | CWE-404 | A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the file src/amf/gmm-handler.c of the component AMF. The manipulation of the argument reg_ |
| CVE-2026-7602 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the file /sys/fillRule/edit of the component FillRuleUtil Componen |
| CVE-2026-7603 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in JeecgBoot up to 3.9.1. Affected by this issue is the function checkPathTraversalBatch of the file FileDownloadUtils.jav of the component LoadFile |
| CVE-2026-7604 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in JeecgBoot up to 3.9.1. This affects the function OpenApiController.add/OpenApiController.call of the file OpenApiController.java of the component |
| CVE-2026-7605 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in JeecgBoot up to 3.9.1. This vulnerability affects the function CommonController.uploadImgByHttp/HttpFileToMultipartFileUtil.httpFileToMultipa |
| CVE-2026-7606 | Analyzed | 未確認 | CWE-345 | A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function find_hwid/new_gui_update_firmware of the component Firmware Update Handler. Executing |
| CVE-2026-7607 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function auto_update_firmware of the component Firmware Udpate. The manipulation of the a |
| CVE-2026-7608 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in os command injection. The expl |
| CVE-2026-7609 | Analyzed | 未確認 | CWE-77, CWE-78 | A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function tools_diagnostic of the file /tmp/diagnostic of the component Firmware Udpate. This |
| CVE-2026-7610 | Analyzed | 未確認 | CWE-310, CWE-319 | A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01. This affects an unknown function of the file /www/cgi/ssi of the component Firmware Update. Such manipulation leads t |
| CVE-2026-7611 | Analyzed | 未確認 | CWE-345 | A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01. This impacts the function platform_do_upgrade_cameo_dev of the file cameo_dev.sh of the component Firmware Update Ha |
| CVE-2026-7612 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an unknown function of the file /edit_user.php. Executing a manipulation of the argument I |
| CVE-2026-7613 | Deferred | 未確認 | CWE-79 | The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0][cost_of_goods_value]' parameter in versions up to, and incl |
| CVE-2026-7614 | Deferred | 未確認 | CWE-352 | The Old Posts Highlighter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce va |
| CVE-2026-7615 | Deferred | 未確認 | CWE-352 | The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.3. This is due to missing or incorrect nonce validatio |
| CVE-2026-7616 | Deferred | 未確認 | CWE-352 | The Zawgyi Embed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing or incorrect nonce validation |
| CVE-2026-7618 | Deferred | 未確認 | CWE-89 | The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and includi |
| CVE-2026-7619 | Deferred | 未確認 | CWE-89 | The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in al |
| CVE-2026-7621 | Deferred | 未確認 | CWE-862 | The SMTP2GO for WordPress – Email Made Easy plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.16.0. This is due to the plugin not pr |
| CVE-2026-7626 | Deferred | 未確認 | CWE-200 | The Slek Gateway for WooCommerce plugin for WordPress is vulnerable to Information Exposure in version 1.0. This is due to the wsb_handle_slek_payment_redirect() function placing t |
| CVE-2026-7627 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0. This vulnerability affects the function CallToolRequestSchema of the file src/index.ts of the component |
| CVE-2026-7628 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in crazyrabbitLTC mcp-code-review-server up to 0.1.0. This issue affects the function executeRepomix of the file src/repomix.ts of the component RepoMi |
| CVE-2026-7629 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in kleneway awesome-cursor-mpc-server up to 2.0.1. Impacted is the function runCodeReviewTool of the file src/tools/codeReview.ts of the component Ccode-Revie |
| CVE-2026-7630 | Deferred | 未確認 | CWE-287 | A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallServiceProvider::boot of the file innopacks/install/src/InstallServ |
| CVE-2026-7631 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulatio |
| CVE-2026-7632 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Online Hospital Management System 1.0. This affects an unknown function of the file /viewappointment.php. This manipulation of the a |
| CVE-2026-7633 | Deferred | 未確認 | CWE-73 | A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argumen |
| CVE-2026-7634 | Deferred | 未確認 | CWE-79 | The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'User-Agent' header in all versions up to, and including, 5.4.11 due to insufficien |
| CVE-2026-7635 | Deferred | 未確認 | CWE-502 | The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0. This is due to the plugin fai |
| CVE-2026-7636 | Deferred | 未確認 | CWE-200 | The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via |
| CVE-2026-7637 | Deferred | 未確認 | CWE-502 | The Boost plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.0.3 via deserialization of untrusted input in the STYXKEY-BOOST_USER_LOCATI |
| CVE-2026-7638 | Deferred | 未確認 | CWE-639 | The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0. |
| CVE-2026-7641 | Deferred | 未確認 | CWE-269 | The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.0.8 via the `save_extra_user_profile_fiel |
| CVE-2026-7642 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in pskill9 website-downloader up to 0.1.0. This affects the function download_website of the file src/index.ts of the component MCP Interface. Performi |
| CVE-2026-7643 | Deferred | 未確認 | CWE-346, CWE-942 | A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. Executing a manipulation can lead |
| CVE-2026-7644 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper aut |
| CVE-2026-7645 | Deferred | 未確認 | CWE-22 | A vulnerability was found in ruvnet sublinear-time-solver 1.5.0. Affected by this vulnerability is the function export_state of the file src/consciousness-explorer/mcp/server.js of |
| CVE-2026-7647 | Deferred | 未確認 | CWE-502 | The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5. This is due to the use of PHP's maybe_unserialize() f |
| CVE-2026-7648 | Deferred | 未確認 | CWE-639 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to payment bypass through user-controlled key in all versions up to, and |
| CVE-2026-7649 | Deferred | 未確認 | CWE-89 | The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order |
| CVE-2026-7650 | Deferred | 未確認 | CWE-79 | The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the `e2pdf-download` shortcode in all versions |
| CVE-2026-7651 | Deferred | 未確認 | CWE-639 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vul |
| CVE-2026-7652 | Deferred | 未確認 | CWE-640 | The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery Mechanism in the unauthenticated guest booking flow in versions up to, and including |
| CVE-2026-7653 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in r-huijts mcp-server-rijksmuseum up to 1.0.4. Affected is the function open_image_in_browser of the file src/index.ts of the component MCP Int |
| CVE-2026-7659 | Deferred | 未確認 | CWE-79 | The Advanced Social Media Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `social` shortcode in all versions up to, and including, 1.2. This is due |
| CVE-2026-7660 | Deferred | 未確認 | CWE-79 | The Easy Updates Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'paged' parameter in versions up to, and including, 9.0.20 This is due to insu |
| CVE-2026-7661 | Deferred | 未確認 | CWE-79 | The Bootstrap Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `box` shortcode in all versions up to, and including, 1.0. This is due to insuffic |
| CVE-2026-7668 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP Endpoi |
| CVE-2026-7669 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file python/sglang/srt/utils/hf_transformers_utils.py of the component |
| CVE-2026-7670 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/UserSel.aspx. This manipulation of the argument DeptIDL |
| CVE-2026-7671 | Deferred | 未確認 | CWE-307, CWE-799 | A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unknown function of the file /TwoFactor. Such manipulation lead |
| CVE-2026-7672 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in youlaitech youlai-boot up to 2.21.1. This affects the function getUserList of the file src/main/java/com/youlai/boot/system/controller |
| CVE-2026-7673 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code of the file crmeb/crmeb-service/src/main/java/com/zbkj/service/service/impl/UploadSe |
| CVE-2026-7674 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. This issue affects the function start_single_service of the component Web Management Interface. Execu |
| CVE-2026-7675 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function start_lan of the file /apply.cgi. The manipulation of the argument |
| CVE-2026-7676 | Deferred | 未確認 | CWE-22 | A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/f |
| CVE-2026-7677 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/control |
| CVE-2026-7678 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-module-report-biz/src/main/java/io/github/ruoyi/report/ |
| CVE-2026-7679 | Deferred | 未確認 | CWE-287 | A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruoyi/ |
| CVE-2026-7680 | Deferred | 未確認 | CWE-22 | A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. |
| CVE-2026-7681 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webserver/api/data |
| CVE-2026-7682 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Edimax BR-6208AC 1.02. The impacted element is the function setWAN of the file /goform/setWAN of the component L2TP Mode. The manipulation of |
| CVE-2026-7683 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Edimax BR-6428nC up to 1.16. This affects an unknown function of the file /goform/setWAN of the component Web Interface. This manipulation of the |
| CVE-2026-7684 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Edimax BR-6428nC up to 1.16. This impacts an unknown function of the file /goform/setWAN. Such manipulation of the argument pptpDfGate |
| CVE-2026-7685 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unknown function of the file /goform/setWAN. Performing a manipulation of the argument pptpDfGateway re |
| CVE-2026-7686 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Le |
| CVE-2026-7687 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in langflow-ai langflow up to 1.8.4. Affected by this issue is the function CodeParser.parse_callable_details of the file src/lfx/src/lfx/custom/code |
| CVE-2026-7688 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component |
| CVE-2026-7689 | Deferred | 未確認 | CWE-345, CWE-347 | A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dol_verifyHash in the library htdocs/core/lib/security.lib.php of the |
| CVE-2026-7690 | Analyzed | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110. This issue affects the function set_sys_adm of the file /cgi-bin/adm.cgi. This manipulation of the argume |
| CVE-2026-7691 | Analyzed | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. Impacted is the function set_sys_cmd of the file /cgi-bin/adm.cgi. Such manipulation of the a |
| CVE-2026-7692 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. The affected element is the function ping_ddns of the file /cgi-bin/adm.cgi. Performing a manipulation of t |
| CVE-2026-7694 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an unknown function of the file /SubstationW |
| CVE-2026-7695 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This affects an unknown function of the file /SubstationWEB |
| CVE-2026-7696 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This impacts an unknown function of the file /SubstationWEBV2/ma |
| CVE-2026-7697 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected is an unknown function of the file /manager/card/cardhand_submit.php. This manipulation of the |
| CVE-2026-7698 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is an unknown functionality of the file /Easy7/rest/systemInfo/ |
| CVE-2026-7699 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipu |
| CVE-2026-7700 | Deferred | 未確認 | CWE-74, CWE-94 | A weakness has been identified in langflow-ai langflow up to 1.10.2. This affects the function eval of the file src/lfx/src/lfx/components/llm_operations/lambda_filter.py of the co |
| CVE-2026-7701 | Deferred | 未確認 | CWE-404, CWE-476 | A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/url_auth_bo |
| CVE-2026-7702 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was detected in toeverything AFFiNE up to 0.26.3. This issue affects the function allowDocPreview of the file /workspace/:workspaceId/:docId of the component Public |
| CVE-2026-7703 | Deferred | 未確認 | CWE-74, CWE-94 | A flaw has been found in AV Stumpfl Pixera Two Media Server up to 25.2 R2. Impacted is an unknown function of the component Websocket API. This manipulation causes code injection. |
| CVE-2026-7704 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in AV Stumpfl Pixera Two Media Server up to 25.1 R2. The affected element is an unknown function of the component Service Port 1338. Such manipulatio |
| CVE-2026-7705 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in JD Cloud JDCOS 4.5.1.r4518. This vulnerability affects the function set_iptv_info of the file /jdcap of the component Service Interface. Executing a manipu |
| CVE-2026-7706 | Deferred | 未確認 | CWE-404 | A vulnerability has been found in Open5GS up to 2.7.7. This issue affects the function gmm_handle_service_request of the file /src/amf/gmm-handler.c of the component AMF. The manip |
| CVE-2026-7707 | Deferred | 未確認 | CWE-404 | A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udr_nudr_dr_handle_subscription_context of the file /src/udr/nudr-handler.c of the component UDR. The man |
| CVE-2026-7708 | Deferred | 未確認 | CWE-404 | A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_dbi_subscription_data in the library /lib/dbi/subscription.c of the component UDR. T |
| CVE-2026-7709 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_token of the file cps/kobo_auth.py of the component Endpoint |
| CVE-2026-7710 | Deferred | 未確認 | CWE-287 | A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the file JwtAuthenticationTokenFilter.java of the component Ruo |
| CVE-2026-7711 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byom_handler/proc_wrapper.py of the component Engine |
| CVE-2026-7712 | Deferred | 未確認 | CWE-20, CWE-502 | A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the component Pickle Handler. The manipulation leads to deserialization. |
| CVE-2026-7713 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the function generate_auth_token of the file cps/kobo_auth.py of |
| CVE-2026-7714 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is some unknown functionality of the file cps/cwa_functions.py of the component Ad |
| CVE-2026-7715 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the function arango_backup of the file src/tools.ts of the component MCP Interface. Such m |
| CVE-2026-7716 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipulatio |
| CVE-2026-7717 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Req |
| CVE-2026-7718 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in Totolink WA300 5.2cu.7112_B20190227. Impacted is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler |
| CVE-2026-7719 | Deferred | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227. The affected element is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component POST Re |
| CVE-2026-7720 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Re |
| CVE-2026-7721 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in Totolink WA300 5.2cu.7112_B20190227. This affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. Such manipulation of |
| CVE-2026-7722 | Deferred | 未確認 | CWE-287 | A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/health of the component Health Check API. Performing a manipulat |
| CVE-2026-7723 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation ca |
| CVE-2026-7724 | Deferred | 未確認 | CWE-362, CWE-367 | A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validate_restricted_url of the component Webhook/Notification. |
| CVE-2026-7725 | Deferred | 未確認 | CWE-74, CWE-88 | A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality of the file src/prefect/runner/storage.py of the component Gi |
| CVE-2026-7727 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to 8.3.9. This affects the function GetQueryMachineGridOnePageData of the file /Bas |
| CVE-2026-7728 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in ryanjoachim mcp-rtfm 0.1.0. This vulnerability affects the function get_doc_content/read_doc/update_doc of the component MCP Interface. Such manip |
| CVE-2026-7729 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in pixelsock directus-mcp 1.0.0. This issue affects the function validateUrl of the file index.ts of the component MCP Interface. Performing a m |
| CVE-2026-7730 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function child_process.spawn of the file src/index.ts of the component MCP Interface. Executing a m |
| CVE-2026-7731 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file get_state.php. The manipulation o |
| CVE-2026-7732 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is an unknown function of the file request_blood.php. The manipulation results in |
| CVE-2026-7733 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in funadmin up to 7.1.0-rc6. This affects the function UploadService::chunkUpload of the file app/common/service/UploadService.php of the component Frontend C |
| CVE-2026-7734 | Analyzed | 未確認 | CWE-404 | A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefix_sid.go of the component |
| CVE-2026-7735 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Pa |
| CVE-2026-7736 | Analyzed | 未確認 | CWE-189, CWE-191 | A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Executing a manipulation c |
| CVE-2026-7737 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/packe |
| CVE-2026-7738 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in puchunjie doc-tools-mcp 1.0.18. This affects the function create_document/open_document of the file src/mcp-server.ts of the component MCP In |
| CVE-2026-7739 | Deferred | 未確認 | CWE-404 | A weakness has been identified in justdan96 tsMuxer up to 2.7.0. This vulnerability affects the function HevcVpsUnit::setFPS of the file /AFLplusplus/tsMuxer_prev/tsMuxer/hevc.cpp. |
| CVE-2026-7740 | Deferred | 未確認 | CWE-404 | A security vulnerability has been detected in justdan96 tsMuxer up to 2.7.0. This issue affects the function VvcVpsUnit::setFPS of the file tsMuxer/vvc.cpp. Such manipulation of th |
| CVE-2026-7741 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argument |
| CVE-2026-7742 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in CodeAstro Online Classroom 1.0. The affected element is an unknown function of the file /OnlineClassroom/facultylogin. Executing a manipulation of the argu |
| CVE-2026-7743 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the file /OnlineClassroom/studentdetails. The manipulation of the a |
| CVE-2026-7744 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassroom/addnewstudent. The manipulation of the argument fname res |
| CVE-2026-7745 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineClassroom/facultydetails. This manipulation of the argument de |
| CVE-2026-7746 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file /product_expiry/edit-admin.php. Such |
| CVE-2026-7747 | Deferred | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component P |
| CVE-2026-7748 | Deferred | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Reques |
| CVE-2026-7749 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request |
| CVE-2026-7750 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Re |
| CVE-2026-7766 | Deferred | 未確認 | CWE-22 | Kenik Camera management Panel is vulnerable to Path Traversal vulnerability. An unauthenticated attacker can send GET request with arbitrary file path and read corresponding files |
| CVE-2026-7768 | Analyzed | 未確認 | CWE-770 | @fastify/accepts-serializer cached serializer-selection results keyed by the request Accept header without a size limit or eviction policy. A remote unauthenticated client could se |
| CVE-2026-7776 | Deferred | 未確認 | CWE-770 | Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes. An attacker with netw |
| CVE-2026-7778 | Awaiting Analysis | 未確認 | CWE-269 | An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privi |
| CVE-2026-7779 | Deferred | 未確認 | CWE-404 | A security flaw has been discovered in Open5GS up to 2.7.7. Affected is the function udm_nudr_dr_handle_subscription_authentication of the file /src/udm/nudr-handler.c of the compo |
| CVE-2026-7780 | Deferred | 未確認 | CWE-404 | A weakness has been identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function udm_state_operational of the file /src/udm/udm-sm.c of the component smf-regis |
| CVE-2026-7781 | Deferred | 未確認 | CWE-404 | A security vulnerability has been detected in Open5GS up to 2.7.7. Affected by this issue is the function udm_nudm_uecm_handle_amf_registration_update of the file /src/udm/nudm-han |
| CVE-2026-7782 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenan |
| CVE-2026-7783 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the function AbstractKanban::applySortQuery of the file application/services/AbstractKanban.p |
| CVE-2026-7784 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some unknown processing of the file apiserver/routes/extensions.py of the component Skills Endp |
| CVE-2026-7785 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quick_ |
| CVE-2026-7786 | Deferred | 未確認 | CWE-798 | Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. |
| CVE-2026-7788 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The affected element is the function update_document/continue_docu |
| CVE-2026-7790 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation. The chunked transfer-encoding parser in cow_http_te accepts a |
| CVE-2026-7791 | Awaiting Analysis | 未確認 | CWE-367 | Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin aut |
| CVE-2026-7797 | Deferred | 未確認 | CWE-89 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'append_where_sql' param |
| CVE-2026-7798 | Deferred | 未確認 | CWE-918 | The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side Request Forg |
| CVE-2026-7802 | Deferred | 未確認 | CWE-862 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.2. This is due to the plugin not properly ver |
| CVE-2026-7805 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-3258. Reason: This candidate is a reservation duplicate of CVE-2026-3258. Notes: All CVE users | |
| CVE-2026-7807 | Analyzed | 未確認 | CWE-22 | SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated users to read |
| CVE-2026-7810 | Deferred | 未確認 | CWE-22 | A flaw has been found in UsamaK98 python-notebook-mcp up to a05a232815809a7e425b5fa7be26e0d4369894c2. Impacted is the function create_notebook/read_notebook/edit_cell/add_cell of t |
| CVE-2026-7811 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The affected element is the function is_safe_path of the file src/code_mcp/server. |
| CVE-2026-7812 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The impacted element is the function git_operation of the file src/code_mcp/server.py o |
| CVE-2026-7813 | Analyzed | 未確認 | CWE-284 | Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules. Multiple endpoints fetched user- |
| CVE-2026-7814 | Analyzed | 未確認 | CWE-79 | Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules. User-controlled PostgreSQL object names (database, schema, table, column, |
| CVE-2026-7815 | Analyzed | 未確認 | CWE-89 | SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields (buffer_usage_limit, vacuum_parallel, vacuum_index_cleanup, reindex_tablespace) were conc |
| CVE-2026-7816 | Modified | 未確認 | CWE-78 | OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a psql \copy metacommand template without s |
| CVE-2026-7817 | Analyzed | 未確認 | CWE-552 | Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied api_key_file and api_url preferences |
| CVE-2026-7818 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of session-file contents (using Python's st |
| CVE-2026-7819 | Analyzed | 未確認 | CWE-61 | Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager. check_access_permission used os.path.abspath, which resolves '..' but does not resolve symbolic links, whi |
| CVE-2026-7820 | Analyzed | 未確認 | CWE-307 | Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4. pgAdmin enforces MAX_LOGIN_ATTEMPTS only inside its custom /authenticate/login view. Flask-Securi |
| CVE-2026-7821 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to enroll a device belonging to a restricte |
| CVE-2026-7822 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Courier Management System 1.0. This impacts an unknown function of the file /print_pdets.php. The manipulation of the argument ids le |
| CVE-2026-7823 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setAppFilterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argu |
| CVE-2026-7824 | Awaiting Analysis | 未確認 | CWE-532 | An issue was discovered in the PaperCut Hive Ricoh embedded application. When the "Deep Logging" (diagnostic) mode is enabled, the application inadvertently records administrative |
| CVE-2026-7832 | Deferred | 未確認 | CWE-59, CWE-61 | A security flaw has been discovered in IObit Advanced SystemCare 19. This affects an unknown part of the file ASC.exe of the component Service. The manipulation results in symlink |
| CVE-2026-7833 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects the function sub_408F90 of the file /cgi/iux_set.cgi of the component ApplyRestore Endpoin |
| CVE-2026-7834 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24. This issue affects the function get_csrf_whites of the file /cgi/advanced/misc_main.cgi. Such manipulation |
| CVE-2026-7835 | Deferred | 未確認 | CWE-134 | A format string argument mismatch in Netatalk 3.0.3 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted input that triggers incorrec |
| CVE-2026-7836 | Deferred | 未確認 | CWE-682 | An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attacker to cause limited |
| CVE-2026-7837 | Deferred | 未確認 | CWE-367 | A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a remote attacker |
| CVE-2026-7841 | Deferred | 未確認 | CWE-94 | A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user with System Setting permissions can execute arbitrary comma |
| CVE-2026-7844 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/list_files/retrieve_file/retrieve_file_content/delete |
| CVE-2026-7845 | Deferred | 未確認 | CWE-327, CWE-328 | A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webui_pages/di |
| CVE-2026-7846 | Deferred | 未確認 | CWE-362, CWE-367 | A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/api_server/openai |
| CVE-2026-7847 | Deferred | 未確認 | CWE-310, CWE-330 | A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function _get_file_id of the file libs/chatchat-server/chatchat/server/api |
| CVE-2026-7851 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in D-Link DI-8100 16.07.26A1. This affects the function sprintf of the file yyxz.asp. The manipulation of the argument ID leads to stack-based buffer |
| CVE-2026-7853 | Analyzed | 未確認 | CWE-119, CWE-120 | A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulation of the a |
| CVE-2026-7854 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function url_rule_asp of the file /url_rule.asp of the component POST |
| CVE-2026-7855 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the component HTTP Request Handler. Performing a |
| CVE-2026-7856 | Analyzed | 未確認 | CWE-119, CWE-120 | A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member.asp of the component Web Management Interface. Executing a manipulation of |
| CVE-2026-7857 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file /user_group.asp of the component CGI Handler. The manipulat |
| CVE-2026-7860 | Awaiting Analysis | 未確認 | CWE-209 | A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever |
| CVE-2026-7862 | Deferred | 未確認 | CWE-284 | The Eupago Gateway For Woocommerce WordPress plugin before 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to initiate ref |
| CVE-2026-7864 | Deferred | 未確認 | CWE-497 | SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain |
| CVE-2026-7865 | Awaiting Analysis | 未確認 | CWE-88 | A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered vul |
| CVE-2026-7875 | Analyzed | 未確認 | CWE-22 | NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt- |
| CVE-2026-7876 | Modified | 未確認 | CWE-287 | IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access |
| CVE-2026-7879 | Analyzed | 未確認 | CWE-862 | In Concrete CMS 9.5.0 and below, the submit_password() method in concrete/controllers/single_page/download_file.php allows unauthorized file access since downloading permission-re |
| CVE-2026-7881 | Analyzed | 未確認 | CWE-639 | Concrete CMS 9.5.0 and below is subject to Insecure Direct Object Reference (IDOR) in the Express Entry Detail block via the exEntryID parameter. This IDOR leads to unauthorized ac |
| CVE-2026-7882 | Analyzed | 未確認 | CWE-352 | Concrete CMS 9.5.0 and below is vulnerable to unauthorized file deletion due to an Inverted CSRF token check in the DeleteFile controller. The code throws an error when the token |
| CVE-2026-7886 | Analyzed | 未確認 | CWE-639 | Concrete CMS 9.5.0 and below is vulnerable to IDOR in AddMessage/UpdateMessage via attachments[] parameter which can lead to file permission bypass. The `AddMessage` and `UpdateMes |
| CVE-2026-7887 | Analyzed | 未確認 | CWE-1287 | For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0 (suspended, banned, terminated employee) can still authentic |
| CVE-2026-7890 | Analyzed | 未確認 | CWE-918 | In Concrete CMS 9.5.0 and below, the RSS Displayer block accepts a feed URL from any page editor and fetches it server-side without validation enabling redirect-to-internal bypasse |
| CVE-2026-7891 | Rejected | 未確認 | Rejected reason: This CVE has been retracted. Re-investigation confirmed the reported behavior is expected platform configuration and does not expose the protected attribute. | |
| CVE-2026-7896 | Analyzed | 未確認 | CWE-472 | Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sever |
| CVE-2026-7897 | Analyzed | 未確認 | CWE-416 | Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code v |
| CVE-2026-7898 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security |
| CVE-2026-7899 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-7900 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-7901 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-7902 | Modified | 未確認 | CWE-125, CWE-787 | Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-7903 | Analyzed | 未確認 | CWE-472 | Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium |
| CVE-2026-7904 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security se |
| CVE-2026-7905 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potenti |
| CVE-2026-7906 | Analyzed | 未確認 | CWE-416 | Use after free in SVG in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-7907 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-7908 | Analyzed | 未確認 | CWE-416 | Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security s |
| CVE-2026-7909 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation vi |
| CVE-2026-7910 | Modified | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
| CVE-2026-7911 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-7912 | Analyzed | 未確認 | CWE-472 | Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a |
| CVE-2026-7913 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file. (Chrom |
| CVE-2026-7914 | Analyzed | 未確認 | CWE-843 | Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb |
| CVE-2026-7915 | Modified | 未確認 | CWE-20 | Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Ch |
| CVE-2026-7916 | Modified | 未確認 | CWE-20 | Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a s |
| CVE-2026-7917 | Analyzed | 未確認 | CWE-416 | Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-7918 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craft |
| CVE-2026-7919 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-7920 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-7921 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-7922 | Analyzed | 未確認 | CWE-416 | Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securit |
| CVE-2026-7923 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-7924 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-7925 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium se |
| CVE-2026-7926 | Analyzed | 未確認 | CWE-416 | Use after free in PresentationAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-7927 | Analyzed | 未確認 | CWE-843 | Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-7928 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-7929 | Analyzed | 未確認 | CWE-416 | Use after free in MediaRecording in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code |
| CVE-2026-7930 | Rejected | 未確認 | Rejected reason: Is not a vulnerability, is a feature bug. | |
| CVE-2026-7931 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium |
| CVE-2026-7932 | Modified | 未確認 | CWE-693 | Insufficient policy enforcement in Downloads in Google Chrome prior to 148.0.7778.96 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. (Chromium s |
| CVE-2026-7933 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. (Chromium securi |
| CVE-2026-7934 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Popup Blocker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass nav |
| CVE-2026-7935 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity |
| CVE-2026-7936 | Rejected | 未確認 | Rejected reason: Determined not a vulnerability | |
| CVE-2026-7937 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to bypass navigation r |
| CVE-2026-7938 | Analyzed | 未確認 | CWE-416 | Use after free in CSS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-7939 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in SanitizerAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. ( |
| CVE-2026-7940 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox vi |
| CVE-2026-7941 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via a cr |
| CVE-2026-7942 | Analyzed | 未確認 | CWE-472 | Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-7943 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary |
| CVE-2026-7944 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Persistent Cache in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass |
| CVE-2026-7945 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in COOP in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolati |
| CVE-2026-7946 | Modified | 未確認 | CWE-693 | Insufficient policy enforcement in WebUI in Google Chrome on Linux, Mac, Windows, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process |
| CVE-2026-7947 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoof |
| CVE-2026-7948 | Analyzed | 未確認 | CWE-362 | Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Me |
| CVE-2026-7949 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome |
| CVE-2026-7950 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via malicious network traffic. (Chromium secur |
| CVE-2026-7951 | Analyzed | 未確認 | CWE-787 | Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-7952 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Extensions in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass discretionary acc |
| CVE-2026-7953 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious net |
| CVE-2026-7954 | Analyzed | 未確認 | CWE-362 | Race in Shared Storage in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. |
| CVE-2026-7955 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from |
| CVE-2026-7956 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-7957 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Media in Google Chrome on Mac, iOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside |
| CVE-2026-7958 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary |
| CVE-2026-7959 | Modified | 未確認 | CWE-284, CWE-693 | Inappropriate implementation in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a |
| CVE-2026-7960 | Analyzed | 未確認 | CWE-362 | Race in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process m |
| CVE-2026-7961 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Permissions in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment to leak cross-origin data via mal |
| CVE-2026-7962 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in DirectSockets in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via a crafted Chrome Extension. ( |
| CVE-2026-7963 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sa |
| CVE-2026-7964 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in FileSystem in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbit |
| CVE-2026-7965 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-orig |
| CVE-2026-7966 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass sit |
| CVE-2026-7967 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially p |
| CVE-2026-7968 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass same origin |
| CVE-2026-7969 | Analyzed | 未確認 | CWE-472 | Integer overflow in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HT |
| CVE-2026-7970 | Analyzed | 未確認 | CWE-416 | Use after free in TopChrome in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-7971 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in ORB in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: |
| CVE-2026-7972 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML pag |
| CVE-2026-7973 | Analyzed | 未確認 | CWE-472 | Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec |
| CVE-2026-7974 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-7975 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-7976 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Ch |
| CVE-2026-7977 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Canvas in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security se |
| CVE-2026-7978 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Companion in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to perform OS-level privilege escalation via malicious network tr |
| CVE-2026-7979 | Modified | 未確認 | CWE-346 | Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-7980 | Analyzed | 未確認 | CWE-416 | Use after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-7981 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Codecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a malicious file. |
| CVE-2026-7982 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML |
| CVE-2026-7983 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-7984 | Analyzed | 未確認 | CWE-416 | Use after free in ReadingMode in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox |
| CVE-2026-7985 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craft |
| CVE-2026-7986 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-7987 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-7988 | Analyzed | 未確認 | CWE-843 | Type Confusion in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-7989 | Modified | 未確認 | CWE-20 | Insufficient data validation in DataTransfer in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/wr |
| CVE-2026-7990 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a mal |
| CVE-2026-7991 | Analyzed | 未確認 | CWE-416 | Use after free in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a cra |
| CVE-2026-7992 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI |
| CVE-2026-7993 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to spoo |
| CVE-2026-7994 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file |
| CVE-2026-7995 | Analyzed | 未確認 | CWE-125 | Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-7996 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in SSL in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing |
| CVE-2026-7997 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicio |
| CVE-2026-7998 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Dialog in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofi |
| CVE-2026-7999 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted H |
| CVE-2026-8000 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML |
| CVE-2026-8001 | Analyzed | 未確認 | CWE-416 | Use After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform |
| CVE-2026-8002 | Analyzed | 未確認 | CWE-416 | Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-8003 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in TabGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chr |
| CVE-2026-8004 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin d |
| CVE-2026-8005 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment to bypass same origin policy via malicio |
| CVE-2026-8006 | Analyzed | 未確認 | CWE-451 | Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing |
| CVE-2026-8007 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform privilege e |
| CVE-2026-8008 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing vi |
| CVE-2026-8009 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions vi |
| CVE-2026-8010 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass sit |
| CVE-2026-8011 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Search in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-8012 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to inject arbitrary scripts or HTML |
| CVE-2026-8013 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in FedCM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s |
| CVE-2026-8014 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security seve |
| CVE-2026-8015 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: |
| CVE-2026-8016 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-8017 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-8018 | Modified | 未確認 | CWE-693 | Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. |
| CVE-2026-8019 | Analyzed | 未確認 | CWE-451 | Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sever |
| CVE-2026-8020 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive infor |
| CVE-2026-8021 | Analyzed | 未確認 | CWE-94 | Script injection in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML |
| CVE-2026-8022 | Analyzed | 未確認 | CWE-1021, CWE-352 | Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin |
| CVE-2026-8026 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-312 | A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Login of the file packages/server/src/enterprise/services/account.service.ts of the |
| CVE-2026-8027 | Analyzed | 未確認 | CWE-285, CWE-639 | A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functionality of the component User Controller Handler. This manipula |
| CVE-2026-8028 | Analyzed | 未確認 | CWE-200, CWE-284 | A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of the file packages/server/src/enterprise/services/account.service.ts of the compo |
| CVE-2026-8031 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected element is an unknown function of the file /cdemos/echs/api/v2/patient-records of the |
| CVE-2026-8032 | Deferred | 未確認 | CWE-259, CWE-798 | A flaw has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. The impacted element is an unknown function of the file /cdemos/echs/priv/echs.js. This manipulation of th |
| CVE-2026-8033 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. This affects an unknown function of the file /cdemos/echs/api/v2/ of the component Response Heade |
| CVE-2026-8034 | Analyzed | 未確認 | CWE-436, CWE-918 | A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services by exploiting |
| CVE-2026-8038 | Deferred | 未確認 | CWE-79 | The Faces of Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'default' shortcode attribute in the 'facesofusers' shortcode in all versions up to, an |
| CVE-2026-8040 | Deferred | 未確認 | CWE-79 | The faq shortocde plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'color' shortcode attribute in the 'faq' shortcode in all versions up to, and including, |
| CVE-2026-8042 | Deferred | 未確認 | CWE-79 | The Github Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'repo' shortcode attribute in the 'github' shortcode in all versions up to, and inclu |
| CVE-2026-8043 | Analyzed | 未確認 | CWE-73 | External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web dir |
| CVE-2026-8046 | Awaiting Analysis | 未確認 | CWE-863 | The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other u |
| CVE-2026-8047 | Awaiting Analysis | 未確認 | CWE-1284 | The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can |
| CVE-2026-8048 | Deferred | 未確認 | CWE-79 | The My Email Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subject' shortcode attribute in the 'my-email' shortcode in all versions up to, an |
| CVE-2026-8051 | Analyzed | 未確認 | CWE-78 | OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution. |
| CVE-2026-8052 | Deferred | 未確認 | CWE-59 | HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulner |
| CVE-2026-8053 | Analyzed | 未確認 | CWE-787 | An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongo |
| CVE-2026-8054 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints (/api/auditPublishing/get and /api/auditPublishing/getAll) i |
| CVE-2026-8063 | Analyzed | 未確認 | CWE-476 | An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeli |
| CVE-2026-8069 | Analyzed | 未確認 | CWE-22, CWE-269, CWE-284, CWE-732 | PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke i |
| CVE-2026-8070 | Awaiting Analysis | 未確認 | CWE-732 | Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and write a |
| CVE-2026-8072 | Deferred | 未確認 | CWE-327 | Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Board. The vulnerability arose because the secret access credent |
| CVE-2026-8073 | Deferred | 未確認 | CWE-23 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation and missing c |
| CVE-2026-8076 | Deferred | 未確認 | CWE-1391 | Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform allows the use of numeric PINs for user authentication. The system supports the |
| CVE-2026-8077 | Deferred | 未確認 | CWE-862 | Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend lacks authorization controls, leaving security entirely to t |
| CVE-2026-8080 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in misp allows Stored XSS. This issue affects MISP before 2.5.37. |
| CVE-2026-8081 | Analyzed | 未確認 | CWE-918 | A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29. Affected by this issue is some unknown functionality of the file internal/api/handlers/management/api_tools.go o |
| CVE-2026-8083 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=save_user. The manipulation of the ar |
| CVE-2026-8084 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid |
| CVE-2026-8086 | Analyzed | 未確認 | CWE-119, CWE-122 | A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument |
| CVE-2026-8087 | Analyzed | 未確認 | CWE-119, CWE-122 | A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4. Impacted is the function GDnentries of the file frmts/hdf4/hdf-eos/GDapi.c. Performing a manipulation of the ar |
| CVE-2026-8088 | Analyzed | 未確認 | CWE-119, CWE-125 | A weakness has been identified in OSGeo gdal up to 3.13.0dev-4. The affected element is the function GDfieldinfo of the file frmts/hdf4/hdf-eos/GDapi.c. Executing a manipulation ca |
| CVE-2026-8090 | Modified | 未確認 | CWE-416, CWE-825 | Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 1 |
| CVE-2026-8091 | Modified | 未確認 | CWE-754, CWE-805 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and |
| CVE-2026-8092 | Modified | 未確認 | CWE-125, CWE-416, CWE-787 | Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some |
| CVE-2026-8093 | Modified | 未確認 | CWE-119, CWE-120 | Memory safety bugs present in Thunderbird 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl |
| CVE-2026-8094 | Modified | 未確認 | CWE-94 | Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2. |
| CVE-2026-8096 | Deferred | 未確認 | CWE-862 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.6. This is due |
| CVE-2026-8097 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx r |
| CVE-2026-8098 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argumen |
| CVE-2026-8106 | Analyzed | 未確認 | CWE-79 | A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft. The redirect_to query param |
| CVE-2026-8108 | Analyzed | 未確認 | CWE-749 | The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions. |
| CVE-2026-8109 | Analyzed | 未確認 | CWE-749 | An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials. |
| CVE-2026-8110 | Analyzed | 未確認 | CWE-732 | Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges. |
| CVE-2026-8111 | Analyzed | 未確認 | CWE-89 | SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution. |
| CVE-2026-8112 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84. Affected is the function executeCognitivePulse of the file src/kernel.ts. Performing a |
| CVE-2026-8113 | Analyzed | 未確認 | CWE-22 | A vulnerability was determined in 8421bit MiniClaw up to 43905b934cf76489ab28e4d17da28ee97970f91f. Affected by this vulnerability is the function isPathInside of the file src/kerne |
| CVE-2026-8114 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON Object Handle |
| CVE-2026-8115 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affects an unknown part of the file src/server/routers/rest.ts of the component REST API. The |
| CVE-2026-8116 | Deferred | 未確認 | CWE-22 | A weakness has been identified in huangjunsen0406 xiaozhi-mcphub up to 1.0.3. This vulnerability affects unknown code of the file src/controllers/dxtController.ts. This manipulatio |
| CVE-2026-8117 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects some unknown processing of the file /admin/index.php. Such manipulatio |
| CVE-2026-8119 | Analyzed | 未確認 | CWE-404 | A vulnerability was detected in Open5GS up to 2.7.7. Impacted is the function ogs_sbi_stream_find_by_id in the library /lib/sbi/nghttp2-server.c of the component NSSF. Performing a |
| CVE-2026-8120 | Analyzed | 未確認 | CWE-404 | A flaw has been found in Open5GS up to 2.7.7. The affected element is the function nssf_nnrf_nsselection_handle_get_from_amf_or_vnssf of the file /src/nssf/nnssf-handler.c of the c |
| CVE-2026-8121 | Analyzed | 未確認 | CWE-404 | A vulnerability has been found in Open5GS up to 2.7.7. The impacted element is the function ogs_sbi_parse_plmn_list in the library /lib/sbi/conv.c of the component NSSF. The manipu |
| CVE-2026-8122 | Analyzed | 未確認 | CWE-404 | A vulnerability was found in Open5GS up to 2.7.7. This affects the function ogs_sbi_discovery_option_add_service_names in the library /lib/sbi/message.c of the component NSSF. The |
| CVE-2026-8123 | Analyzed | 未確認 | CWE-404 | A vulnerability was determined in Open5GS up to 2.7.7. This impacts the function ogs_sbi_discovery_option_add_snssais in the library /lib/sbi/message.c of the component NSSF. This |
| CVE-2026-8124 | Analyzed | 未確認 | CWE-400, CWE-770 | A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidx_box_read of the file src/isomedia/box_code_base.c. The manipulation leads to alloca |
| CVE-2026-8125 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file sendMessage.php. The manipulation of the argument type/len |
| CVE-2026-8126 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Comment System 1.0. This issue affects some unknown processing of the file post_comment.php. This manipulation of the argument Name causes s |
| CVE-2026-8127 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in eladmin up to 2.7. Impacted is the function checkLevel of the file /rest/UserController.java of the component Users API Endpoint. Such manipulatio |
| CVE-2026-8128 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element is an unknown function of the file /admin/viewmsg.php. Performing a manipulation of the ar |
| CVE-2026-8129 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file wishlist.php. Executing a manipulation of the argu |
| CVE-2026-8130 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an unknown function of the file /admin/message.php. The manipulation of the argument seenid l |
| CVE-2026-8131 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impacts an unknown function of the file /admin/replymsg.php. The manipulation of the argument ms |
| CVE-2026-8132 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /login.php. This manipulation of the argument txt_username caus |
| CVE-2026-8133 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0. Affected by this vulnerability is an unknown functionality of the file dzz/shares/admin.php of the comp |
| CVE-2026-8134 | Analyzed | 未確認 | CWE-23, CWE-434, CWE-98 | Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field when saving page type composer form layouts. An au |
| CVE-2026-8135 | Analyzed | 未確認 | CWE-502 | Concrete CMS 9.5.0 and below is vulnerable to Remote Code Execution due to insecure deserialization occurring in the ExpressEntryList block controller. An rogue administrator with |
| CVE-2026-8136 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /index.php?page=users. Executing a manipulation of the arg |
| CVE-2026-8137 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Totolink X5000R 9.1.0u.6369_B20230113. This vulnerability affects the function sub_458E40 of the file /boafrm/formDdns. The manipulation of the ar |
| CVE-2026-8138 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The manipulation results in stack-bas |
| CVE-2026-8139 | Analyzed | 未確認 | CWE-79 | Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized. The Concrete CMS security tea |
| CVE-2026-8140 | Analyzed | 未確認 | CWE-352 | Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/install/download/<remoteId>. The download() method in concrete/controlle |
| CVE-2026-8142 | Awaiting Analysis | 未確認 | VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as Ticket creat | |
| CVE-2026-8143 | Deferred | 未確認 | CWE-79 | The HBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hb_country_iso', 'hb_usa_state_iso', and 'hb_canada_province_iso' parameters in all versions up |
| CVE-2026-8144 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticat |
| CVE-2026-8148 | Analyzed | 未確認 | CWE-266 | NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks. |
| CVE-2026-8149 | Awaiting Analysis | 未確認 | CWE-1068 | A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX |
| CVE-2026-8153 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code o |
| CVE-2026-8159 | Analyzed | 未確認 | CWE-1333 | [email protected] and lower versions are vulnerable to denial of service via regular expression backtracking in the Content-Disposition filename parameter parser. A crafted multipar |
| CVE-2026-8161 | Analyzed | 未確認 | CWE-1321, CWE-248 | [email protected] and lower versions are vulnerable to denial of service via uncaught exception. By sending a multipart/form-data request with a field name that collides with an inh |
| CVE-2026-8162 | Analyzed | 未確認 | CWE-755 | [email protected] and lower versions are vulnerable to denial of service via uncaught exception. By sending a multipart/form-data request with a Content-Disposition header whose fil |
| CVE-2026-8174 | Awaiting Analysis | 未確認 | CWE-352 | Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-Site request forgery (CSRF). This issue affects Zoho Mail wordpress plugin versions before 1.6.2. |
| CVE-2026-8175 | Analyzed | 未確認 | CWE-122 | IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer E |
| CVE-2026-8177 | Deferred | 未確認 | CWE-125 | XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle |
| CVE-2026-8178 | Awaiting Analysis | 未確認 | CWE-470 | An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connectio |
| CVE-2026-8179 | Analyzed | 未確認 | CWE-121 | IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer E |
| CVE-2026-8180 | Analyzed | 未確認 | CWE-476 | IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer E |
| CVE-2026-8181 | Deferred | 未確認 | CWE-287 | The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1. |
| CVE-2026-8185 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in UGREEN CM933 1.1.59.4319. The impacted element is an unknown function of the component Administrative Interface. Such manipulation lea |
| CVE-2026-8186 | Analyzed | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs_sbi_client_send_via_scp_or_sepp in the library lib/sbi/client.c of the component NF. Performing a |
| CVE-2026-8187 | Analyzed | 未確認 | CWE-400, CWE-404 | A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation can lead to r |
| CVE-2026-8188 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the file /cgi-bin/adm.cgi. The manipulation of the argument wl_cha |
| CVE-2026-8189 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argumen |
| CVE-2026-8190 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_user |
| CVE-2026-8191 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/ski |
| CVE-2026-8192 | Analyzed | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of the file /cgi-bin/adm.cgi. Performing a manipulation of the a |
| CVE-2026-8193 | Deferred | 未確認 | CWE-918 | A weakness has been identified in Akaunting 3.1.21. This issue affects some unknown processing of the file config/dompdf.php of the component Invoice PDF Rendering. Executing a man |
| CVE-2026-8194 | Deferred | 未確認 | CWE-352, CWE-862 | A security vulnerability has been detected in osTicket up to 1.18.3. Impacted is an unknown function of the file include/class.dispatcher.php of the component Dispatcher. The manip |
| CVE-2026-8195 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/ |
| CVE-2026-8196 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in JeecgBoot 3.9.1. The impacted element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/contro |
| CVE-2026-8197 | Analyzed | 未確認 | CWE-79 | Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth authorize template renders the integration name (admin-controlled) through Concrete's |
| CVE-2026-8198 | Deferred | 未確認 | CWE-200 | The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to Authentication Bypass to Information Disclosure in versions u |
| CVE-2026-8199 | Analyzed | 未確認 | CWE-1325 | An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to m |
| CVE-2026-8200 | Analyzed | 未確認 | CWE-532 | When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local server log message generated may not have all user data r |
| CVE-2026-8201 | Analyzed | 未確認 | CWE-416 | A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering thi |
| CVE-2026-8202 | Analyzed | 未確認 | CWE-770 | Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation permissions can |
| CVE-2026-8203 | Analyzed | 未確認 | CWE-79 | Concrete CMS 9.5.0 and below has Stored XSS on the height parameter. The controller does not validate or sanitize $height. Any user with editor privileges can inject malicious Java |
| CVE-2026-8204 | Analyzed | 未確認 | CWE-639 | Concrete CMS 9.5.0 and below is vulnerable to authorization Bypass in the Calendar Event Frontend Dialog which can allow cross-calendar data disclosure. A public calendar block can |
| CVE-2026-8205 | Analyzed | 未確認 | CWE-425 | Concrete CMS 9.5.0 and below is vulnerable to authorization bypass in the Calendar Block since action_get_events does not check canView on the calendar which results in restricted |
| CVE-2026-8207 | Deferred | 未確認 | CWE-89 | Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c431e25fdc874a |
| CVE-2026-8208 | Deferred | 未確認 | CWE-98 | Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretation of a user |
| CVE-2026-8209 | Deferred | 未確認 | CWE-23 | Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction result |
| CVE-2026-8210 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in aandrew-me tgpt up to 2.11.1 on Linux/macOS. Affected by this vulnerability is the function helper.Update of the file helper.go of the |
| CVE-2026-8211 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this issue is the function update of the file org/codelibs/fess/app/web/admin/design/AdminDesignAction.java |
| CVE-2026-8212 | Analyzed | 未確認 | CWE-119, CWE-122, CWE-125 | A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation c |
| CVE-2026-8213 | Analyzed | 未確認 | CWE-119, CWE-122, CWE-125 | A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File |
| CVE-2026-8214 | Deferred | 未確認 | CWE-287 | A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects the function doAction of the component RMI Interface. The manipulation of the argumen |
| CVE-2026-8215 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This vulnerability affects the function iasRequestFileEvent of the component RMI Interface. T |
| CVE-2026-8216 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function iasServerRemoteInterface.doAction of the component Java RMI S |
| CVE-2026-8217 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Perform |
| CVE-2026-8218 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affected element is an unknown function of the file /inventory/purchase_return_save. Executing a manipulat |
| CVE-2026-8219 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation |
| CVE-2026-8220 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in cross site sc |
| CVE-2026-8221 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/item-save. This manipulation causes cross site scripting. The a |
| CVE-2026-8222 | Analyzed | 未確認 | CWE-404 | A vulnerability has been found in Open5GS up to 2.7.7. Affected is the function pcf_nbsf_management_handle_register of the file src/pcf/nbsf-handler.c of the component sm-policies |
| CVE-2026-8223 | Analyzed | 未確認 | CWE-404 | A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is the function pcf_sess_sbi_discover_and_send of the component sm-policies Endpoint. Performing a |
| CVE-2026-8224 | Analyzed | 未確認 | CWE-404 | A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function pcf_sess_set_ipv6prefix of the file /src/pcf/context.c of the component PCF. Executing |
| CVE-2026-8225 | Analyzed | 未確認 | CWE-404 | A vulnerability was identified in Open5GS up to 2.7.7. This affects the function pcf_npcf_smpolicycontrol_handle_delete of the file src/pcf/sm-sm.c of the component delete Endpoint |
| CVE-2026-8226 | Analyzed | 未確認 | CWE-404 | A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. The mani |
| CVE-2026-8227 | Analyzed | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The |
| CVE-2026-8228 | Analyzed | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_con |
| CVE-2026-8229 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument |
| CVE-2026-8230 | Analyzed | 未確認 | CWE-77, CWE-78 | A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can |
| CVE-2026-8231 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in CodeAstro Online Catering Ordering System 1.0. This affects an unknown function of the file /deleteorder.php. The manipulation of the argument ID |
| CVE-2026-8232 | Deferred | 未確認 | CWE-404 | A vulnerability was found in Dotouch XproUPF 2.0.0-release-088aa7c4. This impacts the function vlib_worker_loop in the library /usr/xpro/upf/tools/libs/libvlib.so of the component |
| CVE-2026-8233 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in Dotouch XproUPF 2.0.0-release-088aa7c4. Affected is an unknown function of the component UPF. This manipulation causes improper access controls. A |
| CVE-2026-8234 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in EFM ipTIME A8004T 14.18.2. This vulnerability affects the function formWifiBasicSet of the file /goform/WifiBasicSet. The manipulation |
| CVE-2026-8235 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handl |
| CVE-2026-8236 | Analyzed | 未確認 | CWE-862 | Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate. The endpoint /ccm/system/dialogs/file/usage/{fID} accepts an integer file ID in the |
| CVE-2026-8237 | Analyzed | 未確認 | CWE-862 | Concrete CMS 9.5.0 and below is vulnerable to IDOR. The `/ccm/frontend/conversations/message_detail` endpoint returns the full content of any conversation message. An unauthenticat |
| CVE-2026-8238 | Analyzed | 未確認 | CWE-862 | Concrete CMS 9.5.0 and below is vulnerable to IDOR. The '/ccm/frontend/conversations/message_page' endpoint returns the full content of any conversation message. An unauthenticated |
| CVE-2026-8239 | Analyzed | 未確認 | CWE-862 | Concrete CMS 9.5.0 and below is vulnerable to IDOR. The '/ccm/frontend/conversations/get_rating' endpoint confirms existence and returns rating score for any message by ID. The Con |
| CVE-2026-8240 | Analyzed | 未確認 | CWE-284 | Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure across every page with a configured summary template, revealing the existence of private, dra |
| CVE-2026-8241 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in Industrial Application Software IAS Canias ERP 8.03. The affected element is the function iasGetServerInfoEvent of the component RMI Interface. Su |
| CVE-2026-8242 | Deferred | 未確認 | CWE-203, CWE-204 | A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted element is the function doAction of the component Login RMI Interface. Performing a m |
| CVE-2026-8243 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This affects an unknown function of the component JNLP Deployment Endpoint. Executing a manip |
| CVE-2026-8244 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This impacts an unknown function of the component Login RMI Interface. The manipulation of th |
| CVE-2026-8245 | Analyzed | 未確認 | CWE-83 | Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injection. Concrete\Core\Legacy\Pagination builds pagination links by raw-interp |
| CVE-2026-8248 | Analyzed | 未確認 | CWE-404 | A vulnerability was detected in Open5GS up to 2.7.7. The affected element is the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SM |
| CVE-2026-8249 | Analyzed | 未確認 | CWE-404 | A flaw has been found in Open5GS up to 2.7.7. The impacted element is the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. This |
| CVE-2026-8250 | Analyzed | 未確認 | CWE-404 | A vulnerability has been found in Open5GS up to 2.7.7. This affects the function smf_n4_build_qos_flow_to_modify_list of the file /src/smf/n4-build.c of the component SMF. Such man |
| CVE-2026-8251 | Analyzed | 未確認 | CWE-404 | A vulnerability was found in Open5GS up to 2.7.7. This impacts the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. Performing |
| CVE-2026-8252 | Analyzed | 未確認 | CWE-404, CWE-476 | A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function smf_nsmf_handle_create_data_in_hsmf of the component SMF. Executing a manipulation can lead to null |
| CVE-2026-8253 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchase_save. The manipulat |
| CVE-2026-8254 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functionality of the file /inventory/sales_save. The manipulation |
| CVE-2026-8255 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventory/add_new_customer. This manipulation causes cross site scri |
| CVE-2026-8256 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown code of the file /accounts/mr-save. Such manipulation leads to |
| CVE-2026-8257 | Analyzed | 未確認 | CWE-617 | A vulnerability was detected in WebAssembly Binaryen up to 117. This issue affects the function IRBuilder::makeBrOn of the file src/wasm/wasm-ir-builder.cpp of the component BrOn P |
| CVE-2026-8258 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Squirrel up to 3.2. Impacted is the function validate_format in the library sqstdlib/sqstdstring.cpp. Executing a manipulation can lead to stack-based buff |
| CVE-2026-8259 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /goform/telnet of the component httpd. The manipulation of the |
| CVE-2026-8260 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_service of the component HNAP |
| CVE-2026-8261 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in Squirrel up to 3.2. This affects the function SQFunctionProto::Load of the file squirrel/sqobject.cpp. This manipulation causes heap-based buffer |
| CVE-2026-8262 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /accounts/chart-save. Such manipulation leads to cross site scrip |
| CVE-2026-8263 | Analyzed | 未確認 | CWE-77, CWE-78, CWE-787 | A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of the component httpd. Pe |
| CVE-2026-8264 | Analyzed | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan of the component httpd. Execut |
| CVE-2026-8265 | Analyzed | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file of the file /goform/getLogFile of the component httpd. The |
| CVE-2026-8266 | Analyzed | 未確認 | CWE-404 | A vulnerability was detected in Open5GS up to 2.7.7. This affects the function gsm_build_pdu_session_establishment_accept of the file /src/smf/gsm-build.c of the component SMF. The |
| CVE-2026-8267 | Analyzed | 未確認 | CWE-404 | A flaw has been found in Open5GS up to 2.7.7. This vulnerability affects the function smf_nsmf_handle_created_data_in_vsmf of the component SMF. This manipulation causes denial of |
| CVE-2026-8268 | Analyzed | 未確認 | CWE-404 | A vulnerability has been found in Open5GS up to 2.7.7. This issue affects the function OpenAPI_list_create of the component SMF. Such manipulation leads to denial of service. The a |
| CVE-2026-8269 | Analyzed | 未確認 | CWE-404 | A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function smf_nsmf_handle_create_sm_context of the component SMF. Performing a manipulation results in denial of se |
| CVE-2026-8270 | Analyzed | 未確認 | CWE-404 | A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_nas_parse_qos_rules of the component SMF. Executing a manipulation can lead to denia |
| CVE-2026-8271 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease/cgi_ddns/cgi_set_ip/cgi_upnp_del/cgi_dhcpd/cgi_upnp_add/cgi |
| CVE-2026-8272 | Analyzed | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfile_mgr.cgi. The manipulation |
| CVE-2026-8273 | Analyzed | 未確認 | CWE-77, CWE-78 | A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. Thi |
| CVE-2026-8274 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function do_directory of the file cramfsck.c of the component Directory Handler. Such m |
| CVE-2026-8275 | Deferred | 未確認 | CWE-189, CWE-192 | A vulnerability was detected in bettercap up to 2.41.5. Affected by this vulnerability is the function ippReadChunkedBody of the file modules/zerogod/zerogod_ipp_primitives.go of t |
| CVE-2026-8276 | Deferred | 未確認 | CWE-189, CWE-192 | A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file modules/mysql_server/mysql_server.go of the component MySQL Server |
| CVE-2026-8278 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions | |
| CVE-2026-8280 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticate |
| CVE-2026-8288 | Analyzed | 未確認 | CWE-404 | A vulnerability was determined in Open5GS up to 2.7.7. This affects the function gsm_handle_pdu_session_modification_qos_flow_descriptions of the file src/smf/gsm-handler.c of the |
| CVE-2026-8289 | Analyzed | 未確認 | CWE-404 | A vulnerability was identified in Open5GS up to 2.7.7. This vulnerability affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the compon |
| CVE-2026-8290 | Analyzed | 未確認 | CWE-404 | A security flaw has been discovered in Open5GS up to 2.7.7. This issue affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the component |
| CVE-2026-8291 | Analyzed | 未確認 | CWE-404 | A weakness has been identified in Open5GS up to 2.7.7. Impacted is the function ogs_nnrf_nfm_handle_nf_profile of the file lib/sbi/nnrf-handler.c of the component NRF. This manipul |
| CVE-2026-8292 | Analyzed | 未確認 | CWE-404 | A security vulnerability has been detected in Open5GS up to 2.7.7. The affected element is the function yuarel_parse in the library /lib/sbi/conv.c of the component NRF. Such manip |
| CVE-2026-8295 | Deferred | 未確認 | CWE-190 | An integer overflow vulnerability in the simdjson document-builder API allows incorrect buffer size calculations in "string_builder::escape_and_append()" when processing very large |
| CVE-2026-8305 | Analyzed | 未確認 | CWE-287 | A vulnerability was detected in OpenClaw up to 2026.1.24. The impacted element is the function handleBlueBubblesWebhookRequest of the file extensions/bluebubbles/src/monitor.ts of |
| CVE-2026-8318 | Deferred | 未確認 | CWE-404, CWE-835 | A security flaw has been discovered in VectifyAI PageIndex up to f50e52975313c6716c02b20a119577a1929decba. Affected by this vulnerability is the function toc_transformer of the fil |
| CVE-2026-8319 | Deferred | 未確認 | CWE-400, CWE-404 | A weakness has been identified in aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c97090cc15f59. Affected by this issue is the function recall_relevant_memories_to_working_memor |
| CVE-2026-8320 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects the function getUserByWeixinCode of the file jshERP-boot/src/main/java/com/jsh/erp/service/U |
| CVE-2026-8321 | Deferred | 未確認 | CWE-287, CWE-288 | A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component ru |
| CVE-2026-8326 | Deferred | 未確認 | CWE-23 | Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitrary files in all directories as root. This leads to RCE. The |
| CVE-2026-8327 | Analyzed | 未確認 | CWE-269, CWE-620, CWE-915 | Concrete CMS below 9.5.0 and below is vulnerable to password change without reauthorization and session-hardening bypass. The user-profile edit controller passes the entire raw POS |
| CVE-2026-8328 | Awaiting Analysis | 未確認 | CWE-918 | The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual pe |
| CVE-2026-8336 | Analyzed | 未確認 | CWE-416 | After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subsequently crash |
| CVE-2026-8337 | Analyzed | 未確認 | CWE-565, CWE-639 | Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys. To be vulnerable, a site would have to be configured in such a way that both public and private surveys are present o |
| CVE-2026-8340 | Analyzed | 未確認 | CWE-352 | Concrete CMS 9.5.0 and below is vulnerable to CSRF via Backend\File::approveVersion. Victim with edit_file_contents permission is CSRF'd into publishing an attacker-chosen previous |
| CVE-2026-8342 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-8344 | Analyzed | 未確認 | CWE-74, CWE-77 | A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this vulnerability is the function sub_445E7C of the file /goform/formDMZ.cgi. This manipulatio |
| CVE-2026-8345 | Analyzed | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this issue is the function sub_445E7C of the file /goform/singlePortForward. Such m |
| CVE-2026-8346 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ip_address results in comman |
| CVE-2026-8347 | Analyzed | 未確認 | CWE-639 | Concrete CMS 9.5.0 and below is vulnerable to IDOR + wrong-authorization-level in the Express association Reorder dialog. This can cause Cross-entity state tampering with view-onl |
| CVE-2026-8349 | Deferred | 未確認 | CWE-119 | A flaw has been found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGAP Message Handler. Executing a manipulation can lead to memory co |
| CVE-2026-8350 | Analyzed | 未確認 | CWE-863 | Concrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment.php which can lead to privilege escalation to Administrative Group. Any authenticate |
| CVE-2026-8352 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-8353 | Analyzed | 未確認 | CWE-79 | Concrete CMS version 9.0 to 9.5.0 is vulnerable to Stored XSS via page name in the Atomik theme. A rogue editor can inject arbitrary JavaScript that executes in the context of any |
| CVE-2026-8359 | Deferred | 未確認 | CWE-476 | When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle such URL patterns. The WOSBin_LoadHttpModule function |
| CVE-2026-8360 | Deferred | 未確認 | CWE-476 | Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll) can return a NULL pointer (i.e., when no use |
| CVE-2026-8361 | Deferred | 未確認 | CWE-23 | A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome |
| CVE-2026-8362 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long URL path starting with /woshome |
| CVE-2026-8363 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with /resources: |
| CVE-2026-8364 | Deferred | 未確認 | CWE-306 | Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, |
| CVE-2026-8367 | Analyzed | 未確認 | CWE-295 | aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purp |
| CVE-2026-8368 | Deferred | 未確認 | CWE-522 | LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect handler strips only Host |
| CVE-2026-8369 | Awaiting Analysis | 未確認 | CWE-20 | Improper Input Validation in the NAT64 translator in The OpenThread Authors OpenThread before commit 26a882d on all platforms allows an attacker on the adjacent IPv4 network to inj |
| CVE-2026-8370 | Awaiting Analysis | 未確認 | CWE-250 | Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX, Solaris x64 |
| CVE-2026-8376 | Modified | 未確認 | CWE-680 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed stri |
| CVE-2026-8381 | Awaiting Analysis | 未確認 | CWE-862 | A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not correctly enforce authorization ch |
| CVE-2026-8382 | Deferred | 未確認 | CWE-862 | The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1. This is due to the plugin not properly ver |
| CVE-2026-8388 | Modified | 未確認 | CWE-119, CWE-787 | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140. |
| CVE-2026-8389 | Modified | 未確認 | CWE-119, CWE-686, CWE-733, CWE-843 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3. |
| CVE-2026-8390 | Modified | 未確認 | CWE-416, CWE-825 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3. |
| CVE-2026-8391 | Modified | 未確認 | CWE-119, CWE-20, CWE-475, CWE-79 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11. |
| CVE-2026-8398 | Analyzed | 掲載 | CWE-506 | A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate websit |
| CVE-2026-8399 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-8401 | Modified | 未確認 | CWE-653, CWE-693 | Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11. |
| CVE-2026-8405 | Analyzed | 未確認 | CWE-200 | IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" (LTR) can expose sensitive credentials in debug mode. |
| CVE-2026-8407 | Analyzed | 未確認 | CWE-862 | Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no additional permissions to obtain OTP secret keys and recovery c |
| CVE-2026-8409 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delete. The The Concrete CMS security team gave this vulnerabili |
| CVE-2026-8410 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delete. The The Concrete CMS security team gave this vulner |
| CVE-2026-8411 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete. The Concrete CMS security team gave this vulnerabili |
| CVE-2026-8412 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cache. The Concrete CMS security team gave this vulnerabili |
| CVE-2026-8413 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/design. The Concrete CMS security team gave this vulnerabili |
| CVE-2026-8414 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate. The Concrete CMS security team gave this vulnerabilit |
| CVE-2026-8415 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorder. The Concrete CMS security team gave this |
| CVE-2026-8416 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file addFavoriteFolder($id). The Concrete CMS security team gave this |
| CVE-2026-8417 | Analyzed | 未確認 | CWE-352 | Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/do_update/<pkgHandle>. The do_update() method in concrete/control |
| CVE-2026-8418 | Deferred | 未確認 | CWE-352 | The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.0. This is due to missing or incorrect nonce validation on |
| CVE-2026-8419 | Deferred | 未確認 | CWE-352 | The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation |
| CVE-2026-8420 | Deferred | 未確認 | CWE-352 | The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.6.3. This is due to missing or incorrect nonce v |
| CVE-2026-8421 | Analyzed | 未確認 | CWE-352 | Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of concrete/controllers/single_page/dashboard/extend/install.php. An attacker who can ca |
| CVE-2026-8423 | Deferred | 未確認 | CWE-352 | The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect non |
| CVE-2026-8424 | Deferred | 未確認 | CWE-352 | The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce valida |
| CVE-2026-8425 | Deferred | 未確認 | CWE-352 | The Notify Odoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation o |
| CVE-2026-8426 | Analyzed | 未確認 | CWE-352, CWE-829 | Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/prepare_remote_upgrade/<remoteMPID>. An attacker who controls the |
| CVE-2026-8427 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id). The Concrete CMS security team gave t |
| CVE-2026-8428 | Analyzed | 未確認 | CWE-352, CWE-829 | Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but the corresponding do_update() method in concrete/controller |
| CVE-2026-8429 | Deferred | 未確認 | CWE-94 | SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server. A |
| CVE-2026-8430 | Deferred | 未確認 | CWE-94 | SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certain nginx configurations, allowing attackers to execute arbit |
| CVE-2026-8431 | Analyzed | 未確認 | CWE-77 | An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax. |
| CVE-2026-8432 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star(). The Concrete CMS security team gave this vulnerability a |
| CVE-2026-8433 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan(). The Concrete CMS security team gave this vulnerability |
| CVE-2026-8434 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMultiple(). The Concrete CMS security team gave this vulne |
| CVE-2026-8435 | Analyzed | 未確認 | CWE-1275, CWE-352 | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVersion(). The Concrete CMS security team gave this vulne |
| CVE-2026-8449 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn. | |
| CVE-2026-8450 | Deferred | 未確認 | CWE-73, CWE-78 | HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string argument with Perl's 2-arg open(). The 2-arg form interprets ma |
| CVE-2026-8453 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-8454 | Analyzed | 未確認 | CWE-787 | Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a sing |
| CVE-2026-8463 | Analyzed | 未確認 | CWE-126, CWE-191 | Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input. The auto-detect form of argon2_verify passes enc |
| CVE-2026-8466 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing. cowb |
| CVE-2026-8467 | Deferred | 未確認 | CWE-94 | Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template generati |
| CVE-2026-8468 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in plug_project plug allows denial of service via unbounded buffer accumulation in multipart header parsing. 'El |
| CVE-2026-8469 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix_storybook allows unauthenticated denial-of-service via BEAM atom table exhaustion. Mult |
| CVE-2026-8477 | Analyzed | 未確認 | CWE-841 | Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sealed entry to |
| CVE-2026-8479 | Deferred | 未確認 | CWE-476 | IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing |
| CVE-2026-8485 | Analyzed | 未確認 | CWE-789 | Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit Automation: before 2025.0.11, from 2025. |
| CVE-2026-8486 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding. This issue affects MOVEit Automation: before 2025.0.11, |
| CVE-2026-8487 | Analyzed | 未確認 | CWE-276 | Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data. This issue affects MOVEit Automation: before 2025.0.11, |
| CVE-2026-8488 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit Automation: before |
| CVE-2026-8491 | Analyzed | 未確認 | CWE-754 | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 b |
| CVE-2026-8492 | Analyzed | 未確認 | CWE-471 | Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with |
| CVE-2026-8493 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS). This issue affects |
| CVE-2026-8495 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15. |
| CVE-2026-8496 | Deferred | 未確認 | A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7. A maliciously crafted ICS calendar invitation files allows arbitrary JavaScript execution within | |
| CVE-2026-8500 | Deferred | 未確認 | CWE-78 | Web::Passwd versions through 0.03 for Perl is vulnerable to RCE. Web::Passwd is a small CGI application for managing htpasswd files using the htpasswd command. The user parameter |
| CVE-2026-8503 | Analyzed | 未確認 | CWE-338, CWE-340 | Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generate::SHA256 generated session ids insecurely. The default sess |
| CVE-2026-8507 | Deferred | 未確認 | CWE-787 | Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING (or BIT STRING) attribute on a |
| CVE-2026-8509 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-8510 | Analyzed | 未確認 | CWE-472 | Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory w |
| CVE-2026-8511 | Analyzed | 未確認 | CWE-416 | Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity |
| CVE-2026-8512 | Analyzed | 未確認 | CWE-416 | Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sand |
| CVE-2026-8513 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-8514 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-8515 | Analyzed | 未確認 | CWE-416 | Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox esc |
| CVE-2026-8516 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures |
| CVE-2026-8517 | Analyzed | 未確認 | CWE-664 | Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbit |
| CVE-2026-8518 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-8519 | Analyzed | 未確認 | CWE-472 | Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium |
| CVE-2026-8520 | Analyzed | 未確認 | CWE-362 | Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Cr |
| CVE-2026-8521 | Analyzed | 未確認 | CWE-416 | Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity |
| CVE-2026-8522 | Analyzed | 未確認 | CWE-416 | Use after free in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity |
| CVE-2026-8523 | Analyzed | 未確認 | CWE-416 | Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-8524 | Analyzed | 未確認 | CWE-787 | Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-8525 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium s |
| CVE-2026-8526 | Analyzed | 未確認 | CWE-787 | Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-8527 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chrom |
| CVE-2026-8528 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Si |
| CVE-2026-8529 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium sec |
| CVE-2026-8530 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-8531 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu |
| CVE-2026-8532 | Analyzed | 未確認 | CWE-472 | Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-8533 | Analyzed | 未確認 | CWE-416 | Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-8534 | Analyzed | 未確認 | CWE-472 | Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a s |
| CVE-2026-8535 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially |
| CVE-2026-8536 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypa |
| CVE-2026-8537 | Analyzed | 未確認 | CWE-942 | Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s |
| CVE-2026-8538 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform a denial of |
| CVE-2026-8539 | Analyzed | 未確認 | CWE-94 | Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. ( |
| CVE-2026-8540 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-8541 | Analyzed | 未確認 | CWE-125 | Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fro |
| CVE-2026-8542 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-8543 | Analyzed | 未確認 | CWE-125 | Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentia |
| CVE-2026-8544 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-8545 | Analyzed | 未確認 | CWE-119, CWE-284 | Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted |
| CVE-2026-8546 | Analyzed | 未確認 | CWE-125 | Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensi |
| CVE-2026-8547 | Analyzed | 未確認 | CWE-862 | Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform privi |
| CVE-2026-8548 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-8549 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-8550 | Analyzed | 未確認 | CWE-416 | Use after free in Google Lens in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive informatio |
| CVE-2026-8551 | Analyzed | 未確認 | CWE-416 | Use after free in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via |
| CVE-2026-8552 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromiu |
| CVE-2026-8553 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a cra |
| CVE-2026-8554 | Analyzed | 未確認 | CWE-843 | Type Confusion in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory wr |
| CVE-2026-8555 | Analyzed | 未確認 | CWE-416 | Use after free in GTK in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: |
| CVE-2026-8556 | Analyzed | 未確認 | CWE-119, CWE-284 | Inappropriate implementation in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin da |
| CVE-2026-8557 | Analyzed | 未確認 | CWE-416 | Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a cr |
| CVE-2026-8558 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-8559 | Analyzed | 未確認 | CWE-472 | Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML p |
| CVE-2026-8560 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML pag |
| CVE-2026-8561 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: |
| CVE-2026-8562 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Navigation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur |
| CVE-2026-8563 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to bypass navigation restrictions via a crafted HTML |
| CVE-2026-8564 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium s |
| CVE-2026-8565 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to perform UI sp |
| CVE-2026-8566 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML |
| CVE-2026-8567 | Analyzed | 未確認 | CWE-472 | Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium |
| CVE-2026-8568 | Rejected | 未確認 | Rejected reason: Determined not a vulnerability | |
| CVE-2026-8569 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium |
| CVE-2026-8570 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Ch |
| CVE-2026-8571 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform |
| CVE-2026-8572 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Network in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-orig |
| CVE-2026-8573 | Analyzed | 未確認 | CWE-472 | Integer overflow in Codecs in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium |
| CVE-2026-8574 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-8575 | Analyzed | 未確認 | CWE-416 | Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craft |
| CVE-2026-8576 | Analyzed | 未確認 | CWE-942 | Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Ch |
| CVE-2026-8577 | Analyzed | 未確認 | CWE-472 | Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-8578 | Analyzed | 未確認 | CWE-125 | Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craft |
| CVE-2026-8579 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of |
| CVE-2026-8580 | Analyzed | 未確認 | CWE-416 | Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-8581 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-8582 | Analyzed | 未確認 | CWE-664 | Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML |
| CVE-2026-8583 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentiall |
| CVE-2026-8584 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via |
| CVE-2026-8585 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Media in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds |
| CVE-2026-8586 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Chromoting in Google Chrome prior to 148.0.7778.168 allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium |
| CVE-2026-8587 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via |
| CVE-2026-8594 | Deferred | 未確認 | CWE-405, CWE-407 | Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters. Text::LineFold splits the input string by specific line bre |
| CVE-2026-8596 | Awaiting Analysis | 未確認 | CWE-312 | Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 might allow a remote authenticate |
| CVE-2026-8597 | Awaiting Analysis | 未確認 | CWE-354 | Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to ac |
| CVE-2026-8598 | Deferred | 未確認 | CWE-288 | An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about th |
| CVE-2026-8602 | Analyzed | 未確認 | CWE-306 | In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and i |
| CVE-2026-8603 | Analyzed | 未確認 | CWE-78 | In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system. |
| CVE-2026-8604 | Analyzed | 未確認 | CWE-352 | In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a malicious we |
| CVE-2026-8605 | Analyzed | 未確認 | CWE-798 | In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin. |
| CVE-2026-8606 | Analyzed | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue HTTP requests to internal servic |
| CVE-2026-8610 | Deferred | 未確認 | CWE-862 | The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.4. This is due to the plugin not properly ve |
| CVE-2026-8612 | Analyzed | 未確認 | CWE-502, CWE-732 | WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution. Wit |
| CVE-2026-8620 | Analyzed | 未確認 | CWE-444 | IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to |
| CVE-2026-8621 | Deferred | 未確認 | CWE-287 | Crabbox prior to v0.12.0 contains an authentication bypass vulnerability that allows non-admin shared-token callers to impersonate other owners or organizations by spoofing identit |
| CVE-2026-8624 | Deferred | 未確認 | CWE-79 | The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.97.1 due to ins |
| CVE-2026-8626 | Deferred | 未確認 | CWE-79 | The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.5.2 due to insufficient input sani |
| CVE-2026-8627 | Deferred | 未確認 | CWE-79 | The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1.0. This is due to th |
| CVE-2026-8629 | Deferred | 未確認 | CWE-639 | Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users with shared visibility-only access to obtain Code, WebVNC, and Egress agent tickets by send |
| CVE-2026-8631 | Modified | 未確認 | CWE-122, CWE-190 | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitra |
| CVE-2026-8632 | Modified | 未確認 | CWE-77, CWE-78 | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitra |
| CVE-2026-8633 | Analyzed | 未確認 | CWE-94 | IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to |
| CVE-2026-8634 | Deferred | 未確認 | CWE-94 | Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allows attackers with access to a malicious or compromised repository to forward local secrets |
| CVE-2026-8647 | Deferred | 未確認 | CWE-338 | Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available. The random_bytes function fell back to using the built-in r |
| CVE-2026-8652 | Deferred | 未確認 | CWE-78 | An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS |
| CVE-2026-8654 | Awaiting Analysis | 未確認 | CWE-78 | Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host. |
| CVE-2026-8656 | Deferred | 未確認 | CWE-79 | Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Cross-site Scripting (XSS) via the annotated formatter due to improper sanitization of JSON values and property |
| CVE-2026-8657 | Deferred | 未確認 | CWE-1321 | Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/formatters/jsonpatch.patch() APIs. An attac |
| CVE-2026-8669 | Deferred | 未確認 | CWE-787 | Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row |
| CVE-2026-8670 | Analyzed | 未確認 | CWE-613 | Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before |
| CVE-2026-8671 | Analyzed | 未確認 | CWE-532 | Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 2 |
| CVE-2026-8672 | Analyzed | 未確認 | CWE-1393 | Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25. |
| CVE-2026-8673 | Analyzed | 未確認 | CWE-523 | Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks. This issue affects Avantra: before 25.3.0. |
| CVE-2026-8676 | Awaiting Analysis | 未確認 | CWE-290 | An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond. |
| CVE-2026-8679 | Deferred | 未確認 | CWE-639 | The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the handle_playlist_endpoint() funct |
| CVE-2026-8680 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-8681 | Deferred | 未確認 | CWE-862 | The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly verifying |
| CVE-2026-8682 | Deferred | 未確認 | CWE-862 | The 3D Viewer – 3D Model Viewer – Augmented Reality – Virtual Try On plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.1. This is |
| CVE-2026-8684 | Deferred | 未確認 | CWE-862 | The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.1. This is due to the plugin not properly verifying |
| CVE-2026-8685 | Deferred | 未確認 | CWE-89 | The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order' parameters in all versions up to, and including, 2.15.16. This is due to insuf |
| CVE-2026-8686 | Analyzed | 未確認 | CWE-125 | Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet. To remediate |
| CVE-2026-8689 | Deferred | 未確認 | CWE-862 | The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.11.14. This is due to a |
| CVE-2026-8692 | Deferred | 未確認 | CWE-862 | The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, |
| CVE-2026-8695 | Analyzed | 未確認 | CWE-416 | radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo |
| CVE-2026-8696 | Modified | 未確認 | CWE-416 | radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of service or poten |
| CVE-2026-8697 | Analyzed | 未確認 | CWE-288, CWE-306 | Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same cred |
| CVE-2026-8698 | Deferred | 未確認 | CWE-79 | The Cryptocurrency Prijsvergelijking Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0. This is due to insufficient output escaping in the as_ |
| CVE-2026-8700 | Deferred | 未確認 | CWE-331 | Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usag |
| CVE-2026-8701 | Deferred | 未確認 | CWE-79 | The GNTT Post Title Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0 via the `title-ticker-slide`, `title-ticker-fade`, and `title-ticker-typ |
| CVE-2026-8702 | Deferred | 未確認 | CWE-79 | The GBI To Print plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0 via the 'div' attribute of the 'gbitoprint' shortcode. This is due to insufficient |
| CVE-2026-8703 | Deferred | 未確認 | CWE-79 | The Endless Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.0.0 due to insufficient input |
| CVE-2026-8704 | Deferred | 未確認 | CWE-552 | Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified. |
| CVE-2026-8706 | Undergoing Analysis | 未確認 | CWE-200, CWE-306 | Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the response render |
| CVE-2026-8707 | Deferred | 未確認 | CWE-79 | The NS Product icon badge plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF in all versions up to, and including, 1.2.4 due to insufficient input sa |
| CVE-2026-8708 | Deferred | 未確認 | CWE-352 | The Genzel breadcrumbs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validat |
| CVE-2026-8711 | Analyzed | 未確認 | CWE-122 | NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) an |
| CVE-2026-8716 | Analyzed | 未確認 | CWE-706 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could hav |
| CVE-2026-8719 | Deferred | 未確認 | CWE-269 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Privilege Escalation in version 3.4.9. This is due to missing WordPress capabili |
| CVE-2026-8721 | Deferred | 未確認 | CWE-170 | Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's de |
| CVE-2026-8723 | Awaiting Analysis | 未確認 | CWE-476 | ### Summary `qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing `null` or `undefined`. The throw is syn |
| CVE-2026-8724 | Analyzed | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file SqlparserUtils.java of the component Data Dashboard. The ma |
| CVE-2026-8725 | Deferred | 未確認 | CWE-918 | A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected element is an unknown function of the file src/caal/webhooks.py of the component test-hass Endpoint. Th |
| CVE-2026-8726 | Deferred | 未確認 | CWE-89 | The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter o |
| CVE-2026-8727 | Deferred | 未確認 | CWE-502 | The Crawler extension passes the X-T3Crawler-Meta response header from crawled URLs directly to PHP's unserialize(). An attacker controlling a crawled endpoint can inject arbitrary |
| CVE-2026-8728 | Analyzed | 未確認 | CWE-404 | A security vulnerability has been detected in Open5GS up to 2.7.7. The impacted element is the function ogs_sbi_discovery_option_parse_plmn_list in the library /lib/sbi/conv.c of t |
| CVE-2026-8729 | Analyzed | 未確認 | CWE-404 | A vulnerability was detected in Open5GS up to 2.7.7. This affects an unknown function in the library /lib/sbi/message.c of the component NRF. Performing a manipulation of the argum |
| CVE-2026-8730 | Analyzed | 未確認 | CWE-404 | A flaw has been found in Open5GS up to 2.7.6. This impacts the function ogs_sbi_nf_instance_set_id in the library /lib/sbi/context.c of the component NRF. Executing a manipulation |
| CVE-2026-8731 | Analyzed | 未確認 | CWE-404 | A vulnerability has been found in Open5GS up to 2.7.7. Affected is the function ogs_sbi_client_add in the library /lib/sbi/client.c of the component NRF. The manipulation of the ar |
| CVE-2026-8732 | Deferred | 未確認 | CWE-306 | The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmp_ |
| CVE-2026-8733 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Investintech SlimPDFReader up to 2.0.13. Affected by this vulnerability is the function sub_3B4610 of the file SlimPDFReader.exe. The manipulation resu |
| CVE-2026-8734 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in Oinone Pamirs up to 7.2.0. Affected by this issue is the function RSQLToSQLNodeConnector.makeVariable of the component queryListByWrapper Interfac |
| CVE-2026-8735 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was identified in Oinone Pamirs up to 7.2.0. This affects the function JsonUtils.parseMap of the file PamirsParserConfig.java of the component appConfigQuery Interf |
| CVE-2026-8736 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in Oinone Pamirs up to 7.2.0. This vulnerability affects the function request.getParameter of the file LocalFileClient.java of the component Res |
| CVE-2026-8737 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in Sanluan PublicCMS 5.202506.d. This issue affects the function execute of the file publiccms-trade/src/main/java/com/publiccms/views/directive/trad |
| CVE-2026-8738 | Deferred | 未確認 | CWE-840 | A security vulnerability has been detected in Sanluan PublicCMS 5.202506.d. Impacted is the function TradeOrderController.pay/TradePaymentController.pay/AccountGatewayComponent.pay |
| CVE-2026-8739 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component |
| CVE-2026-8740 | Deferred | 未確認 | CWE-1336, CWE-791 | A flaw has been found in Sanluan PublicCMS 5.202506.d. The impacted element is the function execute of the file publiccms-core/src/main/java/com/publiccms/views/directive/tools/Tem |
| CVE-2026-8741 | Analyzed | 未確認 | CWE-362 | A vulnerability has been found in EMQX up to 6.2.0. This affects an unknown function of the file apps/emqx/src/emqx_persistent_session_ds.erl of the component QoS 2 PUBLISH Packet |
| CVE-2026-8743 | Modified | 未確認 | CWE-266, CWE-285 | A vulnerability was found in Open5GS up to 2.7.6. This impacts the function ran_ue_find_by_amf_ue_ngap_id of the file src/amf/context.c of the component AMF/MME. Performing a manip |
| CVE-2026-8744 | Analyzed | 未確認 | CWE-404 | A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function ogs_sbi_subscription_data_add/ogs_sbi_nf_service_add in the library /lib/sbi/context.c of the compon |
| CVE-2026-8745 | Analyzed | 未確認 | CWE-404 | A vulnerability was identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function ogs_timer_add in the library /src/ausf/nausf-handler.c of the component AUSF. |
| CVE-2026-8746 | Modified | 未確認 | CWE-119, CWE-416 | A security flaw has been discovered in Open5GS up to 2.7.7. Affected by this issue is the function discover_handler in the library /lib/sbi/nghttp2-server.c of the component NRF. T |
| CVE-2026-8747 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in Z-BlogPHP 1.7.4.3430. This affects the function CheckComment of the file zb_system/function/c_system_event.php of the component Commend Approval H |
| CVE-2026-8750 | Analyzed | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in h2oai h2o-3 up to 7402. Affected by this issue is the function importFiles of the file h2o-core/src/main/java/water/persist/PersistNFS.java of the |
| CVE-2026-8751 | Analyzed | 未確認 | CWE-20, CWE-502 | A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the function importBinaryModel of the file h2o-core/src/main/java/hex/Model.java of the component JAR Ha |
| CVE-2026-8752 | Analyzed | 未確認 | CWE-266, CWE-284 | A weakness has been identified in h2oai h2o-3 up to 7402. This vulnerability affects the function exec of the file h2o-core/src/main/java/water/rapids/ast/prims/misc/AstSetProperty |
| CVE-2026-8753 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in kalcaddle Kodbox up to 1.64. This issue affects the function parseVideoInfo of the file /workspace/source-code/plugins/fileThumb/lib/V |
| CVE-2026-8754 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in AstrBotDevs AstrBot up to 4.23.5. Impacted is the function post_file of the file astrbot/dashboard/routes/chat.py of the component File Upload Handl |
| CVE-2026-8755 | Deferred | 未確認 | CWE-22 | A flaw has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. The affected element is the function _get_all_models of the file hiyoriUI.py of the co |
| CVE-2026-8756 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. The impacted element is the function generate_config of the file webui_prepro |
| CVE-2026-8757 | Analyzed | 未確認 | CWE-22 | A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete Requ |
| CVE-2026-8758 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This impacts an unknown function of the file /common/jsp/upload3.jsp. Executing a manipulation of the ar |
| CVE-2026-8759 | Deferred | 未確認 | CWE-20, CWE-917 | A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ex |
| CVE-2026-8760 | Deferred | 未確認 | CWE-307 | The Login with OTP plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.6. This is due to an incomplete fix for CVE-2024-11178: the r |
| CVE-2026-8764 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in H3C Magic B3 up to 100R002. This affects the function UpdateWanParams of the file /goform/aspForm. Such manipulation of the argument p |
| CVE-2026-8765 | Analyzed | 未確認 | CWE-22 | A vulnerability was detected in Kilo-Org kilocode up to 7.0.47. This vulnerability affects the function Bun.file of the file packages/opencode/src/kilocode/review/worktree-diff.ts |
| CVE-2026-8766 | Analyzed | 未確認 | CWE-200, CWE-284 | A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variab |
| CVE-2026-8767 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Inter |
| CVE-2026-8768 | Analyzed | 未確認 | CWE-918 | A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the compon |
| CVE-2026-8769 | Analyzed | 未確認 | CWE-400, CWE-404 | A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provide |
| CVE-2026-8770 | Analyzed | 未確認 | CWE-22 | A vulnerability was identified in continuedev continue up to 1.2.22. This affects the function lsTool of the file core/tools/implementations/lsTool.ts of the component JSON-RPC Ser |
| CVE-2026-8771 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in linlinjava litemall up to 1.8.0. This impacts the function list of the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/web/WxGo |
| CVE-2026-8772 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admin Endpoint. Executing a manipulation can lead to sql injecti |
| CVE-2026-8773 | Deferred | 未確認 | CWE-74, CWE-88 | A security vulnerability has been detected in linlinjava litemall up to 1.8.0. Affected by this vulnerability is the function backup/load of the file litemall-db/src/main/java/org/ |
| CVE-2026-8774 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp of the file /goform/mp of the component POST Request Handler. The manipulation of t |
| CVE-2026-8775 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in Edimax BR-6428NS 1.10. This affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. This manipulation o |
| CVE-2026-8776 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Edimax BR-6428NS 1.10. This vulnerability affects the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handl |
| CVE-2026-8777 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Perfo |
| CVE-2026-8779 | Deferred | 未確認 | CWE-119 | A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument In |
| CVE-2026-8780 | Deferred | 未確認 | CWE-119 | A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the file ngap/dispatcher.go of the component NGAP Message Handler |
| CVE-2026-8781 | Deferred | 未確認 | CWE-404, CWE-476 | A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results |
| CVE-2026-8782 | Deferred | 未確認 | CWE-404, CWE-476 | A weakness has been identified in omec-project amf up to 2.1.3-dev. This affects an unknown function of the file ngap/handler.go of the component NGAP Message Handler. This manipul |
| CVE-2026-8783 | Deferred | 未確認 | CWE-404, CWE-476 | A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabilityCheckResponse of the file ngap/dispatcher.go. Such manipu |
| CVE-2026-8784 | Deferred | 未確認 | CWE-59, CWE-61 | A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_status of the file cramfsck.c. Performing a manipulation results in symlink foll |
| CVE-2026-8785 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file update_info.php of the |
| CVE-2026-8786 | Analyzed | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in Tencent WeKnora up to 0.3.6. Affected by this issue is the function getKnowledgeBaseForInitialization of the file internal/handler/initialization. |
| CVE-2026-8787 | Deferred | 未確認 | CWE-269 | The Firebase Support & Chat Management plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.1.1. This is due to the `firebase_auth()` |
| CVE-2026-8788 | Deferred | 未確認 | CWE-150, CWE-93 | Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the set_add method were not checked for newlines, colons or pipes. Metrics generated |
| CVE-2026-8796 | Deferred | 未確認 | CWE-125 | Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srl_decoder.c, srl_read_object() and srl_read_hash() process a COPY |
| CVE-2026-8802 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This issue affects the function getPicThumb of the file app/Controllers/Items.php. The manipula |
| CVE-2026-8803 | Deferred | 未確認 | CWE-327, CWE-328 | A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the function Login of the file app/Models/Employee.php of the component Employee Login. Th |
| CVE-2026-8809 | Deferred | 未確認 | CWE-269 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation via Validation Bypass in all versions up to and including 0.9.2.5. The vulnerability |
| CVE-2026-8813 | Deferred | 未確認 | CWE-1284 | This affects versions of the package exifreader before 4.39.0. A crafted image containing an ICC mluc tag can set an attacker-controlled record count together with a zero record si |
| CVE-2026-8814 | Deferred | 未確認 | CWE-409 | Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to decompressing PNG zTXt metadata without e |
| CVE-2026-8827 | Deferred | 未確認 | CWE-89 | The AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing user input, leading to SQL Injection. The method is not invoked anywhere within |
| CVE-2026-8830 | Modified | 未確認 | CWE-603 | A flaw was found in Keycloak. An authenticated user can bypass configured WebAuthn policies during credential registration by manipulating client-side JavaScript. This occurs becau |
| CVE-2026-8832 | Deferred | 未確認 | CWE-94 | The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including |
| CVE-2026-8834 | Analyzed | 未確認 | CWE-122 | IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to execute re |
| CVE-2026-8835 | Analyzed | 未確認 | CWE-822 | IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose |
| CVE-2026-8836 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performin |
| CVE-2026-8837 | Deferred | 未確認 | CWE-79 | The WP Iframe Geo Style for Amazon affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'adid' Shortcode Attribute in all versions up to, and including, |
| CVE-2026-8838 | Awaiting Analysis | 未確認 | CWE-94 | Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to |
| CVE-2026-8842 | Deferred | 未確認 | CWE-79 | The Google+ Link Name plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gplusnamelink' shortcode in versions up to, and including, 1.0. This is due to insu |
| CVE-2026-8843 | Analyzed | 未確認 | CWE-617 | Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash |
| CVE-2026-8844 | Deferred | 未確認 | CWE-79 | The Responsive Check plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rspcheck' shortcode in versions up to, and including, 0.0.3. This is due to insuffic |
| CVE-2026-8845 | Deferred | 未確認 | CWE-79 | The Islamic Database plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'islamicDB-roqya' shortcode in versions up to, and including, 1.0. This is due to ins |
| CVE-2026-8846 | Deferred | 未確認 | CWE-79 | The Tuxquote plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'TUXQUOTE' shortcode in versions up to, and including, 1.3. This is due to insufficient input |
| CVE-2026-8847 | Deferred | 未確認 | CWE-79 | The Dideo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dideo' shortcode in version 1.0. This is due to insufficient input sanitization and ou |
| CVE-2026-8850 | Analyzed | 未確認 | CWE-476 | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload. |
| CVE-2026-8851 | Deferred | 未確認 | CWE-89 | SOGo versions 5.12.7 and prior contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract arbitrary data |
| CVE-2026-8852 | Analyzed | 未確認 | CWE-617 | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_fastcgi module. |
| CVE-2026-8854 | Analyzed | 未確認 | CWE-825 | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache. |
| CVE-2026-8855 | Analyzed | 未確認 | CWE-94 | IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication). |
| CVE-2026-8856 | Analyzed | 未確認 | CWE-400 | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration. |
| CVE-2026-8866 | Deferred | 未確認 | CWE-79 | The jQuery googleslides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'googleslides' shortcode in all versions up to, and including, 1.3. This is due to |
| CVE-2026-8867 | Deferred | 未確認 | CWE-79 | The Post Category Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'postcategorygallery' shortcode in versions up to, and including, 1.0.0 |
| CVE-2026-8868 | Deferred | 未確認 | CWE-79 | The Single Mailchimp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'single-mailchimp' shortcode in all versions up to, and including, 1.4. This is due t |
| CVE-2026-8869 | Deferred | 未確認 | CWE-79 | The Mutual Funds Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute in versions up to, and including, 1.2.1. This is due to |
| CVE-2026-8870 | Deferred | 未確認 | CWE-79 | The Team Master – A Modern WordPress Team Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, |
| CVE-2026-8871 | Deferred | 未確認 | CWE-79 | The Formidable Kinetic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'kinetic_link' shortcode in versions up to, and including, 1.1.01. This is due to i |
| CVE-2026-8872 | Deferred | 未確認 | CWE-79 | The Animate Your Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'animation-set' shortcode in versions up to, and including, 1.0.0. This |
| CVE-2026-8873 | Deferred | 未確認 | CWE-79 | The Content Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 2.4.1 due to insufficient inp |
| CVE-2026-8875 | Deferred | 未確認 | CWE-79 | The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' (and 'c') shortcode in versions up to, and including, 1. |
| CVE-2026-8877 | Deferred | 未確認 | CWE-79 | The Responsive Video Embedder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rem_video' shortcode in versions up to, and including, 0.1. This is due to |
| CVE-2026-8884 | Deferred | 未確認 | CWE-79 | The Instant-Quote.co Quotation Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.3.4 due to in |
| CVE-2026-8886 | Deferred | 未確認 | CWE-79 | The hk_shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title-plane' shortcode in versions up to, and including, 1.0. This is due to insufficien |
| CVE-2026-8887 | Deferred | 未確認 | CWE-79 | The Listen Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'listen' shortcode in versions up to, and including, 1.0. This is due to insufficient |
| CVE-2026-8890 | Deferred | 未確認 | CWE-639 | code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to impersonate arbitrary users by supplying a crafted JSON payload |
| CVE-2026-8891 | Deferred | 未確認 | CWE-79 | The BitForm plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bitform' shortcode in versions up to, and including, 1.1.0. This is due to insuffici |
| CVE-2026-8894 | Deferred | 未確認 | CWE-79 | The iWR Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `iwrtooltip` shortcode in versions up to, and including, 1.0. This is due to insu |
| CVE-2026-8897 | Deferred | 未確認 | CWE-79 | The Shortcode Buddy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 0.1.9.5 due to insufficient inp |
| CVE-2026-8898 | Deferred | 未確認 | CWE-79 | The Events In City plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'org-events' shortcode in versions up to, and including, 3.0. This is due to insufficie |
| CVE-2026-8899 | Deferred | 未確認 | CWE-79 | The Auto Thumbnail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'thumbnails' shortcode in all versions up to, and including, 1.0. This is due to insuff |
| CVE-2026-8903 | Deferred | 未確認 | CWE-352 | The Two-factor authentication (formerly IP Vault) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to missing |
| CVE-2026-8906 | Deferred | 未確認 | CWE-352 | The WP Promoter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing or incorrect nonce validation on |
| CVE-2026-8911 | Deferred | 未確認 | CWE-352 | The WP AutoBuzz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation o |
| CVE-2026-8912 | Deferred | 未確認 | CWE-89 | The Contest Gallery plugin for WordPress is vulnerable to SQL Injection via the 'form_input' parameter in versions up to, and including, 28.1.6. This is due to insufficient escapin |
| CVE-2026-8915 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31. |
| CVE-2026-8922 | Modified | 未確認 | CWE-303 | A flaw was found in Keycloak. When both realm-level and client-level `notBefore` revocation policies are configured, Keycloak's OpenID Connect (OIDC) Introspection feature fails to |
| CVE-2026-8938 | Deferred | 未確認 | CWE-352 | The auto making JSON-LD plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.3. This is due to missing or incorrect nonce vali |
| CVE-2026-8939 | Deferred | 未確認 | CWE-352 | The Search Simple Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validatio |
| CVE-2026-8941 | Deferred | 未確認 | CWE-352 | The CDN Linker lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation o |
| CVE-2026-8942 | Deferred | 未確認 | CWE-352 | The MetaMagic SEO Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due to missing or incorrect nonce valid |
| CVE-2026-8943 | Deferred | 未確認 | CWE-352 | The GoStats for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce vali |
| CVE-2026-8945 | Modified | 未確認 | CWE-653, CWE-693 | Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151. |
| CVE-2026-8946 | Modified | 未確認 | CWE-119, CWE-787 | Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Th |
| CVE-2026-8947 | Modified | 未確認 | CWE-416, CWE-825 | Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11 |
| CVE-2026-8948 | Modified | 未確認 | CWE-79, CWE-942 | Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8949 | Analyzed | 未確認 | CWE-190 | Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-8950 | Analyzed | 未確認 | CWE-346 | Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-8951 | Analyzed | 未確認 | CWE-290 | Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151. |
| CVE-2026-8952 | Modified | 未確認 | CWE-269 | Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8953 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, |
| CVE-2026-8954 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140. |
| CVE-2026-8955 | Modified | 未確認 | CWE-269 | Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-8956 | Analyzed | 未確認 | CWE-190 | Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-8957 | Modified | 未確認 | CWE-269 | Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-8958 | Analyzed | 未確認 | CWE-668, CWE-693 | Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderb |
| CVE-2026-8959 | Analyzed | 未確認 | CWE-119, CWE-20, CWE-693 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbir |
| CVE-2026-8960 | Analyzed | 未確認 | CWE-290 | Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8961 | Analyzed | 未確認 | CWE-290 | Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-8962 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-8963 | Analyzed | 未確認 | CWE-290 | Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8964 | Analyzed | 未確認 | CWE-451 | Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8965 | Analyzed | 未確認 | CWE-200 | Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8966 | Analyzed | 未確認 | CWE-200 | Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8967 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8968 | Analyzed | 未確認 | CWE-400 | Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird |
| CVE-2026-8969 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8970 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-8971 | Analyzed | 未確認 | CWE-346 | Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8972 | Modified | 未確認 | CWE-269 | Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-8973 | Modified | 未確認 | CWE-119, CWE-787 | Memory safety bugs present in Thunderbird 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploite |
| CVE-2026-8974 | Modified | 未確認 | CWE-119 | Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these c |
| CVE-2026-8975 | Modified | 未確認 | CWE-119, CWE-787 | Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these c |
| CVE-2026-8979 | Deferred | 未確認 | CWE-287 | The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass. An unauthenticated remote attacker can change the password of the user account vi |
| CVE-2026-8980 | Deferred | 未確認 | CWE-269 | The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin (operator) |
| CVE-2026-8990 | Deferred | 未確認 | CWE-288, CWE-359 | A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owner's account by intera |
| CVE-2026-8992 | Analyzed | 未確認 | CWE-295 | An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code. |
| CVE-2026-8994 | Deferred | 未確認 | CWE-287 | The Login with NEAR plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.3.3. The `ajaxLoginWithNear()` function — registered as a `w |
| CVE-2026-8995 | Deferred | 未確認 | CWE-200 | The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7. This is due |
| CVE-2026-8997 | Deferred | 未確認 | CWE-122 | vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file (vifminfo.json). This flaw occurs because the application lacks a runtime c |
| CVE-2026-9003 | Deferred | 未確認 | CWE-89 | E-LAN Hybrid Recording System developed by TONNET has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database con |
| CVE-2026-9009 | Deferred | 未確認 | CWE-434 | The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.7.2 via the filter_content func |
| CVE-2026-9010 | Deferred | 未確認 | CWE-89 | The Boost plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_url' and 'user_name' parameters in versions up to, and including, 2.0.3 due to insufficien |
| CVE-2026-9011 | Deferred | 未確認 | CWE-862 | The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65. This is due to the |
| CVE-2026-9014 | Deferred | 未確認 | CWE-862 | The WP Promoter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_stats() function in versions up to, and inclu |
| CVE-2026-9015 | Deferred | 未確認 | CWE-862 | The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi |
| CVE-2026-9018 | Deferred | 未確認 | CWE-269 | The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the `easyel_ |
| CVE-2026-9022 | Deferred | 未確認 | CWE-79 | The Splide Carousel Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'url' Block Attribute in all versions up to, and including, 1.7.1 due to insufficien |
| CVE-2026-9035 | Analyzed | 未確認 | CWE-22 | IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer E |
| CVE-2026-9037 | Awaiting Analysis | 未確認 | CWE-494 | A firmware update mechanism in the affected charging controller fails to validate the authenticity of firmware packages delivered through the device's management interface. Because |
| CVE-2026-9038 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the charging controller’s signal-processing logic allows an attacker with physical access to the charging interface to supply message |
| CVE-2026-9039 | Awaiting Analysis | 未確認 | CWE-1188 | A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charge |
| CVE-2026-9047 | Analyzed | 未確認 | CWE-305 | Improper handling of factor key state in the multi-factor authentication management feature in Devolutions Server allows an attacker with knowledge of a user's password to bypass t |
| CVE-2026-9051 | Awaiting Analysis | 未確認 | CWE-306 | There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypass authentication con |
| CVE-2026-9053 | Deferred | 未確認 | CWE-434 | Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form |
| CVE-2026-9054 | Deferred | 未確認 | CWE-130 | An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic. |
| CVE-2026-9056 | Deferred | 未確認 | A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be tr | |
| CVE-2026-9057 | Deferred | 未確認 | A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue | |
| CVE-2026-9058 | Deferred | 未確認 | CWE-295, CWE-393, CWE-637 | For untrusted certificates that contain the "Authority Information Access - caIssuers URI" extension, Szafir SDK will automatically download the parent CA certificate from the spec |
| CVE-2026-9059 | Deferred | 未確認 | CWE-89 | NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the 'orderby' parameter on the REST API endpoints '/imagely/v1/galleries' and '/imagely/v1/ |
| CVE-2026-9064 | Modified | 未確認 | CWE-770 | A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote |
| CVE-2026-9065 | Deferred | 未確認 | CWE-89 | SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameters ('model_name', 'model_id', 'integration_id', 'provider') on the REST API endpo |
| CVE-2026-9078 | Undergoing Analysis | 未確認 | CWE-451 | Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RTL hostname could visu |
| CVE-2026-9082 | Analyzed | 掲載 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from |
| CVE-2026-9084 | Awaiting Analysis | 未確認 | CWE-287 | MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing local user account based on the email claim when the local account had no stored sub |
| CVE-2026-9087 | Modified | 未確認 | CWE-639 | A flaw was found in Keycloak. The cross-session verification proof is keyed only by (local userId, idpAlias) and is not bound to the upstream identity that was actually verified, s |
| CVE-2026-9089 | Analyzed | 未確認 | CWE-494 | The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations. This issue is addressed in Automate |
| CVE-2026-9090 | Deferred | 未確認 | Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate. The buildSpCertificateS | |
| CVE-2026-9091 | Deferred | 未確認 | Casdoor versions 2.362.0 and earlier contain a logic flaw in the social‑login binding flow that allows users to bypass configured MFA requirements. The binding‑rule code path in co | |
| CVE-2026-9092 | Deferred | 未確認 | Casdoor versions 2.362.0 and earlier contain a vulnerability involving unverified email binding that may enable account takeover. The getExistUserByBindingRule function matches use | |
| CVE-2026-9093 | Deferred | 未確認 | In Casdoor versions 2.362.0 and earlier, the SAML service provider implementation does not validate the AudienceRestriction element in SAML assertions. The buildSp function in obje | |
| CVE-2026-9094 | Deferred | 未確認 | Casdoor versions 2.362.0 and earlier contain a vulnerability enabling cross-organization token exchange. The GetTokenExchangeToken function in object/token_oauth.go validates JWT s | |
| CVE-2026-9095 | Deferred | 未確認 | CWE-294 | Casdoor versions 2.362.0 and earlier map SAML assertions to user sessions without replay protection. The ParseSamlResponse() function in object/saml_sp.go calls sp.RetrieveAssertio |
| CVE-2026-9096 | Deferred | 未確認 | Casdoor versions 2.362.0 and earlier do not enforce SAML assertion time bounds. The gosaml2 library reports all time-validation results, including NotOnOrAfter and NotBefore, in th | |
| CVE-2026-9097 | Deferred | 未確認 | Casdoor versions 2.362.0 and earlier do not verify that a JWT used for token exchange is still active. The GetTokenExchangeToken() function in object/token_oauth.go validates the J | |
| CVE-2026-9098 | Deferred | 未確認 | In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to /api/acs without verifying that it correspond | |
| CVE-2026-9100 | Analyzed | 未確認 | CWE-1285 | The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any appli |
| CVE-2026-9101 | Analyzed | 未確認 | CWE-1321 | Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering shell.openExternal after specific user behavior leading to "1-c |
| CVE-2026-9102 | Deferred | 未確認 | CWE-22, CWE-434 | A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitization in the Gerber file upload APIs. A regular authenticated |
| CVE-2026-9104 | Deferred | 未確認 | CWE-79 | The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Draft Post Title in all versions up to, and including, 2.6.3 due to insufficient input sanitiza |
| CVE-2026-9110 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via |
| CVE-2026-9111 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: |
| CVE-2026-9112 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-9113 | Analyzed | 未確認 | CWE-125 | Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium secur |
| CVE-2026-9114 | Analyzed | 未確認 | CWE-416 | Use after free in QUIC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium sec |
| CVE-2026-9115 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Service Worker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chrom |
| CVE-2026-9116 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in ServiceWorker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium |
| CVE-2026-9117 | Analyzed | 未確認 | CWE-843 | Type Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo |
| CVE-2026-9118 | Analyzed | 未確認 | CWE-416 | Use after free in XR in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: H |
| CVE-2026-9119 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebRTC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-9120 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-9121 | Analyzed | 未確認 | CWE-125 | Out of bounds read in GPU in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security s |
| CVE-2026-9122 | Analyzed | 未確認 | CWE-125 | Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HT |
| CVE-2026-9123 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0.7778.179 allowed a local attacker to execute arbitrary code inside a sandbox via mali |
| CVE-2026-9124 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to leak cross-ori |
| CVE-2026-9126 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-9129 | Deferred | 未確認 | CWE-200, CWE-22 | A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController due to improper handling of file path route parameters. On on-premise deployments tha |
| CVE-2026-9133 | Deferred | 未確認 | CWE-489 | Active debug code exists in the ARN resolver of amazon-mq rabbitmq-aws before version 0.2.1. A debug ARN scheme (arn:aws-debug:file) accepted by the PUT /api/aws/arn/validate valid |
| CVE-2026-9136 | Analyzed | 未確認 | CWE-639 | A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action accepted user-controlled ShadowAttribute request data without removing the id field |
| CVE-2026-9137 | Analyzed | 未確認 | CWE-400 | The CSP report endpoint in MISP intended to limit logged CSP reports to 1 KB but incorrectly allowed reports up to 1 MB before truncation. On deployments where the endpoint is reac |
| CVE-2026-9139 | Deferred | 未確認 | CWE-798 | Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is implemented |
| CVE-2026-9141 | Deferred | 未確認 | CWE-306 | Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web configuration interface that allows unauthenticated attacke |
| CVE-2026-9144 | Deferred | 未確認 | CWE-79 | Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a stored cross-site scripting vulnerability in the embedded web configuration interface that allows authenticated atta |
| CVE-2026-9149 | Modified | 未確認 | CWE-122 | A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_ad |
| CVE-2026-9150 | Modified | 未確認 | CWE-121 | A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. |
| CVE-2026-9152 | Deferred | 未確認 | CWE-306, CWE-639 | A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session toke |
| CVE-2026-9156 | Analyzed | 未確認 | CWE-772 | Tanium addressed a denial of service vulnerability in Tanium Server. |
| CVE-2026-9157 | Deferred | 未確認 | CWE-20, CWE-434 | Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 bef |
| CVE-2026-9170 | Modified | 未確認 | CWE-94 | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation. |
| CVE-2026-9189 | Deferred | 未確認 | CWE-345 | The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Payment Bypass via Insufficient Verification of Data Authenticity in all versions up to, and inclu |
| CVE-2026-9194 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-9200 | Deferred | 未確認 | CWE-98 | The Query Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.2.1 via the shortcode function. This makes it possible for au |
| CVE-2026-9207 | Analyzed | 未確認 | CWE-78 | Tanium addressed an unauthorized code execution vulnerability in Connect. |
| CVE-2026-9208 | Analyzed | 未確認 | CWE-78 | Tanium addressed an unauthorized code execution vulnerability in Connect. |
| CVE-2026-9223 | Analyzed | 未確認 | CWE-284 | Missing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier allows a low-privileged authenticated user to create new vaults via a crafted impor |
| CVE-2026-9224 | Analyzed | 未確認 | CWE-862 | Missing authorization in the user profile update feature in Devolutions Server allows an authenticated Active Directory user to modify their own profile attributes via a crafted AP |
| CVE-2026-9227 | Deferred | 未確認 | CWE-434 | The GutenBee – Gutenberg Blocks plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.20.1 via the gutenbee_file_and_ext_json function |
| CVE-2026-9228 | Deferred | 未確認 | CWE-639 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.16 via the action_get |
| CVE-2026-9236 | Deferred | 未確認 | CWE-352 | The CM Ad Changer – A simple tool to control and optimize your site's banners plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, |
| CVE-2026-9241 | Deferred | 未確認 | CWE-639 | The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including |
| CVE-2026-9243 | Deferred | 未確認 | CWE-79 | The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'carousel_direction' parameter of the Carousel Anything widget in versions u |
| CVE-2026-9245 | Analyzed | 未確認 | CWE-601 | Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated remote attacker to redirect victims to an attacker-controlled |
| CVE-2026-9246 | Analyzed | 未確認 | CWE-862 | Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticated user with vault read access to retrieve the documentation a |
| CVE-2026-9247 | Analyzed | 未確認 | CWE-778 | Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal n |
| CVE-2026-9248 | Analyzed | 未確認 | CWE-639 | Authorization bypass in the entry duplication feature in Devolutions Server allows an authenticated user with write access to any vault to copy documentation and attachments from a |
| CVE-2026-9249 | Analyzed | 未確認 | CWE-620 | Unverified password change in Devolutions Server allows an attacker to change a user's password without providing the previous one via a crafted password change request. This issu |
| CVE-2026-9251 | Analyzed | 未確認 | CWE-862 | Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approv |
| CVE-2026-9255 | Analyzed | 未確認 | CWE-862 | Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands, without use |
| CVE-2026-9256 | Modified | 未確認 | CWE-122 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, |
| CVE-2026-9264 | Deferred | 未確認 | CWE-94 | A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP fi |
| CVE-2026-9274 | Deferred | 未確認 | CWE-312 | This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnera |
| CVE-2026-9277 | Deferred | 未確認 | CWE-77, CWE-78 | shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`. The `.op` field was backslash-escaped character by character usi |
| CVE-2026-9284 | Deferred | 未確認 | CWE-862 | The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information disclosure due to missing authorization checks on the `ppc-cre |
| CVE-2026-9291 | Awaiting Analysis | 未確認 | CWE-502 | Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output |
| CVE-2026-9294 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request |
| CVE-2026-9295 | Deferred | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /goform/formWirelessTbl of the component POST Request Handler. P |
| CVE-2026-9296 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Edimax BR-6428NS 1.10. This impacts the function system of the file /goform/formWlanM of the component POST Request Handler. Executing a manipulat |
| CVE-2026-9297 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in Edimax BR-6428NS 1.10. Affected is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. The |
| CVE-2026-9298 | Deferred | 未確認 | CWE-119 | A vulnerability was detected in omec-project amf up to 2.1.1. Affected by this vulnerability is an unknown functionality of the component PathSwitchRequest Handler. The manipulatio |
| CVE-2026-9299 | Deferred | 未確認 | CWE-119 | A flaw has been found in omec-project amf up to 2.1.1. Affected by this issue is the function PDUSessionResourceModifyIndication of the file /go/src/amf/ngap/handler.go. This manip |
| CVE-2026-9300 | Deferred | 未確認 | CWE-119 | A vulnerability has been found in omec-project amf up to 2.1.1. This affects an unknown part of the component NGSetupRequest Handler. Such manipulation leads to memory corruption. |
| CVE-2026-9301 | Deferred | 未確認 | CWE-119 | A vulnerability was found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGReset Message Handler. Performing a manipulation results in me |
| CVE-2026-9302 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9. This issue affects the function eval of the file app/index/comm |
| CVE-2026-9303 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was identified in calcom cal.diy up to 4.9.4. Impacted is an unknown function. The manipulation leads to cross-site request forgery. It is possible to initiate the |
| CVE-2026-9304 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in calcom cal.diy up to 4.9.4. The affected element is the function validateUrlForSSRF of the file apps/web/app/api/logo/route.ts of the compone |
| CVE-2026-9305 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in QuantumNous new-api up to 0.12.1. The impacted element is the function SearchUserTopUps/SearchAllTopUps of the file model/topup.go of the componen |
| CVE-2026-9306 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in QuantumNous new-api up to 0.12.1. This affects the function RelayMidjourneyImage/GetByOnlyMJId of the file router/relay-router.go of t |
| CVE-2026-9312 | Modified | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests to internal services |
| CVE-2026-9342 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. Impacted is an unknown function of the file /admin/patients/view_history.php. |
| CVE-2026-9343 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Edimax EW-7438RPn up to 1.31. The affected element is the function formWpsStart of the file /goform/formWpsStart of the component webs. This manip |
| CVE-2026-9344 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Edimax EW-7438RPn up to 1.31. The impacted element is an unknown function of the file /goform/formWpsStart of the component webs. Such |
| CVE-2026-9345 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Edimax EW-7438RPn up to 1.31. This affects the function formWizSurvey of the file /goform/formWizSurvey of the component webs. Performing a manipula |
| CVE-2026-9346 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function formWirelessTbl of the file /goform/formWirelessTbl of the component webs. Executing a manipulation |
| CVE-2026-9347 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Edimax EW-7438RPn up to 1.31. Affected is the function formWizSurvey of the file /goform/formWizSurvey of the component webs. The manipulation of |
| CVE-2026-9348 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Edimax EW-7438RPn up to 1.31. Affected by this vulnerability is an unknown functionality of the file /goform/mp of the component webs. The manipulation |
| CVE-2026-9349 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was determined in calcom cal.diy up to 4.9.4. Affected by this issue is the function getServerSideProps of the file apps/web/modules/bookings/views/bookings-single- |
| CVE-2026-9350 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This affects the function check_all_command_guards of the file tools/approval.py of the component Batch |
| CVE-2026-9351 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.16. This vulnerability affects the function _is_blocked_device of the file tools/file_tools.py of the |
| CVE-2026-9352 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in NousResearch hermes-agent up to 2026.4.23. This issue affects the function _make_run_env of the file tools/environments/local.py of the component |
| CVE-2026-9353 | Deferred | 未確認 | CWE-707, CWE-74 | A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23. Impacted is an unknown function of the file agent/skills_guard.py of the component Skills G |
| CVE-2026-9354 | Deferred | 未確認 | CWE-116, CWE-74 | A vulnerability was detected in NousResearch hermes-agent up to 2026.4.16. The affected element is an unknown function of the component Slack Agent/Mattermost Agent. The manipulati |
| CVE-2026-9355 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=save_patient_ |
| CVE-2026-9356 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0. This affects an unknown function of the file /admin/patients/manage_history.php. S |
| CVE-2026-9357 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in vBulletin 6.x. This impacts an unknown function of the component Login. Performing a manipulation results in cross site scripting. It is possible to in |
| CVE-2026-9358 | Deferred | 未確認 | CWE-404, CWE-674 | A vulnerability was determined in postcss-selector-parser up to 6.1.2/7.1.2. Affected is the function toString of the file src/selectors/container.js of the component AST Serializa |
| CVE-2026-9359 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in Edimax EW-7438RPn 1.28a. Affected by this vulnerability is the function formHwSet of the file /goform/formHwSet of the component POST Request Hand |
| CVE-2026-9360 | Deferred | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Edimax EW-7438RPn 1.28a. Affected by this issue is the function formwlencrypt24g of the file /goform/formwlencrypt24g of the component POST R |
| CVE-2026-9361 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Edimax EW-7438RPn 1.12. This affects the function formAccept of the file /goform/formAccep of the component POST Request Handler. This manipulatio |
| CVE-2026-9362 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in Edimax EW-7438RPn 1.12. This vulnerability affects the function formConnectionSetting of the file /goform/formConnectionSetting of the |
| CVE-2026-9363 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Edimax EW-7438RPn 1.12. This issue affects the function formEZCHNwlanSetup of the file /goform/formEZCHNwlanSetu of the component POST Request Handl |
| CVE-2026-9364 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument socia |
| CVE-2026-9365 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability has been found in Ettercap up to 0.8.3. The affected element is the function FUNC_DECODER of the file src/dissectors/ec_gg.c of the component GG Dissector. The mani |
| CVE-2026-9366 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was found in NousResearch hermes-agent 2026.4.23. The impacted element is the function _scan_context_content of the file agent/prompt_builder.py. The manipulation r |
| CVE-2026-9367 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in NousResearch hermes-agent up to 5157f5427f19488b31c6fdebbacd15d798ce7f63. This affects the function detect_dangerous_command of the file tools/app |
| CVE-2026-9368 | Deferred | 未確認 | CWE-264, CWE-265 | A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of the file tools/code_execution_tool.py of the component Enviro |
| CVE-2026-9369 | Deferred | 未確認 | CWE-697 | A security flaw has been discovered in NousResearch hermes-agent 2026.4.23. Affected is the function _discover_dashboard_plugins of the file hermes_cli/web_server.py of the compone |
| CVE-2026-9370 | Deferred | 未確認 | CWE-759, CWE-760 | A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-sp |
| CVE-2026-9371 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in ItzCrazyKns Vane up to 1.12.1. Affected by this issue is some unknown functionality of the file route.ts of the component API. The man |
| CVE-2026-9372 | Deferred | 未確認 | CWE-918 | A flaw has been found in ItzCrazyKns Vane up to 1.12.1. This vulnerability affects unknown code of the file src/app/api/providers/route.ts of the component Model Provider API. This |
| CVE-2026-9373 | Deferred | 未確認 | CWE-287 | A vulnerability has been found in JeecgBoot 3.9.1. This issue affects some unknown processing of the file /openapi/call/ of the component OpenAPI Endpoint. Such manipulation leads |
| CVE-2026-9374 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. Impacted is the function FileUploadUtils.upload of the file /common/upload of the component Common Upload Endpoint |
| CVE-2026-9376 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submissi |
| CVE-2026-9377 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file /admin/productedit.php. The manipulation of the ar |
| CVE-2026-9378 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Edimax BR-6675nD 1.12. This affects the function formHwSet of the file /goform/formHwSet of the component POST Request Handler. The manipulat |
| CVE-2026-9379 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Edimax BR-6675nD 1.12. This impacts the function formWpsStart of the file /goform/formWpsStart of the component POST Request Handler. This manipul |
| CVE-2026-9380 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Edimax BR-6675nD 1.12. Affected is the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. |
| CVE-2026-9381 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Edimax BR-6675nD 1.12. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Reques |
| CVE-2026-9382 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in Edimax BR-6675nD 1.12. Affected by this issue is the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Execut |
| CVE-2026-9383 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Us |
| CVE-2026-9384 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component Web Man |
| CVE-2026-9385 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component Web Manag |
| CVE-2026-9386 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Int |
| CVE-2026-9387 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component Web |
| CVE-2026-9388 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component Web Ma |
| CVE-2026-9389 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page leads to buf |
| CVE-2026-9393 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was found in H3C Magic B0 up to 100R002. This affects the function Edit_BasicSSID_5G of the file /goform/aspForm. Performing a manipulation of the argument param re |
| CVE-2026-9394 | Deferred | 未確認 | CWE-521 | A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. This impacts an unknown function of the component Bluetooth Low Energy Handler. Executing a manipul |
| CVE-2026-9395 | Deferred | 未確認 | CWE-522 | A vulnerability was identified in Besen BS20 EV Charging Station up to 20260426. Affected is an unknown function of the component BLE/UDP. The manipulation leads to insufficiently |
| CVE-2026-9396 | Deferred | 未確認 | CWE-1021 | A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version C |
| CVE-2026-9397 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in Besen BS20 EV Charging Station up to 20260426. Affected by this issue is some unknown functionality of the component OTA Update Installation Handl |
| CVE-2026-9398 | Deferred | 未確認 | CWE-287, CWE-294 | A security vulnerability has been detected in Besen BS20 EV Charging Station up to 20260426. This affects an unknown part of the component BLE/WiFi. Such manipulation leads to auth |
| CVE-2026-9399 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Edimax BR-6675nD 1.12. This vulnerability affects the function formsetPPPoE of the file /goform/formsetPPPoE of the component POST Request Handler. |
| CVE-2026-9400 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formUSBStorage of the component POST Request Handler. Executing a |
| CVE-2026-9401 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Edimax BR-6675nD 1.12. Impacted is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. The |
| CVE-2026-9402 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipu |
| CVE-2026-9403 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Edimax BR-6675nD 1.12. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Ha |
| CVE-2026-9404 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interf |
| CVE-2026-9405 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi of the component Web Managem |
| CVE-2026-9406 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setRemoteCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Inter |
| CVE-2026-9407 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. Affected by this vulnerability is the function setFirewallType of the file /cgi-bin/cstecgi.cgi |
| CVE-2026-9408 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setStaticDhcpRules of the file /cgi-bin/cstecgi.cgi of the component We |
| CVE-2026-9409 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This affects an unknown part of the file /user of the component User Management H |
| CVE-2026-9410 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the comp |
| CVE-2026-9411 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGST_Invoice.php of the component Invoice |
| CVE-2026-9412 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in SourceCodester Indian Invoicing System 1.0. Impacted is an unknown function of the component Backend Endpoint. Executing a manipulation can lead t |
| CVE-2026-9413 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Indian Invoicing System 1.0. The affected element is an unknown function of the file /Invoicing/category.php. The manipulation of t |
| CVE-2026-9414 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the |
| CVE-2026-9415 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in code-projects Employee Management System 1.0. This affects an unknown function of the file /eloginwel.php. This manipulation of the argument ID ca |
| CVE-2026-9416 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects Employee Management System 1.0. This impacts an unknown function of the file /myprofile.php. Such manipulation of the ar |
| CVE-2026-9417 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in code-projects Employee Management System 1.0. Affected is an unknown function of the file /myprofileup.php. Performing a manipulation of the argumen |
| CVE-2026-9418 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /changepassemp.php. Executing a manipu |
| CVE-2026-9419 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /empproject.php. The manipulation o |
| CVE-2026-9420 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. I |
| CVE-2026-9421 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in KLiK SocialMediaWebsite 1.0. This vulnerability affects the function uniqid of the file upload.inc.php of the component File Handler. This manipul |
| CVE-2026-9422 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was identified in KLiK SocialMediaWebsite 1.0. This issue affects some unknown processing of the component HTTP POST Request Parameter Handler. Such manipulation le |
| CVE-2026-9423 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Edimax BR-6675nD 1.12. Impacted is the function mp of the file /goform/mp of the component POST Request Handler. Performing a manipulation of |
| CVE-2026-9424 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Edimax EW-7438RPn 1.31. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component Content-Type Handler. Exec |
| CVE-2026-9425 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The impacted element is the function formWlanMP of the file /goform/formWlanMP. The manipulation of the argume |
| CVE-2026-9426 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Edimax EW-7438RPn 1.31. This affects the function formHwSet of the file /goform/formHwSet. The manipulation of the argument Anntena/Mcs/regDomain/ni |
| CVE-2026-9427 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Edimax EW-7438RPn 1.31. This impacts the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component webs. This manipulation of the arg |
| CVE-2026-9428 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromPPTPUserSetting of the file /goform/PPTPUserSetting. Such manipulation of the argument del |
| CVE-2026-9429 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. Performing a manipulation of |
| CVE-2026-9430 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda F1202 1.2.0.20(408). Affected by this issue is the function formGstDhcpSetSer of the file /goform/GstDhcpSetSerof. Executing a manipulation |
| CVE-2026-9431 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda F1202 1.2.0.20(408). This affects the function fromPptpUserAdd of the file /goform/PptpUserAdd. The manipulation of the argument opttype lea |
| CVE-2026-9432 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setWiFiAdvancedCfg of the file /cgi-bin/cstecgi.cgi of the comp |
| CVE-2026-9433 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component Web Mana |
| CVE-2026-9434 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setWiFiWpsCfg of the file /cgi-bin/cstecgi.cgi of the component Web Man |
| CVE-2026-9435 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setQosCfg of the file /cgi-bin/cstecgi.cgi of the component Web Managemen |
| CVE-2026-9436 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi of the component Web Managemen |
| CVE-2026-9437 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in DTStack Taier 1.4.0. This affects the function Runtime.exec of the component REST API. The manipulation of the argument sqlText leads to os comman |
| CVE-2026-9438 | Deferred | 未確認 | CWE-99 | A vulnerability was found in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This impacts an unknown function of the file courseDel.php. The mani |
| CVE-2026-9439 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Edimax BR-6675nD 1.12. Affected is the function stainfo of the file /goform/stainfo. This manipulation of the argument interface causes command in |
| CVE-2026-9440 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formAccept of the file /goform/formAccept of the component POST Request Hand |
| CVE-2026-9441 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function formiNICbasic of the file /goform/formiNICbasic of the component POST Request H |
| CVE-2026-9442 | Deferred | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component POST Request Handler. |
| CVE-2026-9443 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Edimax BR-6478AC 1.23. This vulnerability affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST R |
| CVE-2026-9444 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Simple POS and Inventory System 1.0. This issue affects the function delete of the file /admin/deleteproduct.php of the component GET |
| CVE-2026-9445 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in SourceCodester Simple POS and Inventory System 1.0. Impacted is an unknown function of the file /admin/addproduct.php of the component File Extension Handl |
| CVE-2026-9446 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Simple POS and Inventory System 1.0. The affected element is an unknown function of the file /admin/edit_customer.php. Such manipul |
| CVE-2026-9447 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Simple POS and Inventory System 1.0. The impacted element is an unknown function of the file /user/search.php. Performing a manipulation |
| CVE-2026-9448 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown function of the file /applyleave.php. Executing a manipulation of the argume |
| CVE-2026-9449 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Employee Management System 1.0. This impacts an unknown function of the file /changepassemp.php. The manipulation leads to sql injec |
| CVE-2026-9450 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Employee Management System 1.0. Affected is an unknown function of the file /psubmit.php. The manipulation of the argument pid |
| CVE-2026-9451 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /process/applyleaveprocess.ph |
| CVE-2026-9452 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125. Affected by this issue is the function ExecTool.execute of the fi |
| CVE-2026-9453 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125. This affects the function which of the file /src/application/skills-loader.ts o |
| CVE-2026-9454 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setOpenVpnCertGenerationCfg of the file /cgi-bin/cstecgi.cgi of the component |
| CVE-2026-9455 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Mana |
| CVE-2026-9456 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setOpenVpnCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface |
| CVE-2026-9457 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of the component We |
| CVE-2026-9458 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component Web Managem |
| CVE-2026-9459 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Edimax EW-7438RPn 1.31. This affects the function formConnectionSetting of the file /goform/formConnectionSetting. Performing a manipulation |
| CVE-2026-9460 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Edimax EW-7438RPn 1.31. This impacts the function formAccept of the file /goform/formAccept. Executing a manipulation of the argument submit-url c |
| CVE-2026-9461 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Edimax EW-7438RPn 1.31. Affected is the function formRadius of the file /goform/formRadius. The manipulation of the argument submit-ur |
| CVE-2026-9462 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Edimax EW-7438RPn 1.31. Affected by this vulnerability is the function formWpsProxyEnable of the file /goform/formWpsProxyEnable. The manipulation o |
| CVE-2026-9463 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Edimax EW-7438RPn 1.31. Affected by this issue is the function formLicence of the file /goform/formLicence. This manipulation of the argument submit-url ca |
| CVE-2026-9464 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in YunaiV yudao-cloud 2026.03. This affects the function IotDataSinkHttpConfig of the file /admin-api/iot/data-sink/create of the component Admin API |
| CVE-2026-9465 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/GetDBDataEx.jsp. Perform |
| CVE-2026-9466 | Deferred | 未確認 | CWE-640 | A vulnerability was determined in Tiandy Easy7 Integrated Management Platform 7.17.0. This issue affects some unknown processing of the file /rest/user/updateUserPassword of the co |
| CVE-2026-9467 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in debugmcp mcp-debugger up to 0.20.0. Impacted is the function handleGetSourceContext of the file src/server.ts. The manipulation leads to path trav |
| CVE-2026-9468 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in dazeb cline-mcp-memory-bank up to 55c81b9cf6c16700983c84dc4cdea3cafa19a75f. The affected element is the function handleInitializeMemoryBank o |
| CVE-2026-9469 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. The impacted element is an unknown function of the file /succes |
| CVE-2026-9470 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This affects the function confirm_logged_in of the |
| CVE-2026-9471 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This impacts an unknown function of the file /student.php. Perfor |
| CVE-2026-9472 | Deferred | 未確認 | CWE-22 | A flaw has been found in dazeb markdown-downloader up to 3d4394b34b6c99d81af817623af55e3384df5a6a. Affected is the function download_markdown/list_downloaded_files/create_subdirect |
| CVE-2026-9473 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in c-rick jimeng-mcp 1.10.0. Affected by this vulnerability is the function getFileContent/uploadCoverFile/generateImage/generateVideo of the file sr |
| CVE-2026-9474 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in yashpokharna2555 StudentManagementSystem up to cb2f558ddf8d19396de0f92abf2d224d46a0a203. Affected by this issue is the function confirm_logged_in of th |
| CVE-2026-9475 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Int |
| CVE-2026-9476 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web |
| CVE-2026-9477 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of the component We |
| CVE-2026-9478 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component Web Management I |
| CVE-2026-9479 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argume |
| CVE-2026-9480 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Edimax EW-7438RPn 1.31. The impacted element is the function formrefresh of the file /goform/formrefresh. The manipulation of the argument submit-ur |
| CVE-2026-9481 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Edimax EW-7438RPn 1.31. This affects the function formStats of the file /goform/formStats. This manipulation of the argument submit-url causes stack-based |
| CVE-2026-9482 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Edimax EW-7438RPn 1.31. This impacts the function formSDHCP of the file /goform/formSDHCP. Such manipulation of the argument submit-url leads to s |
| CVE-2026-9483 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in SourceCodester Student Grades Management System 1.0. Affected is an unknown function of the file grades.php. Performing a manipulation of the argument |
| CVE-2026-9484 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected by this vulnerability is the function getClassroomStudents/removeStudentFromClassroo |
| CVE-2026-9485 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipulati |
| CVE-2026-9486 | Deferred | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in SourceCodester Student Grades Management System 1.0. This affects an unknown part. The manipulation results in cross-site request forgery. Th |
| CVE-2026-9489 | Awaiting Analysis | 未確認 | CWE-22, CWE-269, CWE-284, CWE-732 | NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal func |
| CVE-2026-9490 | Analyzed | 未確認 | CWE-269 | A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a weak Security Descriptor. This vulnerability allows an authent |
| CVE-2026-9493 | Deferred | 未確認 | CWE-639 | Service Center developed by BankPro E-Service Technology has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify the parameter of a |
| CVE-2026-9495 | Awaiting Analysis | 未確認 | CWE-284 | Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the middleware being silently dropped from the execution chain when |
| CVE-2026-9496 | Awaiting Analysis | 未確認 | CWE-1333, CWE-400 | Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by sup |
| CVE-2026-9497 | Deferred | 未確認 | CWE-20, CWE-502 | A flaw has been found in changmingxie tcc-transaction up to 2.1.0. This issue affects the function Fastjson.parseObject of the component Fastjson AutoType REST API. This manipulati |
| CVE-2026-9498 | Deferred | 未確認 | CWE-1336, CWE-791 | A vulnerability has been found in Dromara lamp-cloud up to 5.6.2. Impacted is the function GroovyClassLoader.parseClass of the component Message Template Handler. Such manipulation |
| CVE-2026-9500 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgread Utility. P |
| CVE-2026-9501 | Deferred | 未確認 | CWE-617 | A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. |
| CVE-2026-9502 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. The manipul |
| CVE-2026-9503 | Deferred | 未確認 | CWE-404, CWE-476 | A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulati |
| CVE-2026-9504 | Deferred | 未確認 | CWE-119, CWE-125 | A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulatio |
| CVE-2026-9508 | Deferred | 未確認 | CWE-732 | Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the administrator conf |
| CVE-2026-9509 | Deferred | 未確認 | CWE-248 | An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service (DoS) by sendi |
| CVE-2026-9511 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Totolink CA750-PoE 6.2c.510. This affects the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Such manip |
| CVE-2026-9512 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Totolink CA750-PoE 6.2c.510. This vulnerability affects the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Setting |
| CVE-2026-9513 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink CA750-PoE 6.2c.510. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Ex |
| CVE-2026-9514 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. Impacted is the function setNetworkDiag of the file /cgi-bin/cstecgi.cgi of the component Setting Handler |
| CVE-2026-9515 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi of the component Setting Handle |
| CVE-2026-9517 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. The affected element is an unknown function of the file /index.php/students/addStudentView of the |
| CVE-2026-9518 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem. The impacted element is the function addStudent of the file view_students.php of the component Stu |
| CVE-2026-9519 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in stonith404 pingvin-share up to 1.13.0. This affects the function getServerSideProps of the file frontend/src/pages/auth/signIn.tsx of the com |
| CVE-2026-9520 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in blitz-js blitz up to 3.0.2 on GitHub. This impacts an unknown function of the file packages/generator/templates/app/src/app/auth/components/LoginF |
| CVE-2026-9521 | Deferred | 未確認 | CWE-1287, CWE-20 | A security vulnerability has been detected in fraillt bitsery up to 5.2.4. Affected is the function loadFromSharedState in the library include/bitsery/ext/std_smart_ptr.h. Such man |
| CVE-2026-9523 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 3000WEBV2. Affected by this vulnerability is an unknown functionalit |
| CVE-2026-9524 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is the function execute of the component REST Endpoint. Executing a manipulation of th |
| CVE-2026-9525 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /admin/edit_judge.php. The manipulation of the argument judge |
| CVE-2026-9526 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Electronic Judging System 1.0. This vulnerability affects unknown code of the file /admin/edit_team.php. The manipulation of the argument |
| CVE-2026-9527 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in itsourcecode Electronic Judging System 1.0. This issue affects some unknown processing of the file /admin/judges.php. This manipulation of the arg |
| CVE-2026-9528 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /admin/delete_judge.php. Such manipulation of the argument |
| CVE-2026-9529 | Deferred | 未確認 | CWE-404, CWE-476 | A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Perf |
| CVE-2026-9530 | Deferred | 未確認 | CWE-119, CWE-125 | A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgbmp Utilit |
| CVE-2026-9531 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Totolink CA750-PoE 6.2c.510. Impacted is the function setUpgradeUboot of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. This mani |
| CVE-2026-9532 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi of the component |
| CVE-2026-9533 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The impacted element is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi of the component Setting Handler |
| CVE-2026-9534 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Totolink CA750-PoE 6.2c.510. This affects the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Executing a mani |
| CVE-2026-9538 | Modified | 未確認 | CWE-789 | Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->rea |
| CVE-2026-9540 | Deferred | 未確認 | CWE-404 | A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component OpenAI-compatible Serving Path. Such manipulation leads to d |
| CVE-2026-9541 | Analyzed | 未確認 | CWE-119, CWE-122 | A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler. Performing a ma |
| CVE-2026-9542 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of the file /admin/add_staff.php. Executing a manipulation of t |
| CVE-2026-9543 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Inte |
| CVE-2026-9544 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10. Affected by this vulnerability is an unknown functionality of the file /api |
| CVE-2026-9550 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. Affected by this issue is some unknown functionality of the |
| CVE-2026-9551 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the function xp_cmdshell of the file ParkingRecord/ExportParkingRecords of the component |
| CVE-2026-9552 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in Das Parking Management System 停车场管理系统 6.2.0. This vulnerability affects unknown code of the component Search API Endpoint. The manipulation o |
| CVE-2026-9557 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability exists in Mautic's Focus component. Due to insufficient validation of user-supplied URLs, an authenticated user can trigger outbo |
| CVE-2026-9558 | Deferred | 未確認 | CWE-1336 | A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function restriction |
| CVE-2026-9559 | Deferred | 未確認 | CWE-22, CWE-73, CWE-98 | A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign imports, a flaw in the validation logic allows |
| CVE-2026-9560 | Analyzed | 未確認 | CWE-267, CWE-270, CWE-648, CWE-78 | Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC ch |
| CVE-2026-9562 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The affected element is an unknown function of the component D |
| CVE-2026-9564 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients |
| CVE-2026-9565 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in haojing8312 WorkClaw up to 0.6.4. This affects the function is_dangerous of the file apps/runtime/src-tauri/src/agent/tools/bash.rs of the compone |
| CVE-2026-9566 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in teableio teable up to 1.9.x. This impacts an unknown function of the file apps/nextjs-app/src/features/auth/pages/LoginPage.tsx of the component S |
| CVE-2026-9567 | Deferred | 未確認 | CWE-404, CWE-476 | A security flaw has been discovered in GPAC up to 2.4.0. Affected is the function MergeFragment of the file src/isomedia/isom_intern.c of the component MP4Box. The manipulation res |
| CVE-2026-9568 | Deferred | 未確認 | CWE-74, CWE-94 | A weakness has been identified in ThingsBoard up to 4.3.1.1. Affected by this vulnerability is the function getGatewayDockerComposeFile of the file /api/v1/provision of the compone |
| CVE-2026-9572 | Analyzed | 未確認 | CWE-401, CWE-404 | A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample of the file src/isomedia/media.c of the component MP4Box. Suc |
| CVE-2026-9573 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of the file /admin/modules/student/index.php?view=view. Performi |
| CVE-2026-9574 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code of the file /admin/modules/student/trans.php. Executing a ma |
| CVE-2026-9575 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view= |
| CVE-2026-9579 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was found in JeecgBoot up to 3.9.1. Impacted is the function user.getUsername of the file /sys/user/login/setting/userEdit of the component SysUser. The manipulatio |
| CVE-2026-9580 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in JeecgBoot up to 3.9.1. The affected element is the function LoginController.selectDepart of the file /sys/selectDepart. This manipulation causes i |
| CVE-2026-9581 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access contro |
| CVE-2026-9582 | Deferred | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects an unknown function. Performing a manipulation res |
| CVE-2026-9583 | Deferred | 未確認 | CWE-200, CWE-209 | A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This impacts an unknown function of the file /index.php of the compo |
| CVE-2026-9584 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown function of the file chk.php of the component Login. The manipulat |
| CVE-2026-9603 | Deferred | 未確認 | CWE-862, CWE-863 | A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown part of the file /admin/delete-session.php. The manipulatio |
| CVE-2026-9604 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in JeecgBoot up to 3.9.1. This vulnerability affects unknown code of the component AiragModelController. The manipulation of the argument list/queryByI |
| CVE-2026-9605 | Deferred | 未確認 | CWE-119, CWE-122 | A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes he |
| CVE-2026-9606 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the file /manage_user.php. Such manipulation of the argument ID lea |
| CVE-2026-9607 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is an unknown function of the file /parcel_list.php. Performing a manipulation of the |
| CVE-2026-9608 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in QianFox FoxCMS up to 1.2.6. The impacted element is an unknown function of the file /Tag/edit of the component Administrator Backend. Executing a |
| CVE-2026-9609 | Deferred | 未確認 | CWE-640 | A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The manipulation leads to weak password recovery. The attack can |
| CVE-2026-9617 | Analyzed | 未確認 | CWE-89 | PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a super |
| CVE-2026-9618 | Deferred | 未確認 | CWE-352 | The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) plugin for WordPress is vulnerable to Cross-Site Request Forgery in |
| CVE-2026-9627 | Deferred | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/setSysAdm of the component Web Management Interface |
| CVE-2026-9628 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /goform/formPptpClientConfig of the component Web Management Inte |
| CVE-2026-9631 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/formConfigFastDirectionW of th |
| CVE-2026-9632 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this issue is the function strcpy of the file /goform/formGroupConfig of the component Web Manageme |
| CVE-2026-9642 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9644 | Deferred | 未確認 | CWE-79 | The LiveSmart Video Chat Live Video Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livesmart_widget' shortcode in all versions up to, and |
| CVE-2026-9645 | Analyzed | 未確認 | CWE-78 | Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise a |
| CVE-2026-9646 | Analyzed | 未確認 | CWE-80 | A reflected cross-site scripting issue exists in URL handling. |
| CVE-2026-9658 | Deferred | 未確認 | CWE-113, CWE-790 | Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths. The header injection rule was ineffective at blocking header |
| CVE-2026-9673 | Awaiting Analysis | 未確認 | CWE-1236 | Versions of the package json-2-csv from 3.15.0 and before 5.5.11 are vulnerable to CSV Injection via the preventCsvInjection option which can be bypassed. An attacker can inject fo |
| CVE-2026-9674 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds. |
| CVE-2026-9689 | Modified | 未確認 | CWE-1288 | A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers |
| CVE-2026-9704 | Modified | 未確認 | CWE-1284 | A flaw was found in Keycloak. An authenticated user with low privileges can exploit this vulnerability by sending an oversized subject_token JSON Web Token (JWT) to the TokenEndpoi |
| CVE-2026-9712 | Deferred | 未確認 | CWE-639 | When creating an export through the pretix API, API clients are returned an UUID value for their export job (a long, random string like 35742818-c375-4d15-839f-d49aecce94d6). Usi |
| CVE-2026-9714 | Deferred | 未確認 | CWE-79 | The Simple Divi Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the [showmodule] shortcode in versions up to, and including, 1 |
| CVE-2026-9739 | Awaiting Analysis | 未確認 | CWE-942 | Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-origins` and `allowed-hosts` flags to align with MCP securit |
| CVE-2026-9757 | Deferred | 未確認 | CWE-89 | The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng' parameters in all versions up to, and including, 4.5.5 The parameters are read f |
| CVE-2026-9759 | Analyzed | 未確認 | CWE-476 | ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service |
| CVE-2026-9789 | Deferred | 未確認 | CWE-22, CWE-269, CWE-284, CWE-732 | A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052. The vulnerability stems from the the PSAdminAgent service, which crea |
| CVE-2026-9791 | Modified | 未確認 | CWE-863 | A flaw was found in Keycloak. An authenticated user with existing organization membership can exploit this flaw by accessing user-facing APIs, such as the account API or by request |
| CVE-2026-9792 | Modified | 未確認 | CWE-280 | A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component. When certain condition providers (client-type, client-roles, client- |
| CVE-2026-9793 | Modified | 未確認 | CWE-347 | A flaw was found in Keycloak. When a JSON Web Encryption (JWE) encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is r |
| CVE-2026-9794 | Modified | 未確認 | CWE-209 | A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP (Security Assertion Marku |
| CVE-2026-9795 | Modified | 未確認 | CWE-266 | A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with limited client management permissions can exploit this vulnerability to assign |
| CVE-2026-9796 | Modified | 未確認 | CWE-367 | A flaw was found in Keycloak. An authenticated administrator with the `manage-clients` role can exploit a Time-of-check to time-of-use (TOCTOU) vulnerability in the name-based admi |
| CVE-2026-9798 | Modified | 未確認 | CWE-305 | A flaw was found in Keycloak, an open-source identity and access management solution. When a user account is temporarily locked due to repeated failed login attempts, an attacker w |
| CVE-2026-9801 | Modified | 未確認 | CWE-1284 | A flaw was found in Keycloak. A remote attacker with high privileges, such as a realm administrator configuring a malicious Lightweight Directory Access Protocol (LDAP) server or a |
| CVE-2026-9802 | Modified | 未確認 | CWE-613 | A flaw was found in Keycloak. When revokeRefreshToken=true is enabled and persistent session storage is in use, a server restart can reset internal timing mechanisms. This allows a |
| CVE-2026-9803 | Modified | 未確認 | CWE-125 | A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a |
| CVE-2026-9804 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory en |
| CVE-2026-9806 | Awaiting Analysis | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI Transmute in versions prior to the patched release. Notification messages containing user- |
| CVE-2026-9807 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could hav |
| CVE-2026-9808 | Deferred | 未確認 | CWE-863 | An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain conditions, roles configured with owner-scope restrictions (su |
| CVE-2026-9809 | Deferred | 未確認 | CWE-79 | A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on administrative detail views (such as ca |
| CVE-2026-9811 | Deferred | 未確認 | CWE-79 | A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for associating projects with system entities |
| CVE-2026-9813 | Analyzed | 未確認 | CWE-918 | FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py. An attacker who can |
| CVE-2026-9818 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9828 | Deferred | 未確認 | CWE-502 | Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection albeit heavily restri |
| CVE-2026-9831 | Awaiting Analysis | 未確認 | CWE-362, CWE-488 | A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently allow requests |
| CVE-2026-9872 | Analyzed | 未確認 | CWE-787 | Out of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium |
| CVE-2026-9873 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-9874 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-9875 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium |
| CVE-2026-9876 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec |
| CVE-2026-9877 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-9878 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-9879 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Crit |
| CVE-2026-9880 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perfo |
| CVE-2026-9881 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandb |
| CVE-2026-9882 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Critica |
| CVE-2026-9883 | Analyzed | 未確認 | CWE-416 | Use after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) |
| CVE-2026-9884 | Analyzed | 未確認 | CWE-416 | Use after free in Browser in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: |
| CVE-2026-9885 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in UI in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially p |
| CVE-2026-9886 | Analyzed | 未確認 | CWE-416 | Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security |
| CVE-2026-9887 | Analyzed | 未確認 | CWE-416 | Use after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted PAC script. (Chromium security severity: Critical |
| CVE-2026-9888 | Analyzed | 未確認 | CWE-416 | Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-9889 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
| CVE-2026-9890 | Analyzed | 未確認 | CWE-416 | Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-9891 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-9892 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a |
| CVE-2026-9893 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-9894 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-9895 | Analyzed | 未確認 | CWE-125 | Out of bounds read in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-9896 | Analyzed | 未確認 | CWE-787 | Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-9897 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-9898 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentia |
| CVE-2026-9899 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-9900 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-9901 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML pag |
| CVE-2026-9902 | Analyzed | 未確認 | CWE-416 | Use after free in Accessibility in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-9903 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Site Isolation in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass s |
| CVE-2026-9904 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security sever |
| CVE-2026-9905 | Analyzed | 未確認 | CWE-416 | Use after free in Accessibility in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sand |
| CVE-2026-9906 | Analyzed | 未確認 | CWE-787 | Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-9907 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Dawn in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-9908 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pa |
| CVE-2026-9909 | Analyzed | 未確認 | CWE-472 | Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via |
| CVE-2026-9910 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds memory access in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-9911 | Analyzed | 未確認 | CWE-472 | Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security sev |
| CVE-2026-9912 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory vi |
| CVE-2026-9913 | Analyzed | 未確認 | CWE-125 | Inappropriate implementation in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. |
| CVE-2026-9914 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perfo |
| CVE-2026-9915 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi |
| CVE-2026-9916 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-9917 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a craft |
| CVE-2026-9918 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Tint in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium s |
| CVE-2026-9919 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security seve |
| CVE-2026-9920 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craf |
| CVE-2026-9921 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin information via a crafted HTML page. (Chromium securit |
| CVE-2026-9922 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTM |
| CVE-2026-9923 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severit |
| CVE-2026-9924 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo |
| CVE-2026-9925 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-9926 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi |
| CVE-2026-9927 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-9928 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security seve |
| CVE-2026-9929 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium sec |
| CVE-2026-9930 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Dawn in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium se |
| CVE-2026-9931 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-9932 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-9933 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrup |
| CVE-2026-9934 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a cra |
| CVE-2026-9935 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-9936 | Analyzed | 未確認 | CWE-416 | Use after free in GFX in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-9937 | Analyzed | 未確認 | CWE-416 | Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-9938 | Analyzed | 未確認 | CWE-94 | Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-9939 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-9940 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-9941 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-9942 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML p |
| CVE-2026-9943 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security seve |
| CVE-2026-9944 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML |
| CVE-2026-9945 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-9946 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-9947 | Analyzed | 未確認 | CWE-416 | Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-9948 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape v |
| CVE-2026-9949 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-9950 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass same |
| CVE-2026-9951 | Analyzed | 未確認 | CWE-416 | Use after free in UI in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity |
| CVE-2026-9952 | Analyzed | 未確認 | CWE-416 | Use after free in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-9953 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pa |
| CVE-2026-9954 | Analyzed | 未確認 | CWE-416 | Use after free in TabStrip in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap cor |
| CVE-2026-9955 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-9956 | Analyzed | 未確認 | CWE-416 | Use after free in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via |
| CVE-2026-9957 | Analyzed | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security sever |
| CVE-2026-9958 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severi |
| CVE-2026-9959 | Analyzed | 未確認 | CWE-362 | Race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-9960 | Analyzed | 未確認 | CWE-472 | Integer overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox vi |
| CVE-2026-9961 | Analyzed | 未確認 | CWE-416 | Use after free in SurfaceCapture in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium securi |
| CVE-2026-9962 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-9963 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code |
| CVE-2026-9964 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via |
| CVE-2026-9965 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security s |
| CVE-2026-9966 | Analyzed | 未確認 | CWE-472 | Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-9967 | Analyzed | 未確認 | CWE-787 | Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se |
| CVE-2026-9968 | Analyzed | 未確認 | CWE-472 | Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-9969 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium |
| CVE-2026-9970 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-9971 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbit |
| CVE-2026-9972 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc |
| CVE-2026-9973 | Analyzed | 未確認 | CWE-787 | Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-9974 | Analyzed | 未確認 | CWE-787 | Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-9975 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e |
| CVE-2026-9976 | Analyzed | 未確認 | CWE-94 | Inappropriate implementation in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severit |
| CVE-2026-9977 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to pot |
| CVE-2026-9978 | Analyzed | 未確認 | CWE-416 | Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-9979 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isola |
| CVE-2026-9980 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Printing in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site is |
| CVE-2026-9981 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-9982 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perfo |
| CVE-2026-9983 | Analyzed | 未確認 | CWE-843 | Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-9984 | Analyzed | 未確認 | CWE-416 | Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: H |
| CVE-2026-9985 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome on ChromeOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to obtai |
| CVE-2026-9986 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in OptimizationGuide in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to perfo |
| CVE-2026-9987 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via a malicious |
| CVE-2026-9988 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secu |
| CVE-2026-9989 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to bypass same origin policy via a crafted video file. (Chromium security s |
| CVE-2026-9990 | Analyzed | 未確認 | CWE-416 | Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exp |
| CVE-2026-9991 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin da |
| CVE-2026-9992 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-9993 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-9994 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-9995 | Analyzed | 未確認 | CWE-416 | Use after free in WebXR in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-9996 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebRTC in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted |
| CVE-2026-9997 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-9998 | Analyzed | 未確認 | CWE-472 | Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c |
| CVE-2026-9999 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |